last executing test programs: 24.433900979s ago: executing program 4 (id=620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0xd, 0x20, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "241baf34ea9e"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0xd5, 0x76}, {0x6, 0x24, 0x1a, 0x5, 0x1a}, [@country_functional={0xc, 0x24, 0x7, 0x3e, 0x6, [0x12, 0x400, 0x8]}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x72, 0xf0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x1, 0xd}}}}}}}]}}, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unlink(&(0x7f0000000280)='./file1\x00') r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$loop(0x0, 0xf01c, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) getegid() syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x800, 0x70bd26, 0x20000000, {0x1d, 0x1, 0x3}, [@CGW_CS_XOR={0x8, 0x5, {0x1, 0x5, 0xfffffffffffffffa, 0x7}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x4}}]}, 0x34}}, 0x0) 22.073604383s ago: executing program 1 (id=624): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x4, 0x101801) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x14) read$FUSE(r2, &(0x7f00000057c0)={0x2020}, 0x18) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 19.542761014s ago: executing program 1 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x5, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x60840, 0x0) 18.980782078s ago: executing program 4 (id=631): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 17.853301462s ago: executing program 4 (id=632): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 17.601732963s ago: executing program 1 (id=634): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 15.039971178s ago: executing program 3 (id=636): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2303920422c0212408501020301090224008d1a0d"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14.802278684s ago: executing program 2 (id=638): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000", @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 14.301405666s ago: executing program 4 (id=639): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, 0x0) chdir(0x0) clock_adjtime(0xa, &(0x7f0000004dc0)={0xb, 0x45, 0x8f0f, 0x2, 0x9, 0x7cca, 0x5, 0xc632, 0x2, 0x4, 0x7c, 0x7, 0x5, 0xfff, 0x8001, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0xffffffffffffff00, 0x200000000000, 0xa5, 0x3c0000000000000, 0x9011, 0x10, 0x18}) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001180)={{}, "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"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) close_range(r0, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0x81}) 13.340451227s ago: executing program 4 (id=640): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9400000009060101000000000000000003000004740008800c00078008000a4000000433100007800a001100aaaaaaaaaabb00001c0007801800148014000240ff0100000000000000000000010000010c00078008001c4000000005100007800c0002800800014064010101100007800c00184000000000000000080c00078008001c4000000ec30c000780060004404e200000"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, &(0x7f00000000c0)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote, 0x4}, 0x4d) 12.67644097s ago: executing program 1 (id=641): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x0) 11.54374994s ago: executing program 3 (id=642): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.475222426s ago: executing program 1 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4889) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 9.892991974s ago: executing program 4 (id=647): timerfd_create(0x7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.846275733s ago: executing program 2 (id=648): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') clock_adjtime(0xa, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001180)={{}, "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"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) close_range(r0, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0x81}) 8.790318996s ago: executing program 2 (id=650): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 7.923226225s ago: executing program 0 (id=651): socket(0x18, 0x803, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'pimreg0\x00', 0x0}) 6.409738462s ago: executing program 2 (id=652): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) timer_create(0x0, 0x0, 0x0) r6 = syz_open_procfs(r3, 0x0) write$FUSE_IOCTL(r6, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 6.342007758s ago: executing program 3 (id=653): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x0) 6.308652536s ago: executing program 0 (id=654): syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xdc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) 5.089341918s ago: executing program 0 (id=655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 4.489816268s ago: executing program 0 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x5, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x60840, 0x0) 4.21361983s ago: executing program 2 (id=657): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) timer_create(0x0, 0x0, 0x0) r5 = syz_open_procfs(r3, 0x0) write$FUSE_IOCTL(r5, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_getattr(r3, &(0x7f0000000c00)={0x38}, 0x38, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) unshare(0x40020000) 4.211623156s ago: executing program 3 (id=658): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9400000009060101000000000000000003000004740008800c00078008000a4000000433100007800a001100aaaaaaaaaabb00001c0007801800148014000240ff0100000000000000000000010000010c00078008001c4000000005100007800c0002800800014064010101100007800c00184000000000000000080c00078008001c4000000ec30c000780060004404e200000"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, &(0x7f00000000c0)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote, 0x4}, 0x4d) 2.998112675s ago: executing program 0 (id=659): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0xffff, 0x80600}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000029c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="fd55000007000000000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000004000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32, @ANYRES32, @ANYBLOB="008000000080ff01000000000100000000000000a8d00000000000000a0000005e9a00000000060000000000000002000000000000005f000000000000b84569f325c16eb2da1dcb0004000000000000000400000001000000000000000000000007000000000000000010000000000000", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec5900000000000005000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=0xee00, @ANYRES32], 0x658) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 1.577205241s ago: executing program 2 (id=660): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 1.078388521s ago: executing program 3 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x60840, 0x0) 765.271094ms ago: executing program 0 (id=662): socket(0x18, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) 708.779198ms ago: executing program 1 (id=663): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8008801) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="11", 0x1}], 0x1}}], 0x1, 0x0) 0s ago: executing program 3 (id=664): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, 0x0}, 0x78) socket(0x2, 0x3, 0x67) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) kernel console output (not intermixed with test programs): ctive [ 80.174691][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.181701][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.207747][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.219488][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.226774][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.252769][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.307929][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.314898][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.342088][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.367150][ T5852] team0: Port device team_slave_0 added [ 80.377413][ T5852] team0: Port device team_slave_1 added [ 80.459380][ T5834] hsr_slave_0: entered promiscuous mode [ 80.466751][ T5834] hsr_slave_1: entered promiscuous mode [ 80.477723][ T5845] hsr_slave_0: entered promiscuous mode [ 80.483860][ T5845] hsr_slave_1: entered promiscuous mode [ 80.490593][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.498599][ T5845] Cannot create hsr debugfs directory [ 80.507156][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.514109][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.540147][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.552707][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.560076][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.587549][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.655035][ T5839] hsr_slave_0: entered promiscuous mode [ 80.661694][ T5839] hsr_slave_1: entered promiscuous mode [ 80.668129][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.675754][ T5839] Cannot create hsr debugfs directory [ 80.770873][ T5833] hsr_slave_0: entered promiscuous mode [ 80.777588][ T5833] hsr_slave_1: entered promiscuous mode [ 80.783610][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.791229][ T5833] Cannot create hsr debugfs directory [ 80.921757][ T5852] hsr_slave_0: entered promiscuous mode [ 80.930059][ T5852] hsr_slave_1: entered promiscuous mode [ 80.936262][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.943824][ T5852] Cannot create hsr debugfs directory [ 81.412764][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.445963][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.459135][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.479173][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.531864][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.558781][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.597038][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.627102][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.736550][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.773599][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.792321][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.831392][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.945613][ T5846] Bluetooth: hci1: command tx timeout [ 81.948455][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.951085][ T5836] Bluetooth: hci0: command tx timeout [ 81.969914][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.007098][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.020152][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.026958][ T5836] Bluetooth: hci2: command tx timeout [ 82.100859][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.108582][ T5836] Bluetooth: hci4: command tx timeout [ 82.115344][ T5836] Bluetooth: hci3: command tx timeout [ 82.129726][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.147708][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.190669][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.201819][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.247877][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.302093][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.309543][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.344455][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.359725][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.366873][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.424968][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.474391][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.481567][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.491534][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.498679][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.562137][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.579445][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.642717][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.683669][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.697888][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.744707][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.751907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.768817][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.788371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.795566][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.838518][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.845724][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.861599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.868811][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.880622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.888205][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.919580][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.926803][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.092138][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.264160][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.370548][ T5845] veth0_vlan: entered promiscuous mode [ 83.439313][ T5845] veth1_vlan: entered promiscuous mode [ 83.521995][ T5833] veth0_vlan: entered promiscuous mode [ 83.561220][ T5833] veth1_vlan: entered promiscuous mode [ 83.590553][ T5845] veth0_macvtap: entered promiscuous mode [ 83.621252][ T5845] veth1_macvtap: entered promiscuous mode [ 83.668900][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.692627][ T5833] veth0_macvtap: entered promiscuous mode [ 83.721401][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.743313][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.760620][ T5833] veth1_macvtap: entered promiscuous mode [ 83.790377][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.810208][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.829240][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.861860][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.883985][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.893701][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.904937][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.913789][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.969705][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.981265][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.990346][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.999550][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.022117][ T5852] veth0_vlan: entered promiscuous mode [ 84.035705][ T5846] Bluetooth: hci1: command tx timeout [ 84.041231][ T5836] Bluetooth: hci0: command tx timeout [ 84.084138][ T5852] veth1_vlan: entered promiscuous mode [ 84.106024][ T5836] Bluetooth: hci2: command tx timeout [ 84.122996][ T5839] veth0_vlan: entered promiscuous mode [ 84.173181][ T5839] veth1_vlan: entered promiscuous mode [ 84.186391][ T5836] Bluetooth: hci3: command tx timeout [ 84.191953][ T5846] Bluetooth: hci4: command tx timeout [ 84.245769][ T5852] veth0_macvtap: entered promiscuous mode [ 84.262337][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.273568][ T5852] veth1_macvtap: entered promiscuous mode [ 84.292081][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.322972][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.333518][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.343835][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.379943][ T5839] veth0_macvtap: entered promiscuous mode [ 84.394991][ T5839] veth1_macvtap: entered promiscuous mode [ 84.433459][ T5834] veth0_vlan: entered promiscuous mode [ 84.446202][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.461237][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.465671][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.471644][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.478566][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.494615][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.503646][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.526435][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.536854][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.553804][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.562148][ T5834] veth1_vlan: entered promiscuous mode [ 84.580299][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.618482][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.626782][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.632109][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.651870][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.660847][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.798711][ T5834] veth0_macvtap: entered promiscuous mode [ 84.863431][ T5834] veth1_macvtap: entered promiscuous mode [ 84.898438][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.913910][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.926211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.935208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.943476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.952872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.961658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.970964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.986243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.995528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 85.003843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 85.191011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.124110][ T5846] Bluetooth: hci0: command tx timeout [ 86.133465][ T5836] Bluetooth: hci1: command tx timeout [ 86.186978][ T5836] Bluetooth: hci2: command tx timeout [ 86.448372][ T5836] Bluetooth: hci4: command tx timeout [ 86.453889][ T5836] Bluetooth: hci3: command tx timeout [ 87.111226][ T978] cfg80211: failed to load regulatory.db [ 87.680160][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.975239][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.002066][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.026401][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.072555][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.092081][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.227611][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.234972][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.248147][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.258370][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.332722][ T5975] mkiss: ax0: crc mode is auto. [ 88.409982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.449255][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.380851][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.965008][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.355482][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 90.844444][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.857831][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.886325][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.441388][ T6000] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 91.808794][ T5998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.877936][ T6008] ubi31: attaching mtd0 [ 91.911135][ T6008] ubi31: scanning is finished [ 91.915984][ T6008] ubi31: empty MTD device detected [ 92.507766][ T5998] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.918976][ T5998] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.084445][ T6008] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 93.198080][ T5998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.207515][ T5998] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.157077][ T5998] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.425189][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.803010][ T6022] mkiss: ax0: crc mode is auto. [ 94.824381][ T5998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.850137][ T5998] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.664415][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.739482][ T5998] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.549405][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.610669][ T5998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.995322][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.018518][ T5998] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.835999][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.425703][ T5998] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.446821][ T6041] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 98.459679][ T6041] batman_adv: batadv0: Adding interface: team0 [ 98.465877][ T6041] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.491042][ T6041] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 98.589037][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.634593][ T6041] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 98.642361][ T6041] netlink: 2 bytes leftover after parsing attributes in process `syz.1.18'. [ 98.651140][ T6041] team0: entered promiscuous mode [ 98.656186][ T6041] team_slave_0: entered promiscuous mode [ 98.661941][ T6041] team_slave_1: entered promiscuous mode [ 98.669010][ T6041] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.675780][ T6041] batman_adv: batadv0: Interface activated: team0 [ 98.682220][ T6041] batman_adv: batadv0: Interface deactivated: team0 [ 98.688860][ T6041] batman_adv: batadv0: Removing interface: team0 [ 98.695367][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.759574][ T6041] bridge0: port 3(team0) entered blocking state [ 98.766073][ T6041] bridge0: port 3(team0) entered disabled state [ 98.772424][ T6041] team0: entered allmulticast mode [ 98.777588][ T6041] team_slave_0: entered allmulticast mode [ 98.783293][ T6041] team_slave_1: entered allmulticast mode [ 98.790910][ T6041] bridge0: port 3(team0) entered blocking state [ 98.797318][ T6041] bridge0: port 3(team0) entered forwarding state [ 98.816480][ T5998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.865191][ T5998] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.909143][ T5998] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.125149][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.069319][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.438904][ T6074] ubi31: attaching mtd0 [ 100.452382][ T6074] ubi31: scanning is finished [ 101.015410][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 101.021526][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.171267][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.475001][ T6074] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 101.552865][ T6076] Zero length message leads to an empty skb [ 101.803030][ T6058] mmap: syz.0.21 (6058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.471980][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 103.087729][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 103.088295][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.204821][ T6093] netlink: 'syz.3.28': attribute type 10 has an invalid length. [ 104.477376][ T6093] batman_adv: batadv0: Adding interface: team0 [ 104.518987][ T6095] netlink: 'syz.3.28': attribute type 10 has an invalid length. [ 104.609982][ T6093] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.684062][ T6095] netlink: 2 bytes leftover after parsing attributes in process `syz.3.28'. [ 104.973760][ T6093] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 105.205367][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 105.338846][ T5927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.348482][ T6095] team0: entered promiscuous mode [ 105.353802][ T6095] team_slave_0: entered promiscuous mode [ 105.362214][ T6095] team_slave_1: entered promiscuous mode [ 105.381964][ T6095] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.391794][ T6095] batman_adv: batadv0: Interface activated: team0 [ 105.398926][ T6095] batman_adv: batadv0: Interface deactivated: team0 [ 105.406156][ T6095] batman_adv: batadv0: Removing interface: team0 [ 105.611142][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 105.722005][ T5927] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 105.825773][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 105.885722][ T5927] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.951637][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 105.973888][ T6095] bridge0: port 3(team0) entered blocking state [ 106.003657][ T5927] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 106.242598][ T6095] bridge0: port 3(team0) entered disabled state [ 106.613629][ T5927] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.658613][ T6095] team0: entered allmulticast mode [ 106.664603][ T5927] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.687459][ T6095] team_slave_0: entered allmulticast mode [ 106.709961][ T6095] team_slave_1: entered allmulticast mode [ 106.722894][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.788286][ T6095] bridge0: port 3(team0) entered blocking state [ 106.794736][ T6095] bridge0: port 3(team0) entered forwarding state [ 106.989293][ T59] batman_adv: batadv_iv_ogm_emit: mesh interface switch for queued OGM [ 107.135197][ T5927] usb 3-1: GET_CAPABILITIES returned 0 [ 107.140794][ T5927] usbtmc 3-1:16.0: can't read capabilities [ 107.225192][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 107.322704][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 107.332655][ T6106] usbtmc 3-1:16.0: Unable to send data, error -71 [ 107.345050][ T5927] usb 3-1: USB disconnect, device number 2 [ 110.622659][ T6137] fuse: Unknown parameter 'fd0x0000000000000004' [ 111.603935][ T6146] gretap0: entered promiscuous mode [ 111.609596][ T6146] vlan2: entered promiscuous mode [ 113.140691][ T6164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.148382][ T6177] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.266019][ T5919] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.479132][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 117.499373][ T5919] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 117.525061][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 117.577315][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.607713][ T6200] fuse: Unknown parameter 'fd0x0000000000000004' [ 117.642367][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 118.251356][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 118.262611][ T5919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.281743][ T5919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.291477][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.348914][ T6201] block nbd0: server does not support multiple connections per device. [ 118.542612][ T5919] usb 5-1: GET_CAPABILITIES returned 0 [ 118.554110][ T5919] usbtmc 5-1:16.0: can't read capabilities [ 118.656229][ T6201] block nbd0: shutting down sockets [ 118.761931][ T5919] usb 5-1: USB disconnect, device number 2 [ 118.885197][ T978] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.075525][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 119.082361][ T978] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 119.122245][ T978] usb 2-1: config 0 has no interface number 0 [ 119.141119][ T978] usb 2-1: config 0 interface 29 has no altsetting 0 [ 119.172054][ T978] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 119.186185][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.203161][ T978] usb 2-1: Product: syz [ 119.210425][ T978] usb 2-1: Manufacturer: syz [ 119.215052][ T978] usb 2-1: SerialNumber: syz [ 119.231594][ T978] usb 2-1: config 0 descriptor?? [ 119.582264][ T978] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 119.617686][ T978] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 119.688885][ T6219] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.699255][ T6219] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.725550][ T6219] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.734427][ T6219] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.743409][ T6219] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 119.846414][ T978] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 120.096909][ T978] usb 2-1: USB disconnect, device number 2 [ 121.877700][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 121.885528][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.377352][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.384218][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.384294][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.442701][ T6232] tmpfs: Bad value for 'mpol' [ 124.930981][ T6247] ubi31: attaching mtd0 [ 124.937109][ T6247] ubi31: scanning is finished [ 125.597379][ T6247] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 126.255694][ T6256] fuse: Unknown parameter 'fd0x0000000000000004' [ 126.554282][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 128.295239][ T978] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.455161][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 128.460382][ T6273] syz.0.72 (6273) used greatest stack depth: 18808 bytes left [ 128.493747][ T978] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 128.502334][ T978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 128.550337][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.790243][ T978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 128.811375][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 128.824777][ T978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.594468][ T6289] tmpfs: Bad value for 'mpol' [ 130.325847][ T978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.353192][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.746877][ T6299] ubi31: attaching mtd0 [ 130.760300][ T6299] ubi31: scanning is finished [ 131.671661][ T978] usb 5-1: can't set config #16, error -71 [ 131.689230][ T978] usb 5-1: USB disconnect, device number 3 [ 131.751792][ T6299] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 132.034887][ T6312] warning: `syz.4.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.417366][ T6319] vlan2: entered promiscuous mode [ 132.989294][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.998217][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.112795][ T6323] affs: No valid root block on device nullb0 [ 133.246635][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.82'. [ 137.445289][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.950920][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 138.372465][ T5891] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 138.392482][ T5891] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 138.394153][ T6367] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.421393][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.437782][ T5891] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 138.471635][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'. [ 138.805288][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 138.815905][ T6367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.824874][ T5891] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.437485][ T5891] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.446633][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.971967][ T6367] bond0: (slave rose0): Enslaving as an active interface with an up link [ 140.132739][ T6376] gretap0: entered promiscuous mode [ 140.138339][ T6376] vlan2: entered promiscuous mode [ 140.345395][ T5891] usb 1-1: usb_control_msg returned -71 [ 140.352938][ T5891] usbtmc 1-1:16.0: can't read capabilities [ 140.555216][ T5891] usb 1-1: USB disconnect, device number 2 [ 142.023796][ T6408] vlan2: entered promiscuous mode [ 143.716092][ T6419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.311868][ T6423] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 145.319787][ T6423] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 145.328163][ T6423] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 145.335918][ T6423] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 145.542335][ T6431] netlink: 'syz.0.109': attribute type 10 has an invalid length. [ 147.785916][ T6446] netlink: 'syz.0.109': attribute type 10 has an invalid length. [ 148.254884][ T6431] batman_adv: batadv0: Adding interface: team0 [ 148.340212][ T6446] netlink: 2 bytes leftover after parsing attributes in process `syz.0.109'. [ 148.525743][ T6431] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.551021][ T6431] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 149.284557][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.302086][ T6446] team0: entered promiscuous mode [ 149.307784][ T6446] team_slave_0: entered promiscuous mode [ 149.313713][ T6446] team_slave_1: entered promiscuous mode [ 149.332979][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.341386][ T6446] batman_adv: batadv0: Interface activated: team0 [ 149.350682][ T6446] batman_adv: batadv0: Interface deactivated: team0 [ 149.359777][ T6446] batman_adv: batadv0: Removing interface: team0 [ 149.435356][ T6457] affs: No valid root block on device nullb0 [ 149.474884][ T6446] bridge0: port 3(team0) entered blocking state [ 149.498436][ T6446] bridge0: port 3(team0) entered disabled state [ 149.507008][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 149.513844][ T5905] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 149.531685][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.116'. [ 149.542901][ T5905] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 149.554194][ T6446] team0: entered allmulticast mode [ 149.564935][ T6446] team_slave_0: entered allmulticast mode [ 149.571162][ T5905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.581700][ T6446] team_slave_1: entered allmulticast mode [ 149.606542][ T5905] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 149.662222][ T6446] bridge0: port 3(team0) entered blocking state [ 149.669104][ T6446] bridge0: port 3(team0) entered forwarding state [ 149.690625][ T5905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 149.824888][ T5905] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.260963][ T5905] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.326422][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.412696][ T5905] usb 2-1: can't set config #16, error -71 [ 150.470892][ T5905] usb 2-1: USB disconnect, device number 3 [ 150.868423][ T6479] gretap0: entered promiscuous mode [ 150.874342][ T6479] vlan2: entered promiscuous mode [ 154.109057][ T6505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.731388][ T6509] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.739682][ T6509] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 154.859995][ T6509] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.868129][ T6509] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 155.911518][ T6518] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 156.123237][ T6518] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.156169][ T6518] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 156.185548][ T5919] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.250808][ T6521] macvlan2: entered promiscuous mode [ 156.317744][ T6521] macvlan2: entered allmulticast mode [ 156.465444][ T6527] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.473979][ T6527] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 156.485004][ T6527] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.493231][ T6527] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 156.512392][ T6521] bond1: entered promiscuous mode [ 156.520282][ T6521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.555188][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 156.688879][ T5919] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 156.697225][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 156.796370][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 156.832954][ T6521] bond1: left promiscuous mode [ 156.838099][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 156.902813][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 156.962576][ T5919] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.067707][ T5919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.144769][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.916146][ T5919] usb 1-1: GET_CAPABILITIES returned 0 [ 158.006910][ T5919] usbtmc 1-1:16.0: can't read capabilities [ 159.237986][ T5919] usb 1-1: USB disconnect, device number 3 [ 160.574640][ T6560] vlan2: entered promiscuous mode [ 163.437007][ T6578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.716466][ T5935] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.872149][ T6617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.935196][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 168.072608][ T5935] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 168.193088][ T5935] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 168.469837][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.529315][ T5935] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 168.565913][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 168.592210][ T5935] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.607912][ T5935] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.643362][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.725657][ T6623] nbd1: detected capacity change from 0 to 1024 [ 168.734569][ T6619] nbd2: detected capacity change from 0 to 1024 [ 168.743381][ T5984] block nbd2: Send control failed (result -89) [ 168.752287][ T6339] block nbd1: Send control failed (result -89) [ 168.765331][ T6339] block nbd1: Request send failed, requeueing [ 168.775749][ T5984] block nbd2: Request send failed, requeueing [ 168.804065][ T5847] block nbd2: Receive control failed (result -32) [ 168.805275][ T6503] block nbd2: Dead connection, failed to find a fallback [ 168.817048][ T6624] block nbd0: server does not support multiple connections per device. [ 168.818550][ T6503] block nbd2: shutting down sockets [ 168.831602][ T6503] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.845260][ T6503] Buffer I/O error on dev nbd2, logical block 0, async page read [ 168.855927][ T6503] block nbd1: Dead connection, failed to find a fallback [ 168.862992][ T6503] block nbd1: shutting down sockets [ 168.868909][ T6503] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.880701][ T6503] Buffer I/O error on dev nbd1, logical block 0, async page read [ 168.889016][ T5935] usb 5-1: GET_CAPABILITIES returned 0 [ 168.895209][ T6339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.915790][ T5984] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.924851][ T5984] Buffer I/O error on dev nbd2, logical block 0, async page read [ 168.932768][ T5935] usbtmc 5-1:16.0: can't read capabilities [ 168.938771][ T6339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 168.948481][ T6339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.967855][ T5984] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.975150][ T6339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.013119][ T6339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.022670][ T6339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.034417][ T6339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.043605][ T6339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.051641][ T6339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.074387][ T5984] Buffer I/O error on dev nbd2, logical block 0, async page read [ 169.075794][ T6624] block nbd0: shutting down sockets [ 169.087931][ T6339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.101703][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 169.111449][ T5984] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.111567][ T6608] usbtmc 5-1:16.0: Unable to send data, error -71 [ 169.127542][ T6339] Buffer I/O error on dev nbd1, logical block 0, async page read [ 169.156759][ T6339] ldm_validate_partition_table(): Disk read failed. [ 169.188209][ T5984] ldm_validate_partition_table(): Disk read failed. [ 169.231349][ T24] usb 5-1: USB disconnect, device number 4 [ 169.233578][ T6339] Dev nbd1: unable to read RDB block 0 [ 169.239840][ T5984] Dev nbd2: unable to read RDB block 0 [ 169.274984][ T6339] nbd1: unable to read partition table [ 169.297901][ T5984] nbd2: unable to read partition table [ 169.307300][ T6627] ldm_validate_partition_table(): Disk read failed. [ 169.324727][ T6627] Dev nbd1: unable to read RDB block 0 [ 169.355595][ T6629] ldm_validate_partition_table(): Disk read failed. [ 169.390947][ T6629] Dev nbd2: unable to read RDB block 0 [ 169.397934][ T6627] nbd1: unable to read partition table [ 169.411204][ T6629] nbd2: unable to read partition table [ 169.429280][ T6339] ldm_validate_partition_table(): Disk read failed. [ 169.457544][ T6339] Dev nbd1: unable to read RDB block 0 [ 169.458537][ T5984] ldm_validate_partition_table(): Disk read failed. [ 169.471465][ T6339] nbd1: unable to read partition table [ 169.498166][ T5984] Dev nbd2: unable to read RDB block 0 [ 169.505377][ T5984] nbd2: unable to read partition table [ 170.632174][ T6643] syz.2.154 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 174.420575][ T6668] tmpfs: Bad value for 'mpol' [ 178.263592][ T6689] affs: No valid root block on device nullb0 [ 178.735329][ T6703] ubi31: attaching mtd0 [ 178.741343][ T6703] ubi31: scanning is finished [ 179.451723][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.162'. [ 179.544609][ T6703] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 180.492547][ T6719] gretap0: entered promiscuous mode [ 180.497920][ T6719] vlan2: entered promiscuous mode [ 183.885508][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'. [ 184.455490][ T6752] team0: No ports can be present during mode change [ 186.285289][ T6772] nbd3: detected capacity change from 0 to 1024 [ 186.293303][ T5984] block nbd3: Send control failed (result -89) [ 186.322623][ T5984] block nbd3: Request send failed, requeueing [ 186.346001][ T5836] block nbd3: Receive control failed (result -32) [ 186.346088][ T6503] block nbd3: Dead connection, failed to find a fallback [ 186.355755][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 186.360655][ T6503] block nbd3: shutting down sockets [ 186.374743][ T6503] blk_print_req_error: 96 callbacks suppressed [ 186.374757][ T6503] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.390092][ T6503] buffer_io_error: 96 callbacks suppressed [ 186.390100][ T6503] Buffer I/O error on dev nbd3, logical block 0, async page read [ 186.434018][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.485354][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 186.511160][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.555261][ T5919] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.715627][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 186.730894][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.740049][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 186.749298][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.865318][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 186.933285][ T5919] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 186.942795][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 186.994731][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 187.090796][ T6792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.091528][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.114746][ T6792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.130234][ T6792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.146590][ T6792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.161724][ T6792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.195383][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.204528][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.212511][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.320196][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 187.325150][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.331773][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 187.349467][ T5919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.362955][ T5919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.372138][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.185280][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.206406][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 188.215170][ T5984] ldm_validate_partition_table(): Disk read failed. [ 188.221867][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.235274][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 188.243176][ T5984] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.346801][ T5984] Buffer I/O error on dev nbd3, logical block 0, async page read [ 188.355064][ T5984] Dev nbd3: unable to read RDB block 0 [ 188.362838][ T5984] nbd3: unable to read partition table [ 188.457554][ T5984] ldm_validate_partition_table(): Disk read failed. [ 188.464841][ T5984] Dev nbd3: unable to read RDB block 0 [ 188.479101][ T5984] nbd3: unable to read partition table [ 188.490260][ T5205] ldm_validate_partition_table(): Disk read failed. [ 188.518299][ T5205] Dev nbd3: unable to read RDB block 0 [ 188.526263][ T5205] nbd3: unable to read partition table [ 188.539608][ T5919] usb 5-1: GET_CAPABILITIES returned 0 [ 188.959158][ T5919] usbtmc 5-1:16.0: can't read capabilities [ 188.985235][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.030683][ T5919] usb 5-1: USB disconnect, device number 5 [ 189.147718][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.147730][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.226071][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 189.226594][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.188800][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195173][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.186312][ T6840] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 196.259348][ T6845] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 196.274271][ T6845] netlink: 2 bytes leftover after parsing attributes in process `syz.1.192'. [ 196.633703][ T6840] bridge0: port 3(team0) entered disabled state [ 196.703404][ T6840] team0: left allmulticast mode [ 196.794672][ T6840] team_slave_0: left allmulticast mode [ 197.074800][ T6840] team_slave_1: left allmulticast mode [ 197.205964][ T5935] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 197.254070][ T6840] team0: left promiscuous mode [ 197.337781][ T6840] team_slave_0: left promiscuous mode [ 197.354052][ T6840] team_slave_1: left promiscuous mode [ 197.360083][ T6840] bridge0: port 3(team0) entered disabled state [ 197.566716][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 197.613056][ T5935] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 197.621298][ T5935] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 197.865430][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 197.877966][ T6855] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 197.903961][ T5935] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 197.929678][ T6862] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 197.966252][ T6840] batman_adv: batadv0: Adding interface: team0 [ 197.972478][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 197.982980][ T6840] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.995452][ T5935] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.024812][ T6862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.198'. [ 198.085195][ T5935] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.094224][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.325566][ T6840] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 198.364463][ T5935] usb 3-1: GET_CAPABILITIES returned 0 [ 198.375221][ T5935] usbtmc 3-1:16.0: can't read capabilities [ 198.391272][ T6845] team0: entered promiscuous mode [ 198.406573][ T6845] team_slave_0: entered promiscuous mode [ 198.544185][ T6845] team_slave_1: entered promiscuous mode [ 198.902237][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.950617][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 198.961208][ T6854] usbtmc 3-1:16.0: Unable to send data, error -71 [ 198.969795][ T5927] usb 3-1: USB disconnect, device number 3 [ 199.301903][ T6845] batman_adv: batadv0: Interface activated: team0 [ 199.331237][ T6845] batman_adv: batadv0: Interface deactivated: team0 [ 199.339775][ T6845] batman_adv: batadv0: Removing interface: team0 [ 199.354042][ T6845] bridge0: port 3(team0) entered blocking state [ 199.408530][ T6845] bridge0: port 3(team0) entered disabled state [ 199.429456][ T6845] team0: entered allmulticast mode [ 199.438850][ T6845] team_slave_0: entered allmulticast mode [ 199.453705][ T6845] team_slave_1: entered allmulticast mode [ 199.478570][ T6845] bridge0: port 3(team0) entered blocking state [ 199.484930][ T6845] bridge0: port 3(team0) entered forwarding state [ 199.501413][ T6855] bridge0: port 3(team0) entered disabled state [ 199.512569][ T6855] team0: left allmulticast mode [ 199.517604][ T6855] team_slave_0: left allmulticast mode [ 199.523301][ T6855] team_slave_1: left allmulticast mode [ 199.531577][ T6855] team0: left promiscuous mode [ 199.536552][ T6855] team_slave_0: left promiscuous mode [ 199.542196][ T6855] team_slave_1: left promiscuous mode [ 199.548253][ T6855] bridge0: port 3(team0) entered disabled state [ 199.597062][ T6855] batman_adv: batadv0: Adding interface: team0 [ 199.606049][ T6855] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.747159][ T6855] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 200.054051][ T6862] team0: entered promiscuous mode [ 200.061721][ T6862] team_slave_0: entered promiscuous mode [ 200.072004][ T6862] team_slave_1: entered promiscuous mode [ 200.081604][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.098600][ T6862] batman_adv: batadv0: Interface activated: team0 [ 200.109797][ T6862] batman_adv: batadv0: Interface deactivated: team0 [ 200.118927][ T6862] batman_adv: batadv0: Removing interface: team0 [ 200.129532][ T6862] bridge0: port 3(team0) entered blocking state [ 200.138145][ T6862] bridge0: port 3(team0) entered disabled state [ 200.161081][ T6862] team0: entered allmulticast mode [ 200.319632][ T6862] team_slave_0: entered allmulticast mode [ 200.672460][ T6862] team_slave_1: entered allmulticast mode [ 200.684150][ T6862] bridge0: port 3(team0) entered blocking state [ 200.690514][ T6862] bridge0: port 3(team0) entered forwarding state [ 200.813152][ T6869] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 204.417939][ T6909] affs: No valid root block on device nullb0 [ 204.440730][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.211'. [ 205.091640][ T6922] netlink: 'syz.3.214': attribute type 10 has an invalid length. [ 205.417612][ T6925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.908011][ T6922] bridge0: port 3(team0) entered disabled state [ 205.914603][ T6922] team0: left allmulticast mode [ 205.936322][ T6922] team_slave_0: left allmulticast mode [ 206.108858][ T6926] netlink: 'syz.3.214': attribute type 10 has an invalid length. [ 206.128879][ T6926] netlink: 2 bytes leftover after parsing attributes in process `syz.3.214'. [ 207.113160][ T6939] affs: No valid root block on device nullb0 [ 207.407850][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.218'. [ 207.447963][ T6922] team_slave_1: left allmulticast mode [ 207.453434][ T6922] team0: left promiscuous mode [ 207.475862][ T6922] team_slave_0: left promiscuous mode [ 207.482433][ T6922] team_slave_1: left promiscuous mode [ 208.441394][ T6922] bridge0: port 3(team0) entered disabled state [ 209.554655][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 209.621871][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 209.655864][ T6922] batman_adv: batadv0: Adding interface: team0 [ 209.662136][ T6922] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.808578][ T6922] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 210.075250][ T6926] team0: entered promiscuous mode [ 210.095402][ T6926] team_slave_0: entered promiscuous mode [ 210.101271][ T6926] team_slave_1: entered promiscuous mode [ 210.146764][ T6926] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.168984][ T6926] batman_adv: batadv0: Interface activated: team0 [ 210.180585][ T6926] batman_adv: batadv0: Interface deactivated: team0 [ 210.551360][ T6926] batman_adv: batadv0: Removing interface: team0 [ 210.566158][ T6951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.691147][ T6951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.775226][ T6968] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 210.794340][ T6951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.804176][ T6926] bridge0: port 3(team0) entered blocking state [ 210.821976][ T6926] bridge0: port 3(team0) entered disabled state [ 210.873142][ T6926] team0: entered allmulticast mode [ 210.891680][ T6926] team_slave_0: entered allmulticast mode [ 210.900523][ T6971] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 210.915187][ T6926] team_slave_1: entered allmulticast mode [ 210.922324][ T6926] bridge0: port 3(team0) entered blocking state [ 210.928632][ T6926] bridge0: port 3(team0) entered forwarding state [ 210.939860][ T6971] netlink: 2 bytes leftover after parsing attributes in process `syz.1.224'. [ 210.954039][ T6951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.209271][ T6966] mkiss: ax0: crc mode is auto. [ 211.411839][ T6968] bridge0: port 3(team0) entered disabled state [ 211.441413][ T6951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.695192][ T5935] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.793913][ T6968] team0: left allmulticast mode [ 212.203748][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.415248][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 212.420822][ T6968] team_slave_0: left allmulticast mode [ 212.427913][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.438072][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.452743][ T5935] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 212.463545][ T6968] team_slave_1: left allmulticast mode [ 212.471706][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.556162][ T6968] team0: left promiscuous mode [ 212.564701][ T6968] team_slave_0: left promiscuous mode [ 212.580269][ T6968] team_slave_1: left promiscuous mode [ 212.590500][ T6968] bridge0: port 3(team0) entered disabled state [ 212.626902][ T5935] usb 5-1: config 0 descriptor?? [ 212.643751][ T5935] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 213.047381][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.053402][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.059443][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.190110][ T6968] batman_adv: batadv0: Adding interface: team0 [ 213.197158][ T6968] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.223010][ T6968] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 213.496416][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.545235][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 213.704250][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.071419][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.080070][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.360065][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.232'. [ 216.230746][ T5935] usb 5-1: USB disconnect, device number 6 [ 219.105612][ T7031] nbd4: detected capacity change from 0 to 1024 [ 219.125828][ T7032] block nbd4: Send control failed (result -89) [ 219.194426][ T7033] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 219.202553][ T7032] block nbd4: Request send failed, requeueing [ 219.219241][ T5836] block nbd4: Receive control failed (result -32) [ 219.242970][ T11] block nbd4: Dead connection, failed to find a fallback [ 219.255195][ T11] block nbd4: shutting down sockets [ 219.260779][ T11] blk_print_req_error: 43 callbacks suppressed [ 219.262353][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.280819][ T11] buffer_io_error: 43 callbacks suppressed [ 219.280831][ T11] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.288619][ T7033] batman_adv: batadv0: Adding interface: team0 [ 219.295876][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.310251][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.319120][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.328485][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.338523][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.348011][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.356692][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.366064][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.385307][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.415231][ T7033] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.451316][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.495224][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.514779][ T7033] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 219.555814][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.575285][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.594694][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.603243][ T7032] ldm_validate_partition_table(): Disk read failed. [ 219.610506][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.641356][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 219.822486][ T7032] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.847204][ T7041] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 219.859683][ T7041] netlink: 2 bytes leftover after parsing attributes in process `syz.2.239'. [ 220.527267][ T7032] Buffer I/O error on dev nbd4, logical block 0, async page read [ 220.703980][ T7032] Dev nbd4: unable to read RDB block 0 [ 220.751636][ T7041] team0: entered promiscuous mode [ 220.758406][ T7041] team_slave_0: entered promiscuous mode [ 220.766942][ T7041] team_slave_1: entered promiscuous mode [ 220.788156][ T7041] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.823260][ T7032] nbd4: unable to read partition table [ 221.252885][ T6339] ldm_validate_partition_table(): Disk read failed. [ 221.267803][ T6339] Dev nbd4: unable to read RDB block 0 [ 221.726939][ T6339] nbd4: unable to read partition table [ 221.746049][ T6339] ldm_validate_partition_table(): Disk read failed. [ 221.752921][ T6339] Dev nbd4: unable to read RDB block 0 [ 221.765912][ T6339] nbd4: unable to read partition table [ 221.839786][ T7041] batman_adv: batadv0: Interface activated: team0 [ 221.858464][ T7041] batman_adv: batadv0: Interface deactivated: team0 [ 221.865229][ T7041] batman_adv: batadv0: Removing interface: team0 [ 222.007450][ T7041] bridge0: port 3(team0) entered blocking state [ 222.013759][ T7041] bridge0: port 3(team0) entered disabled state [ 222.052191][ T7041] team0: entered allmulticast mode [ 222.060729][ T7041] team_slave_0: entered allmulticast mode [ 222.080465][ T7041] team_slave_1: entered allmulticast mode [ 222.126758][ T7041] bridge0: port 3(team0) entered blocking state [ 222.133145][ T7041] bridge0: port 3(team0) entered forwarding state [ 222.845205][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 225.534599][ T7088] block nbd0: server does not support multiple connections per device. [ 225.547922][ T7087] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 225.595643][ T7088] block nbd0: shutting down sockets [ 226.388963][ T7091] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 226.525886][ T7091] netlink: 2 bytes leftover after parsing attributes in process `syz.4.249'. [ 226.677702][ T7087] batman_adv: batadv0: Adding interface: team0 [ 226.683871][ T7087] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.735680][ T7087] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 227.969138][ T7091] team0: entered promiscuous mode [ 227.994725][ T7091] team_slave_0: entered promiscuous mode [ 228.230596][ T7091] team_slave_1: entered promiscuous mode [ 228.298326][ T7112] ubi31: attaching mtd0 [ 228.327907][ T7112] ubi31: scanning is finished [ 228.667631][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 228.797596][ T7114] affs: No valid root block on device nullb0 [ 229.035891][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'. [ 229.089670][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.121985][ T7091] batman_adv: batadv0: Interface activated: team0 [ 229.129387][ T7091] batman_adv: batadv0: Interface deactivated: team0 [ 229.137656][ T7091] batman_adv: batadv0: Removing interface: team0 [ 229.278998][ T7112] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 229.368386][ T7091] bridge0: port 3(team0) entered blocking state [ 229.376520][ T7091] bridge0: port 3(team0) entered disabled state [ 229.387039][ T7091] team0: entered allmulticast mode [ 229.392196][ T7091] team_slave_0: entered allmulticast mode [ 229.398459][ T7091] team_slave_1: entered allmulticast mode [ 229.417707][ T7091] bridge0: port 3(team0) entered blocking state [ 229.424113][ T7091] bridge0: port 3(team0) entered forwarding state [ 230.777025][ T7130] ubi31: attaching mtd0 [ 230.782249][ T7130] ubi31: scanning is finished [ 230.862454][ T7130] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 230.870057][ T7130] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 230.877396][ T7130] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 230.884406][ T7130] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 230.891865][ T7130] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 230.898771][ T7130] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 230.907464][ T7130] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2693228086 [ 230.917570][ T7130] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 230.988944][ T7134] ubi31: background thread "ubi_bgt31d" started, PID 7134 [ 232.381792][ T7154] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 233.378108][ T7159] affs: No valid root block on device nullb0 [ 237.107902][ T7185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.303185][ T7198] mkiss: ax0: crc mode is auto. [ 239.736128][ T7208] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 241.789457][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 242.587898][ T7233] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.596084][ T7233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 242.605383][ T7233] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.613208][ T7233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 243.353079][ T7240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.664351][ T7269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.322320][ T7279] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 248.439770][ T7287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.764544][ T7300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.270306][ T7326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.831055][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855469][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.120314][ T7343] tmpfs: Bad value for 'mpol' [ 257.931610][ T7352] serio: Serial port ptm0 [ 259.188076][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 259.862511][ T7356] mkiss: ax0: crc mode is auto. [ 262.301696][ T7363] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.311882][ T7363] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 262.385239][ T7363] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.393745][ T7363] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.420665][ T7363] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.985182][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.557507][ T7403] affs: No valid root block on device nullb0 [ 263.703571][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.327'. [ 263.951756][ T7407] serio: Serial port ptm0 [ 264.224557][ T7410] mkiss: ax0: crc mode is auto. [ 264.322024][ T7413] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 264.359441][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.366287][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 264.435324][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 264.508036][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 265.584327][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 265.624419][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.059094][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.340617][ T7427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.685221][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 271.139403][ T7459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.864884][ T7480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.092687][ T7470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 276.755654][ T7504] team0: left allmulticast mode [ 276.762836][ T7504] team_slave_0: left allmulticast mode [ 276.776310][ T7504] team_slave_1: left allmulticast mode [ 276.794515][ T7504] bridge0: port 3(team0) entered disabled state [ 276.859713][ T7504] bridge_slave_0: left allmulticast mode [ 276.875188][ T7504] bridge_slave_0: left promiscuous mode [ 276.905666][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.998338][ T7504] bridge_slave_1: left allmulticast mode [ 277.066767][ T7504] bridge_slave_1: left promiscuous mode [ 277.072572][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.308025][ T7504] bond0: (slave bond_slave_0): Releasing backup interface [ 278.613724][ T7504] bond0: (slave bond_slave_1): Releasing backup interface [ 278.877727][ T7504] team_slave_0: left promiscuous mode [ 278.934085][ T7504] team0: Port device team_slave_0 removed [ 278.961164][ T7504] team_slave_1: left promiscuous mode [ 278.982673][ T7504] team0: Port device team_slave_1 removed [ 279.001275][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.020781][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.043228][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.120868][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.872696][ T7530] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 280.942313][ T5849] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 281.225783][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 281.256977][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.474873][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.497262][ T5849] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 281.506404][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.617947][ T7555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.167283][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.368'. [ 282.269636][ T5849] usb 4-1: config 0 descriptor?? [ 282.357156][ T5849] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 282.378861][ T7560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.947444][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.967865][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.283160][ T7582] tmpfs: Bad value for 'mpol' [ 284.139400][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.869258][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.160012][ T5905] usb 4-1: USB disconnect, device number 2 [ 286.546527][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 286.744193][ T7606] netlink: 44 bytes leftover after parsing attributes in process `syz.1.376'. [ 287.249165][ T7607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.278332][ T7607] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.286352][ T7607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.298987][ T7607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.309179][ T7607] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 287.522806][ T7615] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.530927][ T7615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 287.545178][ T7615] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.553117][ T7615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 288.517162][ T7620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.380'. [ 289.014908][ T7623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.147163][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 289.317293][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 289.323367][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 289.329544][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 289.385258][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 290.322030][ T7629] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 291.589022][ T7645] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 293.674972][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 294.872855][ T7676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.945971][ T7676] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 294.952534][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 294.966991][ T7676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.455480][ T7676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.461612][ T7676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.933410][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.985203][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.992515][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 297.567696][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 297.567705][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 304.233513][ T7738] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 305.281367][ T5935] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 305.628225][ T7763] ubi: mtd0 is already attached to ubi31 [ 305.724145][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 305.740888][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.768225][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.801698][ T5935] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 305.811521][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.833955][ T5935] usb 4-1: config 0 descriptor?? [ 306.822173][ T5935] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 307.338105][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.363620][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.058348][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.073264][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.582777][ T7780] netlink: 'syz.4.410': attribute type 10 has an invalid length. [ 308.704532][ T7783] netlink: 'syz.4.410': attribute type 10 has an invalid length. [ 308.714232][ T7783] netlink: 2 bytes leftover after parsing attributes in process `syz.4.410'. [ 308.766541][ T7780] bridge0: port 3(team0) entered disabled state [ 308.773468][ T7780] team0: left allmulticast mode [ 308.778888][ T7780] team_slave_0: left allmulticast mode [ 308.784439][ T7780] team_slave_1: left allmulticast mode [ 308.790233][ T7780] team0: left promiscuous mode [ 308.795051][ T7780] team_slave_0: left promiscuous mode [ 308.800777][ T7780] team_slave_1: left promiscuous mode [ 308.806893][ T7780] bridge0: port 3(team0) entered disabled state [ 309.812746][ T7789] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 309.834701][ T7780] batman_adv: batadv0: Adding interface: team0 [ 309.857032][ T5905] usb 4-1: USB disconnect, device number 3 [ 309.868018][ T7780] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.895910][ T7780] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 310.110910][ T7783] team0: entered promiscuous mode [ 310.145297][ T7783] team_slave_0: entered promiscuous mode [ 310.179700][ T7783] team_slave_1: entered promiscuous mode [ 310.307642][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.318328][ T7783] batman_adv: batadv0: Interface activated: team0 [ 310.335064][ T7783] batman_adv: batadv0: Interface deactivated: team0 [ 310.342643][ T7783] batman_adv: batadv0: Removing interface: team0 [ 310.363160][ T7783] bridge0: port 3(team0) entered blocking state [ 310.372826][ T7783] bridge0: port 3(team0) entered disabled state [ 310.381408][ T7783] team0: entered allmulticast mode [ 310.389053][ T7783] team_slave_0: entered allmulticast mode [ 310.406318][ T7783] team_slave_1: entered allmulticast mode [ 310.428054][ T7783] bridge0: port 3(team0) entered blocking state [ 310.434479][ T7783] bridge0: port 3(team0) entered forwarding state [ 312.122927][ T7806] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 312.578596][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 315.081049][ T7832] IPv6: Can't replace route, no match found [ 317.185808][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.192154][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.914017][ T7849] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 321.710769][ T7876] IPv6: Can't replace route, no match found [ 321.780606][ T5919] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 322.045360][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 322.117448][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.238533][ T5919] usb 1-1: config 0 has no interfaces? [ 322.328700][ T5919] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 322.433396][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.618659][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 322.627857][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.687380][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.711574][ T5919] usb 1-1: Product: syz [ 322.721851][ T5919] usb 1-1: Manufacturer: syz [ 322.726568][ T5919] usb 1-1: SerialNumber: syz [ 322.766529][ T5919] usb 1-1: config 0 descriptor?? [ 324.755832][ T926] usb 1-1: USB disconnect, device number 4 [ 324.885970][ T7911] mkiss: ax0: crc mode is auto. [ 324.932789][ T7912] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 325.951783][ T7918] tmpfs: Bad value for 'mpol' [ 326.623341][ T7912] bridge0: port 3(team0) entered disabled state [ 326.643577][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 326.985264][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 327.243506][ T7920] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 327.275200][ T7920] netlink: 2 bytes leftover after parsing attributes in process `syz.3.442'. [ 327.285201][ T7912] team0: left allmulticast mode [ 327.290096][ T7912] team_slave_0: left allmulticast mode [ 327.295738][ T7912] team_slave_1: left allmulticast mode [ 327.301241][ T7912] team0: left promiscuous mode [ 327.310618][ T7912] team_slave_0: left promiscuous mode [ 327.660427][ T7934] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 327.668423][ T7934] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 327.681577][ T7934] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 327.689672][ T7934] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 327.947072][ T7912] team_slave_1: left promiscuous mode [ 327.952897][ T7912] bridge0: port 3(team0) entered disabled state [ 328.028992][ T7912] batman_adv: batadv0: Adding interface: team0 [ 328.036341][ T7912] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.066444][ T7912] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 328.181681][ T7920] team0: entered promiscuous mode [ 328.195203][ T7920] team_slave_0: entered promiscuous mode [ 328.201921][ T7920] team_slave_1: entered promiscuous mode [ 328.216634][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.223689][ T7920] batman_adv: batadv0: Interface activated: team0 [ 328.232701][ T7920] batman_adv: batadv0: Interface deactivated: team0 [ 328.241645][ T7920] batman_adv: batadv0: Removing interface: team0 [ 328.254972][ T7920] bridge0: port 3(team0) entered blocking state [ 328.271614][ T7920] bridge0: port 3(team0) entered disabled state [ 328.291976][ T7920] team0: entered allmulticast mode [ 328.308596][ T7920] team_slave_0: entered allmulticast mode [ 328.329011][ T7920] team_slave_1: entered allmulticast mode [ 328.347734][ T7920] bridge0: port 3(team0) entered blocking state [ 328.354064][ T7920] bridge0: port 3(team0) entered forwarding state [ 328.548930][ T7938] batman_adv: batadv0: Removing interface: team0 [ 328.580271][ T7938] bridge_slave_0: left allmulticast mode [ 328.599465][ T7938] bridge_slave_0: left promiscuous mode [ 328.632895][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.676041][ T7938] bridge_slave_1: left allmulticast mode [ 328.781371][ T7944] IPv6: Can't replace route, no match found [ 329.600527][ T7938] bridge_slave_1: left promiscuous mode [ 329.630197][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.645669][ T7929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.651810][ T7929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.670290][ T7929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.768938][ T7938] bond0: (slave bond_slave_0): Releasing backup interface [ 329.787095][ T7929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.875016][ T7929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.882105][ T7938] bond0: (slave bond_slave_1): Releasing backup interface [ 330.012511][ T7938] team0: Port device team_slave_0 removed [ 330.572346][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.797946][ T7938] team0: Port device team_slave_1 removed [ 330.804445][ T7938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.857676][ T7938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.724523][ T7959] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 331.735147][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.750517][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.865679][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 331.945310][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 332.914769][ T7968] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 333.243814][ T7983] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 333.261593][ T7983] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 333.271631][ T7983] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 333.279756][ T7983] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 334.737144][ T7993] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 335.174148][ T8006] /dev/nullb0: Can't open blockdev [ 336.015271][ T5843] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 336.620631][ T8018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.310016][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 337.315393][ T5919] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 337.341304][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.379853][ T5843] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.736761][ T5843] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.746726][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.755523][ T5843] usb 2-1: Product: syz [ 337.759714][ T5843] usb 2-1: Manufacturer: syz [ 337.766342][ T5843] usb 2-1: SerialNumber: syz [ 338.069860][ T5843] usb 2-1: config 0 descriptor?? [ 338.138363][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 338.247946][ T5843] usb 2-1: USB disconnect, device number 4 [ 339.035285][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.052483][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.259489][ T5919] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 339.269332][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.282982][ T5919] usb 5-1: config 0 descriptor?? [ 339.355166][ T5919] usb 5-1: can't set config #0, error -71 [ 339.365587][ T5919] usb 5-1: USB disconnect, device number 7 [ 339.644516][ T8044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.562197][ T8065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.644668][ T8080] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 345.934772][ T8099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.152819][ T8097] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 346.179615][ T8097] bridge0: port 3(team0) entered disabled state [ 346.187606][ T8097] team0: left allmulticast mode [ 346.192545][ T8097] team_slave_0: left allmulticast mode [ 346.198140][ T8097] team_slave_1: left allmulticast mode [ 346.219277][ T8097] team0: left promiscuous mode [ 346.224230][ T8097] team_slave_0: left promiscuous mode [ 346.231540][ T8109] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 346.240458][ T8097] team_slave_1: left promiscuous mode [ 346.248677][ T8109] netlink: 2 bytes leftover after parsing attributes in process `syz.3.480'. [ 346.276853][ T8097] bridge0: port 3(team0) entered disabled state [ 346.363969][ T8097] batman_adv: batadv0: Adding interface: team0 [ 346.379057][ T8097] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.462777][ T8097] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 346.476971][ T8109] team0: entered promiscuous mode [ 346.482134][ T8109] team_slave_0: entered promiscuous mode [ 346.583013][ T8109] team_slave_1: entered promiscuous mode [ 346.709539][ T8109] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.888657][ T8109] batman_adv: batadv0: Interface activated: team0 [ 347.907954][ T8109] batman_adv: batadv0: Interface deactivated: team0 [ 347.925365][ T8109] batman_adv: batadv0: Removing interface: team0 [ 348.336471][ T8109] bridge0: port 3(team0) entered blocking state [ 348.346370][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 348.375413][ T8109] bridge0: port 3(team0) entered disabled state [ 348.524544][ T8109] team0: entered allmulticast mode [ 348.531235][ T8109] team_slave_0: entered allmulticast mode [ 348.545760][ T8109] team_slave_1: entered allmulticast mode [ 348.556000][ T8109] bridge0: port 3(team0) entered blocking state [ 348.562370][ T8109] bridge0: port 3(team0) entered forwarding state [ 349.234777][ T8138] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 351.317006][ T8154] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 351.337664][ T8156] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 351.834654][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'. [ 356.010515][ T8209] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 357.457478][ T8219] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 361.095166][ T8260] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 362.838023][ T8272] fuse: Bad value for 'fd' [ 365.005449][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 365.050806][ T8281] mkiss: ax0: crc mode is auto. [ 365.514078][ T8291] process 'syz.2.525' launched './file0' with NULL argv: empty string added [ 366.702612][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 367.598534][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 369.345384][ T8305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.353506][ T8305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 369.370325][ T8305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.376782][ T8305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.443843][ T8305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.640698][ T8323] netlink: 'syz.3.533': attribute type 10 has an invalid length. [ 369.657082][ T8323] bridge0: port 3(team0) entered disabled state [ 369.665567][ T8323] team0: left allmulticast mode [ 369.670698][ T8323] team_slave_0: left allmulticast mode [ 369.676584][ T8323] team_slave_1: left allmulticast mode [ 369.735184][ T5843] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 369.760560][ T8323] team0: left promiscuous mode [ 369.770539][ T8323] team_slave_0: left promiscuous mode [ 369.778492][ T8324] netlink: 'syz.3.533': attribute type 10 has an invalid length. [ 369.791699][ T8323] team_slave_1: left promiscuous mode [ 369.828780][ T8324] netlink: 2 bytes leftover after parsing attributes in process `syz.3.533'. [ 369.975326][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 369.982589][ T5843] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 370.684915][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.700908][ T5843] pvrusb2: Hardware description: Terratec Grabster AV400 [ 370.708310][ T5843] pvrusb2: ********** [ 370.712313][ T5843] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 370.717513][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.722869][ T5843] pvrusb2: Important functionality might not be entirely working. [ 370.756997][ T8332] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 370.900305][ T8323] bridge0: port 3(team0) entered disabled state [ 371.015712][ T8337] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.023773][ T8337] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 371.033820][ T8337] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.041764][ T8337] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 371.239069][ T5843] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 371.250594][ T5843] pvrusb2: ********** [ 371.285026][ T8323] batman_adv: batadv0: Adding interface: team0 [ 371.297646][ T8323] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.315559][ T2342] pvrusb2: Invalid write control endpoint [ 371.333371][ T8323] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 371.434559][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.443861][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 371.450032][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.465227][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 371.500079][ T8324] team0: entered promiscuous mode [ 371.511577][ T8324] team_slave_0: entered promiscuous mode [ 371.518243][ T8324] team_slave_1: entered promiscuous mode [ 371.525872][ T8324] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.533641][ T8324] batman_adv: batadv0: Interface activated: team0 [ 371.540162][ T8324] batman_adv: batadv0: Interface deactivated: team0 [ 371.743183][ T8324] batman_adv: batadv0: Removing interface: team0 [ 372.503410][ T8324] bridge0: port 3(team0) entered blocking state [ 372.511088][ T8324] bridge0: port 3(team0) entered disabled state [ 372.523532][ T8324] team0: entered allmulticast mode [ 372.530879][ T8324] team_slave_0: entered allmulticast mode [ 372.538425][ T8324] team_slave_1: entered allmulticast mode [ 372.894048][ T8324] bridge0: port 3(team0) entered blocking state [ 372.900417][ T8324] bridge0: port 3(team0) entered forwarding state [ 373.200011][ T2342] pvrusb2: Invalid write control endpoint [ 373.218861][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 373.680477][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 373.693493][ T978] usb 2-1: USB disconnect, device number 5 [ 373.694993][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 373.721730][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 373.733982][ T2342] pvrusb2: Device being rendered inoperable [ 373.748687][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 373.757693][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 373.769245][ T2342] pvrusb2: Attached sub-driver cx25840 [ 373.775395][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 373.785716][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 374.354614][ T8361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.197536][ T8384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.131074][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.549'. [ 378.508485][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514820][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.629371][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.637984][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.646881][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.655343][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.662885][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.672777][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.686646][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.755055][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.803064][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.844741][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.864886][ T5843] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 379.893647][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.942995][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.972322][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.982219][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 379.995051][ T978] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 380.065430][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 380.087507][ T5843] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 380.120624][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.141789][ T30] audit: type=1326 audit(1754721131.338:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.2.556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d78ebe9 code=0x0 [ 380.162525][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.170848][ T978] hid-generic 00A0:0006:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 380.327167][ T5843] pvrusb2: Hardware description: Terratec Grabster AV400 [ 380.334322][ T5843] pvrusb2: ********** [ 380.425468][ T5843] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 380.495229][ T5843] pvrusb2: Important functionality might not be entirely working. [ 381.020522][ T5843] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 381.156684][ T5843] pvrusb2: ********** [ 381.178013][ T2342] pvrusb2: Invalid write control endpoint [ 381.721287][ T8422] fido_id[8422]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 382.090863][ T2342] pvrusb2: Invalid write control endpoint [ 382.110765][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 382.670231][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 382.677868][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 382.687913][ T2342] pvrusb2: Device being rendered inoperable [ 382.693911][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 382.833089][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 382.921176][ T2342] pvrusb2: Attached sub-driver cx25840 [ 383.085336][ T978] usb 2-1: USB disconnect, device number 6 [ 383.101475][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 383.717221][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 384.323413][ T8453] mkiss: ax0: crc mode is auto. [ 384.606278][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 386.615216][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 386.685890][ T8466] netlink: 'syz.4.565': attribute type 10 has an invalid length. [ 386.733106][ T8466] bridge0: port 3(team0) entered disabled state [ 386.742234][ T8466] team0: left allmulticast mode [ 386.747605][ T8466] team_slave_0: left allmulticast mode [ 386.753349][ T8466] team_slave_1: left allmulticast mode [ 386.759408][ T8466] team0: left promiscuous mode [ 386.764821][ T8466] team_slave_0: left promiscuous mode [ 388.283790][ T8466] team_slave_1: left promiscuous mode [ 389.003366][ T8466] bridge0: port 3(team0) entered disabled state [ 389.858193][ T8487] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 389.925074][ T8466] batman_adv: batadv0: Adding interface: team0 [ 389.950448][ T8466] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.989811][ T8466] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 390.808295][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 391.005489][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 391.023446][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 391.174969][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.217884][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 391.861369][ T9] pvrusb2: ********** [ 391.876506][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 391.952450][ T9] pvrusb2: Important functionality might not be entirely working. [ 392.008127][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 392.150512][ T9] pvrusb2: ********** [ 392.191162][ T2342] pvrusb2: Invalid write control endpoint [ 393.189115][ T2342] pvrusb2: Invalid write control endpoint [ 393.194871][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 393.260923][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 393.291322][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 393.346457][ T2342] pvrusb2: Device being rendered inoperable [ 393.511289][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 393.542030][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 394.199271][ T2342] pvrusb2: Attached sub-driver cx25840 [ 394.211914][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 394.224335][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 394.502115][ T5849] usb 4-1: USB disconnect, device number 4 [ 397.450240][ T8547] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 397.479757][ T8547] team0: left promiscuous mode [ 397.490627][ T8547] batman_adv: batadv0: Adding interface: team0 [ 397.496818][ T8547] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.522265][ T8547] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 397.539209][ T8547] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 397.547024][ T8547] netlink: 2 bytes leftover after parsing attributes in process `syz.2.584'. [ 397.555870][ T8547] team0: entered promiscuous mode [ 397.561373][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.568394][ T8547] batman_adv: batadv0: Interface activated: team0 [ 397.574828][ T8547] batman_adv: batadv0: Interface deactivated: team0 [ 397.581456][ T8547] batman_adv: batadv0: Removing interface: team0 [ 397.646201][ T8547] bridge0: port 1(team0) entered blocking state [ 397.652526][ T8547] bridge0: port 1(team0) entered disabled state [ 397.658907][ T8547] team0: entered allmulticast mode [ 399.857182][ T926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 400.726637][ T8584] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 400.825531][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 400.834228][ T926] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 400.870252][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.906262][ T926] pvrusb2: Hardware description: Terratec Grabster AV400 [ 400.913332][ T926] pvrusb2: ********** [ 400.935658][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.593'. [ 400.948679][ T926] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 400.958945][ T926] pvrusb2: Important functionality might not be entirely working. [ 400.967054][ T926] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 401.126054][ T8587] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 401.140600][ T926] pvrusb2: ********** [ 401.373535][ T8587] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 401.839888][ T2342] pvrusb2: Invalid write control endpoint [ 402.100503][ T8584] macvlan2: entered promiscuous mode [ 402.132737][ T2342] pvrusb2: Invalid write control endpoint [ 402.150678][ T8584] macvlan2: entered allmulticast mode [ 402.155313][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 402.198811][ T8584] bond1: entered promiscuous mode [ 402.210347][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 402.249201][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 402.261771][ T8584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.288976][ T2342] pvrusb2: Device being rendered inoperable [ 402.315247][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 402.335961][ T8584] bond1: left promiscuous mode [ 402.342873][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 402.392802][ T2342] pvrusb2: Attached sub-driver cx25840 [ 402.421209][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 402.454783][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 403.608525][ T8611] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 403.686924][ T5849] usb 4-1: USB disconnect, device number 5 [ 404.025194][ T5905] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 404.096015][ T30] audit: type=1326 audit(1754721155.278:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8620 comm="syz.3.598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x0 [ 404.174950][ T8625] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 404.218205][ T8625] bridge0: port 1(team0) entered disabled state [ 404.240652][ T8625] team0: left allmulticast mode [ 404.250519][ T8627] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 404.258556][ T8625] team0: left promiscuous mode [ 404.263661][ T8625] bridge0: port 1(team0) entered disabled state [ 404.270543][ T8627] netlink: 2 bytes leftover after parsing attributes in process `syz.2.595'. [ 404.286394][ T8625] batman_adv: batadv0: Adding interface: team0 [ 404.292868][ T8625] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.365519][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 404.472690][ T8625] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 404.498739][ T5905] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 404.513180][ T5905] usb 2-1: config 0 has no interface number 0 [ 404.588293][ T5905] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 404.600246][ T8627] team0: entered promiscuous mode [ 404.763812][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.443327][ T8634] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 405.449148][ T8627] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.476381][ T5905] usb 2-1: Product: syz [ 405.480583][ T5905] usb 2-1: Manufacturer: syz [ 405.510742][ T8627] batman_adv: batadv0: Interface activated: team0 [ 405.517508][ T8627] batman_adv: batadv0: Interface deactivated: team0 [ 405.524126][ T8627] batman_adv: batadv0: Removing interface: team0 [ 405.530544][ T5905] usb 2-1: SerialNumber: syz [ 405.662260][ T5905] usb 2-1: config 0 descriptor?? [ 405.668952][ T5905] hub 2-1:0.145: bad descriptor, ignoring hub [ 405.708570][ T5905] hub 2-1:0.145: probe with driver hub failed with error -5 [ 405.745617][ T5905] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input5 [ 405.759493][ T8627] bridge0: port 1(team0) entered blocking state [ 405.775507][ T8627] bridge0: port 1(team0) entered disabled state [ 405.802278][ T8627] team0: entered allmulticast mode [ 407.147756][ T8645] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 408.174924][ T926] usb 2-1: USB disconnect, device number 7 [ 409.194739][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 409.838193][ T5843] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 410.188469][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 410.203799][ T5843] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 410.223697][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.388075][ T5843] pvrusb2: Hardware description: Terratec Grabster AV400 [ 410.424923][ T5843] pvrusb2: ********** [ 410.443195][ T5843] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 410.481686][ T5843] pvrusb2: Important functionality might not be entirely working. [ 410.500792][ T5843] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 410.532343][ T5843] pvrusb2: ********** [ 410.590918][ T2342] pvrusb2: Invalid write control endpoint [ 410.791884][ T8675] pvrusb2: Invalid write control endpoint [ 411.630856][ T2342] pvrusb2: Invalid write control endpoint [ 411.643021][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 411.764631][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 411.827918][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 411.901294][ T2342] pvrusb2: Device being rendered inoperable [ 411.944171][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 411.982715][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 412.000659][ T2342] pvrusb2: Attached sub-driver cx25840 [ 412.008504][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 412.040304][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 412.064068][ T5849] usb 4-1: USB disconnect, device number 6 [ 412.226646][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 413.304072][ T8702] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 413.478472][ T8702] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 413.609021][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.614'. [ 413.634759][ T8702] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 413.703557][ T8711] macvlan2: entered promiscuous mode [ 413.719205][ T8711] macvlan2: entered allmulticast mode [ 413.749314][ T8711] bond1: entered promiscuous mode [ 413.938139][ T8711] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 413.966211][ T8711] bond1: left promiscuous mode [ 414.099184][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 414.107659][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 414.115177][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 414.125398][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 414.245340][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 414.271066][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 414.515187][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 414.522633][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 415.300493][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 415.315417][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 415.322841][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 415.332361][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 415.340361][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 415.380558][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 415.500497][ T9] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 415.629382][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 416.447556][ T5905] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 416.820000][ T8729] fido_id[8729]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 416.835163][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 416.846541][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.857494][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.884687][ T5905] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 416.908928][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.006953][ T5905] usb 5-1: config 0 descriptor?? [ 417.630803][ T5905] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 417.771469][ T8738] syz_tun: entered allmulticast mode [ 417.801932][ T8737] syz_tun: left allmulticast mode [ 418.328414][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.402692][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.823442][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.836168][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.483224][ T30] audit: type=1326 audit(1754721170.678:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 419.554527][ T5849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 419.559482][ T30] audit: type=1326 audit(1754721170.678:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 419.588919][ T30] audit: type=1326 audit(1754721170.678:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 419.612666][ T30] audit: type=1326 audit(1754721170.678:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 419.869317][ T30] audit: type=1326 audit(1754721170.678:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 419.910997][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 419.924931][ T30] audit: type=1326 audit(1754721170.678:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 419.947730][ T5849] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 419.956004][ T5849] usb 3-1: config 0 has no interface number 0 [ 419.962302][ T5849] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 419.989785][ T5849] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 420.023999][ T30] audit: type=1326 audit(1754721170.678:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 420.091007][ T30] audit: type=1326 audit(1754721170.678:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 420.173596][ T5849] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 420.208827][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 420.221183][ T30] audit: type=1326 audit(1754721170.678:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 420.260172][ T5849] usb 3-1: Product: syz [ 420.277723][ T5849] usb 3-1: SerialNumber: syz [ 420.724615][ T5843] usb 5-1: USB disconnect, device number 8 [ 420.733951][ T30] audit: type=1326 audit(1754721170.678:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8751 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 420.772893][ T5849] usb 3-1: config 0 descriptor?? [ 420.938944][ T5849] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 421.973073][ T5849] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 422.166226][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 422.497112][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.504315][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.511486][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.518644][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.525815][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.532968][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.540151][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.547327][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.554494][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.561660][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 422.968797][ T5849] usb 3-1: USB disconnect, device number 4 [ 422.968849][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 423.557139][ T5849] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 424.716693][ T8789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'. [ 425.095199][ T5905] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 425.392895][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.637'. [ 425.431988][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 425.454474][ T5905] usb 4-1: config 26 has too many interfaces: 141, using maximum allowed: 32 [ 425.480020][ T5905] usb 4-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 425.664027][ T5905] usb 4-1: config 26 has 0 interfaces, different from the descriptor's value: 141 [ 425.681320][ T5905] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 425.693639][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.740543][ T5905] usb 4-1: Product: syz [ 425.815847][ T8811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.425986][ T5905] usb 4-1: Manufacturer: syz [ 426.430686][ T5905] usb 4-1: SerialNumber: syz [ 426.904101][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 426.904565][ T30] audit: type=1326 audit(1754721178.088:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 427.113922][ T5905] usb 4-1: USB disconnect, device number 7 [ 427.288475][ T30] audit: type=1326 audit(1754721178.088:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 427.349069][ T30] audit: type=1326 audit(1754721178.098:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 428.158090][ T30] audit: type=1326 audit(1754721178.098:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 428.379180][ T30] audit: type=1326 audit(1754721178.098:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 428.528421][ T8825] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 428.536519][ T8825] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 428.554989][ T8825] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 428.562938][ T8825] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 428.583701][ T30] audit: type=1326 audit(1754721178.098:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 428.641643][ T30] audit: type=1326 audit(1754721178.098:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 428.674452][ T30] audit: type=1326 audit(1754721178.098:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 428.675253][ T5849] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 428.710967][ T30] audit: type=1326 audit(1754721178.098:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 428.881422][ T30] audit: type=1326 audit(1754721178.098:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7618ebe9 code=0x7ffc0000 [ 429.075358][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 429.826699][ T5849] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 429.840230][ T5849] usb 4-1: config 0 has no interface number 0 [ 429.865211][ T5849] usb 4-1: config 0 interface 89 has no altsetting 0 [ 429.908747][ T5849] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 429.941763][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.971056][ T5849] usb 4-1: Product: syz [ 429.979149][ T5849] usb 4-1: Manufacturer: syz [ 429.990865][ T5849] usb 4-1: SerialNumber: syz [ 430.027746][ T5849] usb 4-1: config 0 descriptor?? [ 430.201471][ T5849] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 430.826725][ T8843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.963645][ T5849] em28xx 4-1:0.89: Video interface 89 found: bulk [ 431.819026][ T5849] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 432.087843][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'. [ 433.418760][ T5849] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 433.627842][ T5849] em28xx 4-1:0.89: board has no eeprom [ 434.529414][ T8872] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 435.546787][ T5849] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 436.687083][ T8895] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 436.811791][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 436.811804][ T30] audit: type=1326 audit(1754721187.968:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 436.939735][ T30] audit: type=1326 audit(1754721187.968:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 436.964479][ T5849] em28xx 4-1:0.89: analog set to bulk mode. [ 437.041594][ T30] audit: type=1326 audit(1754721187.978:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 437.135454][ T926] em28xx 4-1:0.89: Registering V4L2 extension [ 437.314744][ T30] audit: type=1326 audit(1754721187.978:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 437.336204][ T30] audit: type=1326 audit(1754721187.978:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 437.348251][ T5849] usb 4-1: USB disconnect, device number 8 [ 438.048062][ T30] audit: type=1326 audit(1754721187.978:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 438.219026][ T926] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 438.233265][ T30] audit: type=1326 audit(1754721187.978:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 438.259917][ T5849] em28xx 4-1:0.89: Disconnecting em28xx [ 438.295192][ T30] audit: type=1326 audit(1754721187.978:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 438.346191][ T926] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 438.390226][ T30] audit: type=1326 audit(1754721187.978:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 438.490918][ T926] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 438.545951][ T926] em28xx 4-1:0.89: No AC97 audio processor [ 438.585239][ T30] audit: type=1326 audit(1754721187.978:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8887 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8345f8ebe9 code=0x7ffc0000 [ 438.586441][ T926] usb 4-1: Decoder not found [ 438.757785][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 439.014922][ T926] em28xx 4-1:0.89: failed to create media graph [ 439.638775][ T926] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 439.758661][ T926] em28xx 4-1:0.89: Registering snapshot button... [ 439.764713][ T8911] ================================================================== [ 439.773227][ T8911] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 439.780621][ T8911] Read of size 8 at addr ffff888028988738 by task v4l_id/8911 [ 439.788086][ T8911] [ 439.790452][ T8911] CPU: 0 UID: 0 PID: 8911 Comm: v4l_id Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 439.790475][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.790498][ T8911] Call Trace: [ 439.790510][ T8911] [ 439.790519][ T8911] dump_stack_lvl+0x189/0x250 [ 439.790544][ T8911] ? rcu_is_watching+0x15/0xb0 [ 439.790564][ T8911] ? __kasan_check_byte+0x12/0x40 [ 439.790585][ T8911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.790605][ T8911] ? rcu_is_watching+0x15/0xb0 [ 439.790626][ T8911] ? lock_release+0x4b/0x3e0 [ 439.790646][ T8911] ? __virt_addr_valid+0x1c8/0x5c0 [ 439.790669][ T8911] ? __virt_addr_valid+0x4a5/0x5c0 [ 439.790692][ T8911] print_report+0xca/0x240 [ 439.790719][ T8911] ? v4l2_fh_open+0xc7/0x430 [ 439.790742][ T8911] kasan_report+0x118/0x150 [ 439.790763][ T8911] ? v4l2_fh_open+0xc7/0x430 [ 439.790791][ T8911] v4l2_fh_open+0xc7/0x430 [ 439.790814][ T8911] ? __pfx___mutex_lock+0x10/0x10 [ 439.790839][ T8911] em28xx_v4l2_open+0x157/0x9a0 [ 439.790869][ T8911] v4l2_open+0x20c/0x360 [ 439.790896][ T8911] chrdev_open+0x4c9/0x5e0 [ 439.790919][ T8911] ? __pfx_chrdev_open+0x10/0x10 [ 439.790944][ T8911] ? __pfx_chrdev_open+0x10/0x10 [ 439.790963][ T8911] do_dentry_open+0xdf0/0x1970 [ 439.790994][ T8911] vfs_open+0x3b/0x340 [ 439.791015][ T8911] ? path_openat+0x2ecd/0x3830 [ 439.791042][ T8911] path_openat+0x2ee5/0x3830 [ 439.791068][ T8911] ? arch_stack_walk+0xfc/0x150 [ 439.791105][ T8911] ? __pfx_path_openat+0x10/0x10 [ 439.791129][ T8911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.791158][ T8911] do_filp_open+0x1fa/0x410 [ 439.791184][ T8911] ? __lock_acquire+0xab9/0xd20 [ 439.791203][ T8911] ? __pfx_do_filp_open+0x10/0x10 [ 439.791241][ T8911] ? _raw_spin_unlock+0x28/0x50 [ 439.791269][ T8911] ? alloc_fd+0x64c/0x6c0 [ 439.791295][ T8911] do_sys_openat2+0x121/0x1c0 [ 439.791321][ T8911] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.791347][ T8911] ? exc_page_fault+0x76/0xf0 [ 439.791369][ T8911] ? do_user_addr_fault+0xc8a/0x1390 [ 439.791398][ T8911] __x64_sys_openat+0x138/0x170 [ 439.791427][ T8911] do_syscall_64+0xfa/0x3b0 [ 439.791448][ T8911] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.791468][ T8911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.791488][ T8911] ? clear_bhb_loop+0x60/0xb0 [ 439.791515][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.791534][ T8911] RIP: 0033:0x7fed661d0407 [ 439.791556][ T8911] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 439.791578][ T8911] RSP: 002b:00007fffb89841f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 439.791607][ T8911] RAX: ffffffffffffffda RBX: 00007fed66144880 RCX: 00007fed661d0407 [ 439.791623][ T8911] RDX: 0000000000000000 RSI: 00007fffb8985f1c RDI: ffffffffffffff9c [ 439.791638][ T8911] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 439.791651][ T8911] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 439.791664][ T8911] R13: 00007fffb8984440 R14: 00007fed66429000 R15: 000055e0f3f094d8 [ 439.791688][ T8911] [ 439.791696][ T8911] [ 440.092563][ T8911] Allocated by task 926: [ 440.096797][ T8911] kasan_save_track+0x3e/0x80 [ 440.101482][ T8911] __kasan_kmalloc+0x93/0xb0 [ 440.106064][ T8911] __kmalloc_cache_noprof+0x230/0x3d0 [ 440.111430][ T8911] em28xx_v4l2_init+0x10b/0x2e70 [ 440.116370][ T8911] em28xx_init_extension+0x120/0x1c0 [ 440.121653][ T8911] process_scheduled_works+0xade/0x17b0 [ 440.127194][ T8911] worker_thread+0x8a0/0xda0 [ 440.131778][ T8911] kthread+0x70e/0x8a0 [ 440.135858][ T8911] ret_from_fork+0x3fc/0x770 [ 440.140461][ T8911] ret_from_fork_asm+0x1a/0x30 [ 440.145227][ T8911] [ 440.147542][ T8911] Freed by task 926: [ 440.151421][ T8911] kasan_save_track+0x3e/0x80 [ 440.156105][ T8911] kasan_save_free_info+0x46/0x50 [ 440.161127][ T8911] __kasan_slab_free+0x62/0x70 [ 440.165883][ T8911] kfree+0x18e/0x440 [ 440.169783][ T8911] em28xx_v4l2_init+0x1683/0x2e70 [ 440.174805][ T8911] em28xx_init_extension+0x120/0x1c0 [ 440.180082][ T8911] process_scheduled_works+0xade/0x17b0 [ 440.185620][ T8911] worker_thread+0x8a0/0xda0 [ 440.190202][ T8911] kthread+0x70e/0x8a0 [ 440.194264][ T8911] ret_from_fork+0x3fc/0x770 [ 440.198849][ T8911] ret_from_fork_asm+0x1a/0x30 [ 440.203610][ T8911] [ 440.205927][ T8911] The buggy address belongs to the object at ffff888028988000 [ 440.205927][ T8911] which belongs to the cache kmalloc-8k of size 8192 [ 440.219973][ T8911] The buggy address is located 1848 bytes inside of [ 440.219973][ T8911] freed 8192-byte region [ffff888028988000, ffff88802898a000) [ 440.233947][ T8911] [ 440.236266][ T8911] The buggy address belongs to the physical page: [ 440.242673][ T8911] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28988 [ 440.251431][ T8911] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 440.259920][ T8911] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 440.267462][ T8911] page_type: f5(slab) [ 440.271440][ T8911] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 440.280017][ T8911] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 440.288594][ T8911] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 440.297254][ T8911] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 440.305916][ T8911] head: 00fff00000000003 ffffea0000a26201 00000000ffffffff 00000000ffffffff [ 440.314580][ T8911] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 440.323237][ T8911] page dumped because: kasan: bad access detected [ 440.329647][ T8911] page_owner tracks the page as allocated [ 440.335361][ T8911] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 926, tgid 926 (kworker/1:2), ts 437572970048, free_ts 437384996766 [ 440.356627][ T8911] post_alloc_hook+0x240/0x2a0 [ 440.361391][ T8911] get_page_from_freelist+0x21d5/0x22b0 [ 440.366933][ T8911] __alloc_frozen_pages_noprof+0x181/0x370 [ 440.372738][ T8911] alloc_pages_mpol+0x232/0x4a0 [ 440.377580][ T8911] allocate_slab+0x8a/0x3b0 [ 440.382078][ T8911] ___slab_alloc+0xbfc/0x1480 [ 440.386745][ T8911] __kmalloc_cache_noprof+0x296/0x3d0 [ 440.392113][ T8911] em28xx_v4l2_init+0x10b/0x2e70 [ 440.397044][ T8911] em28xx_init_extension+0x120/0x1c0 [ 440.402320][ T8911] process_scheduled_works+0xade/0x17b0 [ 440.407855][ T8911] worker_thread+0x8a0/0xda0 [ 440.412435][ T8911] kthread+0x70e/0x8a0 [ 440.416501][ T8911] ret_from_fork+0x3fc/0x770 [ 440.421084][ T8911] ret_from_fork_asm+0x1a/0x30 [ 440.425846][ T8911] page last free pid 8903 tgid 8900 stack trace: [ 440.432161][ T8911] __free_frozen_pages+0xc65/0xe60 [ 440.437266][ T8911] skb_release_data+0x62d/0x7c0 [ 440.442117][ T8911] napi_consume_skb+0x158/0x1e0 [ 440.446956][ T8911] net_rx_action+0x51b/0xe30 [ 440.451546][ T8911] handle_softirqs+0x283/0x870 [ 440.456300][ T8911] __irq_exit_rcu+0xca/0x1f0 [ 440.460886][ T8911] irq_exit_rcu+0x9/0x30 [ 440.465134][ T8911] common_interrupt+0xbb/0xe0 [ 440.469818][ T8911] asm_common_interrupt+0x26/0x40 [ 440.474838][ T8911] [ 440.477151][ T8911] Memory state around the buggy address: [ 440.482770][ T8911] ffff888028988600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.490821][ T8911] ffff888028988680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.498870][ T8911] >ffff888028988700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.506916][ T8911] ^ [ 440.512795][ T8911] ffff888028988780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.520844][ T8911] ffff888028988800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.528892][ T8911] ================================================================== [ 440.564844][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.571263][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.627536][ T926] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input7 [ 440.699933][ T926] em28xx 4-1:0.89: Remote control support is not available for this card. [ 440.739206][ T8911] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 440.746434][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: v4l_id Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 440.755966][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.766024][ T8911] Call Trace: [ 440.769297][ T8911] [ 440.772223][ T8911] dump_stack_lvl+0x99/0x250 [ 440.776812][ T8911] ? __asan_memcpy+0x40/0x70 [ 440.781411][ T8911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.786604][ T8911] ? __pfx__printk+0x10/0x10 [ 440.791197][ T8911] panic+0x2db/0x790 [ 440.795091][ T8911] ? __pfx_panic+0x10/0x10 [ 440.799509][ T8911] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 440.805411][ T8911] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 440.811741][ T8911] ? print_memory_metadata+0x314/0x400 [ 440.817202][ T8911] ? v4l2_fh_open+0xc7/0x430 [ 440.821788][ T8911] check_panic_on_warn+0x89/0xb0 [ 440.826727][ T8911] ? v4l2_fh_open+0xc7/0x430 [ 440.831314][ T8911] end_report+0x78/0x160 [ 440.835557][ T8911] kasan_report+0x129/0x150 [ 440.840063][ T8911] ? v4l2_fh_open+0xc7/0x430 [ 440.844655][ T8911] v4l2_fh_open+0xc7/0x430 [ 440.849072][ T8911] ? __pfx___mutex_lock+0x10/0x10 [ 440.854092][ T8911] em28xx_v4l2_open+0x157/0x9a0 [ 440.858947][ T8911] v4l2_open+0x20c/0x360 [ 440.863195][ T8911] chrdev_open+0x4c9/0x5e0 [ 440.867606][ T8911] ? __pfx_chrdev_open+0x10/0x10 [ 440.872543][ T8911] ? __pfx_chrdev_open+0x10/0x10 [ 440.877472][ T8911] do_dentry_open+0xdf0/0x1970 [ 440.882238][ T8911] vfs_open+0x3b/0x340 [ 440.886301][ T8911] ? path_openat+0x2ecd/0x3830 [ 440.891067][ T8911] path_openat+0x2ee5/0x3830 [ 440.895655][ T8911] ? arch_stack_walk+0xfc/0x150 [ 440.900515][ T8911] ? __pfx_path_openat+0x10/0x10 [ 440.905455][ T8911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.911520][ T8911] do_filp_open+0x1fa/0x410 [ 440.916023][ T8911] ? __lock_acquire+0xab9/0xd20 [ 440.920866][ T8911] ? __pfx_do_filp_open+0x10/0x10 [ 440.925902][ T8911] ? _raw_spin_unlock+0x28/0x50 [ 440.930757][ T8911] ? alloc_fd+0x64c/0x6c0 [ 440.935085][ T8911] do_sys_openat2+0x121/0x1c0 [ 440.939769][ T8911] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.944968][ T8911] ? exc_page_fault+0x76/0xf0 [ 440.949640][ T8911] ? do_user_addr_fault+0xc8a/0x1390 [ 440.954927][ T8911] __x64_sys_openat+0x138/0x170 [ 440.959779][ T8911] do_syscall_64+0xfa/0x3b0 [ 440.964275][ T8911] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.969468][ T8911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.975527][ T8911] ? clear_bhb_loop+0x60/0xb0 [ 440.980201][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.986086][ T8911] RIP: 0033:0x7fed661d0407 [ 440.990497][ T8911] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 441.010098][ T8911] RSP: 002b:00007fffb89841f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 441.018507][ T8911] RAX: ffffffffffffffda RBX: 00007fed66144880 RCX: 00007fed661d0407 [ 441.026473][ T8911] RDX: 0000000000000000 RSI: 00007fffb8985f1c RDI: ffffffffffffff9c [ 441.034438][ T8911] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 441.042404][ T8911] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 441.050370][ T8911] R13: 00007fffb8984440 R14: 00007fed66429000 R15: 000055e0f3f094d8 [ 441.058364][ T8911] [ 441.061678][ T8911] Kernel Offset: disabled [ 441.066002][ T8911] Rebooting in 86400 seconds..