last executing test programs: 2m34.54448566s ago: executing program 1 (id=43): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) 2m29.571944066s ago: executing program 1 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb", @ANYBLOB="4e2e0b89a02402cc7320d8e204daab87838c"], 0xfdef) 2m27.227799967s ago: executing program 1 (id=55): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7c00) close(0x3) 2m25.266087751s ago: executing program 1 (id=58): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) 2m23.230834726s ago: executing program 1 (id=61): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") write$binfmt_register(0xffffffffffffffff, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m22.050595888s ago: executing program 1 (id=68): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2m6.616637229s ago: executing program 32 (id=68): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1m23.36773545s ago: executing program 2 (id=161): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x290480) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/199) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22142, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12) 1m19.123915445s ago: executing program 2 (id=166): syz_emit_ethernet(0x4a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x80000300, 0x0, 0x0) 1m17.669448438s ago: executing program 2 (id=169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 1m14.451234755s ago: executing program 2 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1m12.993335953s ago: executing program 2 (id=178): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000740)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) setpriority(0x0, 0x1, 0xa7a8) mount$9p_rdma(&(0x7f0000000000), 0x0, &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[@ANYBLOB]) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 1m5.622394152s ago: executing program 2 (id=191): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x290480) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/199) mount$fuse(0x0, 0x0, 0x0, 0x12c6006, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES64]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22142, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12) 48.966042394s ago: executing program 33 (id=191): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x290480) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/199) mount$fuse(0x0, 0x0, 0x0, 0x12c6006, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES64]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22142, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12) 13.505960754s ago: executing program 4 (id=261): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80800) syz_usbip_server_init(0x1) 10.110361696s ago: executing program 0 (id=266): syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff2d, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ftruncate(r6, 0x2) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x27fffff, 0x4002011, r6, 0x0) 10.055294438s ago: executing program 4 (id=267): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 9.932671523s ago: executing program 5 (id=268): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 8.688653642s ago: executing program 5 (id=270): syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) 8.621246484s ago: executing program 3 (id=271): ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xfbfffffc}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 8.198465362s ago: executing program 4 (id=272): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 7.336061931s ago: executing program 0 (id=273): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000e47f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000000400)=ANY=[], 0x0) 6.727866555s ago: executing program 5 (id=274): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_emit_ethernet(0x4a, &(0x7f000001b000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef00142c00fe8000000000000000000002000000bbff020000000000495622d868631e6901890000000000000034c8311b6bef15c50100000091adc58e0c6fe9523713589a04c83b299e2075509cf3a04dacd7a3bd73c2850a44c0eee6b5f347f43f6f9076f19bddd48aebea7dc44d3573a6700f87e8ce102cd89d918a330bcf99db6c4b500a48fd43aacfef"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x300, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x4}}, 0x6, 0x1, 0x3, 0x80, 0x0, 0x6}, &(0x7f00000000c0)=0x9c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 6.606713938s ago: executing program 3 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 5.337245829s ago: executing program 0 (id=276): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80800) syz_usbip_server_init(0x1) 5.19241346s ago: executing program 5 (id=277): syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_info_req={{0xa, 0x4, 0x2}, {0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x8}}, @l2cap_disconn_rsp={{0x7, 0x8e, 0x4}, {0x101, 0xae94}}, @l2cap_conf_rsp={{0x5, 0x9, 0xa}, {0x7, 0x4, 0x3ff, [@l2cap_conf_ews={0x7, 0x2, 0x4}]}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x3, 0xe, 0x1, 0x20}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x60}}, @l2cap_move_chan_req={{0xe, 0x7f, 0x3}, {0x8, 0x6}}]}}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000440), &(0x7f00000000c0)}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) openat2(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x10240, 0x114, 0x30}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 5.17725287s ago: executing program 3 (id=278): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x200) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r4 = open(0x0, 0x60840, 0x1d2) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x5}) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.398249153s ago: executing program 5 (id=279): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0x200ab8, 0x9, 0x4, 0x8000, 0x0, 0x461d, 0x200, 0x0, 0x401, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.768355682s ago: executing program 4 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 3.427273807s ago: executing program 3 (id=281): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 3.176200741s ago: executing program 4 (id=282): syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff2d, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ftruncate(r6, 0x2) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x27fffff, 0x4002011, r6, 0x0) 2.983920447s ago: executing program 0 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) getcwd(&(0x7f0000000080)=""/54, 0x36) setpriority(0x0, 0x0, 0x10000) 2.420554845s ago: executing program 3 (id=284): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8a1c551265406c7f306003d8a0f4bd00"}}) 2.126727039s ago: executing program 0 (id=285): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000e47f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000000400)=ANY=[], 0x0) 824.399758ms ago: executing program 5 (id=286): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_emit_ethernet(0x4a, &(0x7f000001b000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef00142c00fe8000000000000000000002000000bbff020000000000495622d868631e6901890000000000000034c8311b6bef15c50100000091adc58e0c6fe9523713589a04c83b299e2075509cf3a04dacd7a3bd73c2850a44c0eee6b5f347f43f6f9076f19bddd48aebea7dc44d3573a6700f87e8ce102cd89d918a330bcf99db6c4b500a48fd43aacfef"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x300, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x4}}, 0x6, 0x1, 0x3, 0x80, 0x0, 0x6}, &(0x7f00000000c0)=0x9c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 482.048936ms ago: executing program 3 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 404.382916ms ago: executing program 0 (id=288): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0x20}, 0x0, 0xe3d08660d3cd4684}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xef2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000200)={0x0, 0x0, 0x5}) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000480), 0x0, 0x24040890) 0s ago: executing program 4 (id=289): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 159.902514][ T5776] cgroup: Unknown subsys name 'net' [ 160.026918][ T5776] cgroup: Unknown subsys name 'cpuset' [ 160.040341][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 201.835794][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 205.467985][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.476171][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.485358][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.493284][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.501711][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.512588][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.522283][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.533362][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.579391][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.589715][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.591187][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.599280][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.604998][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.621084][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.631920][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.644691][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.645350][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.661766][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.670251][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.682663][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.715455][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.724907][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.734624][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.755327][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.803976][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.614131][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 207.190253][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 207.462940][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.473477][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.482898][ T5801] bridge_slave_0: entered allmulticast mode [ 207.493324][ T5801] bridge_slave_0: entered promiscuous mode [ 207.505407][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 207.550067][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.557541][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.565363][ T5801] bridge_slave_1: entered allmulticast mode [ 207.565594][ T5814] Bluetooth: hci1: command tx timeout [ 207.574223][ T5801] bridge_slave_1: entered promiscuous mode [ 207.638439][ T5814] Bluetooth: hci0: command tx timeout [ 207.718026][ T5814] Bluetooth: hci2: command tx timeout [ 207.731309][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 207.800580][ T49] Bluetooth: hci3: command tx timeout [ 207.845140][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.859200][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 207.878931][ T5814] Bluetooth: hci4: command tx timeout [ 207.957521][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.294901][ T5801] team0: Port device team_slave_0 added [ 208.317277][ T5801] team0: Port device team_slave_1 added [ 208.329872][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.337351][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.345214][ T5808] bridge_slave_0: entered allmulticast mode [ 208.354261][ T5808] bridge_slave_0: entered promiscuous mode [ 208.429461][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.436943][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.444641][ T5808] bridge_slave_1: entered allmulticast mode [ 208.453616][ T5808] bridge_slave_1: entered promiscuous mode [ 208.463520][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.472523][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.480272][ T5800] bridge_slave_0: entered allmulticast mode [ 208.489079][ T5800] bridge_slave_0: entered promiscuous mode [ 208.598647][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.606123][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.615314][ T5800] bridge_slave_1: entered allmulticast mode [ 208.627274][ T5800] bridge_slave_1: entered promiscuous mode [ 208.710132][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.717275][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.744467][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.837594][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.876524][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.883747][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.910124][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.961867][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.979294][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.989961][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.997427][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.005192][ T5809] bridge_slave_0: entered allmulticast mode [ 209.013858][ T5809] bridge_slave_0: entered promiscuous mode [ 209.038140][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.045748][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.053394][ T5809] bridge_slave_1: entered allmulticast mode [ 209.062398][ T5809] bridge_slave_1: entered promiscuous mode [ 209.104932][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.114649][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.122248][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.129895][ T5815] bridge_slave_0: entered allmulticast mode [ 209.138859][ T5815] bridge_slave_0: entered promiscuous mode [ 209.216046][ T5808] team0: Port device team_slave_0 added [ 209.364487][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.375145][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.384366][ T5815] bridge_slave_1: entered allmulticast mode [ 209.392934][ T5815] bridge_slave_1: entered promiscuous mode [ 209.410969][ T5808] team0: Port device team_slave_1 added [ 209.483210][ T5800] team0: Port device team_slave_0 added [ 209.499077][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.514444][ T5800] team0: Port device team_slave_1 added [ 209.644885][ T5814] Bluetooth: hci1: command tx timeout [ 209.720551][ T5814] Bluetooth: hci0: command tx timeout [ 209.736522][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.748603][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.755727][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.783180][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.798326][ T5814] Bluetooth: hci2: command tx timeout [ 209.808113][ T5801] hsr_slave_0: entered promiscuous mode [ 209.817258][ T5801] hsr_slave_1: entered promiscuous mode [ 209.828596][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.835722][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.862036][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.875804][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.883266][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.888032][ T5814] Bluetooth: hci3: command tx timeout [ 209.909482][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.959293][ T5814] Bluetooth: hci4: command tx timeout [ 209.976508][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.008604][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.073918][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.081110][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.107320][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.206904][ T5809] team0: Port device team_slave_0 added [ 210.223317][ T5809] team0: Port device team_slave_1 added [ 210.380630][ T5815] team0: Port device team_slave_0 added [ 210.452071][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.459977][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.486577][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.505102][ T5815] team0: Port device team_slave_1 added [ 210.514120][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.521501][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.547806][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.673096][ T5800] hsr_slave_0: entered promiscuous mode [ 210.683157][ T5800] hsr_slave_1: entered promiscuous mode [ 210.690970][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.698834][ T5800] Cannot create hsr debugfs directory [ 210.799107][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.806233][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.833574][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.909363][ T5808] hsr_slave_0: entered promiscuous mode [ 210.917467][ T5808] hsr_slave_1: entered promiscuous mode [ 210.927281][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.935044][ T5808] Cannot create hsr debugfs directory [ 210.978881][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.985983][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.012273][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.202050][ T5809] hsr_slave_0: entered promiscuous mode [ 211.212815][ T5809] hsr_slave_1: entered promiscuous mode [ 211.220887][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.228676][ T5809] Cannot create hsr debugfs directory [ 211.480771][ T5815] hsr_slave_0: entered promiscuous mode [ 211.489613][ T5815] hsr_slave_1: entered promiscuous mode [ 211.497194][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.505036][ T5815] Cannot create hsr debugfs directory [ 211.716961][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.726635][ T5814] Bluetooth: hci1: command tx timeout [ 211.752679][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.798628][ T5814] Bluetooth: hci0: command tx timeout [ 211.856588][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.878049][ T5814] Bluetooth: hci2: command tx timeout [ 211.958069][ T5814] Bluetooth: hci3: command tx timeout [ 211.969928][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.038306][ T5814] Bluetooth: hci4: command tx timeout [ 212.505693][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.552683][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.587030][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.639641][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.676062][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.705927][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.812973][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.833630][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.890359][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.959526][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.025898][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.098362][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.192553][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.220217][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.291069][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.368343][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.426694][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.485335][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.531565][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.539287][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.668858][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.676310][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.800310][ T5814] Bluetooth: hci1: command tx timeout [ 213.878729][ T5814] Bluetooth: hci0: command tx timeout [ 213.923683][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.960805][ T5814] Bluetooth: hci2: command tx timeout [ 214.030214][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.048889][ T5814] Bluetooth: hci3: command tx timeout [ 214.123534][ T5814] Bluetooth: hci4: command tx timeout [ 214.146735][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.237953][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.245518][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.276310][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.309191][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.316650][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.392279][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.484436][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.491977][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.506760][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.572812][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.580359][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.641104][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.648680][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.664017][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.671589][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.806370][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.907212][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.015469][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.026411][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.096079][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.189182][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.196656][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.297220][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.304777][ T3775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.889297][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.234301][ T5801] veth0_vlan: entered promiscuous mode [ 216.346425][ T5801] veth1_vlan: entered promiscuous mode [ 216.647240][ T5801] veth0_macvtap: entered promiscuous mode [ 216.740904][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.772998][ T5801] veth1_macvtap: entered promiscuous mode [ 216.815211][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.901459][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.984829][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.062549][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.120730][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.212774][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.221953][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.232873][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.242951][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.334850][ T5800] veth0_vlan: entered promiscuous mode [ 217.440046][ T5809] veth0_vlan: entered promiscuous mode [ 217.514031][ T5800] veth1_vlan: entered promiscuous mode [ 217.620841][ T5809] veth1_vlan: entered promiscuous mode [ 217.651722][ T5815] veth0_vlan: entered promiscuous mode [ 217.769475][ T5815] veth1_vlan: entered promiscuous mode [ 217.953128][ T5809] veth0_macvtap: entered promiscuous mode [ 217.985935][ T5800] veth0_macvtap: entered promiscuous mode [ 218.041285][ T5809] veth1_macvtap: entered promiscuous mode [ 218.063934][ T5800] veth1_macvtap: entered promiscuous mode [ 218.101728][ T5815] veth0_macvtap: entered promiscuous mode [ 218.175520][ T5815] veth1_macvtap: entered promiscuous mode [ 218.219181][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.309908][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.325867][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.382526][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.402446][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.411794][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.421954][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.432723][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.442167][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.485507][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.507031][ T5800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.518465][ T5800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.527447][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.538087][ T5800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.639856][ T5815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.650057][ T5815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.659183][ T5815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.668289][ T5815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.134019][ T5808] veth0_vlan: entered promiscuous mode [ 219.239964][ T5808] veth1_vlan: entered promiscuous mode [ 219.364438][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.371786][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.523450][ T5808] veth0_macvtap: entered promiscuous mode [ 219.603530][ T5808] veth1_macvtap: entered promiscuous mode [ 219.769242][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.811681][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.867230][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.876356][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.885849][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.894943][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.083921][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.092850][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.263508][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.272370][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.620224][ T5801] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 224.105220][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.113510][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.338765][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.346803][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.486951][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.495675][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.696677][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.704899][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.788653][ T3775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.796688][ T3775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.963698][ T3775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.972380][ T3775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.395228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 225.428807][ T5857] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 225.632838][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 225.724311][ T5857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.862056][ T5857] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 225.872087][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.884389][ T5857] usb 2-1: Product: syz [ 225.889018][ T5857] usb 2-1: Manufacturer: syz [ 225.893873][ T5857] usb 2-1: SerialNumber: syz [ 225.904779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 225.936539][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 226.093899][ T5857] usb 2-1: config 0 descriptor?? [ 226.191406][ T5857] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 226.222253][ T5852] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 226.274005][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.283257][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.464802][ T5857] usb 2-1: USB disconnect, device number 2 [ 226.555127][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.567090][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.577765][ T5852] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 226.587294][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.684864][ T5852] usb 4-1: config 0 descriptor?? [ 226.712857][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.721020][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.928787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 227.088058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.194276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.235860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 227.285942][ T5852] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 227.440777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.462070][ T5852] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 227.543141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.644586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 227.852977][ T6001] binder: 5998:6001 ioctl c018620c 200000000000 returned -1 [ 228.258897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 230.992031][ T5852] cp2112 0003:10C4:EA90.0001: error requesting version [ 231.055617][ T5852] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 231.123576][ T5852] usb 4-1: USB disconnect, device number 2 [ 232.241901][ T6007] fido_id[6007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 232.287505][ T6021] No control pipe specified [ 234.684317][ T6026] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 234.692326][ T6026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'. [ 234.744613][ T6026] team0: Port device netdevsim1 added [ 235.931298][ T6034] syz_tun: entered allmulticast mode [ 235.968988][ T6034] dvmrp1: entered allmulticast mode [ 236.255738][ T6033] syz_tun: left allmulticast mode [ 236.265509][ T5426] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 236.338239][ T5426] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.794148][ T5426] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 237.019096][ T5426] usb 3-1: Using ep0 maxpacket: 8 [ 237.053543][ T5426] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 237.062529][ T5426] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 237.079481][ T5426] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 237.091762][ T5426] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 237.103355][ T5426] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 237.113783][ T5426] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.127235][ T5426] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.136646][ T5426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.364070][ T5426] usb 3-1: GET_CAPABILITIES returned 0 [ 238.370650][ T5426] usbtmc 3-1:16.0: can't read capabilities [ 238.993871][ T6055] netlink: 'syz.1.23': attribute type 21 has an invalid length. [ 239.001825][ T6055] netlink: 128 bytes leftover after parsing attributes in process `syz.1.23'. [ 239.012680][ T6055] netlink: 'syz.1.23': attribute type 6 has an invalid length. [ 239.021078][ T6055] netlink: 3 bytes leftover after parsing attributes in process `syz.1.23'. [ 240.683885][ T6058] No control pipe specified [ 241.703447][ T6070] loop3: detected capacity change from 0 to 512 [ 241.814600][ T5852] usb 3-1: USB disconnect, device number 2 [ 241.847210][ T6070] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.054360][ T6070] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 242.065096][ T6070] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.310766][ T5815] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 244.730605][ T6090] No control pipe specified [ 246.241138][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 247.260592][ T6092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35'. [ 247.391998][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 247.398371][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 247.570022][ T6092] ceph: No mds server is up or the cluster is laggy [ 247.868401][ T5852] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 248.147236][ T6109] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 248.154839][ T6109] overlayfs: failed to set xattr on upper [ 248.158065][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 248.160869][ T6109] overlayfs: ...falling back to redirect_dir=nofollow. [ 248.173825][ T6109] overlayfs: ...falling back to index=off. [ 248.181792][ T6109] overlayfs: ...falling back to uuid=null. [ 248.208455][ T5852] usb 5-1: config 6 has an invalid interface number: 205 but max is 0 [ 248.217027][ T5852] usb 5-1: config 6 has an invalid descriptor of length 96, skipping remainder of the config [ 248.229027][ T5852] usb 5-1: config 6 has no interface number 0 [ 248.235811][ T5852] usb 5-1: too many endpoints for config 6 interface 205 altsetting 73: 192, using maximum allowed: 30 [ 248.247264][ T5852] usb 5-1: config 6 interface 205 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 192 [ 248.261178][ T5852] usb 5-1: config 6 interface 205 has no altsetting 0 [ 248.454898][ T5852] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 248.464832][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.473220][ T5852] usb 5-1: Product: syz [ 248.477599][ T5852] usb 5-1: Manufacturer: syz [ 248.482790][ T5852] usb 5-1: SerialNumber: syz [ 248.559632][ T6117] loop0: detected capacity change from 0 to 512 [ 248.683447][ T6117] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.486868][ T6117] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 251.497969][ T6117] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.407647][ T5852] hso 5-1:6.205: Not our interface [ 252.617729][ T5852] usb 5-1: USB disconnect, device number 2 [ 254.159107][ T5800] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 254.363349][ T6143] syz.1.49 uses obsolete (PF_INET,SOCK_PACKET) [ 254.659513][ T6145] No control pipe specified [ 259.275521][ T6173] tipc: Started in network mode [ 259.281075][ T6173] tipc: Node identity 7e348d3ab503, cluster identity 4711 [ 259.291518][ T6173] tipc: Enabled bearer , priority 0 [ 259.356018][ T6173] syzkaller0: MTU too low for tipc bearer [ 259.362078][ T6173] tipc: Disabling bearer [ 259.430096][ T6176] loop1: detected capacity change from 0 to 512 [ 259.557490][ T6176] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.848499][ T6176] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 259.859291][ T6176] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 260.239162][ T5809] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 260.994386][ T6195] No control pipe specified [ 264.012199][ T6206] libceph: resolve '.' (ret=-3): failed [ 264.598809][ T5148] udevd[5148]: worker [5980] terminated by signal 33 (Unknown signal 33) [ 264.608156][ T5148] udevd[5148]: worker [5980] failed while handling '/devices/virtual/block/loop4' [ 267.836608][ T6222] trusted_key: encrypted_key: insufficient parameters specified [ 270.367153][ T6221] loop3: detected capacity change from 0 to 512 [ 270.412262][ T6221] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.713408][ T6221] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 270.724253][ T6221] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 271.100327][ T5815] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 271.558785][ T6235] No control pipe specified [ 273.970310][ T6244] netlink: 'syz.2.85': attribute type 4 has an invalid length. [ 276.099984][ T6261] loop0: detected capacity change from 0 to 512 [ 276.984194][ T6261] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.104978][ T6261] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 277.115824][ T6261] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 277.786363][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.797108][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.813294][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.860325][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.873467][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.442299][ T5800] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 279.960954][ T49] Bluetooth: hci5: command tx timeout [ 280.038306][ T1696] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 280.244073][ T1696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.255438][ T1696] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 280.264830][ T1696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.328649][ T6265] chnl_net:caif_netlink_parms(): no params data found [ 280.583325][ T1696] usb 1-1: config 0 descriptor?? [ 280.779731][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.786473][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.144655][ T1696] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.0003/input/input5 [ 281.290548][ T1696] uclogic 0003:28BD:0933.0003: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 281.469221][ T1696] usb 1-1: USB disconnect, device number 2 [ 281.749354][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 282.043562][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 282.059092][ T49] Bluetooth: hci5: command tx timeout [ 282.089275][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.128388][ T24] usb 4-1: config 248 has an invalid interface number: 3 but max is 2 [ 282.136802][ T24] usb 4-1: config 248 has an invalid interface number: 190 but max is 2 [ 282.145558][ T24] usb 4-1: config 248 has an invalid interface number: 111 but max is 2 [ 282.154201][ T24] usb 4-1: config 248 has no interface number 0 [ 282.160778][ T24] usb 4-1: config 248 has no interface number 1 [ 282.167256][ T24] usb 4-1: config 248 has no interface number 2 [ 282.173886][ T24] usb 4-1: config 248 interface 3 has no altsetting 0 [ 282.181003][ T24] usb 4-1: config 248 interface 190 has no altsetting 0 [ 282.188272][ T24] usb 4-1: config 248 interface 111 has no altsetting 0 [ 282.203843][ T24] usb 4-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28 [ 282.213850][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.222176][ T24] usb 4-1: Product: syz [ 282.232033][ T24] usb 4-1: Manufacturer: syz [ 282.236836][ T24] usb 4-1: SerialNumber: syz [ 282.361152][ T3538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.419167][ T6299] fido_id[6299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 282.444864][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.453127][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.460860][ T6265] bridge_slave_0: entered allmulticast mode [ 282.469863][ T6265] bridge_slave_0: entered promiscuous mode [ 282.576993][ T3538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.676573][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.690293][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.697988][ T6265] bridge_slave_1: entered allmulticast mode [ 282.780633][ T6265] bridge_slave_1: entered promiscuous mode [ 282.871321][ T3538] team0: Port device netdevsim1 removed [ 282.882628][ T3538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.893989][ T24] usb 4-1: USB disconnect, device number 3 [ 283.167243][ T6309] loop0: detected capacity change from 0 to 512 [ 283.252346][ T6309] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.528303][ T6309] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 283.540136][ T6309] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 283.872413][ T5800] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 283.918324][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 284.118515][ T49] Bluetooth: hci5: command tx timeout [ 284.208075][ T11] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.216326][ T11] usb 4-1: config 0 has no interface number 0 [ 284.224007][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.279089][ T11] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 284.289099][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.297739][ T11] usb 4-1: Product: syz [ 284.302800][ T11] usb 4-1: Manufacturer: syz [ 284.307611][ T11] usb 4-1: SerialNumber: syz [ 284.348189][ T11] usb 4-1: config 0 descriptor?? [ 284.504591][ T3538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.650717][ T11] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 284.692640][ T11] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 284.705005][ T11] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 284.710902][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.713259][ T11] usb 4-1: media controller created [ 285.212066][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.846635][ T6265] team0: Port device team_slave_0 added [ 285.859738][ T3538] bridge_slave_1: left allmulticast mode [ 285.866944][ T3538] bridge_slave_1: left promiscuous mode [ 285.875814][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.980933][ T11] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 286.138919][ T3538] bridge_slave_0: left allmulticast mode [ 286.145239][ T3538] bridge_slave_0: left promiscuous mode [ 286.154348][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.212288][ T49] Bluetooth: hci5: command tx timeout [ 287.118754][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.171582][ T11] usb 4-1: USB disconnect, device number 4 [ 287.290032][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.389289][ T3538] bond0 (unregistering): Released all slaves [ 287.661243][ T6265] team0: Port device team_slave_1 added [ 287.966051][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.973344][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.999739][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.244800][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.252548][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.283651][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.548208][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 289.734255][ T3538] hsr_slave_0: left promiscuous mode [ 289.850751][ T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 289.859509][ T24] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 289.868801][ T24] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 289.879458][ T24] usb 5-1: config 220 has no interface number 2 [ 289.885956][ T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 289.899470][ T24] usb 5-1: config 220 interface 0 has no altsetting 0 [ 289.910289][ T24] usb 5-1: config 220 interface 76 has no altsetting 0 [ 289.917400][ T24] usb 5-1: config 220 interface 1 has no altsetting 0 [ 289.976767][ T3538] hsr_slave_1: left promiscuous mode [ 289.984704][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.992467][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.021612][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.029484][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.082785][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 290.092778][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.101138][ T24] usb 5-1: Product: syz [ 290.105505][ T24] usb 5-1: Manufacturer: syz [ 290.115488][ T24] usb 5-1: SerialNumber: syz [ 290.149980][ T3538] veth1_macvtap: left promiscuous mode [ 290.155812][ T3538] veth0_macvtap: left promiscuous mode [ 290.162351][ T3538] veth1_vlan: left promiscuous mode [ 290.168005][ T3538] veth0_vlan: left promiscuous mode [ 290.557183][ T24] usb 5-1: selecting invalid altsetting 0 [ 290.563747][ T24] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 290.571000][ T24] usb 5-1: No valid video chain found. [ 290.655469][ T24] usb 5-1: selecting invalid altsetting 0 [ 290.662015][ T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 290.782970][ T24] usb 5-1: USB disconnect, device number 3 [ 291.209306][ T6359] loop3: detected capacity change from 0 to 512 [ 291.257231][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 291.334739][ T6359] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.385252][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 291.686933][ T6359] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 291.698073][ T6359] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 291.745599][ T6265] hsr_slave_0: entered promiscuous mode [ 291.761203][ T6265] hsr_slave_1: entered promiscuous mode [ 291.769541][ T6265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.777298][ T6265] Cannot create hsr debugfs directory [ 292.055523][ T6371] binder: 6364:6371 ioctl c018620c 200000000000 returned -1 [ 292.742901][ T5815] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 294.434984][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 294.660530][ T11] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.669137][ T11] usb 1-1: config 0 has no interface number 0 [ 294.797204][ T11] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 294.806811][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.815529][ T11] usb 1-1: Product: syz [ 294.821049][ T11] usb 1-1: Manufacturer: syz [ 294.825843][ T11] usb 1-1: SerialNumber: syz [ 295.033886][ T11] usb 1-1: config 0 descriptor?? [ 295.311909][ T11] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 295.367039][ T11] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.378916][ T11] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 295.387342][ T11] usb 1-1: media controller created [ 295.711767][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.930605][ T6265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 296.162993][ T6265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 296.327078][ T6265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.530172][ T11] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 296.636118][ T6265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.698397][ T1696] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 297.825865][ T11] usb 1-1: USB disconnect, device number 3 [ 298.038370][ T1696] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 298.047300][ T1696] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 298.057276][ T1696] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 298.068327][ T1696] usb 4-1: config 220 has no interface number 2 [ 298.075037][ T1696] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 298.088982][ T1696] usb 4-1: config 220 interface 0 has no altsetting 0 [ 298.096979][ T1696] usb 4-1: config 220 interface 76 has no altsetting 0 [ 298.104594][ T1696] usb 4-1: config 220 interface 1 has no altsetting 0 [ 298.758808][ T1696] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 298.768594][ T1696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.777141][ T1696] usb 4-1: Product: syz [ 298.781789][ T1696] usb 4-1: Manufacturer: syz [ 298.786775][ T1696] usb 4-1: SerialNumber: syz [ 299.084470][ T1696] usb 4-1: selecting invalid altsetting 0 [ 299.091176][ T1696] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 299.098224][ T1696] usb 4-1: No valid video chain found. [ 299.145803][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.268630][ T1696] usb 4-1: selecting invalid altsetting 0 [ 299.274844][ T1696] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 299.384039][ T6265] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.506630][ T1696] usb 4-1: USB disconnect, device number 5 [ 299.981251][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.988845][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.181571][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.189044][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.412365][ T6265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.388136][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 302.653103][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.661528][ T24] usb 4-1: config 0 has no interface number 0 [ 302.691415][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.720151][ T6447] No control pipe specified [ 302.731726][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 302.741667][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.750012][ T24] usb 4-1: Product: syz [ 302.754386][ T24] usb 4-1: Manufacturer: syz [ 302.759455][ T24] usb 4-1: SerialNumber: syz [ 302.873002][ T24] usb 4-1: config 0 descriptor?? [ 303.104397][ T24] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 303.161697][ T24] usb 4-1: USB disconnect, device number 6 [ 309.109774][ T6265] veth0_vlan: entered promiscuous mode [ 309.170327][ T1696] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 309.401086][ T6265] veth1_vlan: entered promiscuous mode [ 309.985608][ T6265] veth0_macvtap: entered promiscuous mode [ 310.066581][ T6265] veth1_macvtap: entered promiscuous mode [ 310.315817][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.425977][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.528837][ T6265] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.537763][ T6265] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.546709][ T6265] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.555697][ T6265] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.098140][ T1696] usb 3-1: device descriptor read/64, error -71 [ 311.348265][ T1696] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 311.351866][ T6506] No control pipe specified [ 311.710513][ T1696] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.720254][ T1696] usb 3-1: config 0 has no interface number 0 [ 311.802536][ T1696] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 311.812572][ T1696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.821953][ T1696] usb 3-1: Product: syz [ 311.826728][ T1696] usb 3-1: Manufacturer: syz [ 311.831661][ T1696] usb 3-1: SerialNumber: syz [ 311.952419][ T1696] usb 3-1: config 0 descriptor?? [ 312.209060][ T1696] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 312.296050][ T1696] usb 3-1: USB disconnect, device number 4 [ 312.318285][ T6328] udevd[6328]: setting mode of /dev/bus/usb/003/004 to 020664 failed: No such file or directory [ 312.445664][ T6328] udevd[6328]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 313.253928][ T6516] sctp: failed to load transform for md5: -2 [ 318.469385][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 318.558406][ T1696] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 318.709823][ T24] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 318.721631][ T24] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 318.730748][ T24] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 318.741227][ T24] usb 1-1: config 220 has no interface number 2 [ 318.747687][ T24] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 318.761570][ T24] usb 1-1: config 220 interface 0 has no altsetting 0 [ 318.768699][ T24] usb 1-1: config 220 interface 76 has no altsetting 0 [ 318.775717][ T24] usb 1-1: config 220 interface 1 has no altsetting 0 [ 318.859731][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 318.869923][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.878873][ T24] usb 1-1: Product: syz [ 318.886852][ T24] usb 1-1: Manufacturer: syz [ 318.892836][ T24] usb 1-1: SerialNumber: syz [ 318.946132][ T1696] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 318.954981][ T1696] usb 4-1: config 0 has no interface number 0 [ 318.961695][ T1696] usb 4-1: config 0 interface 29 has no altsetting 0 [ 319.010255][ T1696] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 319.020217][ T1696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.028981][ T1696] usb 4-1: Product: syz [ 319.033995][ T1696] usb 4-1: Manufacturer: syz [ 319.039257][ T1696] usb 4-1: SerialNumber: syz [ 319.239897][ T1696] usb 4-1: config 0 descriptor?? [ 319.305027][ T24] usb 1-1: selecting invalid altsetting 0 [ 319.311638][ T24] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 319.319717][ T24] usb 1-1: No valid video chain found. [ 319.455123][ T24] usb 1-1: selecting invalid altsetting 0 [ 319.461962][ T24] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 319.561758][ T1696] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 319.639369][ T24] usb 1-1: USB disconnect, device number 4 [ 319.698190][ T6571] No control pipe specified [ 319.778551][ T1696] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 319.786143][ T1696] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 319.793678][ T1696] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 320.156528][ T1696] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 320.462483][ T1696] usb 4-1: USB disconnect, device number 7 [ 320.728461][ T6578] sctp: failed to load transform for md5: -2 [ 323.408516][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 323.493895][ T49] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 323.500976][ T49] Bluetooth: Wrong link type (-22) [ 323.506781][ T49] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 323.513769][ T49] Bluetooth: Wrong link type (-22) [ 323.519521][ T49] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 323.528262][ T49] Bluetooth: Wrong link type (-22) [ 323.539806][ T49] Bluetooth: hci2: link tx timeout [ 323.545516][ T49] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 323.637701][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.646405][ T24] usb 1-1: config 0 has no interface number 0 [ 323.768948][ T5426] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 323.796951][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 323.810894][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.819963][ T24] usb 1-1: Product: syz [ 323.824273][ T24] usb 1-1: Manufacturer: syz [ 323.829104][ T24] usb 1-1: SerialNumber: syz [ 323.907297][ T24] usb 1-1: config 0 descriptor?? [ 324.010535][ T5426] usb 4-1: Using ep0 maxpacket: 16 [ 324.035693][ T5426] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 324.045362][ T5426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.053844][ T5426] usb 4-1: Product: syz [ 324.058520][ T5426] usb 4-1: Manufacturer: syz [ 324.063505][ T5426] usb 4-1: SerialNumber: syz [ 324.138876][ T24] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 324.197490][ T24] usb 1-1: USB disconnect, device number 5 [ 324.254202][ T5426] r8152-cfgselector 4-1: Unknown version 0x0000 [ 324.261516][ T5426] r8152-cfgselector 4-1: config 0 descriptor?? [ 324.687185][ T5426] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 324.826576][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.835499][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.290969][ T3675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.299737][ T3675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.560279][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 325.963114][ T6617] Zero length message leads to an empty skb [ 328.759657][ T6635] team0: No ports can be present during mode change [ 328.878837][ T5426] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 328.998455][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 328.998570][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 329.004804][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 329.129818][ T5426] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 329.138569][ T5426] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 329.147654][ T5426] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 329.158550][ T5426] usb 6-1: config 220 has no interface number 2 [ 329.165052][ T5426] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 329.178567][ T5426] usb 6-1: config 220 interface 0 has no altsetting 0 [ 329.185566][ T5426] usb 6-1: config 220 interface 76 has no altsetting 0 [ 329.192767][ T5426] usb 6-1: config 220 interface 1 has no altsetting 0 [ 329.446691][ T5426] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 329.457003][ T5426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.465901][ T5426] usb 6-1: Product: syz [ 329.470307][ T5426] usb 6-1: Manufacturer: syz [ 329.475020][ T5426] usb 6-1: SerialNumber: syz [ 330.160104][ T49] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 330.168962][ T49] Bluetooth: hci5: Injecting HCI hardware error event [ 330.198638][ T49] Bluetooth: hci5: hardware error 0x00 [ 330.404559][ T5426] usb 6-1: selecting invalid altsetting 0 [ 330.411568][ T5426] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 330.418353][ T5426] usb 6-1: No valid video chain found. [ 331.235942][ T5426] usb 6-1: selecting invalid altsetting 0 [ 331.242310][ T5426] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 332.341073][ T5426] usb 6-1: USB disconnect, device number 2 [ 332.359320][ T49] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 333.307003][ T1696] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 333.462008][ T49] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 333.925879][ T1696] usb 4-1: Using ep0 maxpacket: 16 [ 335.545375][ T1696] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 335.555655][ T1696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.564303][ T1696] usb 4-1: Product: syz [ 335.568934][ T1696] usb 4-1: Manufacturer: syz [ 335.576853][ T1696] usb 4-1: SerialNumber: syz [ 335.961360][ T1696] r8152-cfgselector 4-1: Unknown version 0x0000 [ 335.968308][ T1696] r8152-cfgselector 4-1: config 0 descriptor?? [ 336.033508][ T1696] r8152-cfgselector 4-1: can't set config #0, error -71 [ 336.149849][ T1696] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 337.478069][ T49] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 337.486631][ T49] Bluetooth: hci0: Injecting HCI hardware error event [ 337.494194][ T5802] Bluetooth: hci0: hardware error 0x00 [ 339.558032][ T5802] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 340.885595][ T1696] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 341.102466][ T1696] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 341.113001][ T1696] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 341.122712][ T1696] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 341.133393][ T1696] usb 4-1: config 220 has no interface number 2 [ 341.139969][ T1696] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 341.153669][ T1696] usb 4-1: config 220 interface 0 has no altsetting 0 [ 341.160753][ T1696] usb 4-1: config 220 interface 76 has no altsetting 0 [ 341.168091][ T1696] usb 4-1: config 220 interface 1 has no altsetting 0 [ 342.284966][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.297904][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 344.279521][ T1696] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 344.290154][ T1696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.813734][ T1696] usb 4-1: can't set config #220, error -71 [ 344.859500][ T1696] usb 4-1: USB disconnect, device number 10 [ 345.599454][ T5426] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 345.824396][ T5426] usb 6-1: Using ep0 maxpacket: 16 [ 348.963334][ T5426] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 348.972793][ T5426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.081644][ T5426] r8152-cfgselector 6-1: Unknown version 0x0000 [ 349.088631][ T5426] r8152-cfgselector 6-1: config 0 descriptor?? [ 349.159308][ T5426] r8152-cfgselector 6-1: can't set config #0, error -71 [ 349.169208][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 349.221147][ T5426] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 349.442025][ T24] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 349.450609][ T24] usb 4-1: config 0 has no interface number 0 [ 349.456909][ T24] usb 4-1: config 0 interface 29 has no altsetting 0 [ 349.643556][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 349.653543][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.661825][ T24] usb 4-1: Product: syz [ 349.666187][ T24] usb 4-1: Manufacturer: syz [ 349.671068][ T24] usb 4-1: SerialNumber: syz [ 349.819323][ T24] usb 4-1: config 0 descriptor?? [ 350.036632][ T24] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 350.293989][ T24] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 350.302737][ T24] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 350.489904][ T24] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 350.604949][ T24] usb 4-1: USB disconnect, device number 11 [ 354.577741][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 359.485283][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.551396][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.575127][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.597357][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.646313][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.278421][ T1696] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 360.514571][ T1696] usb 1-1: Using ep0 maxpacket: 16 [ 360.690010][ T1696] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 360.700715][ T1696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.709548][ T1696] usb 1-1: Product: syz [ 360.714115][ T1696] usb 1-1: Manufacturer: syz [ 360.719199][ T1696] usb 1-1: SerialNumber: syz [ 361.159442][ T1696] r8152-cfgselector 1-1: Unknown version 0x0000 [ 361.166213][ T1696] r8152-cfgselector 1-1: config 0 descriptor?? [ 361.601894][ T24] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 361.664324][ T6779] chnl_net:caif_netlink_parms(): no params data found [ 361.718151][ T49] Bluetooth: hci3: command tx timeout [ 363.862135][ T49] Bluetooth: hci3: command tx timeout [ 365.879636][ T49] Bluetooth: hci3: command tx timeout [ 365.932624][ T6818] input: syz1 as /devices/virtual/input/input6 [ 367.302114][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.309752][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.317201][ T6779] bridge_slave_0: entered allmulticast mode [ 367.329690][ T6779] bridge_slave_0: entered promiscuous mode [ 367.890271][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.897965][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.905473][ T6779] bridge_slave_1: entered allmulticast mode [ 367.913678][ T6779] bridge_slave_1: entered promiscuous mode [ 367.959994][ T49] Bluetooth: hci3: command tx timeout [ 370.152454][ T3675] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.260442][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.400514][ T3675] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.504581][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.572227][ T3675] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.588279][ T5426] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 370.928101][ T5426] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 370.966841][ T3675] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.070653][ T5426] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 371.080053][ T5426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.088340][ T5426] usb 1-1: Product: syz [ 371.092702][ T5426] usb 1-1: Manufacturer: syz [ 371.097493][ T5426] usb 1-1: SerialNumber: syz [ 371.174982][ T6779] team0: Port device team_slave_0 added [ 371.236624][ T6779] team0: Port device team_slave_1 added [ 371.300900][ T5426] usb 1-1: config 0 descriptor?? [ 371.911147][ T3675] bridge_slave_1: left allmulticast mode [ 371.917156][ T3675] bridge_slave_1: left promiscuous mode [ 371.924396][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.129320][ T5852] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 372.161180][ T3675] bridge_slave_0: left allmulticast mode [ 372.167296][ T3675] bridge_slave_0: left promiscuous mode [ 372.174459][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.378171][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 372.596134][ T5852] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 372.605598][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.613864][ T5852] usb 4-1: Product: syz [ 372.618719][ T5852] usb 4-1: Manufacturer: syz [ 372.623528][ T5852] usb 4-1: SerialNumber: syz [ 372.712962][ T49] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 372.797064][ T5852] r8152-cfgselector 4-1: Unknown version 0x0000 [ 372.804256][ T5852] r8152-cfgselector 4-1: config 0 descriptor?? [ 373.460868][ T3675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.814273][ T5852] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 373.823297][ T3675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.911615][ T3675] bond0 (unregistering): Released all slaves [ 374.041561][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.048826][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.075244][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.234105][ T6877] mkiss: ax0: crc mode is auto. [ 374.965202][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.972846][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.002603][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.425176][ T6779] hsr_slave_0: entered promiscuous mode [ 375.433423][ T6779] hsr_slave_1: entered promiscuous mode [ 375.440924][ T6779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.448704][ T6779] Cannot create hsr debugfs directory [ 375.478198][ T5852] usb 1-1: USB disconnect, device number 7 [ 375.693593][ T6880] random: crng reseeded on system resumption [ 376.001991][ T3675] hsr_slave_0: left promiscuous mode [ 376.016459][ T3675] hsr_slave_1: left promiscuous mode [ 376.027373][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.035664][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.470786][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.478589][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.614470][ T3675] veth1_macvtap: left promiscuous mode [ 376.620473][ T3675] veth0_macvtap: left promiscuous mode [ 376.626347][ T3675] veth1_vlan: left promiscuous mode [ 376.632014][ T3675] veth0_vlan: left promiscuous mode [ 376.813162][ T49] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 376.821989][ T49] Bluetooth: hci2: Injecting HCI hardware error event [ 376.830017][ T49] Bluetooth: hci2: hardware error 0x00 [ 377.675318][ T6899] overlayfs: missing 'lowerdir' [ 377.897575][ T3675] team0 (unregistering): Port device team_slave_1 removed [ 378.019758][ T3675] team0 (unregistering): Port device team_slave_0 removed [ 378.228492][ T5426] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 378.458061][ T5426] usb 1-1: device descriptor read/64, error -71 [ 378.498098][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 378.748685][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 378.819236][ T5426] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 378.850170][ T49] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 378.864024][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 378.873573][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.881856][ T24] usb 4-1: Product: syz [ 378.886217][ T24] usb 4-1: Manufacturer: syz [ 378.894474][ T24] usb 4-1: SerialNumber: syz [ 378.930162][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 378.936640][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 378.979161][ T5426] usb 1-1: device descriptor read/64, error -71 [ 379.090232][ T5426] usb usb1-port1: attempt power cycle [ 379.363008][ T5852] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 379.484687][ T5426] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 379.595862][ T5426] usb 1-1: device descriptor read/8, error -71 [ 379.860086][ T5426] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 379.962795][ T5426] usb 1-1: device descriptor read/8, error -71 [ 380.108781][ T5426] usb usb1-port1: unable to enumerate USB device [ 380.406603][ T6779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.520964][ T6779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.625620][ T6779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.655849][ T6779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.417695][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.230678][ T6779] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.320715][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.328260][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.342560][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.350095][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.831252][ T6953] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 385.867629][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.256'. [ 389.181496][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 389.309083][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 389.416873][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 389.481733][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 389.491613][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.500027][ T24] usb 1-1: Product: syz [ 389.504394][ T24] usb 1-1: Manufacturer: syz [ 389.508922][ T11] usb 5-1: device descriptor read/64, error -71 [ 389.509186][ T24] usb 1-1: SerialNumber: syz [ 389.680238][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 389.686745][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 389.728174][ T5852] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 389.768026][ T11] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 389.958422][ T11] usb 5-1: device descriptor read/64, error -71 [ 389.979336][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.990974][ T5852] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 390.000502][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.049743][ T5852] usb 6-1: config 0 descriptor?? [ 390.080568][ T11] usb usb5-port1: attempt power cycle [ 390.142728][ T1696] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 390.305759][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.459212][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 390.531571][ T11] usb 5-1: device descriptor read/8, error -71 [ 390.560703][ T5852] input: HID 28bd:0933 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.0004/input/input7 [ 390.680046][ T5852] uclogic 0003:28BD:0933.0004: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0 [ 390.828139][ T11] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 390.836933][ T5852] usb 6-1: USB disconnect, device number 4 [ 390.889978][ T11] usb 5-1: device descriptor read/8, error -71 [ 391.023090][ T11] usb usb5-port1: unable to enumerate USB device [ 391.393719][ T6983] fido_id[6983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 392.379846][ T6779] veth0_vlan: entered promiscuous mode [ 392.424472][ T6779] veth1_vlan: entered promiscuous mode [ 393.165506][ T6779] veth0_macvtap: entered promiscuous mode [ 394.130960][ T6779] veth1_macvtap: entered promiscuous mode [ 394.895437][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.916458][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.059211][ T6779] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.073348][ T6779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.083680][ T6779] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.092777][ T6779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.422763][ T7032] IPv6: Can't replace route, no match found [ 397.508024][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 397.840611][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 397.901524][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.912065][ T24] usb 1-1: config 0 has no interfaces? [ 398.001147][ T24] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 398.010700][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.019003][ T24] usb 1-1: Product: syz [ 398.023369][ T24] usb 1-1: Manufacturer: syz [ 398.028242][ T24] usb 1-1: SerialNumber: syz [ 398.046762][ T24] usb 1-1: config 0 descriptor?? [ 398.302167][ T7037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 398.308953][ T7037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.317344][ T7037] vhci_hcd vhci_hcd.0: Device attached [ 398.383802][ T7052] vhci_hcd: connection closed [ 398.387319][ T4276] vhci_hcd: stop threads [ 398.397374][ T5860] usb 1-1: USB disconnect, device number 13 [ 398.397488][ T4276] vhci_hcd: release socket [ 398.397549][ T4276] vhci_hcd: disconnect device [ 398.519324][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 398.720543][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.764453][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.773939][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.782414][ T24] usb 6-1: Product: syz [ 398.786775][ T24] usb 6-1: Manufacturer: syz [ 398.791674][ T24] usb 6-1: SerialNumber: syz [ 400.631023][ T7072] loop6: detected capacity change from 0 to 7 [ 400.741890][ T7072] Dev loop6: unable to read RDB block 7 [ 400.750031][ T7072] loop6: unable to read partition table [ 400.856886][ T7072] loop6: partition table beyond EOD, truncated [ 400.864348][ T7072] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 401.116991][ T24] cdc_ncm 6-1:1.0: bind() failure [ 401.137683][ T24] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 401.151681][ T24] usb 6-1: USB disconnect, device number 5 [ 402.765216][ T7085] ===================================================== [ 402.773603][ T7085] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 402.781026][ T7085] _copy_to_user+0xcc/0x120 [ 402.785713][ T7085] vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 402.791818][ T7085] __se_sys_ioctl+0x23c/0x400 [ 402.796688][ T7085] __x64_sys_ioctl+0x97/0xe0 [ 402.801620][ T7085] x64_sys_call+0x1ebe/0x3db0 [ 402.806497][ T7085] do_syscall_64+0xd9/0x210 [ 402.811271][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.818006][ T7085] [ 402.820435][ T7085] Uninit was stored to memory at: [ 402.825736][ T7085] kmemdup_noprof+0xb0/0x100 [ 402.830608][ T7085] vmci_datagram_dispatch+0x4eb/0x1560 [ 402.836276][ T7085] vmci_ctx_put+0x88e/0x15d0 [ 402.841190][ T7085] vmci_ctx_destroy+0x15d/0x250 [ 402.846240][ T7085] vmci_host_unlocked_ioctl+0x4592/0x5200 [ 402.856945][ T7085] __se_sys_ioctl+0x23c/0x400 [ 402.862780][ T7085] __x64_sys_ioctl+0x97/0xe0 [ 402.867482][ T7085] x64_sys_call+0x1ebe/0x3db0 [ 402.873206][ T7085] do_syscall_64+0xd9/0x210 [ 402.877983][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.884022][ T7085] [ 402.886399][ T7085] Local variable ev.i.i created at: [ 402.891731][ T7085] vmci_ctx_put+0x76b/0x15d0 [ 402.896421][ T7085] vmci_ctx_destroy+0x15d/0x250 [ 402.901464][ T7085] [ 402.903828][ T7085] Bytes 28-31 of 40 are uninitialized [ 402.909365][ T7085] Memory access of size 40 starts at ffff88804f5d5a80 [ 402.916253][ T7085] Data copied to user address 00002000000003c0 [ 402.923624][ T7085] [ 402.926077][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.0.288 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 402.938910][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.949099][ T7085] ===================================================== [ 402.958636][ T7085] Disabling lock debugging due to kernel taint [ 402.964850][ T7085] Kernel panic - not syncing: kmsan.panic set ... [ 402.971343][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.0.288 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 402.985009][ T7085] Tainted: [B]=BAD_PAGE [ 402.989213][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.999349][ T7085] Call Trace: [ 403.002684][ T7085] [ 403.005667][ T7085] __dump_stack+0x26/0x30 [ 403.010106][ T7085] dump_stack_lvl+0x53/0x270 [ 403.014803][ T7085] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 403.020736][ T7085] dump_stack+0x1e/0x25 [ 403.024989][ T7085] panic+0x4bd/0xd50 [ 403.029013][ T7085] kmsan_report+0x31c/0x320 [ 403.033627][ T7085] ? kmsan_internal_check_memory+0x16c/0x230 [ 403.039722][ T7085] ? kmsan_copy_to_user+0xf1/0x190 [ 403.044950][ T7085] ? _copy_to_user+0xcc/0x120 [ 403.049719][ T7085] ? vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 403.055738][ T7085] ? __se_sys_ioctl+0x23c/0x400 [ 403.060760][ T7085] ? __x64_sys_ioctl+0x97/0xe0 [ 403.065631][ T7085] ? x64_sys_call+0x1ebe/0x3db0 [ 403.070593][ T7085] ? do_syscall_64+0xd9/0x210 [ 403.075358][ T7085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.081533][ T7085] ? slab_update_freelist+0x217/0x300 [ 403.087027][ T7085] ? __slab_free+0x367/0x9e0 [ 403.091744][ T7085] ? kmsan_get_metadata+0xfb/0x160 [ 403.096973][ T7085] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 403.102908][ T7085] kmsan_internal_check_memory+0x16c/0x230 [ 403.108842][ T7085] kmsan_copy_to_user+0xf1/0x190 [ 403.113892][ T7085] _copy_to_user+0xcc/0x120 [ 403.118502][ T7085] vmci_host_unlocked_ioctl+0x1e7e/0x5200 [ 403.124346][ T7085] ? kmsan_get_metadata+0xfb/0x160 [ 403.129581][ T7085] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 403.135743][ T7085] __se_sys_ioctl+0x23c/0x400 [ 403.140540][ T7085] __x64_sys_ioctl+0x97/0xe0 [ 403.145239][ T7085] x64_sys_call+0x1ebe/0x3db0 [ 403.150032][ T7085] do_syscall_64+0xd9/0x210 [ 403.154628][ T7085] ? irqentry_exit+0x16/0x60 [ 403.159326][ T7085] ? clear_bhb_loop+0x40/0x90 [ 403.164158][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.170158][ T7085] RIP: 0033:0x7f210758e929 [ 403.174642][ T7085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.194356][ T7085] RSP: 002b:00007f210840b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.202870][ T7085] RAX: ffffffffffffffda RBX: 00007f21077b5fa0 RCX: 00007f210758e929 [ 403.210924][ T7085] RDX: 0000200000000200 RSI: 00000000000007ac RDI: 0000000000000008 [ 403.218967][ T7085] RBP: 00007f2107610b39 R08: 0000000000000000 R09: 0000000000000000 [ 403.227014][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.235057][ T7085] R13: 0000000000000000 R14: 00007f21077b5fa0 R15: 00007ffd05e9b298 [ 403.243123][ T7085] [ 403.246461][ T7085] Kernel Offset: disabled [ 403.250850][ T7085] Rebooting in 86400 seconds..