last executing test programs: 8.945371107s ago: executing program 3 (id=214): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c90010000c000500171f080000", @ANYRES64], 0x15) 8.543695033s ago: executing program 3 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000280000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="643e0f20def3a7650fdf08670f01caf0838ddb000abad104ed66b8000000000f23c80f21f866350800e0000f23f80f20e06635ae4000f30f22e0362e360f21976737", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x103000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 7.545037167s ago: executing program 2 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0x84, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':$*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7.095397484s ago: executing program 3 (id=222): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="1cad0244887b00000000000008004503da3000000000002f907800000000ffffffff0000883e001c907802070000000000002b23ca5ed9707954c7310801"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@broadcast, @link_local, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @random="6fed2c000765", @multicast2, @random="e374636d35dc", @multicast1}}}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r2, &(0x7f0000000600), 0x0, 0x0, 0xffff, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000540)=""/210, 0xd2) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000001040)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="40037e0000007e0a6c9c39885802f20b06be48b3a606a5829c6cea97d993af651e36a750b63e1941735d393c40c40581aa73f9e611aa9b4975f73ec274fca8a48c0700000000000000f016c861ec4d533816a7edf5b0d3d9c295c3578f5532caa8e442ce318bd518328701fc643a92848afded283e753c3bd6f9d270ae389c286132e3005c653db53325a50c75f34e"], &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "47d2"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x6f8}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1d}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000340)={0x20, 0x1, 0xd3, "1dc472a99557e6e8f80db79ddec2e63e89d17334002dc2216b31ae5196bf733c13d73d1c444c27d618270b5d906ec1a06ad81644ba9a8c68f684d119b81247d611cfd98bdaf3d23cf75f586b00993d67a6501d79488842e6a4751163f5923f0fc2859b51b615fc790902dae4b7a913bf3b12c80292e28c9bfaba0325d3a798a5718b19b8a78c6fcd09394052eba045fa1ca36666a05e0f4a37377572b19e40f6c0fa875338c22f85212a6797c798525490bd60f0920a2827ba7cebfd3aefd2a609a4ecd3f4919bff2f126289cc6eb67bb13979"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xe5}}) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16=r0], 0x0}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) write$hidraw(r6, &(0x7f0000000080)="68b02aca4f3751da52a0b6e427cb787e6070bb275e403a7b9c0f73d1f29a5de6d9b23389ec9021a82248e59eb0de503ec213caa34049e61bd2610c", 0x3b) 6.707544319s ago: executing program 2 (id=223): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 6.644402045s ago: executing program 4 (id=224): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) 6.176802925s ago: executing program 4 (id=226): ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x7, @raw_data="535da458c6a1997bc0e74b2355d45c35bc7dcfe4b9c0db27a9a4aab54b9f5ea0a87c396e44b174248dac8852f345a06940bc3b7edc49aed6626e95c947f0e1864d92df0f712f370283d21154ad5bd955b8751c714d3eaa4d9ea5d23fb0e20761769d667dafebf143e57d4fe955dcc66d10d000d03af1a1d6d9a90e08a7287677fe8846a979e3e59e2129119335a3cc228f78d7ff9227f6e08724330e764a114af99ca500e955716fcdb3955f9eb09dab096c8d1afd2384fcbb4ae20d1a3d554ca06376e5850e7b07"}) 6.119900292s ago: executing program 1 (id=227): ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000180)={0x3, 0x2, 0x81, 0x3, 0x6, 0x7}) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff990908"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x438}}, {0x18, &(0x7f0000000100)=@string={0x18, 0x3, "71f8bd3e509a076a01d02414e4a3c2ff4e774659a366"}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005b0e8c10ef170c72905101020301090212020100"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000200)='V', 0x1) write$char_usb(r2, &(0x7f0000000000)='8', 0x1) syz_usb_disconnect(r1) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000080), 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)='8', 0x1) 5.581262623s ago: executing program 4 (id=228): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) 4.496924226s ago: executing program 0 (id=229): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0xffffffffffffff97, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x55}, 0x48) 4.378474056s ago: executing program 4 (id=230): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x83, &(0x7f0000000100)}, 0x10) 4.135977745s ago: executing program 2 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1100420}, 0xc, &(0x7f00000009c0)={&(0x7f0000000c00)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbed25000000007335fa6105f452e42a7d0ba67dc404008d6e070a2990b04e37bbfa", @ANYRES32=0x0, @ANYBLOB="040002800800", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="14006424844b05f146fe8145602b9f32b6", @ANYRES32, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000", @ANYRESOCT, @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0xc880}, 0x20044004) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) umount2(0x0, 0xc) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 3.843692098s ago: executing program 0 (id=232): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') 3.663754319s ago: executing program 4 (id=233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 3.572332831s ago: executing program 2 (id=234): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x0) 3.173239999s ago: executing program 0 (id=235): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = io_uring_setup(0x3eae, &(0x7f0000000400)={0x0, 0xfffffffd, 0x0, 0x4001}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x48}}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 3.063644592s ago: executing program 3 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000200)=0x8) 3.057316597s ago: executing program 4 (id=237): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c21}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f0000000700)) 2.720609221s ago: executing program 1 (id=238): ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x7, @raw_data="535da458c6a1997bc0e74b2355d45c35bc7dcfe4b9c0db27a9a4aab54b9f5ea0a87c396e44b174248dac8852f345a06940bc3b7edc49aed6626e95c947f0e1864d92df0f712f370283d21154ad5bd955b8751c714d3eaa4d9ea5d23fb0e20761769d667dafebf143e57d4fe955dcc66d10d000d03af1a1d6d9a90e08a7287677fe8846a979e3e59e2129119335a3cc228f78d7ff9227f6e08724330e764a114af99ca500e955716fcdb3955f9eb09dab096c8d1afd2384fcbb4ae20d1a3d554ca06376e5850e7b07"}) 2.461087466s ago: executing program 2 (id=239): socket$qrtr(0x2a, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000008540)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000009240)={r0, r1, 0x8}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) lseek(r2, 0x6, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000640)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x6, 0x6) preadv(r4, 0x0, 0x0, 0xff, 0x3) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 1.931400772s ago: executing program 1 (id=240): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) 1.827622677s ago: executing program 3 (id=241): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, 0x0) 1.659977654s ago: executing program 0 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.200412365s ago: executing program 1 (id=243): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x83, &(0x7f0000000100)}, 0x10) 1.036637764s ago: executing program 0 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1100420}, 0xc, &(0x7f00000009c0)={&(0x7f0000000c00)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbed25000000007335fa6105f452e42a7d0ba67dc404008d6e070a2990b04e37bbfa", @ANYRES32=0x0, @ANYBLOB="040002800800", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="14006424844b05f146fe8145602b9f32b6", @ANYRES32, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000", @ANYRESOCT, @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0xc880}, 0x20044004) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) umount2(0x0, 0xc) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 855.247288ms ago: executing program 1 (id=245): syz_open_dev$sndpcmp(0x0, 0x2, 0x412bc0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 649.364527ms ago: executing program 3 (id=246): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x2703, &(0x7f0000000040)={0x0, 0x4e26, 0x2, 0x0, 0x38b}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r2, 0x4d65, 0x0, 0x6, &(0x7f0000000140)={[0x7]}, 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000d00)={0xc}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000a80)=0xd) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r4, r5, 0x0) read$FUSE(r6, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000200)={0x8}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f0000000280)=[{0x8, 0x81, 0x7c}, {0x5, 0x2, 0x81, 0x1}, {0x7, 0x0, 0x10, 0x5}]}, 0x8) socket$inet6_dccp(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) 560.67631ms ago: executing program 2 (id=247): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) socket(0x11, 0x3, 0x0) 507.861124ms ago: executing program 0 (id=248): ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000180)={0x3, 0x2, 0x81, 0x3, 0x6, 0x7}) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff990908"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x438}}, {0x18, &(0x7f0000000100)=@string={0x18, 0x3, "71f8bd3e509a076a01d02414e4a3c2ff4e774659a366"}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005b0e8c10ef170c72905101020301090212020100"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000200)='V', 0x1) write$char_usb(r2, &(0x7f0000000000)='8', 0x1) syz_usb_disconnect(r1) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000080), 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)='8', 0x1) 0s ago: executing program 1 (id=249): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 155.752510][ T5157] cgroup: Unknown subsys name 'net' [ 155.945514][ T5157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 157.626916][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.633691][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.715609][ T5157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 205.358786][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.412369][ T5179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.421490][ T5179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.430730][ T5179] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.443972][ T5179] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.445259][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.454754][ T5179] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.464916][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.476228][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.484218][ T5179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.487182][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.500625][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.749552][ T5179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.757937][ T5179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.768995][ T5179] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.770607][ T5178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.786334][ T5178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.795285][ T5178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.804514][ T5178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.816006][ T5178] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.830499][ T5178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.842964][ T5179] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.855059][ T5179] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.864213][ T5179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.873357][ T5178] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.890987][ T5178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.930095][ T5193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.955183][ T5193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.966761][ T5193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.975999][ T5193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.814388][ T5174] chnl_net:caif_netlink_parms(): no params data found [ 206.832848][ T5177] chnl_net:caif_netlink_parms(): no params data found [ 207.614136][ T5193] Bluetooth: hci1: command tx timeout [ 207.614874][ T4551] Bluetooth: hci0: command tx timeout [ 207.683558][ T5184] chnl_net:caif_netlink_parms(): no params data found [ 207.706604][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.714612][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.722450][ T5177] bridge_slave_0: entered allmulticast mode [ 207.731704][ T5177] bridge_slave_0: entered promiscuous mode [ 207.834507][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.845074][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.852949][ T5177] bridge_slave_1: entered allmulticast mode [ 207.862058][ T5177] bridge_slave_1: entered promiscuous mode [ 207.932873][ T4551] Bluetooth: hci4: command tx timeout [ 208.011848][ T4551] Bluetooth: hci2: command tx timeout [ 208.033507][ T5182] chnl_net:caif_netlink_parms(): no params data found [ 208.065408][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.073284][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.080924][ T5174] bridge_slave_0: entered allmulticast mode [ 208.089922][ T5174] bridge_slave_0: entered promiscuous mode [ 208.102423][ T4551] Bluetooth: hci3: command tx timeout [ 208.108616][ T5185] chnl_net:caif_netlink_parms(): no params data found [ 208.244534][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.252624][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.260427][ T5174] bridge_slave_1: entered allmulticast mode [ 208.269540][ T5174] bridge_slave_1: entered promiscuous mode [ 208.288164][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.498680][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.603772][ T5174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.701405][ T5174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.765354][ T5177] team0: Port device team_slave_0 added [ 208.906512][ T5177] team0: Port device team_slave_1 added [ 209.013751][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.021815][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.029471][ T5184] bridge_slave_0: entered allmulticast mode [ 209.038102][ T5184] bridge_slave_0: entered promiscuous mode [ 209.123703][ T5174] team0: Port device team_slave_0 added [ 209.133777][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.140926][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.167229][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.180062][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.187873][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.195811][ T5184] bridge_slave_1: entered allmulticast mode [ 209.204980][ T5184] bridge_slave_1: entered promiscuous mode [ 209.229839][ T5174] team0: Port device team_slave_1 added [ 209.276811][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.284837][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.292890][ T5182] bridge_slave_0: entered allmulticast mode [ 209.301858][ T5182] bridge_slave_0: entered promiscuous mode [ 209.315542][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.324186][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.350858][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.532888][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.540597][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.548879][ T5182] bridge_slave_1: entered allmulticast mode [ 209.557843][ T5182] bridge_slave_1: entered promiscuous mode [ 209.575961][ T5184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.631781][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.638899][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.665832][ T5174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.698970][ T4551] Bluetooth: hci0: command tx timeout [ 209.704717][ T5193] Bluetooth: hci1: command tx timeout [ 209.726515][ T5184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.768741][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.776058][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.802398][ T5174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.900428][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.908343][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.917824][ T5185] bridge_slave_0: entered allmulticast mode [ 209.925852][ T5185] bridge_slave_0: entered promiscuous mode [ 209.951899][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.959569][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.967472][ T5185] bridge_slave_1: entered allmulticast mode [ 209.976418][ T5185] bridge_slave_1: entered promiscuous mode [ 209.995504][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.012428][ T4551] Bluetooth: hci4: command tx timeout [ 210.015729][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.062564][ T5184] team0: Port device team_slave_0 added [ 210.097910][ T4551] Bluetooth: hci2: command tx timeout [ 210.125377][ T5177] hsr_slave_0: entered promiscuous mode [ 210.136348][ T5177] hsr_slave_1: entered promiscuous mode [ 210.171967][ T4551] Bluetooth: hci3: command tx timeout [ 210.209806][ T5184] team0: Port device team_slave_1 added [ 210.383650][ T5182] team0: Port device team_slave_0 added [ 210.402048][ T5182] team0: Port device team_slave_1 added [ 210.447577][ T5185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.468160][ T5185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.479721][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.488263][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.515919][ T5184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.596627][ T5174] hsr_slave_0: entered promiscuous mode [ 210.607537][ T5174] hsr_slave_1: entered promiscuous mode [ 210.616021][ T5174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.623878][ T5174] Cannot create hsr debugfs directory [ 210.667371][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.674729][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.701309][ T5184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.860601][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.867848][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.895450][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.913792][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.920933][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.947258][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.965554][ T5185] team0: Port device team_slave_0 added [ 210.995245][ T5185] team0: Port device team_slave_1 added [ 211.229588][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.236867][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.264484][ T5185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.321322][ T5184] hsr_slave_0: entered promiscuous mode [ 211.332249][ T5184] hsr_slave_1: entered promiscuous mode [ 211.340520][ T5184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.348359][ T5184] Cannot create hsr debugfs directory [ 211.383362][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.390531][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.416985][ T5185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.556156][ T5182] hsr_slave_0: entered promiscuous mode [ 211.566323][ T5182] hsr_slave_1: entered promiscuous mode [ 211.574780][ T5182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.582678][ T5182] Cannot create hsr debugfs directory [ 211.783902][ T4551] Bluetooth: hci0: command tx timeout [ 211.789534][ T4551] Bluetooth: hci1: command tx timeout [ 211.831461][ T5185] hsr_slave_0: entered promiscuous mode [ 211.842256][ T5185] hsr_slave_1: entered promiscuous mode [ 211.850398][ T5185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.858202][ T5185] Cannot create hsr debugfs directory [ 212.091859][ T5193] Bluetooth: hci4: command tx timeout [ 212.185571][ T5193] Bluetooth: hci2: command tx timeout [ 212.251822][ T5193] Bluetooth: hci3: command tx timeout [ 212.604119][ T5177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.648134][ T5177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.672872][ T5177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.719245][ T5177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.904098][ T5174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.923880][ T5174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.949041][ T5174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.976299][ T5174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.282839][ T5184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.301557][ T5184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.327073][ T5182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.354392][ T5182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.383980][ T5184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.406057][ T5184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.435835][ T5182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.460478][ T5182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.822609][ T5185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.849128][ T5185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.859518][ T5193] Bluetooth: hci1: command tx timeout [ 213.860613][ T4551] Bluetooth: hci0: command tx timeout [ 213.886838][ T5185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.919748][ T5185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.177689][ T4551] Bluetooth: hci4: command tx timeout [ 214.251802][ T4551] Bluetooth: hci2: command tx timeout [ 214.333232][ T4551] Bluetooth: hci3: command tx timeout [ 214.354567][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.618327][ T5177] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.699291][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.707055][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.758486][ T5184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.899332][ T3104] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.907073][ T3104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.092321][ T5185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.117958][ T5184] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.239817][ T3104] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.247575][ T3104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.285612][ T5185] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.315835][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.344208][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.351930][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.400043][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.503177][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.510828][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.591430][ T5174] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.654391][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.662120][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.677558][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.685262][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.743906][ T5182] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.773498][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.781139][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.991661][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.999342][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.233760][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.241449][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.474116][ T5182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.484923][ T5182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.960661][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.999711][ T5184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.189637][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.318806][ T5185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.678851][ T5184] veth0_vlan: entered promiscuous mode [ 218.777893][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.790951][ T5174] veth0_vlan: entered promiscuous mode [ 218.879305][ T5184] veth1_vlan: entered promiscuous mode [ 219.015079][ T5174] veth1_vlan: entered promiscuous mode [ 219.058887][ T5185] veth0_vlan: entered promiscuous mode [ 219.106900][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.113716][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.218168][ T5185] veth1_vlan: entered promiscuous mode [ 219.424508][ T5184] veth0_macvtap: entered promiscuous mode [ 219.476727][ T5174] veth0_macvtap: entered promiscuous mode [ 219.522873][ T5174] veth1_macvtap: entered promiscuous mode [ 219.559529][ T5182] veth0_vlan: entered promiscuous mode [ 219.579994][ T5184] veth1_macvtap: entered promiscuous mode [ 219.670366][ T5182] veth1_vlan: entered promiscuous mode [ 219.688503][ T5185] veth0_macvtap: entered promiscuous mode [ 219.791049][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.804555][ T5185] veth1_macvtap: entered promiscuous mode [ 219.862017][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.872830][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.887899][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.926191][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.015487][ T5174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.024715][ T5174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.033943][ T5174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.043130][ T5174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.089999][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.103041][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.120350][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.247002][ T5184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.257003][ T5184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.266161][ T5184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.275332][ T5184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.317914][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.328743][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.339049][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.349818][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.364882][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.407322][ T5182] veth0_macvtap: entered promiscuous mode [ 220.448547][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.459301][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.469441][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.480206][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.499109][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.550072][ T5185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.559342][ T5185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.569034][ T5185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.580671][ T5185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.628179][ T5182] veth1_macvtap: entered promiscuous mode [ 220.851264][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.862132][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.872332][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.883146][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.898896][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.910494][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.925546][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.003297][ T5177] veth0_vlan: entered promiscuous mode [ 221.098922][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.109805][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.119925][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.130648][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.143141][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.156508][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.174085][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.229502][ T5177] veth1_vlan: entered promiscuous mode [ 221.380842][ T5182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.390093][ T5182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.399226][ T5182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.408331][ T5182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.710634][ T5177] veth0_macvtap: entered promiscuous mode [ 221.797798][ T5177] veth1_macvtap: entered promiscuous mode [ 222.005639][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.019125][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.030539][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.042852][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.053037][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.063781][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.073934][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.084714][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.101098][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.209517][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.220415][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.230635][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.241491][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.256162][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.267877][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.277994][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.288766][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.303884][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.451548][ T5177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.460823][ T5177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.471363][ T5177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.480526][ T5177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.577839][ T1821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.586491][ T1821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.038767][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.047412][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.182593][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.190688][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.313126][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.321086][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.473868][ T3397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.482100][ T3397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.595031][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.603183][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.353655][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.361843][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.427666][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 228.559728][ T5360] loop2: detected capacity change from 0 to 128 [ 228.607827][ T5363] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.639314][ T1821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.647550][ T1821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.675335][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.693242][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.706826][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.722001][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.731325][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.771336][ T5360] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.832613][ T10] usb 1-1: config 0 descriptor?? [ 228.896809][ T5360] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.184834][ T3104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.193047][ T3104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.278253][ T3104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.286547][ T3104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.374680][ T5185] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.431288][ T10] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 229.469463][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 229.821183][ T5241] usb 1-1: USB disconnect, device number 2 [ 231.307694][ T5391] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 232.500044][ T5409] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 233.536568][ T4551] Bluetooth: hci4: command tx timeout [ 233.622077][ T2623] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 233.831915][ T2623] usb 2-1: Using ep0 maxpacket: 16 [ 233.856256][ T2623] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 233.865545][ T2623] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 233.878845][ T2623] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 233.890360][ T2623] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.976530][ T2623] usb 2-1: string descriptor 0 read error: -22 [ 233.983718][ T2623] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.993222][ T2623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.120425][ T2623] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 234.868054][ T2623] usb 2-1: USB disconnect, device number 2 [ 235.223972][ T5441] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.456942][ T5513] loop0: detected capacity change from 0 to 2048 [ 241.514926][ T5513] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.734358][ T5513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.004411][ T5193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.021239][ T5193] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.037159][ T5193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.062827][ T5193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.083519][ T5193] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 242.113304][ T5193] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.314660][ T5513] syz.0.64 (5513) used greatest stack depth: 4624 bytes left [ 242.384020][ T5174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.483197][ T5522] chnl_net:caif_netlink_parms(): no params data found [ 244.183647][ T4551] Bluetooth: hci5: command tx timeout [ 244.582444][ T5546] vivid-000: disconnect [ 244.662852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 244.671545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 245.159423][ T5522] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.168535][ T5522] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.187844][ T5522] bridge_slave_0: entered allmulticast mode [ 245.197296][ T5522] bridge_slave_0: entered promiscuous mode [ 245.262935][ T5545] vivid-000: reconnect [ 245.303089][ T5522] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.310890][ T5522] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.319579][ T5522] bridge_slave_1: entered allmulticast mode [ 245.328735][ T5522] bridge_slave_1: entered promiscuous mode [ 245.639969][ T5522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.692768][ T5522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.804383][ T5553] dccp_close: ABORT with 32 bytes unread [ 245.872302][ T5557] loop3: detected capacity change from 0 to 2048 [ 245.925390][ T5522] team0: Port device team_slave_0 added [ 245.929463][ T5557] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.028984][ T5522] team0: Port device team_slave_1 added [ 246.067970][ T5557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.253324][ T4551] Bluetooth: hci5: command tx timeout [ 246.477120][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.484496][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.519807][ T5522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.623490][ T5184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.698682][ T5522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.707028][ T5522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.733642][ T5522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.025983][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 247.240124][ T5522] hsr_slave_0: entered promiscuous mode [ 247.303381][ T5522] hsr_slave_1: entered promiscuous mode [ 247.342607][ T5522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.350481][ T5522] Cannot create hsr debugfs directory [ 248.332494][ T4551] Bluetooth: hci5: command tx timeout [ 248.610638][ T5584] vivid-000: disconnect [ 248.700506][ T5522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.980988][ T5522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.165961][ T5583] vivid-000: reconnect [ 249.210697][ T5522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.313297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.314476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.423087][ T5589] loop4: detected capacity change from 0 to 2048 [ 249.426002][ T5589] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.465433][ T5522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.574933][ T5589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.044447][ T5177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.054717][ T5522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.149936][ T5522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.273370][ T5522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.360837][ T5522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.421840][ T4551] Bluetooth: hci5: command tx timeout [ 250.509066][ T5603] overlayfs: overlapping lowerdir path [ 251.412408][ T3288] tipc: Subscription rejected, illegal request [ 251.589133][ T5522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.770286][ T5522] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.891259][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.899005][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.998270][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.006107][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.112139][ T2623] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 252.346482][ T2623] usb 4-1: Using ep0 maxpacket: 8 [ 252.365759][ T2623] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.376519][ T2623] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 252.391327][ T2623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 252.402908][ T2623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 252.413160][ T2623] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.555647][ T2623] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 252.566305][ T2623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 252.575138][ T2623] usb 4-1: Product: syz [ 252.579527][ T2623] usb 4-1: Manufacturer: syz [ 252.584485][ T2623] usb 4-1: SerialNumber: syz [ 252.626251][ T2623] usb 4-1: config 0 descriptor?? [ 252.711758][ C1] hrtimer: interrupt took 196436 ns [ 252.921345][ T2623] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 252.934971][ T2623] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 253.264575][ T2623] usb 4-1: USB disconnect, device number 2 [ 253.506986][ T5622] vivid-000: disconnect [ 253.733133][ T5621] vivid-000: reconnect [ 254.213137][ T5627] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 254.325957][ T5522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.883994][ T5522] veth0_vlan: entered promiscuous mode [ 255.021997][ T5522] veth1_vlan: entered promiscuous mode [ 255.422723][ T5522] veth0_macvtap: entered promiscuous mode [ 255.491148][ T5522] veth1_macvtap: entered promiscuous mode [ 255.675181][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.686083][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.696123][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.706827][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.722723][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.734785][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.744856][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.755497][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.765759][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.777289][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.792584][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.825002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 256.079373][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.090180][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.100421][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.111167][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.121318][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.140317][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.152473][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.163237][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.174133][ T5522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.184852][ T5522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.200148][ T5522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.558298][ T5522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.567512][ T5522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.576691][ T5522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.585759][ T5522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.454863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 257.582365][ T5231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 257.807925][ T5231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.818673][ T5231] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 257.828081][ T5231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.877112][ T5231] usb 1-1: config 0 descriptor?? [ 257.902805][ T5231] pwc: Askey VC010 type 2 USB webcam detected. [ 257.976515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 258.373667][ T5231] pwc: recv_control_msg error -32 req 02 val 2b00 [ 258.589809][ T5231] pwc: recv_control_msg error -71 req 02 val 2c00 [ 258.621145][ T5231] pwc: recv_control_msg error -71 req 04 val 1000 [ 258.657022][ T5231] pwc: recv_control_msg error -71 req 04 val 1300 [ 258.682438][ T5231] pwc: recv_control_msg error -71 req 04 val 1400 [ 258.712780][ T5231] pwc: recv_control_msg error -71 req 02 val 2000 [ 258.742667][ T5661] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 258.744492][ T5231] pwc: recv_control_msg error -71 req 02 val 2100 [ 258.802144][ T5231] pwc: recv_control_msg error -71 req 04 val 1500 [ 258.830770][ T5231] pwc: recv_control_msg error -71 req 02 val 2500 [ 258.852817][ T5231] pwc: recv_control_msg error -71 req 02 val 2400 [ 258.882274][ T5231] pwc: recv_control_msg error -71 req 02 val 2600 [ 258.922164][ T5231] pwc: recv_control_msg error -71 req 02 val 2900 [ 258.945139][ T5231] pwc: recv_control_msg error -71 req 02 val 2800 [ 258.953596][ T5231] pwc: recv_control_msg error -71 req 04 val 1100 [ 258.975065][ T5231] pwc: recv_control_msg error -71 req 04 val 1200 [ 259.015294][ T5231] pwc: Registered as video71. [ 259.026838][ T5231] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 259.168575][ T5231] usb 1-1: USB disconnect, device number 3 [ 260.657892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 261.632004][ T5230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 261.915135][ T5230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.925796][ T5230] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 261.935467][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.988653][ T5230] usb 4-1: config 0 descriptor?? [ 262.039840][ T5230] pwc: Askey VC010 type 2 USB webcam detected. [ 262.454723][ T5230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 262.487957][ T5230] pwc: recv_control_msg error -32 req 02 val 2700 [ 262.710233][ T5230] pwc: recv_control_msg error -71 req 04 val 1000 [ 262.767653][ T5230] pwc: recv_control_msg error -71 req 04 val 1300 [ 262.822490][ T5230] pwc: recv_control_msg error -71 req 04 val 1400 [ 262.850602][ T5230] pwc: recv_control_msg error -71 req 02 val 2000 [ 262.891979][ T5230] pwc: recv_control_msg error -71 req 02 val 2100 [ 262.933349][ T5230] pwc: recv_control_msg error -71 req 04 val 1500 [ 262.997708][ T5230] pwc: recv_control_msg error -71 req 02 val 2500 [ 263.022930][ T5230] pwc: recv_control_msg error -71 req 02 val 2400 [ 263.044113][ T5230] pwc: recv_control_msg error -71 req 02 val 2600 [ 263.073797][ T5230] pwc: recv_control_msg error -71 req 02 val 2900 [ 263.081795][ T5230] pwc: recv_control_msg error -71 req 02 val 2800 [ 263.118188][ T5230] pwc: recv_control_msg error -71 req 04 val 1100 [ 263.153511][ T3104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.161524][ T3104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.222472][ T5230] pwc: recv_control_msg error -71 req 04 val 1200 [ 263.257439][ T5230] pwc: Registered as video71. [ 263.281249][ T5230] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 263.435086][ T3104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.443242][ T3104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.456070][ T5230] usb 4-1: USB disconnect, device number 3 [ 263.652803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 265.433445][ T5230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 265.706517][ T5230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.717236][ T5230] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 265.726688][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.820629][ T5230] usb 5-1: config 0 descriptor?? [ 265.886902][ T5230] pwc: Askey VC010 type 2 USB webcam detected. [ 266.124659][ T5230] pwc: send_video_command error -71 [ 266.130087][ T5230] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 266.139468][ T5230] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 266.269224][ T5230] usb 5-1: USB disconnect, device number 2 [ 266.792286][ T5230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 267.091316][ T5230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.103294][ T5230] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 267.112983][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.183115][ T5230] usb 5-1: config 0 descriptor?? [ 267.249587][ T5230] pwc: Askey VC010 type 2 USB webcam detected. [ 267.652763][ T5230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 267.677322][ T5230] pwc: recv_control_msg error -32 req 02 val 2700 [ 267.686592][ T5230] pwc: recv_control_msg error -32 req 02 val 2c00 [ 267.717723][ T5230] pwc: recv_control_msg error -32 req 04 val 1000 [ 267.752173][ T5230] pwc: recv_control_msg error -32 req 04 val 1300 [ 267.790520][ T5230] pwc: recv_control_msg error -32 req 04 val 1400 [ 267.828648][ T5230] pwc: recv_control_msg error -32 req 02 val 2000 [ 267.859271][ T5230] pwc: recv_control_msg error -32 req 02 val 2100 [ 268.071945][ T5230] pwc: recv_control_msg error -71 req 02 val 2500 [ 268.103083][ T5230] pwc: recv_control_msg error -71 req 02 val 2400 [ 268.152087][ T5230] pwc: recv_control_msg error -71 req 02 val 2600 [ 268.181507][ T5230] pwc: recv_control_msg error -71 req 02 val 2900 [ 268.201992][ T5230] pwc: recv_control_msg error -71 req 02 val 2800 [ 268.230710][ T5230] pwc: recv_control_msg error -71 req 04 val 1100 [ 268.272346][ T5230] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.318793][ T5230] pwc: Registered as video71. [ 268.327092][ T5230] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 268.432250][ T5230] usb 5-1: USB disconnect, device number 3 [ 268.460359][ T5757] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 269.409525][ T5766] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 269.418362][ T5766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.155'. [ 269.427723][ T5766] netlink: 9364 bytes leftover after parsing attributes in process `syz.0.155'. [ 270.149993][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 272.692335][ T10] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 272.946984][ T10] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 272.956322][ T10] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 272.967138][ T10] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 272.976740][ T10] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 272.988633][ T10] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 272.999666][ T10] usb 1-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.105394][ T10] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 273.114850][ T10] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 273.135590][ T10] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 273.145531][ T10] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 273.157491][ T10] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 273.168500][ T10] usb 1-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.224239][ T10] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 273.240182][ T10] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 273.252825][ T10] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 273.262464][ T10] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 273.274530][ T10] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 273.285630][ T10] usb 1-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.340578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 273.341939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 273.400976][ T10] usb 1-1: string descriptor 0 read error: -22 [ 273.408063][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 273.417820][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.504660][ T10] adutux 1-1:246.0: interrupt endpoints not found [ 273.682333][ T5227] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 273.709469][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.744808][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.819740][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.882745][ T5227] usb 3-1: Using ep0 maxpacket: 16 [ 273.910524][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.933272][ T5227] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 273.950430][ T5227] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 273.987144][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.039077][ T5227] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 274.053111][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.064667][ T5227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.073079][ T5227] usb 3-1: Product: syz [ 274.077470][ T5227] usb 3-1: Manufacturer: syz [ 274.082397][ T5227] usb 3-1: SerialNumber: syz [ 274.111862][ T5227] usb 3-1: config 0 descriptor?? [ 274.334498][ T5230] usb 1-1: USB disconnect, device number 4 [ 274.369992][ T5227] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 274.443499][ T5227] gspca_sn9c20x: Write register 1000 failed -71 [ 274.449986][ T5227] gspca_sn9c20x: Device initialization failed [ 274.466400][ T5227] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 274.529834][ T5227] usb 3-1: USB disconnect, device number 2 [ 277.446560][ T5230] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 277.688397][ T5230] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 277.697738][ T5230] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 277.708562][ T5230] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 277.718095][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 277.730059][ T5230] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 277.743709][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.844150][ T5230] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 277.855365][ T5230] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 277.866357][ T5230] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 277.875921][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 277.887955][ T5230] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 277.899065][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.963710][ T5230] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 277.973834][ T5230] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 277.984489][ T5230] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 277.993987][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 278.006037][ T5230] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 278.017343][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.108993][ T5230] usb 2-1: string descriptor 0 read error: -22 [ 278.116086][ T5230] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 278.125749][ T5230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.184930][ T5230] adutux 2-1:246.0: interrupt endpoints not found [ 278.331983][ T5227] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 278.416901][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.467519][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.549988][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.573974][ T5227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.593379][ T5227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.607727][ T5227] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.621075][ T5227] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.630490][ T5227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.633343][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.677639][ T5227] usb 1-1: config 0 descriptor?? [ 278.722374][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.808002][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.126496][ T5230] usb 2-1: USB disconnect, device number 3 [ 279.189338][ T5227] usbhid 1-1:0.0: can't add hid device: -71 [ 279.197069][ T5227] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 279.250187][ T5227] usb 1-1: USB disconnect, device number 5 [ 280.545424][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.552889][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.370292][ T5869] syzkaller1: entered promiscuous mode [ 281.376228][ T5869] syzkaller1: entered allmulticast mode [ 282.249394][ T5873] nvme_fabrics: missing parameter 'transport=%s' [ 282.256267][ T5873] nvme_fabrics: missing parameter 'nqn=%s' [ 282.317263][ T5875] vivid-000: disconnect [ 282.736269][ T5874] vivid-000: reconnect [ 283.392152][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 283.422690][ T5227] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 283.620925][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.632598][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.642767][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.656095][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.665634][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.710782][ T5227] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 283.719952][ T5227] usb 1-1: config 246 descriptor has 1 excess byte, ignoring [ 283.728023][ T5227] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 283.737518][ T5227] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 283.749524][ T5227] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 283.760742][ T5227] usb 1-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.824343][ T10] usb 2-1: config 0 descriptor?? [ 283.835939][ T5227] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 283.845163][ T5227] usb 1-1: config 246 descriptor has 1 excess byte, ignoring [ 283.852943][ T5227] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 283.862413][ T5227] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 283.874489][ T5227] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 283.891829][ T5227] usb 1-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.993389][ T5227] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 284.002767][ T5227] usb 1-1: config 246 descriptor has 1 excess byte, ignoring [ 284.010541][ T5227] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 284.021558][ T5227] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 284.033836][ T5227] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 284.045191][ T5227] usb 1-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.131557][ T5227] usb 1-1: string descriptor 0 read error: -22 [ 284.138440][ T5227] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 284.148094][ T5227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.180475][ T5227] adutux 1-1:246.0: interrupt endpoints not found [ 284.334937][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 284.341556][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 284.464149][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.499238][ T10] usb 2-1: USB disconnect, device number 4 [ 284.522900][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.571109][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.612501][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.707112][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.773606][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.093519][ T10] usb 1-1: USB disconnect, device number 6 [ 287.102748][ T5921] vivid-000: disconnect [ 287.228276][ T5915] vivid-000: reconnect [ 287.962208][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 288.062130][ T1823] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 288.227546][ T10] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 288.235981][ T10] usb 4-1: config 0 has no interface number 0 [ 288.242533][ T10] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.253761][ T10] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.318640][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 288.328308][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 288.336885][ T10] usb 4-1: Manufacturer: syz [ 288.351245][ T1823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.362792][ T1823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.372919][ T1823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.392447][ T1823] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.403749][ T1823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.444946][ T10] usb 4-1: config 0 descriptor?? [ 288.477095][ T1823] usb 3-1: config 0 descriptor?? [ 288.752040][ T5230] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 288.775601][ T5227] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 288.823242][ T5936] QAT: Device 0 not found [ 288.865857][ T5227] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 288.994162][ T1823] usbhid 3-1:0.0: can't add hid device: -71 [ 289.010158][ T1823] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 289.088471][ T1823] usb 3-1: USB disconnect, device number 3 [ 289.103831][ T5230] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 289.113080][ T5230] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 289.120711][ T5230] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 289.130278][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 289.142479][ T5230] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 289.153606][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.258638][ T5230] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 289.267859][ T5230] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 289.276333][ T5230] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 289.286291][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 289.298692][ T5230] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 289.313206][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.325989][ T10] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0003/input/input8 [ 289.402873][ T5230] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 289.414711][ T5230] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 289.423317][ T5230] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 289.432883][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 289.433641][ T10] sony 0003:054C:03D5.0003: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 289.444748][ T5230] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 289.444936][ T5230] usb 2-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.540334][ T5230] usb 2-1: string descriptor 0 read error: -22 [ 289.547443][ T5230] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 289.556970][ T5230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.847696][ T5230] adutux 2-1:246.0: interrupt endpoints not found [ 289.943808][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.015171][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.075865][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.142849][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.186566][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.256052][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.613987][ T5230] usb 2-1: USB disconnect, device number 5 [ 291.242616][ T2623] usb 4-1: USB disconnect, device number 4 [ 291.565552][ T5954] vivid-000: disconnect [ 292.009659][ T5951] vivid-000: reconnect [ 293.686232][ T5979] netlink: 'syz.1.245': attribute type 4 has an invalid length. [ 293.786714][ T5979] netlink: 'syz.1.245': attribute type 4 has an invalid length. [ 294.161966][ T2623] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 294.259495][ T4551] ===================================================== [ 294.267108][ T4551] BUG: KMSAN: uninit-value in l2cap_recv_frame+0xc9c5/0x18b10 [ 294.275106][ T4551] l2cap_recv_frame+0xc9c5/0x18b10 [ 294.280434][ T4551] l2cap_recv_acldata+0xdd9/0x2ac0 [ 294.282202][ T5227] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 294.285914][ T4551] hci_rx_work+0xb38/0x1130 [ 294.297867][ T4551] process_scheduled_works+0xae0/0x1c40 [ 294.303767][ T4551] worker_thread+0xea5/0x1520 [ 294.308799][ T4551] kthread+0x3dd/0x540 [ 294.313255][ T4551] ret_from_fork+0x6d/0x90 [ 294.317826][ T4551] ret_from_fork_asm+0x1a/0x30 [ 294.326049][ T4551] [ 294.328459][ T4551] Uninit was created at: [ 294.333951][ T4551] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 294.340042][ T4551] kmalloc_reserve+0x13d/0x4a0 [ 294.345142][ T4551] __alloc_skb+0x363/0x7b0 [ 294.349735][ T4551] vhci_write+0x128/0x910 [ 294.354389][ T4551] vfs_write+0xb2f/0x1550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.358888][ T4551] ksys_write+0x20f/0x4c0 [ 294.363492][ T4551] __ia32_sys_write+0x91/0xe0 [ 294.368350][ T4551] ia32_sys_call+0x2e34/0x40d0 [ 294.374929][ T4551] __do_fast_syscall_32+0xb0/0x110 [ 294.380254][ T4551] do_fast_syscall_32+0x38/0x80 [ 294.385627][ T4551] do_SYSENTER_32+0x1f/0x30 [ 294.390321][ T4551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.397142][ T4551] [ 294.399593][ T4551] CPU: 1 UID: 0 PID: 4551 Comm: kworker/u9:1 Not tainted 6.11.0-rc3-syzkaller-00221-g670c12ce09a8 #0 [ 294.410778][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 294.421119][ T4551] Workqueue: hci2 hci_rx_work [ 294.429014][ T4551] ===================================================== [ 294.437059][ T4551] Disabling lock debugging due to kernel taint [ 294.443431][ T4551] Kernel panic - not syncing: kmsan.panic set ... [ 294.449982][ T4551] CPU: 1 UID: 0 PID: 4551 Comm: kworker/u9:1 Tainted: G B 6.11.0-rc3-syzkaller-00221-g670c12ce09a8 #0 [ 294.462526][ T4551] Tainted: [B]=BAD_PAGE [ 294.466782][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 294.476992][ T4551] Workqueue: hci2 hci_rx_work [ 294.481906][ T4551] Call Trace: [ 294.485301][ T4551] [ 294.488336][ T4551] dump_stack_lvl+0x216/0x2d0 [ 294.493226][ T4551] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 294.499264][ T4551] dump_stack+0x1e/0x30 [ 294.503617][ T4551] panic+0x4e2/0xcd0 [ 294.507707][ T4551] ? kmsan_get_metadata+0xe1/0x1c0 [ 294.513051][ T4551] kmsan_report+0x2c7/0x2d0 [ 294.517761][ T4551] ? __msan_warning+0x95/0x120 [ 294.522883][ T4551] ? l2cap_recv_frame+0xc9c5/0x18b10 [ 294.528384][ T4551] ? l2cap_recv_acldata+0xdd9/0x2ac0 [ 294.533886][ T4551] ? hci_rx_work+0xb38/0x1130 [ 294.538772][ T4551] ? process_scheduled_works+0xae0/0x1c40 [ 294.544693][ T4551] ? worker_thread+0xea5/0x1520 [ 294.549743][ T4551] ? kthread+0x3dd/0x540 [ 294.554280][ T4551] ? ret_from_fork+0x6d/0x90 [ 294.559039][ T4551] ? ret_from_fork_asm+0x1a/0x30 [ 294.564213][ T4551] ? kmem_cache_free+0x631/0xbb0 [ 294.569361][ T4551] ? __kfree_skb+0x1f6/0x250 [ 294.574151][ T4551] ? kmsan_get_metadata+0x13e/0x1c0 [ 294.579572][ T4551] ? kmsan_get_metadata+0x13e/0x1c0 [ 294.584979][ T4551] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 294.591016][ T4551] ? kmsan_get_metadata+0x13e/0x1c0 [ 294.596435][ T4551] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 294.602467][ T4551] __msan_warning+0x95/0x120 [ 294.607248][ T4551] l2cap_recv_frame+0xc9c5/0x18b10 [ 294.612605][ T4551] ? __update_load_avg_cfs_rq+0x121/0x10e0 [ 294.618633][ T4551] ? kmsan_get_metadata+0x13e/0x1c0 [ 294.624038][ T4551] ? kmsan_get_metadata+0x13e/0x1c0 [ 294.629440][ T4551] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 294.635477][ T4551] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 294.641034][ T4551] ? filter_irq_stacks+0x60/0x1a0 [ 294.646237][ T4551] ? kmsan_get_metadata+0x13e/0x1c0 [ 294.651641][ T4551] ? kmsan_get_metadata+0x13e/0x1c0 [ 294.657041][ T4551] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 294.663573][ T4551] ? kmsan_get_metadata+0x13e/0x1c0 [ 294.668980][ T4551] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 294.675009][ T4551] l2cap_recv_acldata+0xdd9/0x2ac0 [ 294.680357][ T4551] hci_rx_work+0xb38/0x1130 [ 294.685100][ T4551] ? __pfx_hci_rx_work+0x10/0x10 [ 294.690253][ T4551] process_scheduled_works+0xae0/0x1c40 [ 294.696044][ T4551] worker_thread+0xea5/0x1520 [ 294.700928][ T4551] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 294.706971][ T4551] kthread+0x3dd/0x540 [ 294.711241][ T4551] ? __pfx_worker_thread+0x10/0x10 [ 294.716568][ T4551] ? __pfx_kthread+0x10/0x10 [ 294.721368][ T4551] ret_from_fork+0x6d/0x90 [ 294.725962][ T4551] ? __pfx_kthread+0x10/0x10 [ 294.730757][ T4551] ret_from_fork_asm+0x1a/0x30 [ 294.735738][ T4551] [ 294.739170][ T4551] Kernel Offset: disabled [ 294.743550][ T4551] Rebooting in 86400 seconds..