last executing test programs: 5m35.431307289s ago: executing program 32 (id=3103): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000ba2f050000000000000000000700000114000480080001400000cfa8b671a0f509e1225804b3"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28040600) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') ioctl$SIOCSIFHWADDR(r4, 0x89f6, &(0x7f0000000040)={'vxcan1\x00', @remote}) 4m23.482495097s ago: executing program 4 (id=3311): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 4m22.537168189s ago: executing program 4 (id=3314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m17.413719281s ago: executing program 4 (id=3319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) 4m15.187560122s ago: executing program 4 (id=3321): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(0x3) 4m11.270175745s ago: executing program 4 (id=3324): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 4m10.134999155s ago: executing program 4 (id=3326): syz_emit_ethernet(0x32, 0x0, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x6, 0x8, "4b0ce1f0abfdc17608ee513a8578cd99bc51220a8359d3d09a46870a71900f29", 0x6, 0x1, 0x4, 0x2da, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000036c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) 4m2.15354201s ago: executing program 33 (id=3317): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r0, 0x1, 0x0, 0x4003, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}}, 0x0) 4m0.246275154s ago: executing program 34 (id=3320): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001280)}], 0x1}, 0x800) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030303030a29a7c6b22cd481230303430393300"], 0x2a, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r3 = fsmount(0xffffffffffffffff, 0x0, 0x87) write$USERIO_CMD_SEND_INTERRUPT(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002300010322bd7002cadbdf250100e109"], 0x14}}, 0xc004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m56.508457844s ago: executing program 35 (id=3323): socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000170000000a50000000060a0904000000000000000002000000240004802000018007000100637400001400028008000140000000090800024000000017090001007379000000140000001100010000000000000000000000000a00"/120], 0x78}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m54.13577163s ago: executing program 36 (id=3326): syz_emit_ethernet(0x32, 0x0, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x6, 0x8, "4b0ce1f0abfdc17608ee513a8578cd99bc51220a8359d3d09a46870a71900f29", 0x6, 0x1, 0x4, 0x2da, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000036c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) 2m27.16149301s ago: executing program 0 (id=3365): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x7, 0xffffffff, 0x45, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 2m26.551467174s ago: executing program 0 (id=3366): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000500)={0x101ff, 0x0, &(0x7f0000000000/0x400000)=nil}) 2m26.033034583s ago: executing program 0 (id=3367): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x24, 0x5f, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f00000003c0)=""/140, &(0x7f00000000c0)=0x8c) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xc4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc4}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x24, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x8, 0xbde, 0x400, 0x100}}) socket$xdp(0x2c, 0x3, 0x0) sendto(r0, &(0x7f0000000140)="e3d180d46af8c515f171b5211b8ebd975d996078d4586b839d5f9b95c739215d1e8c9b50eed916525a75cf53d1afd5f3170d1fa3aeb103d20d1a712695fd1df04a1da234917d64a23c6a964bec6a06276de2", 0x52, 0x20040000, &(0x7f0000000340)=@llc={0x1a, 0x30b, 0x6, 0x7, 0x3, 0x6b, @random="fc384fdd392a"}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) 2m17.673660948s ago: executing program 0 (id=3368): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 2m17.201471624s ago: executing program 0 (id=3369): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010007", 0x7) 2m16.735173287s ago: executing program 0 (id=3370): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2c}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 2m15.92515362s ago: executing program 9 (id=3337): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf) move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4c816}, 0x41) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000100), 0xa, 0x0, 0x0) 2m14.36420419s ago: executing program 9 (id=3372): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x7, 0xffffffff, 0x45, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9) ioctl$TCXONC(r1, 0x540a, 0x0) 2m10.780383758s ago: executing program 9 (id=3374): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) 2m9.283771523s ago: executing program 9 (id=3378): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 2m7.136850111s ago: executing program 9 (id=3381): socket(0x2, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x80000000000542, 0x450000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x7, 0x1000, 0x1, &(0x7f00000000c0)="ac"}], 0x1}) 2m2.76083061s ago: executing program 9 (id=3386): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000500)={0x101ff, 0x0, &(0x7f0000000000/0x400000)=nil}) 1m58.835757254s ago: executing program 37 (id=3370): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2c}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) 1m54.04189157s ago: executing program 38 (id=3386): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000500)={0x101ff, 0x0, &(0x7f0000000000/0x400000)=nil}) 1m44.265270079s ago: executing program 7 (id=3403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2003) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 1m40.109003256s ago: executing program 7 (id=3406): rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 1m39.099493254s ago: executing program 7 (id=3408): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x7, 0xffffffff, 0x45, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 1m36.564710583s ago: executing program 7 (id=3411): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000100), 0xa, 0x0, 0x0) 1m36.409265473s ago: executing program 7 (id=3412): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 1m33.449105277s ago: executing program 7 (id=3417): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) syz_io_uring_setup(0x4276, &(0x7f0000000240)={0x0, 0x5ff8, 0x8000, 0x4, 0x275}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) syz_io_uring_setup(0x3b7, &(0x7f0000000340)={0x0, 0xcbe, 0x100, 0x1, 0x376}, 0x0, &(0x7f0000000400)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3c, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) 1m30.875478727s ago: executing program 8 (id=3420): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf) move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4c816}, 0x41) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) 1m28.857844353s ago: executing program 8 (id=3421): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x7, 0xffffffff, 0x45, "ff000000000000000000000000000200"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 1m27.569155362s ago: executing program 8 (id=3422): getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) syz_open_procfs(0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 1m27.095208211s ago: executing program 8 (id=3423): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) preadv2(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0x5, 0x9, 0x4) 1m26.147134428s ago: executing program 8 (id=3425): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x5e9, 0x0, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, 0x0) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_emit_ethernet(0xa2, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb86dd607f00ef006c3c00fe8000000000000000000000000000bb00000000000000000000000000000001000004000000000000000000006490780200000000000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) 1m22.849581s ago: executing program 8 (id=3426): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f", 0x15, 0xfffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r3 = syz_io_uring_setup(0xbd8, &(0x7f00000021c0)={0x0, 0x5011, 0x8, 0x8001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x9, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000380)=""/153, 0x99}], &(0x7f00000002c0)=[0x7a1e, 0x7f, 0x8], 0x3}, 0x20) 1m17.160962417s ago: executing program 39 (id=3417): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) syz_io_uring_setup(0x4276, &(0x7f0000000240)={0x0, 0x5ff8, 0x8000, 0x4, 0x275}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) syz_io_uring_setup(0x3b7, &(0x7f0000000340)={0x0, 0xcbe, 0x100, 0x1, 0x376}, 0x0, &(0x7f0000000400)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3c, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) 1m5.799941257s ago: executing program 40 (id=3426): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f", 0x15, 0xfffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r3 = syz_io_uring_setup(0xbd8, &(0x7f00000021c0)={0x0, 0x5011, 0x8, 0x8001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x9, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000380)=""/153, 0x99}], &(0x7f00000002c0)=[0x7a1e, 0x7f, 0x8], 0x3}, 0x20) 42.941034979s ago: executing program 6 (id=3447): r0 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket(0x80000000000000a, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffdc, &(0x7f0000000180)={0x0}}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r6, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000d000000370000004185459de89368aebb8c55a64a9c5cd2967fc23558c1a51e157e5970e5ba90a0dd732cef362748a8916f0c20933b2ada7e7941b01d32e01d3050af05834b6d0c8915c6c505b4b0b88298fa1decb680aa519677fa2c8c89cb9f5f0cb4c21b03460bd606b4987fe70110e352c8ae2bcc32eacd938b3e54d0c210"]) 39.592658298s ago: executing program 6 (id=3448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x2, [{}, {}]}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_open_dev$sndpcmp(&(0x7f0000000280), 0x1, 0x208102) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000a46c2cbb2fa180294dea317511bcb2e7abf1197991984ef03e4b63178a6a8591bda47a7e920a0ac40ad36416d43e87baf1a17625d3b0c01629f31251045fb90e290000201cde26c84d49be208d7514041203e8b2dac8626afd7313b0b5bb6500399a7f0e5867327fec92834be65cb542e78843b51da80ef6e0c50c6224d9aa68a0575bb222dbf656bb537c29df25c255f07a4f36fd9897b35a96e0c56f32d7d77c6234778dfc6d6d591542d27485bdb82b1364525fb813545f0567a036ce3ea3f9a66e6e99c88194fb483d6e"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, 0x0, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r7, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)=ANY=[], 0x6a) 36.049160034s ago: executing program 6 (id=3449): socket(0x200000000000011, 0x2, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 35.581484494s ago: executing program 6 (id=3450): openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x900, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0xf000, 0x2000, &(0x7f000051a000/0x2000)=nil}) 35.243739042s ago: executing program 6 (id=3451): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x20, 0x8, 0x0, 0x0, 0x80000001}) 34.858383595s ago: executing program 6 (id=3452): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) membarrier(0x10, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x200401, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) 19.590326434s ago: executing program 41 (id=3452): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) membarrier(0x10, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x200401, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) 19.494812978s ago: executing program 5 (id=3435): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) 18.326090808s ago: executing program 5 (id=3460): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x7, 0xffffffff, 0x45, "ff000000000000000000000000000200"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 17.138988344s ago: executing program 5 (id=3461): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r2, 0x0, 0x2000, 0x3) 15.533579395s ago: executing program 5 (id=3466): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 14.957249252s ago: executing program 5 (id=3469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 12.1591442s ago: executing program 5 (id=3473): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000380)='net/if_inet6\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 11.136454179s ago: executing program 3 (id=3476): r0 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 9.294090059s ago: executing program 2 (id=3477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7.843375224s ago: executing program 2 (id=3478): r0 = fsopen(&(0x7f00000000c0)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 6.665426498s ago: executing program 2 (id=3479): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9600}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 6.518537977s ago: executing program 3 (id=3480): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x1, 0x2, 0x0, 0x1, 0x847, 0x4}, 0x20) r1 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0xa}, 0x94) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6.352268165s ago: executing program 1 (id=3481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000100ffff00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.845902566s ago: executing program 3 (id=3482): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0xb0, 0xe2, 0x10, 0x565, 0x1, 0x6636, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x4a, 0xf8, 0x0, 0x18, 0x90, 0x2e, 0x6d}}]}}]}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 5.624662283s ago: executing program 1 (id=3483): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0xa, 0x82, 0x2, 0x9}) 5.433244s ago: executing program 1 (id=3484): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 5.120696655s ago: executing program 1 (id=3485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 5.120264791s ago: executing program 2 (id=3486): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.676521603s ago: executing program 2 (id=3487): socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) 4.424662465s ago: executing program 1 (id=3488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0xc36e}) 3.681242945s ago: executing program 3 (id=3489): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) read$nci(r0, 0x0, 0x0) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) 1.023796684s ago: executing program 3 (id=3490): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000006540)={0x0, 0x0, &(0x7f0000006500)={&(0x7f00000064c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 925.056693ms ago: executing program 2 (id=3491): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) pread64(r0, 0x0, 0xea, 0x0) 49.367515ms ago: executing program 3 (id=3492): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000180)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @private}}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r8, 0x0, 0x804) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r9, 0x40043d04, 0x0) 0s ago: executing program 1 (id=3493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 916.465997][T12381] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 916.716729][T12381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.727085][T12381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 916.740513][T12381] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 916.749980][T12381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.962925][T12381] usb 2-1: config 0 descriptor?? [ 917.703700][T12381] usbhid 2-1:0.0: can't add hid device: -32 [ 917.710691][T12381] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 917.804003][T12381] usb 2-1: USB disconnect, device number 56 [ 917.888743][ T42] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 918.102938][ T42] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 918.112807][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.206851][ T42] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 918.656724][T12381] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 918.827091][T12381] usb 5-1: device descriptor read/64, error -71 [ 918.910550][T14689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'. [ 919.116861][ T42] gspca_nw80x: reg_w err -110 [ 919.122128][ T42] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 919.147520][T12381] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 919.185439][ T5858] usb 3-1: USB disconnect, device number 34 [ 919.366156][T12381] usb 5-1: device descriptor read/64, error -71 [ 919.490989][T12381] usb usb5-port1: attempt power cycle [ 919.886394][T12381] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 919.953587][T12381] usb 5-1: device descriptor read/8, error -71 [ 920.205452][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.213851][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.222360][T12381] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 920.296548][T12381] usb 5-1: device descriptor read/8, error -71 [ 920.414183][T12381] usb usb5-port1: unable to enumerate USB device [ 920.464656][T14358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.473960][T14358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.982442][T14731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'. [ 922.138237][T12381] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 922.353846][T12381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.365590][T12381] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 922.379376][T12381] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 922.388891][T12381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.423972][T12381] usb 5-1: config 0 descriptor?? [ 922.896351][T12381] kovaplus 0003:1E7D:2D50.0019: item fetching failed at offset 2/5 [ 922.941705][T12381] kovaplus 0003:1E7D:2D50.0019: parse failed [ 922.960364][T12381] kovaplus 0003:1E7D:2D50.0019: probe with driver kovaplus failed with error -22 [ 923.996524][ T42] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 924.186448][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 924.226267][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 924.280203][ T42] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 924.289840][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.298452][ T42] usb 2-1: Product: syz [ 924.302838][ T42] usb 2-1: Manufacturer: syz [ 924.307831][ T42] usb 2-1: SerialNumber: syz [ 924.391559][ T42] usb 2-1: config 0 descriptor?? [ 924.426568][ T42] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 925.026241][T10923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 925.106993][ T24] usb 5-1: USB disconnect, device number 52 [ 925.216680][T10923] usb 6-1: device descriptor read/64, error -71 [ 925.287333][ T42] gspca_zc3xx: reg_w_i err -71 [ 925.466436][T10923] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 925.626324][T10923] usb 6-1: device descriptor read/64, error -71 [ 925.737815][T10923] usb usb6-port1: attempt power cycle [ 925.886313][ T42] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 925.893047][ T42] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 925.986151][ T42] usb 2-1: USB disconnect, device number 57 [ 926.116015][T10923] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 926.178674][T10923] usb 6-1: device descriptor read/8, error -71 [ 926.476094][T10923] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 926.561633][T10923] usb 6-1: device descriptor read/8, error -71 [ 926.698379][T10923] usb usb6-port1: unable to enumerate USB device [ 926.889117][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3236'. [ 927.256300][T14776] tipc: Enabled bearer , priority 0 [ 927.370425][T14776] tipc: Resetting bearer [ 927.431165][T14775] tipc: Disabling bearer [ 928.646227][ T42] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 928.876476][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.890975][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 928.911034][ T42] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 928.920898][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.079267][ T42] usb 5-1: config 0 descriptor?? [ 929.376534][T12381] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 929.541624][ T42] kovaplus 0003:1E7D:2D50.001A: item fetching failed at offset 2/5 [ 929.610331][ T42] kovaplus 0003:1E7D:2D50.001A: parse failed [ 929.617114][ T42] kovaplus 0003:1E7D:2D50.001A: probe with driver kovaplus failed with error -22 [ 929.671774][T12381] usb 3-1: Using ep0 maxpacket: 8 [ 929.720407][T12381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 929.796477][T12381] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 929.813197][T12381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.824007][T12381] usb 3-1: Product: syz [ 929.828497][T12381] usb 3-1: Manufacturer: syz [ 929.833370][T12381] usb 3-1: SerialNumber: syz [ 929.958491][T12381] usb 3-1: config 0 descriptor?? [ 930.004837][T12381] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 930.026504][ T42] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 930.330000][ T42] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 930.339810][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.348405][ T42] usb 6-1: Product: syz [ 930.352809][ T42] usb 6-1: Manufacturer: syz [ 930.358020][ T42] usb 6-1: SerialNumber: syz [ 930.463547][ T42] usb 6-1: config 0 descriptor?? [ 930.766883][ T42] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 930.859476][T12381] gspca_zc3xx: reg_w_i err -71 [ 931.216108][ T5858] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 931.217149][ T1779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.476658][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.487423][ T5858] usb 2-1: config 0 has no interfaces? [ 931.493172][ T5858] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 931.503016][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.514931][T12381] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 931.522555][T12381] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 931.574010][ T1779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.681460][T12381] usb 3-1: USB disconnect, device number 35 [ 931.741113][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3251'. [ 931.780371][ T5858] usb 2-1: config 0 descriptor?? [ 931.869598][ T1779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.014973][T10923] usb 5-1: USB disconnect, device number 53 [ 932.140165][ T5858] usb 2-1: string descriptor 0 read error: -71 [ 932.192206][ T5858] usb 2-1: USB disconnect, device number 58 [ 932.247579][ T1779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.439793][ T42] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 932.477062][ T42] usb 6-1: USB disconnect, device number 6 [ 932.883998][T14813] tipc: Enabled bearer , priority 0 [ 932.987647][T14813] tipc: Resetting bearer [ 933.247260][T14812] tipc: Disabling bearer [ 933.337205][ T1779] bridge_slave_1: left allmulticast mode [ 933.343288][ T1779] bridge_slave_1: left promiscuous mode [ 933.350216][ T1779] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.507917][ T1779] bridge_slave_0: left allmulticast mode [ 933.513899][ T1779] bridge_slave_0: left promiscuous mode [ 933.521115][ T1779] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.290877][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3257'. [ 934.837771][ T1779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.878016][ T1779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.913768][ T1779] bond0 (unregistering): Released all slaves [ 934.953126][ T1779] bond1 (unregistering): Released all slaves [ 934.978904][ T1779] bond2 (unregistering): Released all slaves [ 935.284580][T14827] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 935.576180][ T1779] tipc: Left network mode [ 936.384335][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 936.647477][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.657771][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 936.673663][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 936.684172][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.829520][ T1779] hsr_slave_0: left promiscuous mode [ 936.906159][ T1779] hsr_slave_1: left promiscuous mode [ 936.914684][ T1779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.922622][ T1779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.929027][ T24] usb 2-1: config 0 descriptor?? [ 937.116258][ T1779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.124059][ T1779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.230066][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3264'. [ 937.337467][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3264'. [ 937.481425][ T24] kovaplus 0003:1E7D:2D50.001B: item fetching failed at offset 2/5 [ 937.538464][ T1779] veth1_macvtap: left promiscuous mode [ 937.544230][ T1779] veth0_macvtap: left promiscuous mode [ 937.550640][ T1779] veth1_vlan: left promiscuous mode [ 937.556198][ T1779] veth0_vlan: left promiscuous mode [ 937.561436][ T24] kovaplus 0003:1E7D:2D50.001B: parse failed [ 937.568149][ T24] kovaplus 0003:1E7D:2D50.001B: probe with driver kovaplus failed with error -22 [ 937.992832][ T5858] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 938.522007][ T5858] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 938.531630][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.540079][ T5858] usb 3-1: Product: syz [ 938.544470][ T5858] usb 3-1: Manufacturer: syz [ 938.549477][ T5858] usb 3-1: SerialNumber: syz [ 938.638149][ T5858] usb 3-1: config 0 descriptor?? [ 938.902486][ T5858] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 939.590726][ T24] usb 2-1: USB disconnect, device number 59 [ 940.349761][ T1779] team0 (unregistering): Port device team_slave_1 removed [ 940.466822][ T1779] team0 (unregistering): Port device team_slave_0 removed [ 940.697188][ T5858] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 940.770771][ T5858] usb 3-1: USB disconnect, device number 36 [ 941.143828][ T1779] team0 (unregistering): Port device dummy0 removed [ 941.482701][T14863] tipc: Enabled bearer , priority 0 [ 941.548639][T14871] tipc: Resetting bearer [ 941.711037][T14860] tipc: Disabling bearer [ 942.946664][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3273'. [ 943.657336][T14894] fuse: Bad value for 'fd' [ 944.776460][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 945.055294][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.068460][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 945.082765][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 945.092254][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.437322][T10923] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 945.595187][ T24] usb 5-1: config 0 descriptor?? [ 945.792944][T10923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 945.802653][T10923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.811441][T10923] usb 2-1: Product: syz [ 945.816079][T10923] usb 2-1: Manufacturer: syz [ 945.821045][T10923] usb 2-1: SerialNumber: syz [ 945.901335][T10923] usb 2-1: config 0 descriptor?? [ 946.223984][ T24] kovaplus 0003:1E7D:2D50.001C: unknown main item tag 0x4 [ 946.232047][ T24] kovaplus 0003:1E7D:2D50.001C: item fetching failed at offset 3/5 [ 946.246333][T10923] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 946.374261][ T24] kovaplus 0003:1E7D:2D50.001C: parse failed [ 946.381363][ T24] kovaplus 0003:1E7D:2D50.001C: probe with driver kovaplus failed with error -22 [ 946.681499][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3283'. [ 947.230083][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3283'. [ 947.884909][T10923] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 947.986235][T10923] usb 2-1: USB disconnect, device number 60 [ 948.076021][ T24] usb 5-1: USB disconnect, device number 54 [ 948.715282][T14926] netlink: 23 bytes leftover after parsing attributes in process `syz.5.3285'. [ 948.782998][T14925] syzkaller0: entered promiscuous mode [ 948.789086][T14925] syzkaller0: entered allmulticast mode [ 951.605376][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 951.706015][T14955] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3295'. [ 952.576736][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 952.876350][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.886818][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 952.900485][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 952.909957][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.160662][ T24] usb 3-1: config 0 descriptor?? [ 953.177260][ T30] audit: type=1326 audit(1762523764.933:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.5.3299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1a898f6c9 code=0x0 [ 953.601748][ T24] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x4 [ 953.609568][ T24] kovaplus 0003:1E7D:2D50.001D: item fetching failed at offset 3/5 [ 953.692693][T14967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3299'. [ 953.702355][T14967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3299'. [ 953.711699][T14967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3299'. [ 953.721126][T14967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3299'. [ 953.724165][ T24] kovaplus 0003:1E7D:2D50.001D: parse failed [ 953.739033][ T24] kovaplus 0003:1E7D:2D50.001D: probe with driver kovaplus failed with error -22 [ 954.475972][ T5858] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 954.563337][T14972] syzkaller0: entered promiscuous mode [ 954.569418][T14972] syzkaller0: entered allmulticast mode [ 954.863333][ T5858] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 954.873314][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.881717][ T5858] usb 2-1: Product: syz [ 954.886289][ T5858] usb 2-1: Manufacturer: syz [ 954.891093][ T5858] usb 2-1: SerialNumber: syz [ 955.616830][ T5858] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 955.629252][ T5858] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 955.640513][ T5858] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 955.886704][ T24] usb 3-1: USB disconnect, device number 37 [ 955.988116][ T5858] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 956.739485][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3306'. [ 957.700132][ T5858] usb 2-1: USB disconnect, device number 61 [ 958.437876][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 958.511503][T15009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3309'. [ 958.766803][ T5810] Bluetooth: hci5: command 0x0406 tx timeout [ 972.227225][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 983.586622][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 983.596548][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 983.606892][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 983.710955][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 983.737173][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 984.423988][T11969] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 984.438169][T11969] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 984.448700][T11969] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 984.463196][T11969] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 984.509956][T11969] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 985.915819][T11969] Bluetooth: hci0: command tx timeout [ 986.607345][T11969] Bluetooth: hci6: command tx timeout [ 987.119947][T15081] chnl_net:caif_netlink_parms(): no params data found [ 987.146889][T15076] chnl_net:caif_netlink_parms(): no params data found [ 987.965916][T11969] Bluetooth: hci0: command tx timeout [ 988.574646][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 988.622340][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 988.646702][ T5810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 988.691646][ T5810] Bluetooth: hci6: command tx timeout [ 988.746964][ T5803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 988.840144][ T5803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 990.065911][ T5803] Bluetooth: hci0: command tx timeout [ 990.784646][ T5803] Bluetooth: hci6: command tx timeout [ 991.053198][T11969] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 991.106693][T11969] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 991.169109][T11969] Bluetooth: hci7: command tx timeout [ 991.252389][T11969] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 991.466978][T11969] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 991.528165][T11969] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 992.138702][ T5803] Bluetooth: hci0: command tx timeout [ 992.293412][T15076] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.301285][T15076] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.309423][T15076] bridge_slave_0: entered allmulticast mode [ 992.319544][T15076] bridge_slave_0: entered promiscuous mode [ 992.866345][T15076] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.873940][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.886851][T15076] bridge_slave_1: entered allmulticast mode [ 992.897196][T15076] bridge_slave_1: entered promiscuous mode [ 992.926779][ T5803] Bluetooth: hci6: command tx timeout [ 992.966518][T15081] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.974105][T15081] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.982204][T15081] bridge_slave_0: entered allmulticast mode [ 992.997014][T15081] bridge_slave_0: entered promiscuous mode [ 993.328761][ T5803] Bluetooth: hci7: command tx timeout [ 994.136115][T11969] Bluetooth: hci8: command tx timeout [ 994.260902][T15081] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.268739][T15081] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.276873][T15081] bridge_slave_1: entered allmulticast mode [ 994.287019][T15081] bridge_slave_1: entered promiscuous mode [ 994.356060][T15076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.006677][ T5803] Bluetooth: hci7: command tx timeout [ 996.136571][T15076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.226534][ T5803] Bluetooth: hci8: command tx timeout [ 996.831823][T15123] netlink: 'syz.0.3341': attribute type 4 has an invalid length. [ 997.276976][T15081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.754585][T15100] chnl_net:caif_netlink_parms(): no params data found [ 997.812759][T15076] team0: Port device team_slave_0 added [ 997.836844][T15081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.049432][T15076] team0: Port device team_slave_1 added [ 998.055855][ T5803] Bluetooth: hci7: command tx timeout [ 998.326326][ T5803] Bluetooth: hci8: command tx timeout [ 999.276303][T15081] team0: Port device team_slave_0 added [ 999.330360][T15076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.344958][T15076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.373816][T15076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.182545][T15081] team0: Port device team_slave_1 added [ 1000.366546][ T5803] Bluetooth: hci8: command tx timeout [ 1000.612777][T15076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.621301][T15076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.647761][T15076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.776431][T14357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.375207][T14357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.544304][T15081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.551759][T15081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.579641][T15081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.620546][T15109] chnl_net:caif_netlink_parms(): no params data found [ 1002.046412][T15081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.053539][T15081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.080046][T15081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.119174][T15076] hsr_slave_0: entered promiscuous mode [ 1002.130333][T15076] hsr_slave_1: entered promiscuous mode [ 1002.140042][T15076] debugfs: 'hsr0' already exists in 'hsr' [ 1002.146037][T15076] Cannot create hsr debugfs directory [ 1002.298691][T14357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.862822][T14357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.081166][T15100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.088926][T15100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.097151][T15100] bridge_slave_0: entered allmulticast mode [ 1003.106193][T15100] bridge_slave_0: entered promiscuous mode [ 1003.476446][T15100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.484044][T15100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.492273][T15100] bridge_slave_1: entered allmulticast mode [ 1003.501543][T15100] bridge_slave_1: entered promiscuous mode [ 1003.783020][T15081] hsr_slave_0: entered promiscuous mode [ 1003.794079][T15081] hsr_slave_1: entered promiscuous mode [ 1003.802564][T15081] debugfs: 'hsr0' already exists in 'hsr' [ 1003.808531][T15081] Cannot create hsr debugfs directory [ 1004.474199][T15100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.638314][T14357] bridge_slave_1: left allmulticast mode [ 1004.644200][T14357] bridge_slave_1: left promiscuous mode [ 1004.651162][T14357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.708047][T14357] bridge_slave_0: left allmulticast mode [ 1004.713941][T14357] bridge_slave_0: left promiscuous mode [ 1004.721201][T14357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.443239][T14357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.519579][T14357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.591559][T14357] bond0 (unregistering): Released all slaves [ 1005.804455][T15100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.986498][T14357] tipc: Left network mode [ 1006.591530][T15109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.599348][T15109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.611148][T15109] bridge_slave_0: entered allmulticast mode [ 1006.621715][T15109] bridge_slave_0: entered promiscuous mode [ 1006.865781][T15100] team0: Port device team_slave_0 added [ 1006.881879][T15109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.890030][T15109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.898194][T15109] bridge_slave_1: entered allmulticast mode [ 1006.908236][T15109] bridge_slave_1: entered promiscuous mode [ 1007.246030][T15100] team0: Port device team_slave_1 added [ 1007.488369][T14357] hsr_slave_0: left promiscuous mode [ 1007.535103][T14357] hsr_slave_1: left promiscuous mode [ 1007.545127][T14357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.553184][T14357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.599858][T14357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.607626][T14357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.750244][T14357] veth1_macvtap: left promiscuous mode [ 1007.757266][T14357] veth0_macvtap: left promiscuous mode [ 1007.763201][T14357] veth1_vlan: left promiscuous mode [ 1007.768957][T14357] veth0_vlan: left promiscuous mode [ 1007.906533][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.914383][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.922426][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.930352][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.940463][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.949262][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.957365][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.965045][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.972900][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1007.980817][ T24] hid-generic 0003:0003:0000.001E: unknown main item tag 0x0 [ 1008.158864][ T24] hid-generic 0003:0003:0000.001E: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 1008.602936][T14357] team0 (unregistering): Port device team_slave_1 removed [ 1008.669985][T14357] team0 (unregistering): Port device team_slave_0 removed [ 1010.246260][T15109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.280582][T15100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.288272][T15100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.320849][T15100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.467088][T15076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1010.513818][T15109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.778808][T15100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.786231][T15100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.818790][T15100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.017607][T15076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1011.459857][T15076] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1011.801551][T15109] team0: Port device team_slave_0 added [ 1011.815175][T15076] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1011.922735][T15081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1011.996998][T15100] hsr_slave_0: entered promiscuous mode [ 1012.007986][T15100] hsr_slave_1: entered promiscuous mode [ 1012.041782][T15109] team0: Port device team_slave_1 added [ 1012.088477][T14357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.116352][T15081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1012.313851][T14357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.333509][T15081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1012.423499][T14357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.460889][T15109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.468957][T15109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.496348][T15109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.579447][T15081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1013.216167][T15081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.254006][T15109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.267146][T15109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.295497][T15109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.612659][T14357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.197023][T15081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.319488][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.327242][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.380909][T15109] hsr_slave_0: entered promiscuous mode [ 1014.394770][T15109] hsr_slave_1: entered promiscuous mode [ 1014.404075][T15109] debugfs: 'hsr0' already exists in 'hsr' [ 1014.410242][T15109] Cannot create hsr debugfs directory [ 1014.637651][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.645226][ T1790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.389106][T14357] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.699252][T14357] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.808697][T15076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.977204][T14357] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.097765][T14357] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.728891][T15100] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1016.828451][T15076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.043942][T15100] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1017.147625][T15100] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1017.223511][T14357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.312191][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.319907][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.347447][T15100] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1017.478462][T14357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.566659][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.574294][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.684972][T14357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.041980][T14357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.103383][T15166] block device autoloading is deprecated and will be removed. [ 1018.413384][T15081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.910174][T15109] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1019.490588][T14357] bridge_slave_1: left allmulticast mode [ 1019.501567][T14357] bridge_slave_1: left promiscuous mode [ 1019.516370][T14357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.650654][T14357] bridge_slave_0: left allmulticast mode [ 1019.656850][T14357] bridge_slave_0: left promiscuous mode [ 1019.663777][T14357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.783658][T14357] bridge_slave_1: left allmulticast mode [ 1019.790107][T14357] bridge_slave_1: left promiscuous mode [ 1019.797041][T14357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.967609][T14357] bridge_slave_0: left allmulticast mode [ 1019.973599][T14357] bridge_slave_0: left promiscuous mode [ 1019.980485][T14357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.061629][T14357] bridge_slave_1: left allmulticast mode [ 1020.067830][T14357] bridge_slave_1: left promiscuous mode [ 1020.074453][T14357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.146975][T14357] bridge_slave_0: left allmulticast mode [ 1020.152956][T14357] bridge_slave_0: left promiscuous mode [ 1020.161418][T14357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.263676][T14357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.299675][T14357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.317198][T14357] bond0 (unregistering): Released all slaves [ 1021.689544][T14357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.710644][T14357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.734890][T14357] bond0 (unregistering): Released all slaves [ 1022.142766][T14357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.164648][T14357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.203670][T14357] bond0 (unregistering): Released all slaves [ 1022.229447][T14357] bond1 (unregistering): Released all slaves [ 1022.254234][T14357] bond2 (unregistering): Released all slaves [ 1022.289908][T14357] bond3 (unregistering): Released all slaves [ 1022.516890][T15109] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1022.730332][T15109] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1022.941985][T15109] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1023.956619][T14357] tipc: Left network mode [ 1024.041160][T15100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.058017][T14357] tipc: Left network mode [ 1024.570908][T15100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.881249][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.888906][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.105340][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.113010][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.258755][T15076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.223739][T14357] hsr_slave_0: left promiscuous mode [ 1026.232447][T14357] hsr_slave_1: left promiscuous mode [ 1026.244926][T14357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.253940][T14357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.357556][T14357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.365253][T14357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.403767][T14357] hsr_slave_0: left promiscuous mode [ 1026.434065][T14357] hsr_slave_1: left promiscuous mode [ 1026.449205][T14357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.459002][T14357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.478996][T14357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.486708][T14357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.551259][T14357] hsr_slave_0: left promiscuous mode [ 1026.563460][T14357] hsr_slave_1: left promiscuous mode [ 1026.578998][T14357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.587633][T14357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.597817][T14357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.605392][T14357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.651509][T14357] veth1_macvtap: left promiscuous mode [ 1026.657493][T14357] veth0_macvtap: left promiscuous mode [ 1026.663433][T14357] veth1_vlan: left promiscuous mode [ 1026.670328][T14357] veth0_vlan: left promiscuous mode [ 1026.680922][T14357] veth1_macvtap: left promiscuous mode [ 1026.687851][T14357] veth0_macvtap: left promiscuous mode [ 1026.693702][T14357] veth1_vlan: left promiscuous mode [ 1026.702492][T14357] veth0_vlan: left promiscuous mode [ 1026.709511][T14357] veth1_macvtap: left promiscuous mode [ 1026.715156][T14357] veth0_macvtap: left promiscuous mode [ 1026.721247][T14357] veth1_vlan: left promiscuous mode [ 1026.727052][T14357] veth0_vlan: left promiscuous mode [ 1027.818522][T14357] team0 (unregistering): Port device team_slave_1 removed [ 1027.861929][T14357] team0 (unregistering): Port device team_slave_0 removed [ 1028.429892][T14357] team0 (unregistering): Port device team_slave_1 removed [ 1028.462996][T14357] team0 (unregistering): Port device team_slave_0 removed [ 1029.004316][T14357] team0 (unregistering): Port device team_slave_1 removed [ 1029.028759][T14357] team0 (unregistering): Port device team_slave_0 removed [ 1029.463244][T15081] veth0_vlan: entered promiscuous mode [ 1029.664637][T15109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.830198][T15081] veth1_vlan: entered promiscuous mode [ 1030.065937][T15081] veth0_macvtap: entered promiscuous mode [ 1030.084392][T15109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.123626][T15081] veth1_macvtap: entered promiscuous mode [ 1030.177898][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.185468][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.450714][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.458410][T14358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.498214][T15188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3350'. [ 1030.548500][T15081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.816996][T15081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.838791][T15189] netlink: 'syz.0.3350': attribute type 1 has an invalid length. [ 1030.953435][T15189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1031.174380][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.288000][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.327969][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.518109][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.608014][T15076] veth0_vlan: entered promiscuous mode [ 1033.536008][T15100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.655416][T15076] veth1_vlan: entered promiscuous mode [ 1033.711403][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.924569][T15076] veth0_macvtap: entered promiscuous mode [ 1033.966753][T15076] veth1_macvtap: entered promiscuous mode [ 1034.079108][T15076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.338253][T15076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.458867][ T3883] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.519139][ T3883] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.593512][ T3883] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.675937][ T3883] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.877390][T15109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.752194][T15100] veth0_vlan: entered promiscuous mode [ 1037.893110][T15100] veth1_vlan: entered promiscuous mode [ 1038.200252][T15100] veth0_macvtap: entered promiscuous mode [ 1038.253711][T15100] veth1_macvtap: entered promiscuous mode [ 1038.424079][T15100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.476212][T15100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.639688][ T1790] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.863347][ T1790] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.119308][ T1790] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.386771][ T1790] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.948988][T15109] veth0_vlan: entered promiscuous mode [ 1041.148928][T15109] veth1_vlan: entered promiscuous mode [ 1041.745112][T15109] veth0_macvtap: entered promiscuous mode [ 1041.879435][T15109] veth1_macvtap: entered promiscuous mode [ 1042.159904][T15109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.276657][T15109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.409481][T14358] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.493452][T14358] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.514946][T14358] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.577170][ T1779] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.577672][T11969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1044.588906][T11969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1044.717322][T11969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1044.732431][T11969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1044.767529][T11969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1046.500294][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1046.510516][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1046.522160][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1046.542990][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1046.555107][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1046.911512][ T5803] Bluetooth: hci1: command tx timeout [ 1047.271449][ T14] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.376584][T15271] chnl_net:caif_netlink_parms(): no params data found [ 1047.426170][T11969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1047.463384][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1047.481666][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1047.504513][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1047.506446][ T14] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.518935][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1047.911808][ T14] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.235250][ T14] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.614702][ T5810] Bluetooth: hci2: command tx timeout [ 1049.112779][ T5810] Bluetooth: hci1: command tx timeout [ 1049.317293][ T14] bridge_slave_1: left allmulticast mode [ 1049.323279][ T14] bridge_slave_1: left promiscuous mode [ 1049.330639][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.470354][ T14] bridge_slave_0: left allmulticast mode [ 1049.479636][ T14] bridge_slave_0: left promiscuous mode [ 1049.491418][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.575961][ T5810] Bluetooth: hci4: command tx timeout [ 1050.312448][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1050.322271][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1050.331992][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1050.346394][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1050.358289][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1050.428171][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.447953][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.472131][ T14] bond0 (unregistering): Released all slaves [ 1050.695846][ T5810] Bluetooth: hci2: command tx timeout [ 1050.884955][T15287] chnl_net:caif_netlink_parms(): no params data found [ 1050.929457][ T14] hsr_slave_0: left promiscuous mode [ 1050.942219][ T14] hsr_slave_1: left promiscuous mode [ 1050.953833][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.961617][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.974351][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.985523][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.016165][ T14] veth1_macvtap: left promiscuous mode [ 1051.022036][ T14] veth0_macvtap: left promiscuous mode [ 1051.028258][ T14] veth1_vlan: left promiscuous mode [ 1051.033861][ T14] veth0_vlan: left promiscuous mode [ 1051.166229][ T5810] Bluetooth: hci1: command tx timeout [ 1051.648551][ T5810] Bluetooth: hci4: command tx timeout [ 1051.703415][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1051.730069][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1051.995145][T15292] chnl_net:caif_netlink_parms(): no params data found [ 1052.024151][T15271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.031865][T15271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.042659][T15271] bridge_slave_0: entered allmulticast mode [ 1052.062891][T15271] bridge_slave_0: entered promiscuous mode [ 1052.139535][T15271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.147553][T15271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.155359][T15271] bridge_slave_1: entered allmulticast mode [ 1052.165444][T15271] bridge_slave_1: entered promiscuous mode [ 1052.464417][T15320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3358'. [ 1052.485881][ T5810] Bluetooth: hci0: command tx timeout [ 1052.826149][ T5810] Bluetooth: hci2: command tx timeout [ 1052.827590][T15271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.951999][T15271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.246174][ T5803] Bluetooth: hci1: command tx timeout [ 1053.466380][ T14] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.634693][T15271] team0: Port device team_slave_0 added [ 1053.741336][ T5803] Bluetooth: hci4: command tx timeout [ 1053.755953][ T14] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.805443][T15271] team0: Port device team_slave_1 added [ 1053.973457][ T14] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.352318][ T14] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.397925][T15271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.405264][T15271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.431761][T15271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.535875][ T5803] Bluetooth: hci0: command tx timeout [ 1054.598540][T15271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.613301][T15271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.643815][T15271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.788917][T15309] chnl_net:caif_netlink_parms(): no params data found [ 1054.814296][T15292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.822397][T15292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.830486][T15292] bridge_slave_0: entered allmulticast mode [ 1054.840386][T15292] bridge_slave_0: entered promiscuous mode [ 1054.846041][ T5803] Bluetooth: hci2: command tx timeout [ 1055.359760][T15292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.368440][T15292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.379197][T15292] bridge_slave_1: entered allmulticast mode [ 1055.392384][T15292] bridge_slave_1: entered promiscuous mode [ 1055.408439][T15287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.416442][T15287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.424144][T15287] bridge_slave_0: entered allmulticast mode [ 1055.434260][T15287] bridge_slave_0: entered promiscuous mode [ 1055.614478][ T14] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.839836][ T5803] Bluetooth: hci4: command tx timeout [ 1055.841888][T15287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.852965][T15287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.861101][T15287] bridge_slave_1: entered allmulticast mode [ 1055.869968][T15287] bridge_slave_1: entered promiscuous mode [ 1056.000795][T15271] hsr_slave_0: entered promiscuous mode [ 1056.013674][T15271] hsr_slave_1: entered promiscuous mode [ 1056.024670][T15271] debugfs: 'hsr0' already exists in 'hsr' [ 1056.031018][T15271] Cannot create hsr debugfs directory [ 1056.083224][ T14] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.118759][T15292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.232247][ T14] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.284046][T15292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.493707][ T14] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.616164][ T5803] Bluetooth: hci0: command tx timeout [ 1056.651295][T15287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.774251][T15287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.821768][T15292] team0: Port device team_slave_0 added [ 1057.045419][T15292] team0: Port device team_slave_1 added [ 1057.465995][T15287] team0: Port device team_slave_0 added [ 1057.622261][T15287] team0: Port device team_slave_1 added [ 1057.755252][T15309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.763230][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.771369][T15309] bridge_slave_0: entered allmulticast mode [ 1057.781471][T15309] bridge_slave_0: entered promiscuous mode [ 1057.840919][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.926018][T15292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.933284][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.959887][T15292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.978252][T15309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.986095][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.993834][T15309] bridge_slave_1: entered allmulticast mode [ 1058.002480][T15309] bridge_slave_1: entered promiscuous mode [ 1058.103640][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.124949][T15287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.132194][T15287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.158805][T15287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.361084][T15287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.368603][T15287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.394984][T15287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.413757][T15292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.420985][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.449776][T15292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.675770][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.696027][ T5803] Bluetooth: hci0: command tx timeout [ 1058.927387][T15309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.980908][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.042266][T15309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.755274][T15309] team0: Port device team_slave_0 added [ 1059.784056][T15309] team0: Port device team_slave_1 added [ 1059.979140][ T14] bridge_slave_1: left allmulticast mode [ 1059.985268][ T14] bridge_slave_1: left promiscuous mode [ 1059.993144][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.016774][ T14] bridge_slave_0: left allmulticast mode [ 1060.022876][ T14] bridge_slave_0: left promiscuous mode [ 1060.031609][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.069086][ T14] bridge_slave_1: left allmulticast mode [ 1060.075006][ T14] bridge_slave_1: left promiscuous mode [ 1060.085143][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.109536][ T14] bridge_slave_0: left allmulticast mode [ 1060.115454][ T14] bridge_slave_0: left promiscuous mode [ 1060.131184][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.182829][ T14] bridge_slave_1: left allmulticast mode [ 1060.190359][ T14] bridge_slave_1: left promiscuous mode [ 1060.197508][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.220017][ T14] bridge_slave_0: left allmulticast mode [ 1060.232113][ T14] bridge_slave_0: left promiscuous mode [ 1060.251019][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.767446][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.793630][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.812840][ T14] bond0 (unregistering): Released all slaves [ 1062.099128][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.142411][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.169708][ T14] bond0 (unregistering): Released all slaves [ 1062.417360][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.471426][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.492698][ T14] bond0 (unregistering): Released all slaves [ 1062.529952][T15287] hsr_slave_0: entered promiscuous mode [ 1062.539335][T15287] hsr_slave_1: entered promiscuous mode [ 1062.547991][T15287] debugfs: 'hsr0' already exists in 'hsr' [ 1062.553832][T15287] Cannot create hsr debugfs directory [ 1062.597431][T15292] hsr_slave_0: entered promiscuous mode [ 1062.608481][T15292] hsr_slave_1: entered promiscuous mode [ 1062.620276][T15292] debugfs: 'hsr0' already exists in 'hsr' [ 1062.626409][T15292] Cannot create hsr debugfs directory [ 1062.866528][T15309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.873603][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.900220][T15309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.080559][ T14] hsr_slave_0: left promiscuous mode [ 1063.089365][ T14] hsr_slave_1: left promiscuous mode [ 1063.097883][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.105387][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.118619][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.126902][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.171610][ T14] hsr_slave_0: left promiscuous mode [ 1063.182652][ T14] hsr_slave_1: left promiscuous mode [ 1063.190075][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.197786][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.210318][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.218392][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.252100][ T14] hsr_slave_0: left promiscuous mode [ 1063.260455][ T14] hsr_slave_1: left promiscuous mode [ 1063.268622][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.276336][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.294677][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.302559][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.358132][ T14] veth1_macvtap: left promiscuous mode [ 1063.363800][ T14] veth0_macvtap: left promiscuous mode [ 1063.369920][ T14] veth1_vlan: left promiscuous mode [ 1063.375426][ T14] veth0_vlan: left promiscuous mode [ 1063.388764][ T14] veth1_macvtap: left promiscuous mode [ 1063.394407][ T14] veth0_macvtap: left promiscuous mode [ 1063.400490][ T14] veth1_vlan: left promiscuous mode [ 1063.406316][ T14] veth0_vlan: left promiscuous mode [ 1063.416285][ T14] veth1_macvtap: left promiscuous mode [ 1063.422011][ T14] veth0_macvtap: left promiscuous mode [ 1063.427932][ T14] veth1_vlan: left promiscuous mode [ 1063.433372][ T14] veth0_vlan: left promiscuous mode [ 1064.559329][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1064.637728][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1065.338607][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1065.367347][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1066.098003][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1066.171353][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1066.483108][T15309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.490536][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.519169][T15309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.278415][T15309] hsr_slave_0: entered promiscuous mode [ 1067.288025][T15309] hsr_slave_1: entered promiscuous mode [ 1067.562460][T15271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1067.707208][T15271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1067.785479][T15271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1067.948017][T15271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1069.050024][T15271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.060361][T15292] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1069.118416][T15292] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1069.148517][T15292] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1069.225837][T15292] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1069.404998][T15271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.489530][T14357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.497073][T14357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.645721][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.653320][T14357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.809814][T15309] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1069.873548][T15309] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1069.903719][T15287] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1069.957253][T15309] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1070.066533][T15287] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1070.093666][T15309] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1070.193468][T15287] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1070.252695][T15271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1070.332690][T15287] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1070.876583][T15292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.110092][T15292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.203960][T15309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.242374][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.250048][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.317320][ T1779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.324874][ T1779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.443520][T15309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.553204][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.561007][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.657266][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.664836][T14358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.916675][T15292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.059411][T15287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.074033][T15309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1072.084978][T15309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.254965][T15287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.330262][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.337963][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.474871][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.482543][ T1790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.513624][T15271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.955757][T15309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.988700][T15292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.063166][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 1074.599539][T15287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.039631][T15271] veth0_vlan: entered promiscuous mode [ 1075.135489][T15271] veth1_vlan: entered promiscuous mode [ 1075.382602][T15271] veth0_macvtap: entered promiscuous mode [ 1075.433090][T15271] veth1_macvtap: entered promiscuous mode [ 1075.625299][T15271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.714901][T15271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.843273][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.882136][ T1101] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.927641][ T1101] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.960756][ T1101] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.262134][T15406] ptrace attach of "./syz-executor exec"[12323] was attempted by "./syz-executor exec"[15406] [ 1076.660893][T15309] veth0_vlan: entered promiscuous mode [ 1076.801132][T15309] veth1_vlan: entered promiscuous mode [ 1076.974585][T15292] veth0_vlan: entered promiscuous mode [ 1077.079916][T15292] veth1_vlan: entered promiscuous mode [ 1077.380755][T15309] veth0_macvtap: entered promiscuous mode [ 1077.474822][T15292] veth0_macvtap: entered promiscuous mode [ 1077.500442][T15309] veth1_macvtap: entered promiscuous mode [ 1077.603278][T15292] veth1_macvtap: entered promiscuous mode [ 1077.739007][T15309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.776661][T15309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.880120][ T1779] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.905159][T15292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.969306][ T1779] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.049610][ T1779] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.086149][T15292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.094000][T15287] veth0_vlan: entered promiscuous mode [ 1078.112197][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.204155][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.298809][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.347857][T15287] veth1_vlan: entered promiscuous mode [ 1078.368348][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.421915][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.789725][T15287] veth0_macvtap: entered promiscuous mode [ 1078.875285][T15287] veth1_macvtap: entered promiscuous mode [ 1079.087423][T15287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.244775][T15287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.393010][T14357] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.466919][T14357] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.517202][T14357] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.555936][T14357] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.622177][ T1790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.630459][ T1790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.770992][T14357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.779334][T14357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.790255][T15481] Bluetooth: MGMT ver 1.23 [ 1084.816918][T15476] kvm: kvm [15474]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 1084.857052][T15476] kvm: kvm [15474]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe0 [ 1085.010263][T15476] kvm: kvm [15474]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100000000 [ 1085.094323][ T1779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.102504][ T1779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.390169][ T1790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.400713][ T1790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.449905][ T1779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.463228][ T1779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.701192][T15488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1085.831747][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.840146][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.073441][T15488] libceph: resolve '0..' (ret=-3): failed [ 1087.142307][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.150782][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.610814][T14357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.619049][T14357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.904098][T15523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.979973][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1099.065815][ T3883] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.079708][ T3883] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.047999][ T3883] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.247720][ T3883] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.930582][ T3883] bridge_slave_1: left allmulticast mode [ 1105.944318][ T3883] bridge_slave_1: left promiscuous mode [ 1105.951294][ T3883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.990494][ T3883] bridge_slave_0: left allmulticast mode [ 1105.996697][ T3883] bridge_slave_0: left promiscuous mode [ 1106.003062][ T3883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.834088][ T3883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.917857][ T3883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.942417][ T3883] bond0 (unregistering): Released all slaves [ 1107.030241][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1107.046114][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1107.081840][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1107.140975][T11969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1107.154257][T11969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1107.935972][ T3883] hsr_slave_0: left promiscuous mode [ 1107.959891][ T3883] hsr_slave_1: left promiscuous mode [ 1107.967919][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.976125][ T3883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.089290][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.097345][ T3883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.836797][ T3883] veth1_macvtap: left promiscuous mode [ 1108.842589][ T3883] veth0_macvtap: left promiscuous mode [ 1108.849080][ T3883] veth1_vlan: left promiscuous mode [ 1108.854749][ T3883] veth0_vlan: left promiscuous mode [ 1109.683802][T11969] Bluetooth: hci0: command tx timeout [ 1111.733216][T11969] Bluetooth: hci0: command tx timeout [ 1113.916628][T11969] Bluetooth: hci0: command tx timeout [ 1114.259725][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1114.269490][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1114.279386][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1114.293614][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1114.304059][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.458301][ T3883] team0 (unregistering): Port device team_slave_1 removed [ 1114.668510][ T3883] team0 (unregistering): Port device team_slave_0 removed [ 1116.127268][T11969] Bluetooth: hci0: command tx timeout [ 1116.282411][T15553] chnl_net:caif_netlink_parms(): no params data found [ 1116.364116][T10178] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1116.373949][T11969] Bluetooth: hci5: command tx timeout [ 1116.555846][T10178] usb 7-1: Using ep0 maxpacket: 16 [ 1116.570319][T10178] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1116.607746][T10178] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1116.617207][T10178] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.625400][T10178] usb 7-1: Product: syz [ 1116.629925][T10178] usb 7-1: Manufacturer: syz [ 1116.634645][T10178] usb 7-1: SerialNumber: syz [ 1116.738307][T10178] usb 7-1: config 0 descriptor?? [ 1116.783655][T10178] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1116.802052][T10178] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1117.376083][T10178] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1117.693584][T15575] chnl_net:caif_netlink_parms(): no params data found [ 1117.827909][T10178] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1117.836402][T10178] em28xx 7-1:0.0: board has no eeprom [ 1118.468799][T11969] Bluetooth: hci5: command tx timeout [ 1119.055084][T15553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.062972][T15553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.071446][T15553] bridge_slave_0: entered allmulticast mode [ 1119.075918][T10178] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1119.082068][T15553] bridge_slave_0: entered promiscuous mode [ 1119.085411][T10178] em28xx 7-1:0.0: dvb set to bulk mode. [ 1119.099744][T12381] em28xx 7-1:0.0: Binding DVB extension [ 1119.213437][T10178] usb 7-1: USB disconnect, device number 2 [ 1119.221655][T10178] em28xx 7-1:0.0: Disconnecting em28xx [ 1119.720852][T15553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.728582][T15553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.736854][T15553] bridge_slave_1: entered allmulticast mode [ 1119.746438][T15553] bridge_slave_1: entered promiscuous mode [ 1120.525912][T11969] Bluetooth: hci5: command tx timeout [ 1121.784048][T15553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.874008][T12381] em28xx 7-1:0.0: Registering input extension [ 1121.885507][T10178] em28xx 7-1:0.0: Closing input extension [ 1121.957173][T15553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.978465][T10178] em28xx 7-1:0.0: Freeing device [ 1122.752283][T11969] Bluetooth: hci5: command tx timeout [ 1122.895386][T15626] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3405'. [ 1122.905463][T15626] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3405'. [ 1124.647663][T15553] team0: Port device team_slave_0 added [ 1124.765457][T15553] team0: Port device team_slave_1 added [ 1124.953166][T15633] netlink: 'syz.8.3409': attribute type 29 has an invalid length. [ 1125.065179][T15633] netlink: 500 bytes leftover after parsing attributes in process `syz.8.3409'. [ 1125.308692][T15634] netlink: 'syz.8.3409': attribute type 29 has an invalid length. [ 1125.318539][T15575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.326816][T15575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.334443][T15575] bridge_slave_0: entered allmulticast mode [ 1125.343152][T15575] bridge_slave_0: entered promiscuous mode [ 1125.438825][T15553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.447708][T15553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.474222][T15553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.494423][T15575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.502437][T15575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.510318][T15575] bridge_slave_1: entered allmulticast mode [ 1125.519281][T15575] bridge_slave_1: entered promiscuous mode [ 1126.694479][T15553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.702063][T15553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.734591][T15553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.766154][T15575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.883373][T15575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.556058][T10178] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1128.516136][T15575] team0: Port device team_slave_0 added [ 1128.570367][T10178] usb 7-1: Using ep0 maxpacket: 8 [ 1128.584288][T10178] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1128.594847][T10178] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1128.604989][T10178] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1128.616260][T10178] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.629668][T10178] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1128.639206][T10178] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.672025][T15575] team0: Port device team_slave_1 added [ 1128.698570][T15553] hsr_slave_0: entered promiscuous mode [ 1128.707933][T15553] hsr_slave_1: entered promiscuous mode [ 1129.002399][T10178] usb 7-1: GET_CAPABILITIES returned 11 [ 1129.008458][T10178] usbtmc 7-1:16.0: can't read capabilities [ 1129.213528][T15575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.216676][T10178] usb 7-1: USB disconnect, device number 3 [ 1129.222199][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.255133][T15575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.299260][ T3883] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.325218][T15575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.333898][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.361576][T15575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.502479][ T3883] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.628531][ T3883] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.752475][ T3883] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.811018][T15575] hsr_slave_0: entered promiscuous mode [ 1129.826443][T15575] hsr_slave_1: entered promiscuous mode [ 1129.835431][T15575] debugfs: 'hsr0' already exists in 'hsr' [ 1129.841518][T15575] Cannot create hsr debugfs directory [ 1130.081853][ T3883] bridge_slave_1: left allmulticast mode [ 1130.093552][ T3883] bridge_slave_1: left promiscuous mode [ 1130.105044][ T3883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.125012][ T3883] bridge_slave_0: left allmulticast mode [ 1130.133692][ T3883] bridge_slave_0: left promiscuous mode [ 1130.140609][ T3883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.646937][ T3883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.687310][ T3883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.734580][ T3883] bond0 (unregistering): Released all slaves [ 1130.754429][ T3883] bond1 (unregistering): Released all slaves [ 1130.784465][ T3883] bond2 (unregistering): Released all slaves [ 1131.297351][ T3883] tipc: Left network mode [ 1131.877110][ T3883] hsr_slave_0: left promiscuous mode [ 1131.891676][ T3883] hsr_slave_1: left promiscuous mode [ 1131.901611][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.909373][ T3883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.938239][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.948425][ T3883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.993836][ T3883] veth1_macvtap: left promiscuous mode [ 1132.000041][ T3883] veth0_macvtap: left promiscuous mode [ 1132.006300][ T3883] veth1_vlan: left promiscuous mode [ 1132.011742][ T3883] veth0_vlan: left promiscuous mode [ 1132.225960][T10178] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1132.510196][T10178] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1132.521024][T10178] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.531464][T10178] usb 7-1: Product: syz [ 1132.536818][T10178] usb 7-1: Manufacturer: syz [ 1132.541636][T10178] usb 7-1: SerialNumber: syz [ 1132.938262][T10178] usb 7-1: config 0 descriptor?? [ 1132.958872][T10178] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1133.029355][T10178] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1133.043147][T10178] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1133.052901][T10178] usb 7-1: media controller created [ 1133.149020][T10178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1133.155151][ T3883] team0 (unregistering): Port device team_slave_1 removed [ 1133.202826][ T3883] team0 (unregistering): Port device team_slave_0 removed [ 1134.156482][T15668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.165828][T15668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.581230][T10178] DVB: Unable to find symbol mt352_attach() [ 1134.953197][T10178] DVB: Unable to find symbol nxt6000_attach() [ 1134.959654][T10178] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1134.991815][T10178] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input33 [ 1135.035028][T10178] dvb-usb: schedule remote query interval to 1000 msecs. [ 1135.042731][T10178] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1135.053619][T10178] dvb-usb: bulk message failed: -22 (7/0) [ 1135.059638][T10178] dvb-usb: bulk message failed: -22 (7/0) [ 1135.096820][T15553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1135.167986][T15553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1135.591872][T10178] usb 7-1: USB disconnect, device number 4 [ 1135.721511][T15553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1135.848747][T15553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1136.030898][T10178] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1139.847786][T15575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1140.014694][T15575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1140.104430][T15575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1140.267107][T15575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1140.707992][T15553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.891348][T15553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.998410][T15576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.006010][T15576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.139851][T15576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.147434][T15576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.623363][T15575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.709060][T15575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.806008][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.813411][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.962344][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.969799][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.319450][T12381] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1145.546021][T12381] usb 7-1: Using ep0 maxpacket: 8 [ 1145.607154][T12381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1145.617532][T12381] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1145.730617][T12381] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1145.740239][T12381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.748618][T12381] usb 7-1: Product: syz [ 1145.753000][T12381] usb 7-1: Manufacturer: syz [ 1145.758102][T12381] usb 7-1: SerialNumber: syz [ 1145.871472][T15553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.948914][T12381] usb 7-1: config 0 descriptor?? [ 1147.308800][T11969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1149.286556][T11969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1149.327272][T11969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1149.394396][T11969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1149.456467][T11969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1149.521065][T15553] veth0_vlan: entered promiscuous mode [ 1150.001379][T15706] delete_channel: no stack [ 1150.021087][T15197] usb 7-1: USB disconnect, device number 5 [ 1150.023935][T15553] veth1_vlan: entered promiscuous mode [ 1150.359336][T15575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.653265][T15553] veth0_macvtap: entered promiscuous mode [ 1150.879774][T15553] veth1_macvtap: entered promiscuous mode [ 1151.152325][T15553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.276906][T15553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.474539][T15541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.491050][T15575] veth0_vlan: entered promiscuous mode [ 1151.555196][ T1790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.575780][ T5803] Bluetooth: hci3: command tx timeout [ 1151.597846][T15712] chnl_net:caif_netlink_parms(): no params data found [ 1151.644814][ T1790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.954648][ T1790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.002267][T15575] veth1_vlan: entered promiscuous mode [ 1152.473379][T15575] veth0_macvtap: entered promiscuous mode [ 1152.573330][T15575] veth1_macvtap: entered promiscuous mode [ 1153.419748][ T30] audit: type=1326 audit(1762523965.193:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.443136][ T30] audit: type=1326 audit(1762523965.193:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.468393][ T30] audit: type=1326 audit(1762523965.193:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.491915][ T30] audit: type=1326 audit(1762523965.203:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.514739][ T30] audit: type=1326 audit(1762523965.203:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.537505][ T30] audit: type=1326 audit(1762523965.203:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.562413][ T30] audit: type=1326 audit(1762523965.203:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.586790][ T30] audit: type=1326 audit(1762523965.203:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.610212][ T30] audit: type=1326 audit(1762523965.203:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.632877][ T30] audit: type=1326 audit(1762523965.203:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15732 comm="syz.6.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcb78f6c9 code=0x7ffc0000 [ 1153.764962][T15575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.775497][ T5803] Bluetooth: hci3: command tx timeout [ 1155.407977][ T5803] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1155.416817][ T5803] Bluetooth: hci1: Injecting HCI hardware error event [ 1155.424391][ T5803] Bluetooth: hci1: hardware error 0x00 [ 1155.572698][T15575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.815967][T11969] Bluetooth: hci3: command tx timeout [ 1155.925921][ T1779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.935012][ T1779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.229144][T15541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.418931][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.435849][T15712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.443582][T15712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.451641][T15712] bridge_slave_0: entered allmulticast mode [ 1156.460479][T15712] bridge_slave_0: entered promiscuous mode [ 1156.507697][T15541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.753706][T15712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.761513][T15712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.769624][T15712] bridge_slave_1: entered allmulticast mode [ 1156.779771][T15712] bridge_slave_1: entered promiscuous mode [ 1157.286538][T15576] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.384597][T15712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.491478][T15576] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.507614][ T5803] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1157.583362][T15712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.682852][T15576] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.702180][T11969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1157.759893][T11969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1157.776455][T11969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1157.795960][T15712] team0: Port device team_slave_0 added [ 1157.819579][T11969] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1157.837877][T11969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1157.881442][T15576] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.886599][T11969] Bluetooth: hci3: command tx timeout [ 1158.072823][T15712] team0: Port device team_slave_1 added [ 1158.523757][T15712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.531387][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.557869][T15712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.747178][T15712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.754431][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.785305][T15712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.162396][T15576] bridge_slave_1: left allmulticast mode [ 1159.174862][T15576] bridge_slave_1: left promiscuous mode [ 1159.187155][T15576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.232918][T15576] bridge_slave_0: left allmulticast mode [ 1159.239055][T15576] bridge_slave_0: left promiscuous mode [ 1159.246215][T15576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.846955][T15576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.886643][T11969] Bluetooth: hci2: command tx timeout [ 1159.987262][T15576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.009940][T15576] bond0 (unregistering): Released all slaves [ 1160.238274][T15712] hsr_slave_0: entered promiscuous mode [ 1160.249102][T15712] hsr_slave_1: entered promiscuous mode [ 1160.258310][T15712] debugfs: 'hsr0' already exists in 'hsr' [ 1160.264241][T15712] Cannot create hsr debugfs directory [ 1161.543983][T15576] hsr_slave_0: left promiscuous mode [ 1161.572979][T15576] hsr_slave_1: left promiscuous mode [ 1161.582606][T15576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.590528][T15576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.608502][T15576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.616429][T15576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.647083][T15576] veth1_macvtap: left promiscuous mode [ 1161.652884][T15576] veth0_macvtap: left promiscuous mode [ 1161.659186][T15576] veth1_vlan: left promiscuous mode [ 1161.664793][T15576] veth0_vlan: left promiscuous mode [ 1161.965943][T11969] Bluetooth: hci2: command tx timeout [ 1163.140166][T15576] team0 (unregistering): Port device team_slave_1 removed [ 1163.163069][T15576] team0 (unregistering): Port device team_slave_0 removed [ 1164.056017][T11969] Bluetooth: hci2: command tx timeout [ 1164.467480][T15752] chnl_net:caif_netlink_parms(): no params data found [ 1164.626964][T15576] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.041734][T15576] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.489817][T15576] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.700415][T15576] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.223806][T11969] Bluetooth: hci2: command tx timeout [ 1166.443708][T15712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1166.586434][T15576] bridge_slave_1: left allmulticast mode [ 1166.592311][T15576] bridge_slave_1: left promiscuous mode [ 1166.598987][T15576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.752013][T15576] bridge_slave_0: left allmulticast mode [ 1166.759906][T15576] bridge_slave_0: left promiscuous mode [ 1166.766858][T15576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.317928][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1167.329239][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1167.340485][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1167.361115][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1167.382741][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1167.440856][T15576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.524139][T15576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.613804][T15576] bond0 (unregistering): Released all slaves [ 1167.767718][T15712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1167.969470][T15712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1168.250988][T15712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1168.581852][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.590236][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.598497][T15752] bridge_slave_0: entered allmulticast mode [ 1168.617432][T15752] bridge_slave_0: entered promiscuous mode [ 1169.181122][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.189492][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.198203][T15752] bridge_slave_1: entered allmulticast mode [ 1169.211431][T15752] bridge_slave_1: entered promiscuous mode [ 1169.490982][ T5803] Bluetooth: hci4: command tx timeout [ 1169.520980][T15576] hsr_slave_0: left promiscuous mode [ 1169.559703][T15576] hsr_slave_1: left promiscuous mode [ 1169.568612][T15576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.576678][T15576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.698712][T15576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.706502][T15576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.849003][T15576] veth1_macvtap: left promiscuous mode [ 1169.854821][T15576] veth0_macvtap: left promiscuous mode [ 1169.861078][T15576] veth1_vlan: left promiscuous mode [ 1169.868055][T15576] veth0_vlan: left promiscuous mode [ 1170.301467][T11969] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1170.354776][T11969] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1170.376019][T11969] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1170.409998][T11969] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1170.440005][T11969] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1171.537875][T15576] team0 (unregistering): Port device team_slave_1 removed [ 1171.611297][ T5803] Bluetooth: hci4: command tx timeout [ 1171.620758][T15576] team0 (unregistering): Port device team_slave_0 removed [ 1172.526129][ T5803] Bluetooth: hci6: command tx timeout [ 1172.714169][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.872002][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.142648][T15576] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.428746][T15576] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.543561][T15752] team0: Port device team_slave_0 added [ 1173.717430][ T5803] Bluetooth: hci4: command tx timeout [ 1173.842034][T15576] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.915907][T15752] team0: Port device team_slave_1 added [ 1174.228889][T15576] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.491746][T15794] chnl_net:caif_netlink_parms(): no params data found [ 1174.584693][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.592964][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.620098][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.659624][ T5803] Bluetooth: hci6: command tx timeout [ 1174.687403][T15800] chnl_net:caif_netlink_parms(): no params data found [ 1174.712131][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.719821][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.746256][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.405200][T15752] hsr_slave_0: entered promiscuous mode [ 1175.416738][T15752] hsr_slave_1: entered promiscuous mode [ 1175.425000][T15752] debugfs: 'hsr0' already exists in 'hsr' [ 1175.431155][T15752] Cannot create hsr debugfs directory [ 1175.440677][T15576] bridge_slave_1: left allmulticast mode [ 1175.447076][T15576] bridge_slave_1: left promiscuous mode [ 1175.454065][T15576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.486576][T15576] bridge_slave_0: left allmulticast mode [ 1175.492829][T15576] bridge_slave_0: left promiscuous mode [ 1175.500093][T15576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.725797][ T5803] Bluetooth: hci4: command tx timeout [ 1175.935288][T15576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.954155][T15576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.971567][T15576] bond0 (unregistering): Released all slaves [ 1176.225102][T15576] hsr_slave_0: left promiscuous mode [ 1176.243481][T15576] hsr_slave_1: left promiscuous mode [ 1176.255846][T15576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.263436][T15576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.274060][T15576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.281861][T15576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.308475][T15576] veth1_macvtap: left promiscuous mode [ 1176.314183][T15576] veth0_macvtap: left promiscuous mode [ 1176.320326][T15576] veth1_vlan: left promiscuous mode [ 1176.326239][T15576] veth0_vlan: left promiscuous mode [ 1176.701281][ T5803] Bluetooth: hci6: command tx timeout [ 1177.089117][T15576] team0 (unregistering): Port device team_slave_1 removed [ 1177.130482][T15576] team0 (unregistering): Port device team_slave_0 removed [ 1177.873645][T15712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.266822][T15794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.274384][T15794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.282143][T15794] bridge_slave_0: entered allmulticast mode [ 1178.290915][T15794] bridge_slave_0: entered promiscuous mode [ 1178.464792][T15576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.520435][T15794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.530626][T15794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.542016][T15794] bridge_slave_1: entered allmulticast mode [ 1178.553391][T15794] bridge_slave_1: entered promiscuous mode [ 1178.588119][T15800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.596214][T15800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.604113][T15800] bridge_slave_0: entered allmulticast mode [ 1178.614227][T15800] bridge_slave_0: entered promiscuous mode [ 1178.634078][T15712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.766062][ T5803] Bluetooth: hci6: command tx timeout [ 1178.823969][T15576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.855111][T15800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.862920][T15800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.871029][T15800] bridge_slave_1: entered allmulticast mode [ 1178.880802][T15800] bridge_slave_1: entered promiscuous mode [ 1178.920826][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.928624][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.007156][T15794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.239813][T15576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.323472][T15794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.360873][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.368653][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.481081][T15800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.690017][T15800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.794895][T15794] team0: Port device team_slave_0 added [ 1179.945227][T15843] program syz.6.3447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.981964][T15800] team0: Port device team_slave_0 added [ 1180.009177][T15800] team0: Port device team_slave_1 added [ 1180.143432][T15800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.150843][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.177236][T15800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.199135][T15800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.206572][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.232960][T15800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.378166][T15800] hsr_slave_0: entered promiscuous mode [ 1180.389006][T15800] hsr_slave_1: entered promiscuous mode [ 1180.840293][T15576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.902525][T15794] team0: Port device team_slave_1 added [ 1181.423066][T15794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.430490][T15794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.457045][T15794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.549698][T15576] bridge_slave_1: left allmulticast mode [ 1181.555940][T15576] bridge_slave_1: left promiscuous mode [ 1181.562620][T15576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.584320][T15576] bridge_slave_0: left allmulticast mode [ 1181.590670][T15576] bridge_slave_0: left promiscuous mode [ 1181.597645][T15576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.193482][T15576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.213836][T15576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.230878][T15576] bond0 (unregistering): Released all slaves [ 1182.302601][T15794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.310056][T15794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.336531][T15794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.674849][T15752] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1182.770260][T15752] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1182.814254][T15794] hsr_slave_0: entered promiscuous mode [ 1182.825411][T15794] hsr_slave_1: entered promiscuous mode [ 1182.838117][T15794] debugfs: 'hsr0' already exists in 'hsr' [ 1182.844082][T15794] Cannot create hsr debugfs directory [ 1182.861343][T15752] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1182.902635][T15752] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1183.733765][T15576] hsr_slave_0: left promiscuous mode [ 1183.742921][T15576] hsr_slave_1: left promiscuous mode [ 1183.758526][T15576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.766245][T15576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.786501][T15576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.794093][T15576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.840356][T15576] veth1_macvtap: left promiscuous mode [ 1183.846654][T15576] veth0_macvtap: left promiscuous mode [ 1183.852686][T15576] veth1_vlan: left promiscuous mode [ 1183.858551][T15576] veth0_vlan: left promiscuous mode [ 1184.748542][T15576] team0 (unregistering): Port device team_slave_1 removed [ 1184.929165][T15576] team0 (unregistering): Port device team_slave_0 removed [ 1186.112775][T15800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1186.164899][T15800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1186.204180][T15800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1186.294266][T15800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1186.579464][T15712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.939441][T15794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1186.997176][T15794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1187.042471][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.061775][T15794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1187.174154][T15794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1187.268327][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.352529][T15021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.360210][T15021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.433079][T15712] veth0_vlan: entered promiscuous mode [ 1187.545225][T15021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.552873][T15021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.606348][T15712] veth1_vlan: entered promiscuous mode [ 1187.761802][T15800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.353411][T15794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.441494][T15800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.492914][T15794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.514965][T15712] veth0_macvtap: entered promiscuous mode [ 1188.566434][T14357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.573918][T14357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.663471][T15712] veth1_macvtap: entered promiscuous mode [ 1188.694821][T14357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.702306][T14357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.718611][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.726211][T14357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.742938][T14357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.750634][T14357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.956828][T15712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.061132][T15712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.192924][T15021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.203901][T15021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.258695][T15021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.301531][T15021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.939657][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.711062][T15800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.972016][T15794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.181569][T15800] veth0_vlan: entered promiscuous mode [ 1191.302683][T15800] veth1_vlan: entered promiscuous mode [ 1191.582381][T15800] veth0_macvtap: entered promiscuous mode [ 1191.627842][T15800] veth1_macvtap: entered promiscuous mode [ 1191.759061][T15800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.801323][T15794] veth0_vlan: entered promiscuous mode [ 1191.829479][T15800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.908123][T15576] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.942560][T15794] veth1_vlan: entered promiscuous mode [ 1191.958819][T15576] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.008997][T15576] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.021022][T15576] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.277796][T15794] veth0_macvtap: entered promiscuous mode [ 1192.338014][T15752] veth0_vlan: entered promiscuous mode [ 1192.383958][T15794] veth1_macvtap: entered promiscuous mode [ 1192.458346][T15752] veth1_vlan: entered promiscuous mode [ 1192.570698][T15794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.684110][T15794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.772116][T15752] veth0_macvtap: entered promiscuous mode [ 1192.822864][T15541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.854276][T15541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.892463][T15541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.921249][T15752] veth1_macvtap: entered promiscuous mode [ 1192.964276][T15541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.135133][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.250013][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.357115][T14357] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.409906][T15204] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.421169][T15204] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.438820][T15576] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.123061][T15541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.132040][T15541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.268357][T14357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.276832][T14357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.653587][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.665781][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.969483][T14357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.978701][T14357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.003981][ T1779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.012828][ T1779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.413717][T15204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.422393][T15204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.924504][ T3773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.932843][ T3773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.533802][ T1779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.542375][ T1779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.382497][T15989] overlayfs: failed to resolve './file0': -2 [ 1205.551499][T11969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1205.562843][T11969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1205.587772][T11969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1205.606503][T11969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1205.622378][T11969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1207.499398][T15994] chnl_net:caif_netlink_parms(): no params data found [ 1208.547554][T11969] Bluetooth: hci0: command tx timeout [ 1209.607089][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1210.605851][ T5803] Bluetooth: hci0: command tx timeout [ 1213.064952][ T5803] Bluetooth: hci0: command tx timeout [ 1213.202742][T15994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.210830][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.219126][T15994] bridge_slave_0: entered allmulticast mode [ 1213.230047][T15994] bridge_slave_0: entered promiscuous mode [ 1213.303360][T15994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.310948][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.319101][T15994] bridge_slave_1: entered allmulticast mode [ 1213.330616][T15994] bridge_slave_1: entered promiscuous mode [ 1213.492002][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.539729][ T42] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1213.583585][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.596229][T15148] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 1213.729858][T15994] team0: Port device team_slave_0 added [ 1213.745172][ T42] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1213.753939][ T42] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1213.769754][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1213.789420][T15994] team0: Port device team_slave_1 added [ 1213.824122][T15148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1213.836257][T15148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.838815][ T42] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1213.846437][T15148] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1213.846597][T15148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.855955][ T42] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1213.856092][ T42] usb 4-1: Product: syz [ 1213.856199][ T42] usb 4-1: Manufacturer: syz [ 1213.897204][ T42] usb 4-1: SerialNumber: syz [ 1213.936576][T15148] usb 2-1: config 0 descriptor?? [ 1214.018819][ T42] usb 4-1: config 0 descriptor?? [ 1214.033674][ T42] hub 4-1:0.0: bad descriptor, ignoring hub [ 1214.040279][ T42] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1214.059616][ T42] usb 4-1: selecting invalid altsetting 0 [ 1214.095393][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.103544][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.130398][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.187998][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.195355][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.222837][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.326895][ T42] usb 4-1: USB disconnect, device number 50 [ 1214.519978][T15148] glorious 0003:258A:0036.001F: item fetching failed at offset 0/2 [ 1214.532988][T15148] glorious 0003:258A:0036.001F: probe with driver glorious failed with error -22 [ 1214.713843][T15148] usb 2-1: USB disconnect, device number 62 [ 1214.762964][T15994] hsr_slave_0: entered promiscuous mode [ 1214.778837][T15994] hsr_slave_1: entered promiscuous mode [ 1214.795003][T15994] debugfs: 'hsr0' already exists in 'hsr' [ 1214.801694][T15994] Cannot create hsr debugfs directory [ 1215.088666][ T5803] Bluetooth: hci0: command tx timeout [ 1216.245811][ T42] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1216.409731][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 1216.817666][T16058] binder_alloc: 16056: binder_alloc_buf, no vma [ 1216.850923][ T42] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 1216.859975][ T42] usb 4-1: config 0 has no interface number 0 [ 1216.866470][ T42] usb 4-1: config 0 interface 74 has no altsetting 0 [ 1216.913346][ T42] usb 4-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 1216.923178][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.931600][ T42] usb 4-1: Product: syz [ 1216.940559][ T42] usb 4-1: Manufacturer: syz [ 1216.947182][ T42] usb 4-1: SerialNumber: syz [ 1216.991759][ T42] usb 4-1: config 0 descriptor?? [ 1217.306001][T15994] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1217.319628][ T42] belkin_sa 4-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1217.332587][ T42] usb 4-1: bcdDevice: 6636, bfc: 0 [ 1217.371774][T15994] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1217.381112][ T42] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1217.457480][ T42] usb 4-1: USB disconnect, device number 51 [ 1217.487399][ T42] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1217.499935][ T42] belkin_sa 4-1:0.74: device disconnected [ 1217.536469][T15994] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1217.627258][T15994] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1217.833716][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1219.507054][T15994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.678335][T15994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.789768][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.797761][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.917817][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.925416][T14358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.121782][T16066] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1221.317637][T15148] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1221.557245][T15148] usb 3-1: Using ep0 maxpacket: 8 [ 1221.613613][T15148] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1221.623109][T15148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.631625][T15148] usb 3-1: Product: syz [ 1221.636251][T15148] usb 3-1: Manufacturer: syz [ 1221.641080][T15148] usb 3-1: SerialNumber: syz [ 1221.794045][T15148] usb 3-1: config 0 descriptor?? [ 1221.866177][T15148] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1221.874327][T15148] pctv452e: pctv452e_power_ctrl: 1 [ 1221.874327][T15148] [ 1221.882827][T15148] usb 3-1: selecting invalid altsetting 3 [ 1221.889051][T15148] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1221.889051][T15148] [ 1221.899685][T15148] dvb-usb: bulk message failed: -22 (5/0) ** 1 printk messages dropped ** [ 1222.028983][T16072] ===================================================== [ 1222.029204][T16072] BUG: KMSAN: uninit-value in hex_string+0x681/0x740 [ 1222.029352][T16072] hex_string+0x681/0x740 [ 1222.029490][T16072] pointer+0x2c7/0x1bd0 [ 1222.029609][T16072] vsnprintf+0xf8a/0x1bd0 [ 1222.029729][T16072] vscnprintf+0x6d/0x120 [ 1222.029852][T16072] printk_sprint+0x53/0x5c0 [ 1222.029966][T16072] vprintk_store+0xbb9/0x1530 [ 1222.030080][T16072] vprintk_emit+0x21a/0xb60 [ 1222.030199][T16072] vprintk_default+0x3f/0x50 [ 1222.030319][T16072] vprintk+0x36/0x50 [ 1222.030461][T16072] _printk+0x17e/0x1b0 [ 1222.030632][T16072] pctv452e_i2c_msg+0x82a/0x8f0 [ 1222.030799][T16072] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 1222.030963][T16072] __i2c_transfer+0xecd/0x3110 [ 1222.031093][T16072] i2c_transfer+0x300/0x4b0 [ 1222.031222][T16072] i2c_transfer_buffer_flags+0x138/0x200 [ 1222.031368][T16072] i2cdev_read+0x1b2/0x3c0 [ 1222.031490][T16072] vfs_read+0x27c/0xf90 [ 1222.031669][T16072] __x64_sys_pread64+0x2ab/0x3b0 [ 1222.031791][T16072] x64_sys_call+0x3370/0x3e30 [ 1222.031961][T16072] do_syscall_64+0xd9/0xfa0 [ 1222.032126][T16072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.032273][T16072] [ 1222.032310][T16072] Uninit was created at: [ 1222.032511][T16072] __kmalloc_cache_noprof+0x8f5/0x16b0 [ 1222.032669][T16072] pctv452e_i2c_msg+0x98/0x8f0 [ 1222.032831][T16072] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 1222.032995][T16072] __i2c_transfer+0xecd/0x3110 [ 1222.033118][T16072] i2c_transfer+0x300/0x4b0 [ 1222.033248][T16072] i2c_transfer_buffer_flags+0x138/0x200 [ 1222.033396][T16072] i2cdev_read+0x1b2/0x3c0 [ 1222.033517][T16072] vfs_read+0x27c/0xf90 [ 1222.033693][T16072] __x64_sys_pread64+0x2ab/0x3b0 [ 1222.033816][T16072] x64_sys_call+0x3370/0x3e30 [ 1222.033983][T16072] do_syscall_64+0xd9/0xfa0 [ 1222.034154][T16072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.034296][T16072] [ 1222.034357][T16072] CPU: 0 UID: 0 PID: 16072 Comm: syz.2.3491 Not tainted syzkaller #0 PREEMPT(none) [ 1222.034496][T16072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1222.034577][T16072] ===================================================== [ 1222.034631][T16072] Disabling lock debugging due to kernel taint [ 1222.034701][T16072] Kernel panic - not syncing: kmsan.panic set ... [ 1222.256105][T16072] CPU: 0 UID: 0 PID: 16072 Comm: syz.2.3491 Tainted: G B syzkaller #0 PREEMPT(none) [ 1222.267275][T16072] Tainted: [B]=BAD_PAGE [ 1222.271538][T16072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1222.281722][T16072] Call Trace: [ 1222.285096][T16072] [ 1222.288152][T16072] __dump_stack+0x26/0x30 [ 1222.292699][T16072] dump_stack_lvl+0x53/0x270 [ 1222.297490][T16072] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1222.303494][T16072] dump_stack+0x1e/0x25 [ 1222.307824][T16072] vpanic+0x435/0xd30 [ 1222.312003][T16072] panic+0x15d/0x160 [ 1222.316150][T16072] kmsan_report+0x31c/0x320 [ 1222.320822][T16072] ? __msan_warning+0x1b/0x30 [ 1222.325655][T16072] ? hex_string+0x681/0x740 [ 1222.330447][T16072] ? pointer+0x2c7/0x1bd0 [ 1222.334970][T16072] ? vsnprintf+0xf8a/0x1bd0 [ 1222.339653][T16072] ? vscnprintf+0x6d/0x120 [ 1222.344232][T16072] ? printk_sprint+0x53/0x5c0 [ 1222.349065][T16072] ? vprintk_store+0xbb9/0x1530 [ 1222.354066][T16072] ? vprintk_emit+0x21a/0xb60 [ 1222.358889][T16072] ? vprintk_default+0x3f/0x50 [ 1222.363815][T16072] ? vprintk+0x36/0x50 [ 1222.368104][T16072] ? _printk+0x17e/0x1b0 [ 1222.372562][T16072] ? pctv452e_i2c_msg+0x82a/0x8f0 [ 1222.377785][T16072] ? pctv452e_i2c_xfer+0x2e6/0x4c0 [ 1222.383091][T16072] ? __i2c_transfer+0xecd/0x3110 [ 1222.388199][T16072] ? i2c_transfer+0x300/0x4b0 [ 1222.393046][T16072] ? i2c_transfer_buffer_flags+0x138/0x200 [ 1222.399044][T16072] ? i2cdev_read+0x1b2/0x3c0 [ 1222.403834][T16072] ? vfs_read+0x27c/0xf90 [ 1222.408417][T16072] ? __x64_sys_pread64+0x2ab/0x3b0 [ 1222.413744][T16072] ? x64_sys_call+0x3370/0x3e30 [ 1222.418801][T16072] ? do_syscall_64+0xd9/0xfa0 [ 1222.423686][T16072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.430018][T16072] ? kmsan_get_metadata+0xfb/0x160 [ 1222.435324][T16072] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1222.441331][T16072] ? number+0x81/0x2200 [ 1222.445642][T16072] ? filter_irq_stacks+0x49/0x190 [ 1222.450889][T16072] ? stack_depot_save_flags+0x35/0x7b0 [ 1222.456518][T16072] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1222.462508][T16072] ? kmsan_get_metadata+0xfb/0x160 [ 1222.467853][T16072] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1222.474453][T16072] ? kmsan_get_metadata+0xfb/0x160 [ 1222.479761][T16072] __msan_warning+0x1b/0x30 [ 1222.484429][T16072] hex_string+0x681/0x740 [ 1222.488965][T16072] pointer+0x2c7/0x1bd0 [ 1222.493298][T16072] ? kmsan_get_metadata+0xfb/0x160 [ 1222.498590][T16072] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1222.504616][T16072] vsnprintf+0xf8a/0x1bd0 [ 1222.509146][T16072] vscnprintf+0x6d/0x120 [ 1222.513554][T16072] printk_sprint+0x53/0x5c0 [ 1222.518221][T16072] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1222.524233][T16072] vprintk_store+0xbb9/0x1530 [ 1222.529110][T16072] ? kmsan_get_metadata+0xfb/0x160 [ 1222.534463][T16072] vprintk_emit+0x21a/0xb60 [ 1222.539148][T16072] vprintk_default+0x3f/0x50 [ 1222.544001][T16072] vprintk+0x36/0x50 [ 1222.548111][T16072] _printk+0x17e/0x1b0 [ 1222.552553][T16072] pctv452e_i2c_msg+0x82a/0x8f0 [ 1222.557659][T16072] ? kmsan_get_metadata+0xfb/0x160 [ 1222.562966][T16072] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 1222.568145][T16072] ? __pfx_pctv452e_i2c_xfer+0x10/0x10 [ 1222.573841][T16072] __i2c_transfer+0xecd/0x3110 [ 1222.578789][T16072] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1222.585370][T16072] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1222.591289][T16072] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1222.597709][T16072] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1222.603652][T16072] i2c_transfer+0x300/0x4b0 [ 1222.608411][T16072] i2c_transfer_buffer_flags+0x138/0x200 [ 1222.614274][T16072] i2cdev_read+0x1b2/0x3c0 [ 1222.618882][T16072] ? __pfx_i2cdev_read+0x10/0x10 [ 1222.623991][T16072] vfs_read+0x27c/0xf90 [ 1222.628442][T16072] ? __fget_files+0x3b9/0x4a0 [ 1222.633336][T16072] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1222.639345][T16072] __x64_sys_pread64+0x2ab/0x3b0 [ 1222.645009][T16072] x64_sys_call+0x3370/0x3e30 [ 1222.649947][T16072] do_syscall_64+0xd9/0xfa0 [ 1222.654767][T16072] ? irqentry_exit+0x16/0x60 [ 1222.659581][T16072] ? clear_bhb_loop+0x40/0x90 [ 1222.664475][T16072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.670578][T16072] RIP: 0033:0x7f3daf98f6c9 [ 1222.675155][T16072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.694958][T16072] RSP: 002b:00007f3db07aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1222.703564][T16072] RAX: ffffffffffffffda RBX: 00007f3dafbe5fa0 RCX: 00007f3daf98f6c9 [ 1222.711679][T16072] RDX: 00000000000000ea RSI: 0000000000000000 RDI: 0000000000000006 [ 1222.719771][T16072] RBP: 00007f3dafa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1222.727867][T16072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.736050][T16072] R13: 00007f3dafbe6038 R14: 00007f3dafbe5fa0 R15: 00007fffef2aa528 [ 1222.744193][T16072] [ 1222.747813][T16072] Kernel Offset: disabled [ 1222.752219][T16072] Rebooting in 86400 seconds..