last executing test programs: 11m44.905825886s ago: executing program 0 (id=180): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = creat(0x0, 0x14) close(r1) r2 = getpid() syz_pidfd_open(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001980)=""/233, 0xe9}], 0x1}, 0x10001}], 0x1, 0x40000000, 0x0) 11m41.714578449s ago: executing program 0 (id=182): setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x7f, 0x200, 0x4}, 0x14) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000200)=0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 11m38.326894567s ago: executing program 0 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86fa, 0x2000}, &(0x7f0000002000), &(0x7f0000000000)) 11m35.017166226s ago: executing program 0 (id=192): openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x80400, 0x0, 0xa248cc57cb2091fc}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) rseq(0x0, 0x0, 0x20001, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$read(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11m32.126820976s ago: executing program 0 (id=198): setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x7f, 0x200, 0x4}, 0x14) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000200)=0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 11m28.696547943s ago: executing program 0 (id=205): mkdirat(0xffffffffffffffff, 0x0, 0x120) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58) 11m13.480312295s ago: executing program 32 (id=205): mkdirat(0xffffffffffffffff, 0x0, 0x120) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58) 11m6.677923881s ago: executing program 4 (id=248): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_robust_list(r0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) 11m2.82551126s ago: executing program 4 (id=252): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11m1.855806803s ago: executing program 4 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_robust_list(r0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) timer_create(0x9, 0x0, &(0x7f0000000500)) close_range(r3, r4, 0x0) 10m59.0055864s ago: executing program 4 (id=257): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'netdevsim0\x00', 0xc201}) 10m57.396676025s ago: executing program 4 (id=262): pipe(&(0x7f0000000080)) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 10m55.799189486s ago: executing program 4 (id=264): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(0x0, &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 10m40.137208674s ago: executing program 33 (id=264): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(0x0, &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 11.126881251s ago: executing program 1 (id=1288): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r0, 0x606}}, 0x10) 10.9120346s ago: executing program 1 (id=1290): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10.773683357s ago: executing program 1 (id=1291): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000f68821bacf66fdda01270102c200000e00005075d985505b13ac0f28829fb972bacb72537b67e06f59c36784002afea0339cd80163cc0d7378ee516dea082a491f2b6f747d223f675e4c6b357e759a33d42ef91537"], 0x2c}}, 0x8046) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 10.73139917s ago: executing program 3 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737925ba0000000008000a40fffffffc0c40098008000140000000010800084000000001140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.106848059s ago: executing program 1 (id=1293): socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) symlink(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, 0x0, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r2, @ANYRESHEX=r7], 0xfffffdef}}, 0x10) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 9.105731515s ago: executing program 2 (id=1294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0xc000810) dup(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 8.765026662s ago: executing program 3 (id=1295): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000001380)=[{&(0x7f0000000000)="89380755a08cc2cc146beea3425e1aba4ffc65780ffce74987613cb561cf8afa47b3169bb5eab3a9ecfc2787c70ea93f0e3c6bbdd2d4d66cfa126dc28c11baa3e16f78cdd3e8163bf3e56a96267f6a0ebf45e14a689194df817bf43b9bd4fb8a12f1e428faa41a9b1d0c19765dbfbae0b3d35f1e6d1e2b50d9f19ee717"}, {&(0x7f0000001300)="5645ffd3a3a07a6c4ceee3fb390e04aa7c564a215dddae0a10bc705607cd6a2d9bc3b5419b0327bdb569a6909f78904549c8d1351a5408d889d2f8edcc2ddc5cbba0edbdeae9d0dc9ca7a60b1af33dc70c"}, {&(0x7f00000000c0)="255aa126dcd296696a2e5e3e0655e643a3ed6e70de8b3a7bf38bdb953491c5eee2c297ed71c4a14a86a0982982588667c3"}], 0xffffffffffffdad) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) 8.681299907s ago: executing program 2 (id=1296): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022dfe000000000009040000026bb22b000904ff38a6f86da9aa04f8"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x3a) 5.350874008s ago: executing program 2 (id=1297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}}, 0x4000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) io_uring_enter(0xffffffffffffffff, 0xc2d, 0x2936, 0x0, 0x0, 0x0) 4.89422758s ago: executing program 1 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000846000/0x4000)=nil) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x8}, 0x1c) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c088088f51e72eb2f7e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4.559498895s ago: executing program 3 (id=1299): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3.422736714s ago: executing program 2 (id=1300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x3000000, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 3.422286514s ago: executing program 3 (id=1301): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000f68821bacf66fdda01270102c200000e00005075d985505b13ac0f28829fb972bacb72537b67e06f59c36784002afea0339cd80163cc0d7378ee516dea082a491f2b6f747d223f675e4c6b357e759a33d42ef91537"], 0x2c}}, 0x8046) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 3.044335663s ago: executing program 2 (id=1302): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/1, 0x1, 0x3, 0x4, 0xffff0001, 0x0, 0xc08}}, 0x120) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xb0}) preadv(r3, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000780), 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)="8e41f8bc555d", 0x6}], 0x1}, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 1.642628761s ago: executing program 3 (id=1303): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.419913238s ago: executing program 1 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0xc000810) dup(0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 1.419376908s ago: executing program 2 (id=1305): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022dfe000000000009040000026bb22b000904ff38a6f86da9aa04f8"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) 0s ago: executing program 3 (id=1306): socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) symlink(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, 0x0, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r2, @ANYRESHEX=r7], 0xfffffdef}}, 0x10) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 bytes leftover after parsing attributes in process `syz.3.369'. [ 335.048337][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 336.492327][ T7369] ceph: No mds server is up or the cluster is laggy [ 336.792150][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 336.795711][ T7141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.899055][ T7141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.599379][ T6979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 337.758303][ T7141] team0: Port device team_slave_0 added [ 337.834815][ T6979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 337.912427][ T7141] team0: Port device team_slave_1 added [ 337.912629][ T6979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 338.085024][ T6979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.507285][ T6979] kthread_run failed with err -4 [ 339.542669][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.542689][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.542719][ T7141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.599101][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.599119][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.599147][ T7141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.839639][ T7141] hsr_slave_0: entered promiscuous mode [ 340.840737][ T7141] hsr_slave_1: entered promiscuous mode [ 340.863383][ T7141] debugfs: 'hsr0' already exists in 'hsr' [ 340.863415][ T7141] Cannot create hsr debugfs directory [ 341.721579][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.748498][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.751036][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.760466][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.765207][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.886566][ T5115] Bluetooth: hci5: command tx timeout [ 344.116128][ T807] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 344.276106][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 344.280782][ T807] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 344.280804][ T807] usb 2-1: config 0 has no interface number 0 [ 344.283871][ T807] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 344.283894][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.283908][ T807] usb 2-1: Product: syz [ 344.283919][ T807] usb 2-1: Manufacturer: syz [ 344.283935][ T807] usb 2-1: SerialNumber: syz [ 344.365192][ T807] usb 2-1: config 0 descriptor?? [ 344.636184][ T807] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 344.636265][ T807] uvcvideo 2-1:0.31: Failed to initialize entity for entity 6 [ 344.636277][ T807] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 344.845780][ T5907] usb 2-1: USB disconnect, device number 2 [ 345.966802][ T5115] Bluetooth: hci5: command tx timeout [ 348.065827][ T5115] Bluetooth: hci5: command tx timeout [ 349.074101][ T7141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 349.132382][ T7413] chnl_net:caif_netlink_parms(): no params data found [ 349.153061][ T7141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 349.352341][ T7141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 349.465182][ T7141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.126046][ T5115] Bluetooth: hci5: command tx timeout [ 350.877597][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.877731][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.877981][ T7413] bridge_slave_0: entered allmulticast mode [ 350.893924][ T7413] bridge_slave_0: entered promiscuous mode [ 350.936873][ T6039] bridge_slave_1: left allmulticast mode [ 350.936897][ T6039] bridge_slave_1: left promiscuous mode [ 350.937078][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.038913][ T6039] bridge_slave_0: left allmulticast mode [ 351.038937][ T6039] bridge_slave_0: left promiscuous mode [ 351.039141][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.130547][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.397'. [ 353.928302][ T7526] fuse: Bad value for 'fd' [ 355.106955][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.217004][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.802716][ T6039] bond0 (unregistering): Released all slaves [ 355.842873][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.842967][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.843175][ T7413] bridge_slave_1: entered allmulticast mode [ 355.867068][ T7413] bridge_slave_1: entered promiscuous mode [ 355.892710][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.397'. [ 356.146096][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 356.146122][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 356.146152][ T7535] netlink: 'syz.2.403': attribute type 14 has an invalid length. [ 356.351813][ T7533] evm: overlay not supported [ 357.122202][ T7413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.139274][ T7413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.058596][ T7413] team0: Port device team_slave_0 added [ 358.075905][ T7413] team0: Port device team_slave_1 added [ 358.486844][ T6039] hsr_slave_0: left promiscuous mode [ 358.539448][ T6039] hsr_slave_1: left promiscuous mode [ 358.540562][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.578144][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.908738][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 362.176195][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 362.197371][ T6031] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 362.346471][ T6031] usb 3-1: Using ep0 maxpacket: 8 [ 362.349138][ T6031] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 362.349169][ T6031] usb 3-1: config 0 has no interface number 0 [ 362.389527][ T6031] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 362.389562][ T6031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.389583][ T6031] usb 3-1: Product: syz [ 362.389599][ T6031] usb 3-1: Manufacturer: syz [ 362.389613][ T6031] usb 3-1: SerialNumber: syz [ 362.547550][ T6031] usb 3-1: config 0 descriptor?? [ 362.769834][ T6031] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 362.769926][ T6031] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 362.821242][ T6031] usb 3-1: USB disconnect, device number 2 [ 363.479169][ T7413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.479188][ T7413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.479224][ T7413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.629606][ T7579] fuse: Bad value for 'fd' [ 364.401336][ T7413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.401355][ T7413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.401385][ T7413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.691880][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.411'. [ 364.741054][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.411'. [ 364.891681][ T7413] hsr_slave_0: entered promiscuous mode [ 364.893070][ T7413] hsr_slave_1: entered promiscuous mode [ 364.894017][ T7413] debugfs: 'hsr0' already exists in 'hsr' [ 364.894043][ T7413] Cannot create hsr debugfs directory [ 372.898632][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.918460][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.919885][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.921571][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.922477][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.086137][ T5115] Bluetooth: hci0: command tx timeout [ 377.166118][ T5115] Bluetooth: hci0: command tx timeout [ 377.634946][ T7663] fuse: Invalid rootmode [ 379.246161][ T5115] Bluetooth: hci0: command tx timeout [ 379.803827][ T7621] chnl_net:caif_netlink_parms(): no params data found [ 381.909576][ T5115] Bluetooth: hci0: command tx timeout [ 384.789605][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.789667][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.267690][ T7705] fuse: Invalid rootmode [ 387.612360][ T7413] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.702030][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.702219][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.702448][ T7621] bridge_slave_0: entered allmulticast mode [ 387.705211][ T7621] bridge_slave_0: entered promiscuous mode [ 387.772232][ T7413] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.905288][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.905447][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.905743][ T7621] bridge_slave_1: entered allmulticast mode [ 387.941272][ T7621] bridge_slave_1: entered promiscuous mode [ 387.985045][ T7413] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.396112][ T7413] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 389.580060][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.700413][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.054040][ T7621] team0: Port device team_slave_0 added [ 390.162630][ T7621] team0: Port device team_slave_1 added [ 390.260659][ T7759] fuse: Bad value for 'rootmode' [ 391.378230][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.378250][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.378280][ T7621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.307234][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.307253][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.307291][ T7621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.732042][ T6039] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.243219][ T6039] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.479488][ T7621] hsr_slave_0: entered promiscuous mode [ 396.480565][ T7621] hsr_slave_1: entered promiscuous mode [ 396.481210][ T7621] debugfs: 'hsr0' already exists in 'hsr' [ 396.481234][ T7621] Cannot create hsr debugfs directory [ 396.701235][ T6039] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.093438][ T6039] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.504067][ T6039] bridge_slave_1: left allmulticast mode [ 400.504100][ T6039] bridge_slave_1: left promiscuous mode [ 400.504372][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.710552][ T6039] bridge_slave_0: left allmulticast mode [ 400.710591][ T6039] bridge_slave_0: left promiscuous mode [ 400.710927][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.924418][ T6039] bridge_slave_1: left allmulticast mode [ 401.924458][ T6039] bridge_slave_1: left promiscuous mode [ 401.924737][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.047562][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.056438][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.057901][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.070125][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.074621][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.124828][ T6039] bridge_slave_0: left allmulticast mode [ 402.124853][ T6039] bridge_slave_0: left promiscuous mode [ 402.125049][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.128689][ T5115] Bluetooth: hci1: command tx timeout [ 405.948314][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.065863][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.148588][ T6039] bond0 (unregistering): Released all slaves [ 406.206140][ T5115] Bluetooth: hci1: command tx timeout [ 408.288705][ T5115] Bluetooth: hci1: command tx timeout [ 410.187631][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.277470][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.328762][ T6039] bond0 (unregistering): Released all slaves [ 410.369505][ T5115] Bluetooth: hci1: command tx timeout [ 413.040598][ T6039] hsr_slave_0: left promiscuous mode [ 413.084734][ T6039] hsr_slave_1: left promiscuous mode [ 413.085439][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.143029][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.347077][ T6039] hsr_slave_0: left promiscuous mode [ 413.366555][ T6039] hsr_slave_1: left promiscuous mode [ 413.367325][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.367344][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.429746][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.429768][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.533261][ T6039] veth1_macvtap: left promiscuous mode [ 413.533343][ T6039] veth0_macvtap: left promiscuous mode [ 413.533511][ T6039] veth1_vlan: left promiscuous mode [ 413.533627][ T6039] veth0_vlan: left promiscuous mode [ 418.861407][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 420.340291][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 425.368340][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 425.706626][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 429.402182][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 429.443226][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.445667][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.456417][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.468975][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.797559][ T5115] Bluetooth: hci5: command tx timeout [ 432.562345][ T44] hid-generic 0003:0004:FFFF0001.0001: unknown main item tag 0x0 [ 433.490016][ T44] hid-generic 0003:0004:FFFF0001.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 433.789058][ T8034] fido_id[8034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 433.974069][ T5115] Bluetooth: hci5: command tx timeout [ 434.723292][ T7846] chnl_net:caif_netlink_parms(): no params data found [ 436.049058][ T5115] Bluetooth: hci5: command tx timeout [ 437.721645][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.724273][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.724567][ T7846] bridge_slave_0: entered allmulticast mode [ 437.740969][ T7846] bridge_slave_0: entered promiscuous mode [ 437.813101][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.813202][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.813409][ T7846] bridge_slave_1: entered allmulticast mode [ 437.852418][ T7846] bridge_slave_1: entered promiscuous mode [ 438.124279][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.206025][ T5115] Bluetooth: hci5: command tx timeout [ 438.388312][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.396983][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 440.265590][ T7846] team0: Port device team_slave_0 added [ 440.398470][ T7846] team0: Port device team_slave_1 added [ 440.887830][ T8106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.515'. [ 441.635415][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.635435][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.635463][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.287346][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.287365][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.287393][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.291764][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.291923][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.292431][ T8008] bridge_slave_0: entered allmulticast mode [ 442.306631][ T8008] bridge_slave_0: entered promiscuous mode [ 442.422185][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.422273][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.422472][ T8008] bridge_slave_1: entered allmulticast mode [ 442.424874][ T8008] bridge_slave_1: entered promiscuous mode [ 443.890735][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.097002][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.162416][ T7846] hsr_slave_0: entered promiscuous mode [ 444.173548][ T7846] hsr_slave_1: entered promiscuous mode [ 444.200579][ T7846] debugfs: 'hsr0' already exists in 'hsr' [ 444.200610][ T7846] Cannot create hsr debugfs directory [ 444.460608][ T8008] team0: Port device team_slave_0 added [ 444.523416][ T8008] team0: Port device team_slave_1 added [ 444.722918][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.722937][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.722967][ T8008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.756328][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.756347][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.756377][ T8008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.926786][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.926861][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.523580][ T8160] fuse: Bad value for 'fd' [ 447.542236][ T8008] hsr_slave_0: entered promiscuous mode [ 447.545783][ T8008] hsr_slave_1: entered promiscuous mode [ 447.902791][ T8008] debugfs: 'hsr0' already exists in 'hsr' [ 447.902822][ T8008] Cannot create hsr debugfs directory [ 447.966207][ T6011] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 448.126243][ T6011] usb 4-1: Using ep0 maxpacket: 16 [ 448.133831][ T6011] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 448.133862][ T6011] usb 4-1: config 0 has no interface number 0 [ 448.133913][ T6011] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.133942][ T6011] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 448.196165][ T6011] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 448.196207][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 448.196230][ T6011] usb 4-1: Product: syz [ 448.196246][ T6011] usb 4-1: SerialNumber: syz [ 448.254614][ T6011] usb 4-1: config 0 descriptor?? [ 448.280269][ T6011] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 448.285622][ T6011] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11 [ 448.522713][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.526066][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.526303][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.526540][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.527395][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.527621][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.527847][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.528067][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.528911][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.529153][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.560046][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 448.560060][ T9] usb 4-1: USB disconnect, device number 3 [ 448.739526][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 464.434930][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.467571][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.483627][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.582543][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.692045][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.573313][ T6039] bridge_slave_1: left allmulticast mode [ 465.573344][ T6039] bridge_slave_1: left promiscuous mode [ 465.573608][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.682510][ T6039] bridge_slave_0: left allmulticast mode [ 465.682540][ T6039] bridge_slave_0: left promiscuous mode [ 465.682860][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.780697][ T6039] bridge_slave_1: left allmulticast mode [ 465.780730][ T6039] bridge_slave_1: left promiscuous mode [ 465.780983][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.838892][ T8282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.838906][ T8282] IPv6: NLM_F_CREATE should be set when creating new route [ 465.900347][ T6039] bridge_slave_0: left allmulticast mode [ 465.900380][ T6039] bridge_slave_0: left promiscuous mode [ 465.900646][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.442581][ T8300] fuse: Bad value for 'group_id' [ 467.442602][ T8300] fuse: Bad value for 'group_id' [ 467.463307][ T61] Bluetooth: hci0: command tx timeout [ 469.105792][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.655997][ T61] Bluetooth: hci0: command tx timeout [ 470.684212][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.762544][ T6039] bond0 (unregistering): Released all slaves [ 471.052376][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.560'. [ 472.616916][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.686005][ T61] Bluetooth: hci0: command tx timeout [ 472.702302][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.758102][ T6039] bond0 (unregistering): Released all slaves [ 473.318950][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.560'. [ 474.499695][ T8334] fuse: Bad value for 'group_id' [ 474.499718][ T8334] fuse: Bad value for 'group_id' [ 474.766007][ T61] Bluetooth: hci0: command tx timeout [ 476.861742][ T6039] hsr_slave_0: left promiscuous mode [ 477.151877][ T6039] hsr_slave_1: left promiscuous mode [ 477.152888][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.146918][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.522311][ T6039] hsr_slave_0: left promiscuous mode [ 480.649809][ T6039] hsr_slave_1: left promiscuous mode [ 480.650651][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.881274][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.726761][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 484.847314][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 486.116613][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 486.306735][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 488.901438][ T8260] chnl_net:caif_netlink_parms(): no params data found [ 490.051051][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.055496][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.080453][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.083868][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.084806][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.548349][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.548481][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.548720][ T8260] bridge_slave_0: entered allmulticast mode [ 490.551801][ T8260] bridge_slave_0: entered promiscuous mode [ 490.558275][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.558413][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.579458][ T8260] bridge_slave_1: entered allmulticast mode [ 490.602459][ T8260] bridge_slave_1: entered promiscuous mode [ 492.208074][ T5115] Bluetooth: hci1: command tx timeout [ 492.903069][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.174838][ T9] hid-generic 0003:0004:FFFF0001.0002: unknown main item tag 0x0 [ 493.466743][ T9] hid-generic 0003:0004:FFFF0001.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 494.300561][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.310190][ T5115] Bluetooth: hci1: command tx timeout [ 494.478311][ T8480] fido_id[8480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 494.520301][ T8260] team0: Port device team_slave_0 added [ 495.771838][ T8260] team0: Port device team_slave_1 added [ 496.370728][ T61] Bluetooth: hci1: command tx timeout [ 496.465994][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 496.503766][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.503783][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.503811][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.572330][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.572348][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.572376][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.646894][ T44] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 496.655005][ T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 496.655039][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 496.655061][ T44] usb 3-1: SerialNumber: syz [ 498.358088][ T44] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 498.358863][ T44] usb-storage 3-1:1.0: USB Mass Storage device detected [ 498.456041][ T61] Bluetooth: hci1: command tx timeout [ 498.550531][ T8260] hsr_slave_0: entered promiscuous mode [ 498.573468][ T44] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 498.577712][ T8260] hsr_slave_1: entered promiscuous mode [ 498.579459][ T8260] debugfs: 'hsr0' already exists in 'hsr' [ 498.579531][ T8260] Cannot create hsr debugfs directory [ 498.641843][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 498.641864][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 498.811823][ T44] usb 3-1: USB disconnect, device number 3 [ 500.780043][ T8445] chnl_net:caif_netlink_parms(): no params data found [ 500.879825][ T8539] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 502.547494][ T6039] bridge_slave_1: left allmulticast mode [ 502.547524][ T6039] bridge_slave_1: left promiscuous mode [ 502.547760][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.428050][ T5864] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 503.440418][ T6039] bridge_slave_0: left allmulticast mode [ 503.440496][ T6039] bridge_slave_0: left promiscuous mode [ 503.441308][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.846003][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 503.848427][ T5864] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 503.848455][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.848476][ T5864] usb 2-1: config 0 has no interface number 0 [ 503.886770][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 503.886802][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.886832][ T5864] usb 2-1: Product: syz [ 503.886847][ T5864] usb 2-1: Manufacturer: syz [ 503.886862][ T5864] usb 2-1: SerialNumber: syz [ 503.923729][ T6039] bridge_slave_1: left allmulticast mode [ 503.924890][ T6039] bridge_slave_1: left promiscuous mode [ 504.163215][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.580414][ T5864] usb 2-1: config 0 descriptor?? [ 504.908810][ T5864] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 504.908845][ T5864] uvcvideo 2-1:0.31: No valid video chain found. [ 504.947503][ T6039] bridge_slave_0: left allmulticast mode [ 504.947533][ T6039] bridge_slave_0: left promiscuous mode [ 504.947793][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.716143][ T6031] usb 2-1: USB disconnect, device number 3 [ 507.721650][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.722137][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.347281][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.469749][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.711914][ T6039] bond0 (unregistering): Released all slaves [ 510.416028][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 510.566167][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 510.575293][ T5886] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 510.575322][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.575342][ T5886] usb 3-1: config 0 has no interface number 0 [ 510.627373][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 510.627410][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.627425][ T5886] usb 3-1: Product: syz [ 510.627435][ T5886] usb 3-1: Manufacturer: syz [ 510.627446][ T5886] usb 3-1: SerialNumber: syz [ 510.668949][ T5886] usb 3-1: config 0 descriptor?? [ 510.695078][ T5886] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 510.695115][ T5886] uvcvideo 3-1:0.31: No valid video chain found. [ 510.787332][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.063502][ T5864] usb 3-1: USB disconnect, device number 4 [ 515.847992][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.112785][ T6039] bond0 (unregistering): Released all slaves [ 517.945522][ T8636] fuse: Unknown parameter 'grou00000000000000000000' [ 520.284547][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.284638][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.284904][ T8445] bridge_slave_0: entered allmulticast mode [ 520.317068][ T8445] bridge_slave_0: entered promiscuous mode [ 520.349487][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.349576][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.349760][ T8445] bridge_slave_1: entered allmulticast mode [ 520.393243][ T8445] bridge_slave_1: entered promiscuous mode [ 522.543740][ T6039] hsr_slave_0: left promiscuous mode [ 522.596417][ T6039] hsr_slave_1: left promiscuous mode [ 522.597438][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.639665][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.686492][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 522.846031][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 522.853287][ T6039] hsr_slave_0: left promiscuous mode [ 522.854860][ T44] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 522.890048][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.890092][ T44] usb 3-1: config 0 has no interface number 0 [ 522.906751][ T6039] hsr_slave_1: left promiscuous mode [ 522.909956][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.959972][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 522.960004][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.960024][ T44] usb 3-1: Product: syz [ 522.960038][ T44] usb 3-1: Manufacturer: syz [ 522.960052][ T44] usb 3-1: SerialNumber: syz [ 522.961543][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.039410][ T44] usb 3-1: config 0 descriptor?? [ 523.060128][ T44] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 523.060166][ T44] uvcvideo 3-1:0.31: No valid video chain found. [ 523.574869][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.601873][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.604967][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 523.623497][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 523.639614][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.434964][ T9] usb 3-1: USB disconnect, device number 5 [ 526.416128][ T61] Bluetooth: hci5: command tx timeout [ 526.484514][ T8685] fuse: Unknown parameter 'grou00000000000000000000' [ 527.815377][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 528.446298][ T61] Bluetooth: hci5: command tx timeout [ 528.452619][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 530.874246][ T61] Bluetooth: hci5: command tx timeout [ 532.976235][ T61] Bluetooth: hci5: command tx timeout [ 534.256542][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 534.520599][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 535.400514][ T8729] fuse: Unknown parameter 'grou00000000000000000000' [ 536.670243][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.568245][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.949093][ T8445] team0: Port device team_slave_0 added [ 538.024344][ T8445] team0: Port device team_slave_1 added [ 538.378636][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.378656][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.378708][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.450657][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.450671][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.450690][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.746840][ T8749] siw: device registration error -23 [ 539.062739][ T8445] hsr_slave_0: entered promiscuous mode [ 539.072565][ T8445] hsr_slave_1: entered promiscuous mode [ 539.090943][ T8445] debugfs: 'hsr0' already exists in 'hsr' [ 539.090974][ T8445] Cannot create hsr debugfs directory [ 540.739181][ T8663] chnl_net:caif_netlink_parms(): no params data found [ 542.475404][ T8784] fuse: Unknown parameter 'group_i00000000000000000000' [ 543.986296][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.986426][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.986714][ T8663] bridge_slave_0: entered allmulticast mode [ 544.033554][ T8663] bridge_slave_0: entered promiscuous mode [ 544.067009][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.067137][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.067382][ T8663] bridge_slave_1: entered allmulticast mode [ 544.112187][ T8663] bridge_slave_1: entered promiscuous mode [ 545.673756][ T8663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.829642][ T8663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.146001][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 548.291074][ T8663] team0: Port device team_slave_0 added [ 548.368322][ T8663] team0: Port device team_slave_1 added [ 549.316045][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.316062][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.316090][ T8663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.326335][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.326354][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.326383][ T8663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.396983][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 550.412602][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 550.415008][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 550.426842][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 550.427794][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 550.775163][ T8663] hsr_slave_0: entered promiscuous mode [ 550.784404][ T8663] hsr_slave_1: entered promiscuous mode [ 550.785388][ T8663] debugfs: 'hsr0' already exists in 'hsr' [ 550.785413][ T8663] Cannot create hsr debugfs directory [ 551.308556][ T8859] fuse: Unknown parameter 'group_i00000000000000000000' [ 552.526186][ T5115] Bluetooth: hci0: command tx timeout [ 554.661542][ T5115] Bluetooth: hci0: command tx timeout [ 555.962802][ T6039] bridge_slave_1: left allmulticast mode [ 555.962834][ T6039] bridge_slave_1: left promiscuous mode [ 555.963076][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.072309][ T6039] bridge_slave_0: left allmulticast mode [ 556.072333][ T6039] bridge_slave_0: left promiscuous mode [ 556.072542][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.686188][ T5115] Bluetooth: hci0: command tx timeout [ 557.767183][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.766008][ T5115] Bluetooth: hci0: command tx timeout [ 558.932263][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.407758][ T8917] fuse: Unknown parameter 'group_i00000000000000000000' [ 560.059867][ T6039] bond0 (unregistering): Released all slaves [ 560.846443][ T6039] hsr_slave_0: left promiscuous mode [ 560.886620][ T6039] hsr_slave_1: left promiscuous mode [ 560.887647][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.930671][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.866872][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 565.056763][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 565.495943][ T8959] fuse: Unknown parameter 'group_id00000000000000000000' [ 566.810106][ T8963] siw: device registration error -23 [ 569.091366][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.091442][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.183220][ T8972] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 569.715556][ T8847] chnl_net:caif_netlink_parms(): no params data found [ 572.474264][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.488697][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.488954][ T8847] bridge_slave_0: entered allmulticast mode [ 572.492605][ T8847] bridge_slave_0: entered promiscuous mode [ 572.564581][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.564716][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.564955][ T8847] bridge_slave_1: entered allmulticast mode [ 572.574380][ T8847] bridge_slave_1: entered promiscuous mode [ 574.230676][ T9015] siw: device registration error -23 [ 574.315384][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.944108][ T9010] netlink: 104 bytes leftover after parsing attributes in process `syz.1.718'. [ 576.899121][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.485196][ T8847] team0: Port device team_slave_0 added [ 578.519075][ T8663] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 578.602277][ T8847] team0: Port device team_slave_1 added [ 578.623462][ T8663] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 578.921186][ T8663] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 579.241453][ T8663] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 579.407086][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.407105][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.407135][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.561635][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.561655][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.561685][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.713665][ T9059] netlink: 'syz.1.725': attribute type 3 has an invalid length. [ 579.912765][ T8847] hsr_slave_0: entered promiscuous mode [ 579.927357][ T8847] hsr_slave_1: entered promiscuous mode [ 579.928659][ T8847] debugfs: 'hsr0' already exists in 'hsr' [ 579.928688][ T8847] Cannot create hsr debugfs directory [ 580.341086][ T9067] siw: device registration error -23 [ 582.232254][ T6039] bridge_slave_1: left allmulticast mode [ 582.232284][ T6039] bridge_slave_1: left promiscuous mode [ 582.232537][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.373295][ T6039] bridge_slave_0: left allmulticast mode [ 582.373328][ T6039] bridge_slave_0: left promiscuous mode [ 582.373602][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.838130][ T9087] fuse: Bad value for 'fd' [ 584.297012][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.417154][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.480212][ T6039] bond0 (unregistering): Released all slaves [ 587.892593][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.903023][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.029826][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.031621][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.032480][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.489518][ T6039] hsr_slave_0: left promiscuous mode [ 588.546323][ T6039] hsr_slave_1: left promiscuous mode [ 588.547090][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.607685][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.281675][ T9141] fuse: Bad value for 'fd' [ 590.219414][ T5115] Bluetooth: hci1: command tx timeout [ 590.934423][ T9157] CIFS: VFS: Malformed UNC in devname [ 590.934778][ T9157] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 590.934952][ T9157] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 592.126510][ T5886] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 592.153760][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 592.275523][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 592.285976][ T5115] Bluetooth: hci1: command tx timeout [ 592.321295][ T5886] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.323750][ T5886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 592.323782][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 592.323797][ T5886] usb 2-1: Product: syz [ 592.323808][ T5886] usb 2-1: Manufacturer: syz [ 592.323818][ T5886] usb 2-1: SerialNumber: syz [ 592.830962][ T5886] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 592.956123][ T5886] usb 2-1: USB disconnect, device number 4 [ 593.062453][ T5886] usblp0: removed [ 595.297301][ T32] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 595.315963][ T5115] Bluetooth: hci1: command tx timeout [ 595.664771][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 595.672822][ T32] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 595.672928][ T32] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0 [ 595.672992][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 595.708902][ T32] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.708935][ T32] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.708956][ T32] usb 3-1: Product: syz [ 595.708972][ T32] usb 3-1: Manufacturer: syz [ 595.708987][ T32] usb 3-1: SerialNumber: syz [ 595.758701][ T9193] fuse: Bad value for 'fd' [ 595.784379][ T32] usb 3-1: config 0 descriptor?? [ 595.845250][ T32] usb 3-1: selecting invalid altsetting 0 [ 596.543144][ T32] usb 3-1: USB disconnect, device number 6 [ 597.328527][ T61] Bluetooth: hci1: command tx timeout [ 598.788140][ T6011] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 600.296728][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 600.317086][ T6011] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 600.317116][ T6011] usb 2-1: config 0 has no interface number 0 [ 600.325123][ T6011] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 600.325167][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.325189][ T6011] usb 2-1: Product: syz [ 600.325204][ T6011] usb 2-1: Manufacturer: syz [ 600.325219][ T6011] usb 2-1: SerialNumber: syz [ 600.369209][ T9117] chnl_net:caif_netlink_parms(): no params data found [ 600.459644][ T6011] usb 2-1: config 0 descriptor?? [ 600.703837][ T6011] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 600.703909][ T6011] uvcvideo 2-1:0.31: No valid video chain found. [ 600.710396][ T8847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 600.833059][ T8847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 600.909916][ T5885] usb 2-1: USB disconnect, device number 5 [ 601.136274][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 601.286601][ T8847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 601.373062][ T8847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 601.782565][ T9267] fuse: Bad value for 'fd' [ 602.215513][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.215648][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.230725][ T9117] bridge_slave_0: entered allmulticast mode [ 602.233657][ T9117] bridge_slave_0: entered promiscuous mode [ 605.107227][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.107367][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.107630][ T9117] bridge_slave_1: entered allmulticast mode [ 605.110660][ T9117] bridge_slave_1: entered promiscuous mode [ 606.786731][ T9117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.828616][ T9117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.969594][ T9117] team0: Port device team_slave_0 added [ 607.008866][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 607.075123][ T9117] team0: Port device team_slave_1 added [ 607.256156][ T6031] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 607.374964][ T9117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.374979][ T9117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.374998][ T9117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.436133][ T6031] usb 2-1: Using ep0 maxpacket: 8 [ 607.438439][ T6031] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 607.438469][ T6031] usb 2-1: config 0 has no interface number 0 [ 607.441859][ T6031] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 607.441883][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.441898][ T6031] usb 2-1: Product: syz [ 607.441908][ T6031] usb 2-1: Manufacturer: syz [ 607.441919][ T6031] usb 2-1: SerialNumber: syz [ 607.502678][ T6031] usb 2-1: config 0 descriptor?? [ 608.266232][ T6031] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 608.266304][ T6031] uvcvideo 2-1:0.31: No valid video chain found. [ 608.274328][ T9117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.274346][ T9117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.274386][ T9117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.466934][ T6031] usb 2-1: USB disconnect, device number 6 [ 608.720760][ T9323] fuse: Bad value for 'fd' [ 608.799918][ T6039] bridge_slave_1: left allmulticast mode [ 608.799952][ T6039] bridge_slave_1: left promiscuous mode [ 608.800209][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.878312][ T6039] bridge_slave_0: left allmulticast mode [ 608.878336][ T6039] bridge_slave_0: left promiscuous mode [ 608.878577][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.010634][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.230942][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 610.251657][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 610.266083][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 610.268185][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 610.269617][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 611.688922][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.772006][ T6039] bond0 (unregistering): Released all slaves [ 612.002344][ T9117] hsr_slave_0: entered promiscuous mode [ 612.003864][ T9117] hsr_slave_1: entered promiscuous mode [ 612.004900][ T9117] debugfs: 'hsr0' already exists in 'hsr' [ 612.004926][ T9117] Cannot create hsr debugfs directory [ 612.366091][ T5115] Bluetooth: hci5: command tx timeout [ 612.612650][ T6039] hsr_slave_0: left promiscuous mode [ 612.651148][ T6039] hsr_slave_1: left promiscuous mode [ 612.652226][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.717813][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.793819][ T9355] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 614.514434][ T5115] Bluetooth: hci5: command tx timeout [ 614.539985][ T9358] fuse: Invalid rootmode [ 615.726863][ T5885] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 615.916273][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 615.919978][ T5885] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 615.920008][ T5885] usb 2-1: config 0 has no interface number 0 [ 615.950122][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 615.950157][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.950180][ T5885] usb 2-1: Product: syz [ 615.950196][ T5885] usb 2-1: Manufacturer: syz [ 615.950212][ T5885] usb 2-1: SerialNumber: syz [ 616.010426][ T5885] usb 2-1: config 0 descriptor?? [ 616.719135][ T5115] Bluetooth: hci5: command tx timeout [ 616.746249][ T5885] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 616.746317][ T5885] uvcvideo 2-1:0.31: No valid video chain found. [ 617.025591][ T5885] usb 2-1: USB disconnect, device number 7 [ 618.418572][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 618.589381][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 618.765992][ T5115] Bluetooth: hci5: command tx timeout [ 619.772893][ T9393] fuse: Invalid rootmode [ 620.994906][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 624.418467][ T807] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 624.652022][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 624.955998][ T807] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 624.957008][ T807] usb 4-1: config 0 has no interface number 0 [ 625.179526][ T807] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 625.179560][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.179586][ T807] usb 4-1: Product: syz [ 625.179602][ T807] usb 4-1: Manufacturer: syz [ 625.179612][ T807] usb 4-1: SerialNumber: syz [ 625.183597][ T807] usb 4-1: config 0 descriptor?? [ 625.569436][ T807] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 625.569532][ T807] uvcvideo 4-1:0.31: No valid video chain found. [ 625.574654][ T807] usb 4-1: USB disconnect, device number 4 [ 628.644375][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 629.323332][ T9334] chnl_net:caif_netlink_parms(): no params data found [ 630.947819][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.947894][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.423986][ T32] hid-generic 0003:0004:FFFF0001.0003: unknown main item tag 0x0 [ 632.453322][ T32] hid-generic 0003:0004:FFFF0001.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 632.696171][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 633.076790][ T9503] overlayfs: failed to resolve './file0': -2 [ 634.551118][ T9498] fido_id[9498]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 634.759509][ T9502] nbd2: detected capacity change from 0 to 63 [ 634.795999][ T9507] block nbd2: NBD_DISCONNECT [ 634.799152][ T9507] block nbd2: Disconnected due to user request. [ 634.799176][ T9507] block nbd2: shutting down sockets [ 634.840457][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.840591][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 634.862106][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.862223][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 634.862983][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.863056][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 634.863236][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.863312][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 634.942355][ T9431] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.942396][ T9431] Buffer I/O error on dev nbd2, logical block 0, async page read [ 634.942533][ T9431] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.942559][ T9431] Buffer I/O error on dev nbd2, logical block 1, async page read [ 634.942612][ T9431] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.942636][ T9431] Buffer I/O error on dev nbd2, logical block 2, async page read [ 634.942686][ T9431] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.942710][ T9431] Buffer I/O error on dev nbd2, logical block 3, async page read [ 634.942775][ T9431] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.942800][ T9431] Buffer I/O error on dev nbd2, logical block 0, async page read [ 634.942936][ T9431] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.942965][ T9431] Buffer I/O error on dev nbd2, logical block 1, async page read [ 634.944062][ T9431] ldm_validate_partition_table(): Disk read failed. [ 634.944827][ T9431] Dev nbd2: unable to read RDB block 0 [ 634.945738][ T9431] nbd2: unable to read partition table [ 635.131968][ T9431] ldm_validate_partition_table(): Disk read failed. [ 635.132723][ T9431] Dev nbd2: unable to read RDB block 0 [ 635.133648][ T9431] nbd2: unable to read partition table [ 636.102126][ T5989] hid-generic 0003:0004:FFFF0001.0004: unknown main item tag 0x0 [ 636.121179][ T5989] hid-generic 0003:0004:FFFF0001.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 636.190768][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 637.885190][ T9537] overlayfs: failed to resolve './file0': -2 [ 639.755195][ T9540] fido_id[9540]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 642.360683][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.838'. [ 642.484248][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.519665][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.520348][ T9334] bridge_slave_0: entered allmulticast mode [ 642.715755][ T9334] bridge_slave_0: entered promiscuous mode [ 642.831265][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.833598][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.833828][ T9334] bridge_slave_1: entered allmulticast mode [ 642.868563][ T9334] bridge_slave_1: entered promiscuous mode [ 642.932796][ T9117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 644.056067][ T9117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 644.208755][ T9334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.212249][ T9117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 644.455251][ T9334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.466308][ T9117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 644.774221][ T9334] team0: Port device team_slave_0 added [ 644.814410][ T9334] team0: Port device team_slave_1 added [ 644.909378][ T9580] ceph: No mds server is up or the cluster is laggy [ 645.121975][ T6039] bridge_slave_1: left allmulticast mode [ 645.122005][ T6039] bridge_slave_1: left promiscuous mode [ 645.122332][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.278520][ T6039] bridge_slave_0: left allmulticast mode [ 645.278545][ T6039] bridge_slave_0: left promiscuous mode [ 645.278781][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.748928][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 647.674358][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.817267][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 648.397045][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 648.406705][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 648.436820][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 650.606114][ T61] Bluetooth: hci0: command tx timeout [ 651.302707][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 651.326482][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 651.367745][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 651.373933][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 651.638340][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 651.639862][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 651.954485][ T9630] ceph: No mds server is up or the cluster is laggy [ 652.151583][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 652.152306][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 652.686054][ T61] Bluetooth: hci0: command tx timeout [ 653.740319][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.008654][ T9648] fuse: Unknown parameter 'use00000000000000000000' [ 654.047967][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.129592][ T6039] bond0 (unregistering): Released all slaves [ 654.148122][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.148136][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.148156][ T9334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.667392][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.667411][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.667440][ T9334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.766071][ T61] Bluetooth: hci0: command tx timeout [ 654.942027][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 655.040143][ T6039] hsr_slave_0: left promiscuous mode [ 655.065962][ T6039] hsr_slave_1: left promiscuous mode [ 655.067035][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.101832][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.869276][ T9661] ceph: No mds server is up or the cluster is laggy [ 656.588363][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 657.727222][ T61] Bluetooth: hci0: command tx timeout [ 657.867684][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 658.730525][ T9684] fuse: Unknown parameter 'use00000000000000000000' [ 658.989049][ T9334] hsr_slave_0: entered promiscuous mode [ 658.995551][ T9334] hsr_slave_1: entered promiscuous mode [ 658.998845][ T9334] debugfs: 'hsr0' already exists in 'hsr' [ 658.998940][ T9334] Cannot create hsr debugfs directory [ 660.593731][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 660.606573][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 660.880916][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 660.889598][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 661.053047][ T9699] ceph: No mds server is up or the cluster is laggy [ 661.406777][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 661.407563][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 665.375337][ T9614] chnl_net:caif_netlink_parms(): no params data found [ 665.519191][ T9735] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 665.591235][ T9736] overlayfs: missing 'lowerdir' [ 665.826036][ T9737] overlayfs: overlapping lowerdir path [ 666.484545][ T9742] fuse: Unknown parameter 'use00000000000000000000' [ 668.213286][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.233289][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.233603][ T9614] bridge_slave_0: entered allmulticast mode [ 668.262458][ T9614] bridge_slave_0: entered promiscuous mode [ 668.461595][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.461752][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.461948][ T9614] bridge_slave_1: entered allmulticast mode [ 668.511789][ T9614] bridge_slave_1: entered promiscuous mode [ 670.129213][ T32] hid-generic 0003:0004:FFFF0001.0005: unknown main item tag 0x0 [ 670.209126][ T32] hid-generic 0003:0004:FFFF0001.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 670.659493][ T9774] fido_id[9774]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 671.057875][ T9614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.132881][ T9614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.974666][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.992070][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.993414][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.994903][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 673.003786][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 673.143597][ T9797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 673.372079][ T9803] netlink: 'syz.3.890': attribute type 1 has an invalid length. [ 673.806117][ T9804] overlayfs: missing 'lowerdir' [ 673.847451][ T9805] overlayfs: overlapping lowerdir path [ 674.439505][ T9614] team0: Port device team_slave_0 added [ 674.444404][ T9614] team0: Port device team_slave_1 added [ 675.202465][ T61] Bluetooth: hci1: command tx timeout [ 676.160725][ T9821] fuse: Unknown parameter 'user_i00000000000000000000' [ 677.246239][ T5115] Bluetooth: hci1: command tx timeout [ 679.247105][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.247124][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.247154][ T9614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.335968][ T61] Bluetooth: hci1: command tx timeout [ 679.341538][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.341557][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.341586][ T9614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.595247][ T6011] hid-generic 0003:0004:FFFF0001.0006: unknown main item tag 0x0 [ 679.616380][ T6011] hid-generic 0003:0004:FFFF0001.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 679.966625][ T9614] hsr_slave_0: entered promiscuous mode [ 679.967698][ T9614] hsr_slave_1: entered promiscuous mode [ 679.968414][ T9614] debugfs: 'hsr0' already exists in 'hsr' [ 679.968448][ T9614] Cannot create hsr debugfs directory [ 682.491639][ T61] Bluetooth: hci1: command tx timeout [ 682.617003][ T9843] fido_id[9843]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 682.650929][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 684.250541][ T9866] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 684.250602][ T9866] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 684.250629][ T9866] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 684.733763][ T9872] fuse: Unknown parameter 'user_i00000000000000000000' [ 685.457603][ T6039] bridge_slave_1: left allmulticast mode [ 685.457628][ T6039] bridge_slave_1: left promiscuous mode [ 685.457803][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.527832][ T6039] bridge_slave_0: left allmulticast mode [ 685.527857][ T6039] bridge_slave_0: left promiscuous mode [ 685.528068][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.882463][ T5885] hid-generic 0003:0004:FFFF0001.0007: unknown main item tag 0x0 [ 685.993850][ T5885] hid-generic 0003:0004:FFFF0001.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 687.249382][ T9881] fido_id[9881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 688.626873][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.651056][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 688.746827][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.844084][ T6039] bond0 (unregistering): Released all slaves [ 689.403473][ T9901] fuse: Unknown parameter 'user_i00000000000000000000' [ 690.437681][ T6039] hsr_slave_0: left promiscuous mode [ 691.501721][ T32] hid-generic 0003:0004:FFFF0001.0008: unknown main item tag 0x0 [ 691.548046][ T32] hid-generic 0003:0004:FFFF0001.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 692.719886][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.719958][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.854434][ T6039] hsr_slave_1: left promiscuous mode [ 692.864348][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.186380][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.226636][ T9928] fido_id[9928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 695.499139][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 695.718706][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 695.766613][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 696.157096][ T9954] fuse: Unknown parameter 'user_id00000000000000000000' [ 697.129900][ T9793] chnl_net:caif_netlink_parms(): no params data found [ 697.611461][ T32] hid-generic 0003:0004:FFFF0001.0009: unknown main item tag 0x0 [ 697.628259][ T32] hid-generic 0003:0004:FFFF0001.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 699.484360][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 699.942475][ T9991] fuse: Unknown parameter 'user_id00000000000000000000' [ 700.516770][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.516860][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.517050][ T9793] bridge_slave_0: entered allmulticast mode [ 700.521287][ T9793] bridge_slave_0: entered promiscuous mode [ 700.754760][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 701.027652][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.027745][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.027957][ T9793] bridge_slave_1: entered allmulticast mode [ 701.030111][ T9793] bridge_slave_1: entered promiscuous mode [ 701.220881][ T9793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.280665][ T9793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.253414][ T9793] team0: Port device team_slave_0 added [ 703.418550][ T9793] team0: Port device team_slave_1 added [ 704.789820][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.789839][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.789868][ T9793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.036853][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.036868][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.036888][ T9793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.859375][ T9793] hsr_slave_0: entered promiscuous mode [ 706.066525][ T9793] hsr_slave_1: entered promiscuous mode [ 706.067568][ T9793] debugfs: 'hsr0' already exists in 'hsr' [ 706.067594][ T9793] Cannot create hsr debugfs directory [ 706.090828][T10011] hid-generic 0003:0004:FFFF0001.000A: unknown main item tag 0x0 [ 706.110361][T10011] hid-generic 0003:0004:FFFF0001.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 707.593419][T10025] tipc: Enabling of bearer rejected, failed to enable media [ 707.779920][T10021] fido_id[10021]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 708.297900][T10029] fuse: Unknown parameter 'user_id00000000000000000000' [ 708.383652][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 708.403249][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 708.418806][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 708.420048][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 708.430086][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 708.656902][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 710.530094][ T61] Bluetooth: hci5: command tx timeout [ 710.757431][ T5864] hid-generic 0003:0004:FFFF0001.000B: unknown main item tag 0x0 [ 710.794700][ T5864] hid-generic 0003:0004:FFFF0001.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 711.334430][T10062] fido_id[10062]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 712.527611][ T6039] bridge_slave_1: left allmulticast mode [ 712.527642][ T6039] bridge_slave_1: left promiscuous mode [ 712.529575][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.616181][ T61] Bluetooth: hci5: command tx timeout [ 712.650463][ T6039] bridge_slave_0: left allmulticast mode [ 712.650496][ T6039] bridge_slave_0: left promiscuous mode [ 712.650783][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.102205][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.199640][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.231635][T10078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.950'. [ 713.231804][T10078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.950'. [ 713.286748][ T6039] bond0 (unregistering): Released all slaves [ 713.575575][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 714.005919][T10086] fuse: Bad value for 'fd' [ 714.111394][T10011] hid-generic 0003:0004:FFFF0001.000C: unknown main item tag 0x0 [ 715.057620][ T61] Bluetooth: hci5: command tx timeout [ 715.102218][T10011] hid-generic 0003:0004:FFFF0001.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 715.368494][T10094] fido_id[10094]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 715.697178][ T6039] hsr_slave_0: left promiscuous mode [ 716.846012][ T6039] hsr_slave_1: left promiscuous mode [ 716.847011][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.091300][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.096062][ T61] Bluetooth: hci5: command tx timeout [ 717.650804][T10108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.959'. [ 717.651059][T10108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.959'. [ 718.656597][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 718.926927][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 721.478224][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.963'. [ 721.729039][T10030] chnl_net:caif_netlink_parms(): no params data found [ 722.013766][ T44] hid-generic 0003:0004:FFFF0001.000D: unknown main item tag 0x0 [ 722.032961][ T44] hid-generic 0003:0004:FFFF0001.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 722.574574][T10133] fido_id[10133]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 723.306728][T10139] fuse: Bad value for 'fd' [ 724.104838][T10030] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.104973][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.105539][T10030] bridge_slave_0: entered allmulticast mode [ 724.146056][T10030] bridge_slave_0: entered promiscuous mode [ 724.162041][ T9793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 724.343161][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.343381][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.343601][T10030] bridge_slave_1: entered allmulticast mode [ 724.352609][T10030] bridge_slave_1: entered promiscuous mode [ 724.419751][ T9793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 724.466240][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.968'. [ 724.466477][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.968'. [ 724.662284][ T9793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 724.882326][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 724.909105][ T9793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 725.169755][T10030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.274487][T10030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.083521][T10030] team0: Port device team_slave_0 added [ 726.105560][T10030] team0: Port device team_slave_1 added [ 726.731874][T10030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.731902][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.731932][T10030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.786987][T10030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.787001][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.787021][T10030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.202778][T10030] hsr_slave_0: entered promiscuous mode [ 727.203846][T10030] hsr_slave_1: entered promiscuous mode [ 727.209043][T10030] debugfs: 'hsr0' already exists in 'hsr' [ 727.209118][T10030] Cannot create hsr debugfs directory [ 727.912114][ T5864] hid-generic 0003:0004:FFFF0001.000E: unknown main item tag 0x0 [ 727.915617][ T5864] hid-generic 0003:0004:FFFF0001.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 729.597084][ T6039] bridge_slave_1: left allmulticast mode [ 729.597115][ T6039] bridge_slave_1: left promiscuous mode [ 729.597396][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.944253][ T6039] bridge_slave_0: left allmulticast mode [ 729.944288][ T6039] bridge_slave_0: left promiscuous mode [ 729.944597][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.966432][T10196] fuse: Bad value for 'fd' [ 729.991863][T10201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.980'. [ 729.992054][T10201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.980'. [ 730.128181][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 730.666424][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.856744][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.956415][ T6039] bond0 (unregistering): Released all slaves [ 731.935985][ T6039] hsr_slave_0: left promiscuous mode [ 731.996184][ T6039] hsr_slave_1: left promiscuous mode [ 731.997263][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.054045][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.727646][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.746712][ T5864] hid-generic 0003:0004:FFFF0001.000F: unknown main item tag 0x0 [ 732.748746][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.752806][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.781925][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.808744][ T5864] hid-generic 0003:0004:FFFF0001.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 732.875345][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.217416][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.989'. [ 733.217781][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.989'. [ 733.516777][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 735.026293][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 735.283007][ T61] Bluetooth: hci0: command tx timeout [ 735.527463][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 736.885363][T10268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.999'. [ 736.885727][T10268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.999'. [ 737.335970][ T61] Bluetooth: hci0: command tx timeout [ 739.405839][ T61] Bluetooth: hci0: command tx timeout [ 739.951957][ T5885] hid-generic 0003:0004:FFFF0001.0010: unknown main item tag 0x0 [ 740.397927][ T5885] hid-generic 0003:0004:FFFF0001.0010: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 741.485880][ T61] Bluetooth: hci0: command tx timeout [ 742.133461][T10287] fido_id[10287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 743.804018][T10300] fuse: Unknown parameter '0x0000000000000004' [ 752.466688][T10030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 752.547428][T10030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 753.177866][T10030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 753.249154][T10030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 753.299346][T10223] chnl_net:caif_netlink_parms(): no params data found [ 753.413668][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.413721][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.127889][T10366] fuse: Unknown parameter '0x0000000000000004' [ 758.920234][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.920457][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.920702][T10223] bridge_slave_0: entered allmulticast mode [ 758.923511][T10223] bridge_slave_0: entered promiscuous mode [ 758.968007][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.968167][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.968374][T10223] bridge_slave_1: entered allmulticast mode [ 758.971329][T10223] bridge_slave_1: entered promiscuous mode [ 759.169551][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.243134][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.447398][T10223] team0: Port device team_slave_0 added [ 759.534467][T10223] team0: Port device team_slave_1 added [ 759.590554][ T6033] bridge_slave_1: left allmulticast mode [ 759.590585][ T6033] bridge_slave_1: left promiscuous mode [ 759.590853][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.686941][ T6033] bridge_slave_0: left allmulticast mode [ 759.686966][ T6033] bridge_slave_0: left promiscuous mode [ 759.687189][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.455638][T10411] fuse: Unknown parameter '0x0000000000000004' [ 763.276014][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 763.466467][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 764.028242][ T5885] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 764.040783][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.040850][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 764.040932][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 764.040960][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.041049][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 764.041108][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.426058][ T5885] usb 4-1: usb_control_msg returned -71 [ 766.426113][ T5885] usbtmc 4-1:16.0: can't read capabilities [ 766.457792][ T5885] usb 4-1: USB disconnect, device number 5 [ 767.928864][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.036860][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.099368][ T6033] bond0 (unregistering): Released all slaves [ 768.348565][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.348579][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.348600][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.413310][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.413323][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.413345][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.830587][ T6033] hsr_slave_0: left promiscuous mode [ 769.853599][ T6033] hsr_slave_1: left promiscuous mode [ 769.854604][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.036875][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.351374][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 770.351412][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 770.952855][T10452] input: syz1 as /devices/virtual/input/input12 [ 771.133033][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 771.162918][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 771.189760][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 771.192927][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 771.193871][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 772.776799][T10460] fuse: Unknown parameter '0x0000000000000004' [ 772.926765][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 773.089401][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 773.280841][T10465] "syz.3.1042" (10465) uses obsolete ecb(arc4) skcipher [ 773.407624][ T61] Bluetooth: hci1: command tx timeout [ 775.486169][ T61] Bluetooth: hci1: command tx timeout [ 776.231700][T10223] hsr_slave_0: entered promiscuous mode [ 776.233115][T10223] hsr_slave_1: entered promiscuous mode [ 776.234140][T10223] debugfs: 'hsr0' already exists in 'hsr' [ 776.234166][T10223] Cannot create hsr debugfs directory [ 777.566117][ T61] Bluetooth: hci1: command tx timeout [ 779.215659][T10502] fuse: Unknown parameter '0x0000000000000004' [ 779.646027][ T61] Bluetooth: hci1: command tx timeout [ 783.933320][T10448] chnl_net:caif_netlink_parms(): no params data found [ 785.764814][T10550] fuse: Unknown parameter 'fd0x0000000000000004' [ 788.317786][T10448] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.318006][T10448] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.318236][T10448] bridge_slave_0: entered allmulticast mode [ 788.398467][T10448] bridge_slave_0: entered promiscuous mode [ 788.611750][T10448] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.611863][T10448] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.612089][T10448] bridge_slave_1: entered allmulticast mode [ 788.655542][T10448] bridge_slave_1: entered promiscuous mode [ 788.859520][T10448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.889255][T10448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.956879][T10223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 791.199515][T10223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 791.726733][T10597] fuse: Unknown parameter 'fd0x0000000000000004' [ 791.792586][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 792.794640][T10223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 794.662124][T10596] syz.3.1072 (10596): drop_caches: 3 [ 794.772425][T10448] team0: Port device team_slave_0 added [ 794.801425][T10448] team0: Port device team_slave_1 added [ 794.941004][T10448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.941030][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.941061][T10448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.001767][T10448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.001786][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.001817][T10448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.002678][ T6033] bridge_slave_1: left allmulticast mode [ 795.002705][ T6033] bridge_slave_1: left promiscuous mode [ 795.002967][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.133723][ T6033] bridge_slave_0: left allmulticast mode [ 795.133755][ T6033] bridge_slave_0: left promiscuous mode [ 795.148091][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.567707][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.584031][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.587541][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.600484][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.603422][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 800.016589][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.080494][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.128032][ T6033] bond0 (unregistering): Released all slaves [ 801.641264][ T5115] Bluetooth: hci0: command tx timeout [ 803.685786][ T5115] Bluetooth: hci0: command tx timeout [ 803.716287][T10650] fuse: Unknown parameter 'fd0x0000000000000004' [ 803.981051][ T6033] hsr_slave_0: left promiscuous mode [ 804.032562][ T6033] hsr_slave_1: left promiscuous mode [ 804.033555][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.078197][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.731079][ T5115] Bluetooth: hci0: command tx timeout [ 806.816680][T10679] trusted_key: encrypted_key: insufficient parameters specified [ 807.827678][ T5115] Bluetooth: hci0: command tx timeout [ 808.041048][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 808.601558][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 809.642673][T10677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.651206][T10677] bond0: (slave rose0): Enslaving as an active interface with an up link [ 809.893482][T10448] hsr_slave_0: entered promiscuous mode [ 809.894492][T10448] hsr_slave_1: entered promiscuous mode [ 809.895239][T10448] debugfs: 'hsr0' already exists in 'hsr' [ 809.895258][T10448] Cannot create hsr debugfs directory [ 815.039372][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.040129][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.181060][T10744] siw: device registration error -23 [ 818.283274][T10753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 819.016552][T10626] chnl_net:caif_netlink_parms(): no params data found [ 819.965570][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.969586][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.970414][T10626] bridge_slave_0: entered allmulticast mode [ 820.001369][T10626] bridge_slave_0: entered promiscuous mode [ 820.285209][T10626] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.285426][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.285671][T10626] bridge_slave_1: entered allmulticast mode [ 820.289554][T10626] bridge_slave_1: entered promiscuous mode [ 820.674637][T10626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.675315][T10448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 820.734155][T10626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.745321][T10448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 820.829108][T10448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 821.385315][T10448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 821.435175][T10626] team0: Port device team_slave_0 added [ 821.480689][T10626] team0: Port device team_slave_1 added [ 821.699074][T10626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.699094][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.699127][T10626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.065096][T10626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.065117][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.065148][T10626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.332484][ T6033] bridge_slave_1: left allmulticast mode [ 822.332515][ T6033] bridge_slave_1: left promiscuous mode [ 822.332776][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.456948][ T6033] bridge_slave_0: left allmulticast mode [ 822.456975][ T6033] bridge_slave_0: left promiscuous mode [ 822.457240][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.546260][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1118'. [ 823.897524][T10798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.038033][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.175507][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.226004][ T6011] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 824.303408][ T6033] bond0 (unregistering): Released all slaves [ 824.393127][ T6011] usb 4-1: Using ep0 maxpacket: 16 [ 824.410779][ T6011] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 824.410815][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.410932][ T6011] usb 4-1: Product: syz [ 824.410950][ T6011] usb 4-1: Manufacturer: syz [ 824.410968][ T6011] usb 4-1: SerialNumber: syz [ 824.459301][ T6011] usb 4-1: config 0 descriptor?? [ 824.540510][ T6011] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 824.568529][ T6011] usb 4-1: Detected FT232B [ 824.861827][T10626] hsr_slave_0: entered promiscuous mode [ 824.875416][T10626] hsr_slave_1: entered promiscuous mode [ 824.883260][T10626] debugfs: 'hsr0' already exists in 'hsr' [ 824.883289][T10626] Cannot create hsr debugfs directory [ 825.607713][ T6033] hsr_slave_0: left promiscuous mode [ 825.662476][ T6033] hsr_slave_1: left promiscuous mode [ 825.663725][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.689957][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.759326][T10817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1127'. [ 827.017911][ T6011] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 827.024106][ T6011] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 827.120772][ T6011] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 827.159859][ T6011] usb 4-1: USB disconnect, device number 6 [ 827.391758][ T6011] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 827.393076][ T6011] ftdi_sio 4-1:0.0: device disconnected [ 828.632099][T10831] siw: device registration error -23 [ 828.806810][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 828.996769][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 829.799304][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1136'. [ 830.927724][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 830.947751][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 830.949232][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 830.953496][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 830.954609][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 831.761504][T10857] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1139'. [ 833.193336][ T5115] Bluetooth: hci5: command tx timeout [ 833.734534][T10873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1145'. [ 835.351748][ T5115] Bluetooth: hci5: command tx timeout [ 836.094049][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 836.542741][T10905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1154'. [ 837.406322][ T61] Bluetooth: hci5: command tx timeout [ 838.965911][ T6011] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 839.118707][ T6011] usb 4-1: config index 0 descriptor too short (expected 65069, got 45) [ 839.118740][ T6011] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 839.118765][ T6011] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 839.118780][ T6011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.118794][ T6011] usb 4-1: config 0 has no interfaces? [ 839.118817][ T6011] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 839.118834][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.122437][ T6011] usb 4-1: config 0 descriptor?? [ 839.230244][T10923] siw: device registration error -23 [ 839.485920][ T61] Bluetooth: hci5: command tx timeout [ 841.600011][T10848] chnl_net:caif_netlink_parms(): no params data found [ 841.822958][T10429] usb 4-1: USB disconnect, device number 7 [ 841.958774][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1163'. [ 842.375851][T10429] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 842.549512][T10429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.549566][T10429] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 842.549590][T10429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.092742][T10429] usb 2-1: config 0 descriptor?? [ 843.360804][T10429] usbhid 2-1:0.0: can't add hid device: -71 [ 843.361053][T10429] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 843.451108][T10429] usb 2-1: USB disconnect, device number 8 [ 843.925981][T10429] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 844.087890][T10429] usb 2-1: Using ep0 maxpacket: 32 [ 844.102015][T10429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.102068][T10429] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 844.102094][T10429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.144525][T10429] usb 2-1: config 0 descriptor?? [ 844.162982][T10429] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 844.185058][T10626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 844.198466][T10429] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 844.261768][T10626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 844.341749][T10626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 844.391259][T10848] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.392363][T10848] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.392688][T10848] bridge_slave_0: entered allmulticast mode [ 844.398873][T10848] bridge_slave_0: entered promiscuous mode [ 844.422787][T10626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 844.482675][T10848] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.482805][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.483021][T10848] bridge_slave_1: entered allmulticast mode [ 844.493653][T10848] bridge_slave_1: entered promiscuous mode [ 844.584387][T10011] usb 2-1: USB disconnect, device number 9 [ 844.604008][T10011] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 844.789587][T10848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.817403][T10848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.012663][T10848] team0: Port device team_slave_0 added [ 845.054896][T10848] team0: Port device team_slave_1 added [ 845.138672][ T6033] bridge_slave_1: left allmulticast mode [ 845.138704][ T6033] bridge_slave_1: left promiscuous mode [ 845.138999][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.220846][ T6033] bridge_slave_0: left allmulticast mode [ 845.220877][ T6033] bridge_slave_0: left promiscuous mode [ 845.221180][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.416018][ T6011] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 845.818358][T10964] syz.2.1171 (10964): drop_caches: 3 [ 845.821029][ T6011] usb 4-1: config index 0 descriptor too short (expected 65069, got 45) [ 845.821077][ T6011] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 845.821100][ T6011] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 845.821123][ T6011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.821143][ T6011] usb 4-1: config 0 has no interfaces? [ 845.821175][ T6011] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 845.821192][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.843842][ T6011] usb 4-1: config 0 descriptor?? [ 848.589241][ T5886] usb 4-1: USB disconnect, device number 8 [ 848.676308][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.824090][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.962489][T10996] siw: device registration error -23 [ 848.999511][ T6033] bond0 (unregistering): Released all slaves [ 852.342966][T10848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.342987][T10848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.343023][T10848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.419419][T10848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.419434][T10848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.419455][T10848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.138988][ T6033] hsr_slave_0: left promiscuous mode [ 853.195976][ T6033] hsr_slave_1: left promiscuous mode [ 853.196991][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.250860][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.350862][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 856.589153][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 858.087073][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 858.126536][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 858.131199][T10848] hsr_slave_0: entered promiscuous mode [ 858.185950][T10848] hsr_slave_1: entered promiscuous mode [ 858.187031][T10848] debugfs: 'hsr0' already exists in 'hsr' [ 858.187060][T10848] Cannot create hsr debugfs directory [ 858.188303][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 858.191737][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 858.198206][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.466058][ T6011] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 859.656012][ T6011] usb 2-1: Using ep0 maxpacket: 16 [ 859.698208][ T6011] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 859.698244][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.698266][ T6011] usb 2-1: Product: syz [ 859.698282][ T6011] usb 2-1: Manufacturer: syz [ 859.698298][ T6011] usb 2-1: SerialNumber: syz [ 859.757808][ T6011] usb 2-1: config 0 descriptor?? [ 859.775668][ T6011] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 859.822129][ T6011] usb 2-1: Detected FT232B [ 859.996027][ T6011] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 859.996914][ T6011] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 860.027884][ T6011] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 860.067988][ T6011] usb 2-1: USB disconnect, device number 10 [ 860.135175][ T6011] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 860.198285][ T6011] ftdi_sio 2-1:0.0: device disconnected [ 860.449450][ T5115] Bluetooth: hci1: command tx timeout [ 861.145888][ T5886] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 861.162533][T11069] siw: device registration error -23 [ 861.347818][ T5886] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 861.347851][ T5886] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 861.347876][ T5886] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 861.347899][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.347919][ T5886] usb 2-1: config 0 has no interfaces? [ 861.347953][ T5886] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 861.347979][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.476879][ T5886] usb 2-1: config 0 descriptor?? [ 862.897676][ T5115] Bluetooth: hci4: unexpected event for opcode 0x040d [ 863.059307][ T5115] Bluetooth: hci1: command tx timeout [ 864.078821][ T6011] usb 2-1: USB disconnect, device number 11 [ 866.087071][ T5115] Bluetooth: hci1: command tx timeout [ 867.267635][T11040] chnl_net:caif_netlink_parms(): no params data found [ 868.324296][ T5115] Bluetooth: hci1: command tx timeout [ 869.724801][T11107] siw: device registration error -23 [ 871.666447][T11040] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.666595][T11040] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.666846][T11040] bridge_slave_0: entered allmulticast mode [ 871.669833][T11040] bridge_slave_0: entered promiscuous mode [ 872.051196][T11040] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.051334][T11040] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.051566][T11040] bridge_slave_1: entered allmulticast mode [ 872.054274][T11040] bridge_slave_1: entered promiscuous mode [ 872.330473][T11040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.343743][T10848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 872.399560][T11040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.409221][T10848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 872.551979][T10848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 872.659458][T10848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 872.788896][T11040] team0: Port device team_slave_0 added [ 872.855600][T11040] team0: Port device team_slave_1 added [ 872.938039][ T6033] bridge_slave_1: left allmulticast mode [ 872.938072][ T6033] bridge_slave_1: left promiscuous mode [ 872.938301][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.059544][ T6033] bridge_slave_0: left allmulticast mode [ 873.059571][ T6033] bridge_slave_0: left promiscuous mode [ 873.059773][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.126421][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.269079][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.617765][ T6033] bond0 (unregistering): Released all slaves [ 874.680950][T11040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.680970][T11040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.681002][T11040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.766851][T11040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.766871][T11040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.766903][T11040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.133415][T11040] hsr_slave_0: entered promiscuous mode [ 875.144911][T11040] hsr_slave_1: entered promiscuous mode [ 875.318555][T11040] debugfs: 'hsr0' already exists in 'hsr' [ 875.318588][T11040] Cannot create hsr debugfs directory [ 876.303133][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.303187][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.156017][ T6033] hsr_slave_0: left promiscuous mode [ 879.176145][ T6033] hsr_slave_1: left promiscuous mode [ 879.177229][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.227453][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.936543][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 882.659623][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 882.675989][T10820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 882.842682][T10820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.842737][T10820] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 882.842765][T10820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.851159][T10820] usb 4-1: config 0 descriptor?? [ 882.984267][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'. [ 883.115273][T10820] usbhid 4-1:0.0: can't add hid device: -71 [ 883.142110][T10820] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 883.162295][T10820] usb 4-1: USB disconnect, device number 9 [ 884.534703][T10820] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 885.177318][T10820] usb 4-1: Using ep0 maxpacket: 32 [ 885.197275][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 885.197653][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 885.198004][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 885.199538][T10820] usb 4-1: device descriptor read/all, error -32 [ 885.286668][T11209] siw: device registration error -23 [ 887.685045][T10848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.767887][T10848] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.798161][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.798433][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.849448][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.849600][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.066028][ T5886] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 889.220511][ T5886] usb 4-1: config index 0 descriptor too short (expected 65069, got 45) [ 889.220545][ T5886] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 889.220569][ T5886] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 889.220592][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.220612][ T5886] usb 4-1: config 0 has no interfaces? [ 889.220645][ T5886] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 889.220670][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.335923][ T5886] usb 4-1: config 0 descriptor?? [ 889.473200][T10848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.508962][T11040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 891.582745][T11040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 891.625897][T11040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 891.710264][T11040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 891.900510][ T5886] usb 4-1: USB disconnect, device number 12 [ 892.045382][T11284] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1262'. [ 892.689546][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 892.869889][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 892.900330][ T5885] hid-generic 0003:0004:FFFF0001.0011: unknown main item tag 0x0 [ 893.122511][ T5885] hid-generic 0003:0004:FFFF0001.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 893.176047][T10227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 893.207040][T10227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 893.207849][T10227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 893.350423][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'. [ 893.657708][T11299] fido_id[11299]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 895.035980][ T6031] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 895.192397][ T6031] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 895.192430][ T6031] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 895.192453][ T6031] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 895.192475][ T6031] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.192496][ T6031] usb 3-1: config 0 has no interfaces? [ 895.192531][ T6031] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 895.192558][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.321426][ T6031] usb 3-1: config 0 descriptor?? [ 895.325920][T10227] Bluetooth: hci0: command tx timeout [ 897.096375][T11040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.405913][T10227] Bluetooth: hci0: command tx timeout [ 897.794989][T11344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1274'. [ 898.071069][T10429] usb 3-1: USB disconnect, device number 7 [ 898.369532][T11348] siw: device registration error -23 [ 898.631272][T10429] hid-generic 0003:0004:FFFF0001.0012: unknown main item tag 0x0 [ 898.651523][T11040] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.834968][T10429] hid-generic 0003:0004:FFFF0001.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 900.143253][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.143408][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.200387][T10227] Bluetooth: hci0: command tx timeout [ 900.401627][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.401799][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.649693][T11359] fido_id[11359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 901.132145][T11292] chnl_net:caif_netlink_parms(): no params data found [ 902.205963][T10227] Bluetooth: hci0: command tx timeout [ 902.308576][T11390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1283'. [ 902.335551][ T6035] bridge_slave_1: left allmulticast mode [ 902.335584][ T6035] bridge_slave_1: left promiscuous mode [ 902.337682][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.499384][ T6035] bridge_slave_0: left allmulticast mode [ 902.499418][ T6035] bridge_slave_0: left promiscuous mode [ 902.499715][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.105898][T10011] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 904.432344][T10011] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 904.432377][T10011] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 904.432401][T10011] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 904.432423][T10011] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.432444][T10011] usb 2-1: config 0 has no interfaces? [ 904.432478][T10011] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 904.432503][T10011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.474294][T10011] usb 2-1: config 0 descriptor?? [ 907.221187][ T44] usb 2-1: USB disconnect, device number 12 [ 908.655054][T10429] hid-generic 0003:0004:FFFF0001.0013: unknown main item tag 0x0 [ 909.019921][T10429] hid-generic 0003:0004:FFFF0001.0013: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 909.027317][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 909.414612][T11423] fido_id[11423]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 909.597704][T11425] siw: device registration error -23 [ 910.045197][ T6031] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 910.201995][ T6035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.221850][ T6031] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 910.221881][ T6031] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 910.221897][ T6031] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 910.221911][ T6031] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.221925][ T6031] usb 3-1: config 0 has no interfaces? [ 910.221947][ T6031] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 910.221964][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.234293][ T6031] usb 3-1: config 0 descriptor?? [ 910.417164][ T6035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.460902][ T6035] bond0 (unregistering): Released all slaves [ 911.929307][T11292] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.929409][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.929681][T11292] bridge_slave_0: entered allmulticast mode [ 911.961235][T11292] bridge_slave_0: entered promiscuous mode [ 911.999830][T11292] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.999964][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.000182][T11292] bridge_slave_1: entered allmulticast mode [ 912.040873][T11292] bridge_slave_1: entered promiscuous mode [ 912.420444][ T6035] hsr_slave_0: left promiscuous mode [ 912.438220][ T6035] hsr_slave_1: left promiscuous mode [ 912.439363][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.498221][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.013274][T10820] usb 3-1: USB disconnect, device number 8 [ 915.433650][ T6031] hid-generic 0003:0004:FFFF0001.0014: unknown main item tag 0x0 [ 915.437469][ T6031] hid-generic 0003:0004:FFFF0001.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 916.691331][T11460] fido_id[11460]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 917.370814][T11469] siw: device registration error -23 [ 918.685876][T10011] ------------[ cut here ]------------ [ 918.685896][T10011] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 918.685920][T10011] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#0: kworker/0:1/10011 [ 918.685991][T10011] Modules linked in: [ 918.686034][T10011] CPU: 0 UID: 0 PID: 10011 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 918.686061][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 918.686076][T10011] Workqueue: events drm_fb_helper_damage_work [ 918.686113][T10011] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 918.686145][T10011] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0f b0 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 918.686166][T10011] RSP: 0018:ffffc90003bbf860 EFLAGS: 00010246 [ 918.686184][T10011] RAX: 1ffff1102837a800 RBX: ffffffff8f52a070 RCX: 0000000000000000 [ 918.686201][T10011] RDX: ffffffff8b9eb1e0 RSI: ffffffff8ba06f40 RDI: ffffffff8f52a070 [ 918.686218][T10011] RBP: ffffc90003bbf948 R08: 0000000000000000 R09: 0000000000000000 [ 918.686233][T10011] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffffffff8ba06f40 [ 918.686250][T10011] R13: ffff888141bd4000 R14: 1ffff92000777f10 R15: ffffffff8b9eb1e0 [ 918.686267][T10011] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 918.686285][T10011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.686301][T10011] CR2: 00007f19120dd06d CR3: 0000000072436000 CR4: 00000000003526f0 [ 918.686320][T10011] Call Trace: [ 918.686330][T10011] [ 918.686350][T10011] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 918.686381][T10011] ? rt_spin_unlock+0x14f/0x200 [ 918.686407][T10011] ? __pfx_autoremove_wake_function+0x10/0x10 [ 918.686434][T10011] ? rt_spin_unlock+0x160/0x200 [ 918.686461][T10011] ? drm_vblank_get+0x147/0x260 [ 918.686495][T10011] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 918.686527][T10011] drm_fb_helper_damage_work+0x131/0x6f0 [ 918.686563][T10011] ? process_scheduled_works+0xa0f/0x17a0 [ 918.686592][T10011] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 918.686633][T10011] ? process_scheduled_works+0xa0f/0x17a0 [ 918.686654][T10011] ? process_scheduled_works+0xa0f/0x17a0 [ 918.686679][T10011] process_scheduled_works+0xaec/0x17a0 [ 918.686736][T10011] ? __pfx_process_scheduled_works+0x10/0x10 [ 918.686757][T10011] ? do_raw_spin_lock+0x12b/0x2f0 [ 918.686795][T10011] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 918.686829][T10011] ? schedule+0x90/0x360 [ 918.686868][T10011] worker_thread+0xda6/0x1360 [ 918.686911][T10011] ? __kthread_parkme+0x19c/0x1f0 [ 918.686945][T10011] kthread+0x726/0x8b0 [ 918.686985][T10011] ? __pfx_worker_thread+0x10/0x10 [ 918.687008][T10011] ? __pfx_kthread+0x10/0x10 [ 918.687032][T10011] ? rt_spin_unlock+0x14f/0x200 [ 918.687062][T10011] ? rt_spin_unlock+0x160/0x200 [ 918.687085][T10011] ? __pfx_kthread+0x10/0x10 [ 918.687115][T10011] ret_from_fork+0x51b/0xa40 [ 918.687143][T10011] ? __pfx_ret_from_fork+0x10/0x10 [ 918.687166][T10011] ? __switch_to+0xc82/0x1410 [ 918.687204][T10011] ? __pfx_kthread+0x10/0x10 [ 918.687235][T10011] ret_from_fork_asm+0x1a/0x30 [ 918.687289][T10011] [ 918.687305][T10011] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 918.687321][T10011] CPU: 0 UID: 0 PID: 10011 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 918.687347][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 918.687361][T10011] Workqueue: events drm_fb_helper_damage_work [ 918.687392][T10011] Call Trace: [ 918.687401][T10011] [ 918.687410][T10011] vpanic+0x1e0/0x670 [ 918.687446][T10011] panic+0xc5/0xd0 [ 918.687475][T10011] ? __pfx_panic+0x10/0x10 [ 918.687518][T10011] ? ret_from_fork_asm+0x1a/0x30 [ 918.687557][T10011] __warn+0x315/0x4a0 [ 918.687588][T10011] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 918.687621][T10011] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 918.687653][T10011] __report_bug+0x29a/0x540 [ 918.687691][T10011] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 918.687723][T10011] ? __pfx___report_bug+0x10/0x10 [ 918.687777][T10011] report_bug_entry+0x19a/0x290 [ 918.687808][T10011] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 918.687838][T10011] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 918.687866][T10011] handle_bug+0xca/0x200 [ 918.687902][T10011] exc_invalid_op+0x1a/0x50 [ 918.687936][T10011] asm_exc_invalid_op+0x1a/0x20 [ 918.687957][T10011] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 918.687996][T10011] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0f b0 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 918.688016][T10011] RSP: 0018:ffffc90003bbf860 EFLAGS: 00010246 [ 918.688034][T10011] RAX: 1ffff1102837a800 RBX: ffffffff8f52a070 RCX: 0000000000000000 [ 918.688051][T10011] RDX: ffffffff8b9eb1e0 RSI: ffffffff8ba06f40 RDI: ffffffff8f52a070 [ 918.688068][T10011] RBP: ffffc90003bbf948 R08: 0000000000000000 R09: 0000000000000000 [ 918.688083][T10011] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffffffff8ba06f40 [ 918.688099][T10011] R13: ffff888141bd4000 R14: 1ffff92000777f10 R15: ffffffff8b9eb1e0 [ 918.688141][T10011] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 918.688172][T10011] ? rt_spin_unlock+0x14f/0x200 [ 918.688196][T10011] ? __pfx_autoremove_wake_function+0x10/0x10 [ 918.688224][T10011] ? rt_spin_unlock+0x160/0x200 [ 918.688251][T10011] ? drm_vblank_get+0x147/0x260 [ 918.688285][T10011] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 918.688316][T10011] drm_fb_helper_damage_work+0x131/0x6f0 [ 918.688350][T10011] ? process_scheduled_works+0xa0f/0x17a0 [ 918.688379][T10011] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 918.688417][T10011] ? process_scheduled_works+0xa0f/0x17a0 [ 918.688438][T10011] ? process_scheduled_works+0xa0f/0x17a0 [ 918.688463][T10011] process_scheduled_works+0xaec/0x17a0 [ 918.688519][T10011] ? __pfx_process_scheduled_works+0x10/0x10 [ 918.688539][T10011] ? do_raw_spin_lock+0x12b/0x2f0 [ 918.688576][T10011] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 918.688608][T10011] ? schedule+0x90/0x360 [ 918.688645][T10011] worker_thread+0xda6/0x1360 [ 918.688688][T10011] ? __kthread_parkme+0x19c/0x1f0 [ 918.688719][T10011] kthread+0x726/0x8b0 [ 918.688753][T10011] ? __pfx_worker_thread+0x10/0x10 [ 918.688776][T10011] ? __pfx_kthread+0x10/0x10 [ 918.688801][T10011] ? rt_spin_unlock+0x14f/0x200 [ 918.688833][T10011] ? rt_spin_unlock+0x160/0x200 [ 918.688855][T10011] ? __pfx_kthread+0x10/0x10 [ 918.688884][T10011] ret_from_fork+0x51b/0xa40 [ 918.688911][T10011] ? __pfx_ret_from_fork+0x10/0x10 [ 918.688934][T10011] ? __switch_to+0xc82/0x1410 [ 918.688979][T10011] ? __pfx_kthread+0x10/0x10 [ 918.689010][T10011] ret_from_fork_asm+0x1a/0x30 [ 918.689063][T10011] [ 918.689669][T10011] Kernel Offset: disabled