last executing test programs: 5m59.365219374s ago: executing program 3 (id=687): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a000000"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) pipe2(&(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m58.384779774s ago: executing program 3 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) 5m56.863725368s ago: executing program 3 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) 5m55.165623217s ago: executing program 3 (id=692): connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5}) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 5m53.849684523s ago: executing program 3 (id=693): r0 = getpgrp(0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="ad0ce79ce05a58c0485ebbe2e55611898dee271424d55fddbd97", 0x1a}], 0x1, &(0x7f0000000440)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x34}}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x0, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x8, [0x9, 0x10001, 0x6, 0x9, 0xfffffffffffffffa, 0xd]}}, @enc_lim={0x4, 0x1, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @rthdr={{0x98, 0x29, 0x39, {0xff, 0x10, 0x0, 0x0, 0x0, [@mcast1, @private2, @loopback, @private2, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, @dev={0xfe, 0x80, '\x00', 0x36}, @remote]}}}], 0x170}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="623a34e075001b431cde8f762aef3547178c037697b0", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)}, {&(0x7f0000000940)="138a4314429d0b550c0c0984e43e7c01b953f560d8624f9b4cb4b07963cf947d6d4a1dadda549216f94c271d8beabe94e7e02fe8907e50c3902204f6c8f174244cb58717e7d10a43fe46e57c1bbc96", 0x4f}], 0x2, &(0x7f0000000a40)}}, {{&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000000b80)}}], 0x4, 0x4000010) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) openat$comedi(0xffffff9c, 0x0, 0x628c00, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000800)={0x2f, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r1, 0xe1bd4000) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) 5m45.514211379s ago: executing program 3 (id=708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f0000000602040028001280"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) 5m29.231335284s ago: executing program 32 (id=708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f0000000602040028001280"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) 4m6.304527877s ago: executing program 2 (id=832): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$proc_mixer(r0, &(0x7f00000003c0)=[{'SYNTH', @val={' \'', 'Synth Capture Switch'}}], 0x32) dup3(0xffffffffffffffff, r0, 0x0) 4m4.643600787s ago: executing program 2 (id=833): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000062dfdae906d91ec7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) socket$caif_stream(0x25, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x10000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000000, 0x0, 0x7, 0x48}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4m3.08599784s ago: executing program 2 (id=834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0xa0000009, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x2) 4m1.713684457s ago: executing program 2 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000062dfdae906d91ec7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) socket$caif_stream(0x25, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000000, 0x0, 0x7, 0x48}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m59.447255645s ago: executing program 2 (id=841): io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x80, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060100000000060000000000000000050004000100000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c000180080001407f00000105001400020000000500050002000000050001000600001017a71727be0b06a257c64585adacf83f30df92"], 0x64}}, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 3m58.093432529s ago: executing program 2 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/231, 0xe7}], 0x1, 0x101, 0x10a2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) 3m42.181676326s ago: executing program 33 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/231, 0xe7}], 0x1, 0x101, 0x10a2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) 2m58.712786853s ago: executing program 0 (id=941): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e6ec98e950cfed21fcad7ff0fbcb566a0982f8938caaaece8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r4, r4, 0x0) r5 = getegid() keyctl$chown(0x4, r4, 0xee01, r5) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='personality\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) 2m57.174845431s ago: executing program 0 (id=943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/18, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a808020"], 0x44}}, 0x10) 2m56.188505687s ago: executing program 0 (id=947): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba80000", 0xd}, {&(0x7f0000000840)="45eac3016ad1ee522b4982d395a7407831236a1613f36716c51d274b9a927b671c6f132a550ca56209e4277caec437c0", 0x30}], 0x2, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x20040800) recvmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000000540)=""/139, 0x8b}], 0x2}}], 0x1, 0x21, 0x0) 2m56.014858628s ago: executing program 4 (id=949): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) 2m55.888906853s ago: executing program 0 (id=950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000180)={0xc7, 0x0, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xdb) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000005c0)=0xcb) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m55.714376243s ago: executing program 4 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x406, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r6) 2m53.125443381s ago: executing program 0 (id=952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0xa0000009, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x2) 2m52.752218192s ago: executing program 4 (id=954): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b14, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x0, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0xa, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0x3}, 0xd0, 0x9}}) 2m51.525972139s ago: executing program 0 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) 2m50.013964394s ago: executing program 4 (id=956): pipe2$9p(&(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m49.656113153s ago: executing program 4 (id=957): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0x3, &(0x7f0000000000)={0xc7, 0xff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 2m48.52236456s ago: executing program 4 (id=958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f0000000602040028001280"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) 2m36.183473579s ago: executing program 34 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) 2m32.925489661s ago: executing program 35 (id=958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f0000000602040028001280"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) 21.208268103s ago: executing program 1 (id=1117): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r1, 0x1) listen(r1, 0xa8a4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = dup2(r2, r0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 18.440516004s ago: executing program 1 (id=1118): syz_emit_ethernet(0x3b, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x1000, {[@window={0x3, 0x3, 0x4}]}}, {'F'}}}}}}, 0x0) 18.142555368s ago: executing program 1 (id=1119): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/177, 0xb1}, 0x1e0d}], 0x1, 0x40002002, 0x0) 17.883362931s ago: executing program 1 (id=1120): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x42, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/5, 0x4005}], 0x20) 16.843112171s ago: executing program 1 (id=1121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)) 15.593213802s ago: executing program 1 (id=1122): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000003c0)={0x80, 0x0, 0x1}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) 0s ago: executing program 36 (id=1122): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000003c0)={0x80, 0x0, 0x1}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) kernel console output (not intermixed with test programs): =4294967295 subj=_ pid=8183 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 383.327810][ T37] audit: type=1326 audit(1765417477.468:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 383.414978][ T37] audit: type=1326 audit(1765417477.558:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 383.453762][ T37] audit: type=1326 audit(1765417477.558:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 383.687211][ T8192] netlink: 36 bytes leftover after parsing attributes in process `syz.2.531'. [ 385.182774][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.534'. [ 385.359986][ T8205] syzkaller0: entered promiscuous mode [ 385.360002][ T8205] syzkaller0: entered allmulticast mode [ 386.673799][ T8219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.538'. [ 388.627557][ T8238] fuse: Unknown parameter '0xffffffffffffffff' [ 388.641460][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 388.641480][ T37] audit: type=1326 audit(1765417482.778:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 388.641528][ T37] audit: type=1326 audit(1765417482.778:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 388.655492][ T37] audit: type=1326 audit(1765417482.778:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 388.674399][ T37] audit: type=1326 audit(1765417482.818:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd35f24df90 code=0x7ffc0000 [ 388.733440][ T8238] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 388.748767][ T37] audit: type=1326 audit(1765417482.828:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 388.748827][ T37] audit: type=1326 audit(1765417482.828:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 388.748866][ T37] audit: type=1326 audit(1765417482.838:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 388.748905][ T37] audit: type=1326 audit(1765417482.838:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 388.748944][ T37] audit: type=1326 audit(1765417482.838:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 388.748983][ T37] audit: type=1326 audit(1765417482.848:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 389.512664][ T8244] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 389.512680][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.515446][ T8244] vhci_hcd vhci_hcd.0: Device attached [ 389.620917][ T8244] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 389.620942][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.621522][ T8244] vhci_hcd vhci_hcd.0: Device attached [ 389.678861][ T8249] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 389.678892][ T8249] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 389.679064][ T8249] vhci_hcd vhci_hcd.0: Device attached [ 389.737468][ T8244] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 389.737498][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.783400][ T8249] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(14) [ 389.783426][ T8249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.825868][ T8249] vhci_hcd vhci_hcd.0: Device attached [ 389.825991][ T8244] vhci_hcd vhci_hcd.0: Device attached [ 389.865310][ T8256] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 389.865337][ T8256] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 389.873112][ T8256] vhci_hcd vhci_hcd.0: Device attached [ 389.874038][ T8244] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.883952][ T8244] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.953100][ T6634] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 389.993127][ T8249] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 390.045822][ T8244] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(23) [ 390.045847][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.047162][ T8249] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(30) [ 390.047178][ T8249] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 390.056119][ T8244] vhci_hcd vhci_hcd.0: Device attached [ 390.060128][ T8249] vhci_hcd vhci_hcd.0: Device attached [ 390.181765][ T8262] vhci_hcd: connection closed [ 390.185704][ T8258] vhci_hcd: connection closed [ 390.206935][ T1457] vhci_hcd vhci_hcd.2: stop threads [ 390.207639][ T1457] vhci_hcd vhci_hcd.2: release socket [ 390.246189][ T1457] vhci_hcd vhci_hcd.2: disconnect device [ 390.251155][ T1457] vhci_hcd vhci_hcd.2: stop threads [ 390.251171][ T1457] vhci_hcd vhci_hcd.2: release socket [ 390.251364][ T1457] vhci_hcd vhci_hcd.2: disconnect device [ 390.276181][ T8254] vhci_hcd: connection closed [ 390.277894][ T8253] vhci_hcd: connection closed [ 390.278656][ T8250] vhci_hcd: connection closed [ 390.280753][ T6022] vhci_hcd vhci_hcd.2: stop threads [ 390.280774][ T6022] vhci_hcd vhci_hcd.2: release socket [ 390.303808][ T6022] vhci_hcd vhci_hcd.2: disconnect device [ 390.303974][ T6022] vhci_hcd vhci_hcd.2: stop threads [ 390.303987][ T6022] vhci_hcd vhci_hcd.2: release socket [ 390.304205][ T6022] vhci_hcd vhci_hcd.2: disconnect device [ 390.304329][ T6022] vhci_hcd vhci_hcd.2: stop threads [ 390.304341][ T6022] vhci_hcd vhci_hcd.2: release socket [ 390.304518][ T6022] vhci_hcd vhci_hcd.2: disconnect device [ 390.307790][ T8248] vhci_hcd: connection closed [ 390.308385][ T8246] vhci_hcd: connection reset by peer [ 390.333162][ T6022] vhci_hcd vhci_hcd.2: stop threads [ 390.333179][ T6022] vhci_hcd vhci_hcd.2: release socket [ 390.343480][ T6022] vhci_hcd vhci_hcd.2: disconnect device [ 390.539704][ T6022] vhci_hcd vhci_hcd.2: stop threads [ 390.539734][ T6022] vhci_hcd vhci_hcd.2: release socket [ 390.539916][ T6022] vhci_hcd vhci_hcd.2: disconnect device [ 390.977878][ T8272] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 390.977909][ T8272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.986903][ T8272] vhci_hcd vhci_hcd.0: Device attached [ 391.003938][ T8273] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 391.003953][ T8273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.003995][ T8273] vhci_hcd vhci_hcd.0: Device attached [ 391.055463][ T8272] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 391.055493][ T8272] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 391.055588][ T8272] vhci_hcd vhci_hcd.0: Device attached [ 391.061637][ T8272] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 391.061667][ T8272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.061821][ T8272] vhci_hcd vhci_hcd.0: Device attached [ 391.118045][ T8273] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 391.118069][ T8273] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 391.118269][ T8273] vhci_hcd vhci_hcd.0: Device attached [ 391.120073][ T8273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 391.121593][ T8273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 391.176212][ T8290] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 391.193119][ T8272] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 391.193148][ T8272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.193263][ T8273] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(26) [ 391.193282][ T8273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.224775][ T8273] vhci_hcd vhci_hcd.0: Device attached [ 391.225195][ T8272] vhci_hcd vhci_hcd.0: Device attached [ 391.235768][ T8264] vhci_hcd: connection closed [ 391.235985][ T6354] vhci_hcd vhci_hcd.2: stop threads [ 391.236012][ T6354] vhci_hcd vhci_hcd.2: release socket [ 391.244036][ T6354] vhci_hcd vhci_hcd.2: disconnect device [ 391.244149][ T5785] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 391.342789][ T8287] vhci_hcd: connection closed [ 391.345245][ T3213] vhci_hcd vhci_hcd.4: stop threads [ 391.345271][ T3213] vhci_hcd vhci_hcd.4: release socket [ 391.346373][ T3213] vhci_hcd vhci_hcd.4: disconnect device [ 391.353833][ T8285] vhci_hcd: connection closed [ 391.363511][ T8283] vhci_hcd: connection closed [ 391.364320][ T8278] vhci_hcd: connection closed [ 391.367006][ T8275] vhci_hcd: connection closed [ 391.367174][ T8281] vhci_hcd: connection closed [ 391.367239][ T8274] vhci_hcd: connection reset by peer [ 391.425894][ T1321] vhci_hcd vhci_hcd.4: stop threads [ 391.425921][ T1321] vhci_hcd vhci_hcd.4: release socket [ 391.425997][ T1321] vhci_hcd vhci_hcd.4: disconnect device [ 391.426551][ T1321] vhci_hcd vhci_hcd.4: stop threads [ 391.426566][ T1321] vhci_hcd vhci_hcd.4: release socket [ 391.426624][ T1321] vhci_hcd vhci_hcd.4: disconnect device [ 391.426945][ T1321] vhci_hcd vhci_hcd.4: stop threads [ 391.426958][ T1321] vhci_hcd vhci_hcd.4: release socket [ 391.426996][ T1321] vhci_hcd vhci_hcd.4: disconnect device [ 391.434369][ T1321] vhci_hcd vhci_hcd.4: stop threads [ 391.434388][ T1321] vhci_hcd vhci_hcd.4: release socket [ 391.434455][ T1321] vhci_hcd vhci_hcd.4: disconnect device [ 391.437243][ T1321] vhci_hcd vhci_hcd.4: stop threads [ 391.437258][ T1321] vhci_hcd vhci_hcd.4: release socket [ 391.437477][ T1321] vhci_hcd vhci_hcd.4: disconnect device [ 391.448187][ T1321] vhci_hcd vhci_hcd.4: stop threads [ 391.448212][ T1321] vhci_hcd vhci_hcd.4: release socket [ 391.448446][ T1321] vhci_hcd vhci_hcd.4: disconnect device [ 391.887171][ T8295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.887298][ T8295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.887396][ T8295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.887494][ T8295] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 393.162012][ T8313] netlink: 220 bytes leftover after parsing attributes in process `syz.0.551'. [ 393.954964][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 394.339207][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 394.339255][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 394.339285][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 395.253129][ T6634] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 395.430264][ T8336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 395.430288][ T8336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.430400][ T8336] vhci_hcd vhci_hcd.0: Device attached [ 395.439858][ T8336] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 395.439878][ T8336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.439933][ T8336] vhci_hcd vhci_hcd.0: Device attached [ 395.441809][ T8336] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 395.441822][ T8336] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 395.441859][ T8336] vhci_hcd vhci_hcd.0: Device attached [ 395.444383][ T8336] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 395.444398][ T8336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.444439][ T8336] vhci_hcd vhci_hcd.0: Device attached [ 395.466790][ T8336] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 395.466808][ T8336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.466848][ T8336] vhci_hcd vhci_hcd.0: Device attached [ 395.468913][ T8336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 395.468927][ T8336] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 395.469012][ T8336] vhci_hcd vhci_hcd.0: Device attached [ 395.474358][ T8336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.475212][ T8336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.476765][ T8336] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(25) [ 395.476781][ T8336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.476830][ T8336] vhci_hcd vhci_hcd.0: Device attached [ 395.477746][ T8336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.754715][ T5969] usb 34-1: SetAddress Request (2) to port 0 [ 395.754830][ T5969] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 395.894757][ T8349] vhci_hcd: connection closed [ 395.895243][ T3551] vhci_hcd vhci_hcd.0: stop threads [ 395.895257][ T3551] vhci_hcd vhci_hcd.0: release socket [ 395.895294][ T3551] vhci_hcd vhci_hcd.0: disconnect device [ 395.945849][ T8347] vhci_hcd: connection reset by peer [ 395.947552][ T8337] vhci_hcd: connection closed [ 395.947631][ T8339] vhci_hcd: connection closed [ 395.948199][ T8343] vhci_hcd: connection closed [ 395.950150][ T8341] vhci_hcd: connection closed [ 395.950459][ T8345] vhci_hcd: connection closed [ 395.950848][ T6354] vhci_hcd vhci_hcd.0: stop threads [ 395.950873][ T6354] vhci_hcd vhci_hcd.0: release socket [ 395.984161][ T6354] vhci_hcd vhci_hcd.0: disconnect device [ 395.984592][ T6354] vhci_hcd vhci_hcd.0: stop threads [ 395.984613][ T6354] vhci_hcd vhci_hcd.0: release socket [ 395.984715][ T6354] vhci_hcd vhci_hcd.0: disconnect device [ 395.997077][ T6354] vhci_hcd vhci_hcd.0: stop threads [ 395.997095][ T6354] vhci_hcd vhci_hcd.0: release socket [ 395.997188][ T6354] vhci_hcd vhci_hcd.0: disconnect device [ 395.997528][ T6354] vhci_hcd vhci_hcd.0: stop threads [ 395.997541][ T6354] vhci_hcd vhci_hcd.0: release socket [ 396.027440][ T6354] vhci_hcd vhci_hcd.0: disconnect device [ 396.110301][ T6354] vhci_hcd vhci_hcd.0: stop threads [ 396.110323][ T6354] vhci_hcd vhci_hcd.0: release socket [ 396.110405][ T6354] vhci_hcd vhci_hcd.0: disconnect device [ 396.111363][ T6354] vhci_hcd vhci_hcd.0: stop threads [ 396.111376][ T6354] vhci_hcd vhci_hcd.0: release socket [ 396.111454][ T6354] vhci_hcd vhci_hcd.0: disconnect device [ 396.385139][ T5785] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 396.825099][ T5870] usb usb38-port2: attempt power cycle [ 397.010323][ T8359] netlink: 220 bytes leftover after parsing attributes in process `syz.2.561'. [ 397.922018][ T8363] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 397.922048][ T8363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.922424][ T8363] vhci_hcd vhci_hcd.0: Device attached [ 397.922645][ T8361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 397.922675][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.923367][ T8361] vhci_hcd vhci_hcd.0: Device attached [ 397.978796][ T8366] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(16) [ 397.978813][ T8366] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 397.980664][ T8366] vhci_hcd vhci_hcd.0: Device attached [ 398.016328][ T8361] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 398.016348][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.021973][ T8361] vhci_hcd vhci_hcd.0: Device attached [ 398.035299][ T8361] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 398.035324][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.035617][ T8361] vhci_hcd vhci_hcd.0: Device attached [ 398.079496][ T8361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 398.079525][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 398.079909][ T8361] vhci_hcd vhci_hcd.0: Device attached [ 398.082117][ T8361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.087137][ T8361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.087375][ T5870] usb usb38-port2: unable to enumerate USB device [ 398.148080][ T8363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.227447][ T8361] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(26) [ 398.227478][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.227664][ T8361] vhci_hcd vhci_hcd.0: Device attached [ 398.303990][ T8380] vhci_hcd: connection closed [ 398.304257][ T12] vhci_hcd vhci_hcd.0: stop threads [ 398.304270][ T12] vhci_hcd vhci_hcd.0: release socket [ 398.304392][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 398.305892][ T8377] vhci_hcd: connection closed [ 398.306188][ T8369] vhci_hcd: connection closed [ 398.306309][ T8373] vhci_hcd: connection closed [ 398.306525][ T8362] vhci_hcd: connection closed [ 398.313104][ T8364] vhci_hcd: connection closed [ 398.327472][ T12] vhci_hcd vhci_hcd.0: stop threads [ 398.327493][ T12] vhci_hcd vhci_hcd.0: release socket [ 398.327596][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 398.331490][ T8375] vhci_hcd: connection closed [ 398.425278][ T5897] usb usb42-port1: attempt power cycle [ 398.443748][ T12] vhci_hcd vhci_hcd.0: stop threads [ 398.443768][ T12] vhci_hcd vhci_hcd.0: release socket [ 398.443935][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 398.444169][ T12] vhci_hcd vhci_hcd.0: stop threads [ 398.444178][ T12] vhci_hcd vhci_hcd.0: release socket [ 398.444308][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 398.446207][ T12] vhci_hcd vhci_hcd.0: stop threads [ 398.446223][ T12] vhci_hcd vhci_hcd.0: release socket [ 398.446420][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 398.446564][ T12] vhci_hcd vhci_hcd.0: stop threads [ 398.446577][ T12] vhci_hcd vhci_hcd.0: release socket [ 398.446719][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 398.446854][ T12] vhci_hcd vhci_hcd.0: stop threads [ 398.446867][ T12] vhci_hcd vhci_hcd.0: release socket [ 398.446941][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 399.113328][ T5897] usb usb42-port1: unable to enumerate USB device [ 399.429066][ T8387] netlink: 220 bytes leftover after parsing attributes in process `syz.0.564'. [ 400.783217][ T5969] usb 34-1: device descriptor read/8, error -110 [ 400.983162][ T6055] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 402.567696][ T5969] usb usb34-port1: attempt power cycle [ 402.943047][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 402.943273][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.204851][ T5969] usb usb34-port1: unable to enumerate USB device [ 404.765536][ T8427] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 409.665199][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 409.830170][ T8487] bridge_slave_0: default FDB implementation only supports local addresses [ 416.365214][ T8539] tipc: Started in network mode [ 416.365230][ T8539] tipc: Node identity ca30f1e9227e, cluster identity 4711 [ 416.365334][ T8539] tipc: Enabled bearer , priority 0 [ 416.378969][ T8539] tipc: Resetting bearer [ 416.543905][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.543950][ T5806] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 416.733782][ T8537] tipc: Disabling bearer [ 421.633368][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 421.784903][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 421.784923][ T31] usb 5-1: config 0 has no interface number 0 [ 421.786935][ T31] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 421.786950][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.786959][ T31] usb 5-1: Product: syz [ 421.786965][ T31] usb 5-1: Manufacturer: syz [ 421.786971][ T31] usb 5-1: SerialNumber: syz [ 421.790547][ T31] usb 5-1: config 0 descriptor?? [ 422.043103][ T31] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 422.092774][ T31] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 422.123498][ T31] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 422.123606][ T31] usb 5-1: media controller created [ 422.227353][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.355107][ T31] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 423.876714][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 424.951380][ T31] usb 5-1: USB disconnect, device number 6 [ 427.423133][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 427.423220][ T5806] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 430.956137][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 431.117663][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.117678][ T31] usb 5-1: config 0 has no interface number 0 [ 431.120957][ T31] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 431.120975][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.120986][ T31] usb 5-1: Product: syz [ 431.120994][ T31] usb 5-1: Manufacturer: syz [ 431.121002][ T31] usb 5-1: SerialNumber: syz [ 431.189138][ T31] usb 5-1: config 0 descriptor?? [ 431.395988][ T31] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 431.485356][ T31] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 431.485773][ T31] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 431.485828][ T31] usb 5-1: media controller created [ 431.559673][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.653138][ T31] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 431.787382][ T31] usb 5-1: USB disconnect, device number 7 [ 435.953069][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 436.699161][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.699177][ T31] usb 2-1: config 0 has no interface number 0 [ 436.701338][ T31] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 436.701356][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.701367][ T31] usb 2-1: Product: syz [ 436.701374][ T31] usb 2-1: Manufacturer: syz [ 436.701380][ T31] usb 2-1: SerialNumber: syz [ 436.719930][ T31] usb 2-1: config 0 descriptor?? [ 437.078633][ T31] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 437.963936][ T31] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 437.964118][ T31] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 437.964144][ T31] usb 2-1: media controller created [ 437.992828][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.422388][ T8729] tipc: Started in network mode [ 439.422419][ T8729] tipc: Node identity 86cc569b0c0b, cluster identity 4711 [ 439.422590][ T8729] tipc: Enabled bearer , priority 0 [ 439.627438][ T8728] tipc: Resetting bearer [ 439.875844][ T8727] tipc: Disabling bearer [ 439.914630][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.914803][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.224690][ T31] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 441.797206][ T31] usb 2-1: USB disconnect, device number 6 [ 441.943106][ T6634] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 442.095587][ T6634] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.095619][ T6634] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.095639][ T6634] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.095705][ T6634] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.098105][ T6634] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.098132][ T6634] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.098152][ T6634] usb 3-1: Product: syz [ 442.098166][ T6634] usb 3-1: Manufacturer: syz [ 442.123263][ T5969] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 442.224626][ T6634] cdc_wdm 3-1:1.0: skipping garbage [ 442.224663][ T6634] cdc_wdm 3-1:1.0: skipping garbage [ 442.246646][ T6634] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 442.246670][ T6634] cdc_wdm 3-1:1.0: Unknown control protocol [ 442.295514][ T5969] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.295545][ T5969] usb 5-1: config 0 has no interface number 0 [ 442.299153][ T5969] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 442.299178][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.299194][ T5969] usb 5-1: Product: syz [ 442.299205][ T5969] usb 5-1: Manufacturer: syz [ 442.299215][ T5969] usb 5-1: SerialNumber: syz [ 442.339476][ T5969] usb 5-1: config 0 descriptor?? [ 442.482189][ T6634] usb 3-1: USB disconnect, device number 9 [ 442.559489][ T5969] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 442.584620][ T5969] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 442.585046][ T5969] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 442.585104][ T5969] usb 5-1: media controller created [ 442.640031][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.823736][ T5969] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 445.938020][ T8773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.938567][ T8773] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 445.939511][ T8773] bond0: (slave sit0): Error -95 calling set_mac_address [ 446.734659][ T6634] usb 5-1: USB disconnect, device number 8 [ 446.757044][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 447.016714][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.661'. [ 447.204650][ T8787] bridge_slave_0: default FDB implementation only supports local addresses [ 447.204715][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 447.210410][ T8791] bridge_slave_0: default FDB implementation only supports local addresses [ 448.954814][ T8811] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 448.955944][ T8811] bond0: (slave sit0): Error -95 calling set_mac_address [ 452.663236][ T8859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'. [ 456.085415][ T8899] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 456.085444][ T8899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.085588][ T8899] vhci_hcd vhci_hcd.0: Device attached [ 456.249109][ T8911] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 456.249139][ T8911] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 456.249287][ T8911] vhci_hcd vhci_hcd.0: Device attached [ 456.267282][ T8899] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 456.267311][ T8899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.267426][ T8899] vhci_hcd vhci_hcd.0: Device attached [ 456.745103][ T8911] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 456.745134][ T8911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.748900][ T8911] vhci_hcd vhci_hcd.0: Device attached [ 456.751591][ T8899] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(10) [ 456.751619][ T8899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.751758][ T8899] vhci_hcd vhci_hcd.0: Device attached [ 456.824674][ T8911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.825768][ T8911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.833057][ T8899] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 456.833077][ T8899] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 456.837023][ T8899] vhci_hcd vhci_hcd.0: Device attached [ 456.847187][ T8911] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(23) [ 456.847215][ T8911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.847378][ T8911] vhci_hcd vhci_hcd.0: Device attached [ 456.849757][ T8899] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.873018][ T5884] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 456.953935][ T8899] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(26) [ 456.953955][ T8899] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 456.961442][ T8899] vhci_hcd vhci_hcd.0: Device attached [ 458.457706][ T8925] vhci_hcd: connection closed [ 458.458253][ T6250] vhci_hcd vhci_hcd.0: stop threads [ 458.458282][ T6250] vhci_hcd vhci_hcd.0: release socket [ 458.486760][ T6250] vhci_hcd vhci_hcd.0: disconnect device [ 458.505610][ T8912] vhci_hcd: connection closed [ 458.516348][ T6250] vhci_hcd vhci_hcd.0: stop threads [ 458.516375][ T6250] vhci_hcd vhci_hcd.0: release socket [ 458.516695][ T6250] vhci_hcd vhci_hcd.0: disconnect device [ 458.516864][ T8910] vhci_hcd: connection closed [ 458.582270][ T8902] vhci_hcd: connection reset by peer [ 458.582622][ T8914] vhci_hcd: connection closed [ 458.584782][ T8921] vhci_hcd: connection closed [ 458.589055][ T8916] vhci_hcd: connection closed [ 458.589405][ T6250] vhci_hcd vhci_hcd.0: stop threads [ 458.589458][ T6250] vhci_hcd vhci_hcd.0: release socket [ 458.589536][ T6250] vhci_hcd vhci_hcd.0: disconnect device [ 458.589843][ T6250] vhci_hcd vhci_hcd.0: stop threads [ 458.589857][ T6250] vhci_hcd vhci_hcd.0: release socket [ 458.589898][ T6250] vhci_hcd vhci_hcd.0: disconnect device [ 458.590208][ T6250] vhci_hcd vhci_hcd.0: stop threads [ 458.590221][ T6250] vhci_hcd vhci_hcd.0: release socket [ 458.590258][ T6250] vhci_hcd vhci_hcd.0: disconnect device [ 458.590576][ T6250] vhci_hcd vhci_hcd.0: stop threads [ 458.590589][ T6250] vhci_hcd vhci_hcd.0: release socket [ 458.590628][ T6250] vhci_hcd vhci_hcd.0: disconnect device [ 458.594637][ T8923] vhci_hcd: connection closed [ 458.611587][ T3232] vhci_hcd vhci_hcd.0: stop threads [ 458.611607][ T3232] vhci_hcd vhci_hcd.0: release socket [ 458.611847][ T3232] vhci_hcd vhci_hcd.0: disconnect device [ 458.732999][ T3505] vhci_hcd vhci_hcd.0: stop threads [ 458.733022][ T3505] vhci_hcd vhci_hcd.0: release socket [ 458.733227][ T3505] vhci_hcd vhci_hcd.0: disconnect device [ 459.310848][ T8941] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 459.322541][ T8941] bond0: (slave sit0): Error -95 calling set_mac_address [ 461.563010][ T6054] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 461.726029][ T6054] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.726059][ T6054] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.774199][ T6054] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 461.774229][ T6054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.777287][ T6054] usb 3-1: Product: syz [ 461.777309][ T6054] usb 3-1: Manufacturer: syz [ 461.777321][ T6054] usb 3-1: SerialNumber: syz [ 461.839292][ T6054] usb 3-1: config 0 descriptor?? [ 461.973168][ T5884] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 464.588741][ T8365] usb usb34-port1: attempt power cycle [ 464.602666][ T5974] usb 3-1: USB disconnect, device number 11 [ 466.613384][ T8365] usb usb34-port1: unable to enumerate USB device [ 469.463099][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 469.613055][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 469.626934][ T5884] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 469.626958][ T5884] usb 2-1: config 0 has no interface number 0 [ 469.626989][ T5884] usb 2-1: config 0 interface 196 has no altsetting 0 [ 469.680878][ T5884] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 469.680912][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.680942][ T5884] usb 2-1: Product: syz [ 469.680956][ T5884] usb 2-1: Manufacturer: syz [ 469.680970][ T5884] usb 2-1: SerialNumber: syz [ 469.724991][ T5884] usb 2-1: config 0 descriptor?? [ 469.954154][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.954711][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.956985][ T9001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.705'. [ 469.957344][ T9001] 8021q: VLANs not supported on vcan0 [ 470.051914][ T5884] ipheth 2-1:0.196: Unable to find endpoints [ 470.088204][ T5884] usb 2-1: USB disconnect, device number 7 [ 470.275496][ T9009] fuse: Unknown parameter '0xffffffffffffffff' [ 470.283177][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 470.283194][ T37] audit: type=1326 audit(1765417564.418:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.394571][ T37] audit: type=1326 audit(1765417564.478:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.397172][ T37] audit: type=1326 audit(1765417564.538:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.399247][ T37] audit: type=1326 audit(1765417564.538:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.522363][ T9014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 470.523649][ T37] audit: type=1326 audit(1765417564.538:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a9b44df90 code=0x7ffc0000 [ 470.523705][ T37] audit: type=1326 audit(1765417564.668:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.523747][ T37] audit: type=1326 audit(1765417564.668:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.731100][ T37] audit: type=1326 audit(1765417564.868:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.731673][ T37] audit: type=1326 audit(1765417564.868:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.732014][ T37] audit: type=1326 audit(1765417564.868:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.3.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9b44f749 code=0x7ffc0000 [ 470.763066][ T5967] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 471.873091][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 471.910866][ T5967] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 471.910897][ T5967] usb 1-1: config 0 has no interface number 0 [ 471.910933][ T5967] usb 1-1: config 0 interface 196 has no altsetting 0 [ 471.925913][ T5967] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 471.925945][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.925965][ T5967] usb 1-1: Product: syz [ 471.925979][ T5967] usb 1-1: Manufacturer: syz [ 471.925993][ T5967] usb 1-1: SerialNumber: syz [ 471.929869][ T5967] usb 1-1: config 0 descriptor?? [ 473.236647][ T9011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.237303][ T9011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.245152][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'. [ 473.245666][ T9011] 8021q: VLANs not supported on vcan0 [ 475.704058][ T5967] ipheth 1-1:0.196: Unable to find endpoints [ 475.744280][ T5967] usb 1-1: USB disconnect, device number 7 [ 476.656136][ T9036] fuse: Unknown parameter '0xffffffffffffffff' [ 476.689350][ T9036] netlink: 36 bytes leftover after parsing attributes in process `syz.0.714'. [ 476.701458][ T37] audit: type=1326 audit(1765417570.798:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 476.701529][ T37] audit: type=1326 audit(1765417570.798:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 476.701583][ T37] audit: type=1326 audit(1765417570.798:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 476.701631][ T37] audit: type=1326 audit(1765417570.798:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd35f24df90 code=0x7ffc0000 [ 476.701676][ T37] audit: type=1326 audit(1765417570.818:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 476.701724][ T37] audit: type=1326 audit(1765417570.818:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 476.701771][ T37] audit: type=1326 audit(1765417570.818:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 476.701816][ T37] audit: type=1326 audit(1765417570.818:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 476.701864][ T37] audit: type=1326 audit(1765417570.818:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 476.701910][ T37] audit: type=1326 audit(1765417570.818:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 477.674865][ T9041] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 477.675485][ T9041] bond0: (slave sit0): Error -95 calling set_mac_address [ 480.840837][ T9051] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 480.841504][ T9051] bond0: (slave sit0): Error -95 calling set_mac_address [ 481.963187][ T9056] tipc: Started in network mode [ 481.963464][ T9056] tipc: Node identity e689fcd052db, cluster identity 4711 [ 481.978078][ T9056] tipc: Enabled bearer , priority 0 [ 482.946180][ T9056] tipc: Resetting bearer [ 483.254914][ T5870] tipc: Node number set to 3025337552 [ 486.283757][ T9055] tipc: Disabling bearer [ 487.066905][ T9068] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 487.067285][ T9068] bond0: (slave sit0): Error -95 calling set_mac_address [ 487.085089][ T9075] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 487.085537][ T9075] bond0: (slave sit0): Error -95 calling set_mac_address [ 487.281471][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.304764][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.306417][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.307700][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 487.308632][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.018365][ T9092] fuse: Unknown parameter '0xffffffffffffffff' [ 489.052226][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 489.052247][ T37] audit: type=1326 audit(1765417583.168:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.052293][ T37] audit: type=1326 audit(1765417583.168:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.052334][ T37] audit: type=1326 audit(1765417583.168:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.052373][ T37] audit: type=1326 audit(1765417583.168:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9d1e5df90 code=0x7ffc0000 [ 489.052412][ T37] audit: type=1326 audit(1765417583.178:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.052452][ T37] audit: type=1326 audit(1765417583.178:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.052498][ T37] audit: type=1326 audit(1765417583.178:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.052540][ T37] audit: type=1326 audit(1765417583.188:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.052580][ T37] audit: type=1326 audit(1765417583.188:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.052619][ T37] audit: type=1326 audit(1765417583.188:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 489.867697][ T5806] Bluetooth: hci5: command tx timeout [ 490.153203][ T9092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.727'. [ 490.224355][ T9098] tipc: Started in network mode [ 490.224377][ T9098] tipc: Node identity 9e99602d6e23, cluster identity 4711 [ 490.224537][ T9098] tipc: Enabled bearer , priority 0 [ 490.236063][ T9098] syzkaller0: entered promiscuous mode [ 490.236087][ T9098] syzkaller0: entered allmulticast mode [ 491.707039][ T9098] tipc: Resetting bearer [ 491.707688][ T10] tipc: Node number set to 4038746157 [ 491.712230][ T9107] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 491.712681][ T9107] bond0: (slave sit0): Error -95 calling set_mac_address [ 492.354857][ T5804] Bluetooth: hci5: command tx timeout [ 494.386321][ T5804] Bluetooth: hci5: command tx timeout [ 494.582353][ T9096] tipc: Resetting bearer [ 494.714150][ T9096] tipc: Disabling bearer [ 496.507515][ T5804] Bluetooth: hci5: command tx timeout [ 500.783106][ T6054] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 501.666942][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.667022][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.258953][ T6054] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.259035][ T6054] usb 5-1: config 0 has no interface number 0 [ 502.417760][ T6054] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 502.417793][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.417813][ T6054] usb 5-1: Product: syz [ 502.417827][ T6054] usb 5-1: Manufacturer: syz [ 502.417842][ T6054] usb 5-1: SerialNumber: syz [ 502.493334][ T6054] usb 5-1: config 0 descriptor?? [ 502.707734][ T6054] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 502.722810][ T6054] usb 5-1: USB disconnect, device number 9 [ 504.189791][ T6606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.377836][ T9157] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 504.378261][ T9157] bond0: (slave sit0): Error -95 calling set_mac_address [ 505.594884][ T6606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.040251][ T6606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.044570][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 509.963030][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 509.966692][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 509.966720][ T10] usb 3-1: config 0 has no interface number 0 [ 509.971224][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 509.971251][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.971270][ T10] usb 3-1: Product: syz [ 509.971284][ T10] usb 3-1: Manufacturer: syz [ 509.971298][ T10] usb 3-1: SerialNumber: syz [ 510.038451][ T10] usb 3-1: config 0 descriptor?? [ 510.057132][ T10] smsc95xx v2.0.0 [ 510.328529][ T6606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.403999][ T9213] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 510.404543][ T9213] bond0: (slave sit0): Error -95 calling set_mac_address [ 510.440114][ T9076] chnl_net:caif_netlink_parms(): no params data found [ 510.492471][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 510.492503][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 510.699118][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 510.703369][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 510.776153][ T10] usb 3-1: USB disconnect, device number 12 [ 510.906991][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 510.907017][ T37] audit: type=1326 audit(1765417605.048:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 510.907064][ T37] audit: type=1326 audit(1765417605.048:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 511.016498][ T37] audit: type=1326 audit(1765417605.158:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 511.016540][ T37] audit: type=1326 audit(1765417605.158:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 511.016565][ T37] audit: type=1326 audit(1765417605.158:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 511.132580][ T37] audit: type=1326 audit(1765417605.268:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3c10fdf90 code=0x7ffc0000 [ 511.168847][ T37] audit: type=1326 audit(1765417605.308:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 511.191437][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.760'. [ 511.193212][ T37] audit: type=1326 audit(1765417605.308:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 511.193259][ T37] audit: type=1326 audit(1765417605.318:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 511.193290][ T37] audit: type=1326 audit(1765417605.318:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 511.735151][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.735399][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.735662][ T9076] bridge_slave_0: entered allmulticast mode [ 511.742578][ T9076] bridge_slave_0: entered promiscuous mode [ 511.838194][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.838364][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.838596][ T9076] bridge_slave_1: entered allmulticast mode [ 511.841790][ T9076] bridge_slave_1: entered promiscuous mode [ 513.856290][ T6634] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 515.403268][ T6634] usb 3-1: device descriptor read/all, error -71 [ 515.418147][ T6606] bridge_slave_1: left allmulticast mode [ 515.418180][ T6606] bridge_slave_1: left promiscuous mode [ 515.420436][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.224169][ T6606] bridge_slave_0: left allmulticast mode [ 517.224193][ T6606] bridge_slave_0: left promiscuous mode [ 517.224404][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.788709][ T6054] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 517.942711][ T6054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 517.942732][ T6054] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 517.942746][ T6054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 517.942769][ T6054] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 517.942782][ T6054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.951255][ T6054] usb 5-1: config 0 descriptor?? [ 518.025154][ T6054] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 518.025271][ T6054] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 518.053027][ T6634] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 519.443089][ T5992] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 519.452719][ T6634] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 519.452759][ T6634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.452779][ T6634] usb 3-1: Product: syz [ 519.452792][ T6634] usb 3-1: Manufacturer: syz [ 519.452805][ T6634] usb 3-1: SerialNumber: syz [ 519.499091][ T6634] usb 3-1: config 0 descriptor?? [ 519.604898][ T5992] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.604927][ T5992] usb 1-1: config 0 has no interface number 0 [ 519.608329][ T5992] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 519.608359][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.608378][ T5992] usb 1-1: Product: syz [ 519.608392][ T5992] usb 1-1: Manufacturer: syz [ 519.608407][ T5992] usb 1-1: SerialNumber: syz [ 519.631694][ T5992] usb 1-1: config 0 descriptor?? [ 519.719967][ T6634] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 519.893066][ T5992] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 519.901437][ T5992] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 519.901708][ T5992] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 519.901750][ T5992] usb 1-1: media controller created [ 519.921569][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.116479][ T5992] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 520.426598][ T5992] usb 1-1: USB disconnect, device number 8 [ 520.528969][ T43] usb 5-1: USB disconnect, device number 10 [ 521.239630][ T6634] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 521.253828][ T6634] usb 3-1: USB disconnect, device number 14 [ 522.473940][ T6054] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 522.768142][ T6054] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 522.768173][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.768193][ T6054] usb 5-1: Product: syz [ 522.768207][ T6054] usb 5-1: Manufacturer: syz [ 522.768221][ T6054] usb 5-1: SerialNumber: syz [ 522.775371][ T6054] usb 5-1: config 0 descriptor?? [ 523.842477][ T6054] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 523.842599][ T6054] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 526.159062][ T10] usb 5-1: USB disconnect, device number 11 [ 530.027901][ T9326] fuse: Unknown parameter '0xffffffffffffffff' [ 530.043262][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 530.043282][ T37] audit: type=1326 audit(1765417624.178:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 530.043337][ T37] audit: type=1326 audit(1765417624.178:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 530.046841][ T37] audit: type=1326 audit(1765417624.188:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 530.492464][ T9329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 530.514236][ T37] audit: type=1326 audit(1765417624.228:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9d1e5df90 code=0x7ffc0000 [ 530.600771][ T37] audit: type=1326 audit(1765417624.668:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 530.600889][ T37] audit: type=1326 audit(1765417624.708:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 530.601054][ T37] audit: type=1326 audit(1765417624.708:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 530.601192][ T37] audit: type=1326 audit(1765417624.708:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 530.601344][ T37] audit: type=1326 audit(1765417624.728:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 530.606631][ T37] audit: type=1326 audit(1765417624.748:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9322 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9d1e5f749 code=0x7ffc0000 [ 531.133559][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.207819][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.023345][ T6606] bond0 (unregistering): Released all slaves [ 534.159210][ T9076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.289090][ T9076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.985554][ T6606] tipc: Left network mode [ 536.749837][ T9076] team0: Port device team_slave_0 added [ 536.756733][ T9076] team0: Port device team_slave_1 added [ 541.007872][ T9392] netlink: 220 bytes leftover after parsing attributes in process `syz.2.800'. [ 541.686196][ T9393] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.802'. [ 543.112769][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.112787][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.112810][ T9076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.070148][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.070166][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.070192][ T9076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.441841][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.465128][ T9440] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 547.470041][ T9440] bond0: (slave sit0): Error -95 calling set_mac_address [ 547.983325][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 548.981193][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.005220][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.006253][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.724633][ T5992] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 550.333509][ T9439] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 550.334153][ T9439] bond0: (slave sit0): Error -95 calling set_mac_address [ 550.365103][ T5992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.365172][ T5992] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 550.365194][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.371450][ T5992] usb 2-1: config 0 descriptor?? [ 550.431982][ T5992] pwc: Askey VC010 type 2 USB webcam detected. [ 551.636950][ T5804] Bluetooth: hci1: command tx timeout [ 552.783023][ T5992] pwc: send_video_command error -71 [ 552.783044][ T5992] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 552.783179][ T5992] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 552.826047][ T5992] usb 2-1: USB disconnect, device number 8 [ 553.665637][ T5804] Bluetooth: hci1: command tx timeout [ 554.743091][ T6606] hsr_slave_0: left promiscuous mode [ 555.083043][ T6606] hsr_slave_1: left promiscuous mode [ 555.085228][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.085382][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.455744][ T5804] Bluetooth: hci1: command tx timeout [ 558.237328][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.237361][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.503096][ T5804] Bluetooth: hci1: command tx timeout [ 559.927442][ T6606] veth1_macvtap: left promiscuous mode [ 559.927661][ T6606] veth0_macvtap: left promiscuous mode [ 559.927984][ T6606] veth1_vlan: left promiscuous mode [ 559.928197][ T6606] veth0_vlan: left promiscuous mode [ 562.953329][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.985535][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.200190][ T9575] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.841'. [ 584.261771][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 585.563712][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 586.861284][ T9622] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.852'. [ 593.546348][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 593.550903][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 593.575530][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 593.577152][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 593.578162][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 594.836616][ T9598] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 594.837153][ T9598] bond0: (slave sit0): Error -95 calling set_mac_address [ 594.929459][ T9635] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 594.929989][ T9635] bond0: (slave sit0): Error -95 calling set_mac_address [ 595.583022][ T5806] Bluetooth: hci5: command tx timeout [ 595.924819][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 595.924852][ T9617] bridge: RTM_NEWNEIGH with invalid ether address [ 595.986604][ T9661] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.862'. [ 596.817628][ T9665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.863'. [ 597.663262][ T5806] Bluetooth: hci5: command tx timeout [ 598.407681][ T9677] fuse: Unknown parameter '0xffffffffffffffff' [ 598.482970][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 598.482990][ T37] audit: type=1326 audit(1765417692.618:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 599.546060][ T37] audit: type=1326 audit(1765417692.938:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 599.547582][ T37] audit: type=1326 audit(1765417693.688:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 599.548915][ T37] audit: type=1326 audit(1765417693.688:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 599.593125][ T37] audit: type=1326 audit(1765417693.728:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 599.594343][ T37] audit: type=1326 audit(1765417693.738:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 599.632394][ T37] audit: type=1326 audit(1765417693.738:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 599.768640][ T5806] Bluetooth: hci5: command tx timeout [ 599.854307][ T37] audit: type=1326 audit(1765417693.798:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 599.854434][ T37] audit: type=1326 audit(1765417693.998:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f24f749 code=0x7ffc0000 [ 601.829602][ T5806] Bluetooth: hci5: command tx timeout [ 603.019112][ T9437] chnl_net:caif_netlink_parms(): no params data found [ 603.306902][ T9719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.874'. [ 603.306933][ T9719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.874'. [ 603.580899][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 603.580926][ T9723] bridge: RTM_NEWNEIGH with invalid ether address [ 603.593446][ T9645] chnl_net:caif_netlink_parms(): no params data found [ 605.074326][ T9736] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 605.074905][ T9736] bond0: (slave sit0): Error -95 calling set_mac_address [ 605.453930][ T9743] fuse: Unknown parameter '0xffffffffffffffff' [ 605.470461][ T37] audit: type=1326 audit(1765417699.598:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 605.470507][ T37] audit: type=1326 audit(1765417699.598:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 605.470535][ T37] audit: type=1326 audit(1765417699.598:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 605.470561][ T37] audit: type=1326 audit(1765417699.598:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 605.470586][ T37] audit: type=1326 audit(1765417699.608:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f811b4adf90 code=0x7ffc0000 [ 605.470611][ T37] audit: type=1326 audit(1765417699.608:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 605.470635][ T37] audit: type=1326 audit(1765417699.608:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 605.470660][ T37] audit: type=1326 audit(1765417699.608:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 605.470684][ T37] audit: type=1326 audit(1765417699.608:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 605.470708][ T37] audit: type=1326 audit(1765417699.608:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 606.750949][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.879'. [ 607.538606][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 607.569194][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 607.571512][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 607.574953][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 607.601812][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 607.686415][ T9763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.883'. [ 607.686444][ T9763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.883'. [ 608.168115][ T6606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.663109][ T5804] Bluetooth: hci4: command tx timeout [ 612.648853][ T5804] Bluetooth: hci4: command tx timeout [ 612.902244][ T6606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.940156][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 612.940184][ T9772] bridge: RTM_NEWNEIGH with invalid ether address [ 613.733312][ T9799] ======================================================= [ 613.733312][ T9799] WARNING: The mand mount option has been deprecated and [ 613.733312][ T9799] and is ignored by this kernel. Remove the mand [ 613.733312][ T9799] option from the mount to silence this warning. [ 613.733312][ T9799] ======================================================= [ 615.512971][ T5804] Bluetooth: hci4: command tx timeout [ 615.560643][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.560891][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.561156][ T9645] bridge_slave_0: entered allmulticast mode [ 615.565656][ T9645] bridge_slave_0: entered promiscuous mode [ 615.577561][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 615.577583][ T37] audit: type=1326 audit(1765417709.718:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 615.578087][ T37] audit: type=1326 audit(1765417709.718:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 615.578399][ T37] audit: type=1326 audit(1765417709.718:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 615.578853][ T37] audit: type=1326 audit(1765417709.718:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3c10fdf90 code=0x7ffc0000 [ 615.580050][ T37] audit: type=1326 audit(1765417709.718:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 615.580565][ T37] audit: type=1326 audit(1765417709.718:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 615.581440][ T37] audit: type=1326 audit(1765417709.718:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 615.582168][ T37] audit: type=1326 audit(1765417709.718:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c10ff749 code=0x7ffc0000 [ 615.666853][ T9809] fuse: Unknown parameter '0xffffffffffffffff' [ 615.776726][ T9813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.896'. [ 615.782097][ T37] audit: type=1326 audit(1765417709.918:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 615.791054][ T37] audit: type=1326 audit(1765417709.918:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 616.000895][ T6606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.048449][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.048612][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.048890][ T9645] bridge_slave_1: entered allmulticast mode [ 616.099986][ T9645] bridge_slave_1: entered promiscuous mode [ 617.488067][ T6606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.582954][ T5806] Bluetooth: hci4: command tx timeout [ 617.599298][ T9645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.599378][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 617.599402][ T9821] bridge: RTM_NEWNEIGH with invalid ether address [ 617.652364][ T9645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.331742][ T9645] team0: Port device team_slave_0 added [ 618.413515][ T9645] team0: Port device team_slave_1 added [ 621.826234][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.826253][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.826278][ T9645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.080901][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.080918][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.080948][ T9645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.551391][ T9881] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 623.557322][ T9881] bond0: (slave sit0): Error -95 calling set_mac_address [ 624.203262][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 624.203292][ T9870] bridge: RTM_NEWNEIGH with invalid ether address [ 624.375025][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.375125][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.491504][ T9887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.915'. [ 624.532321][ T9645] hsr_slave_0: entered promiscuous mode [ 624.541065][ T9645] hsr_slave_1: entered promiscuous mode [ 624.542667][ T9645] debugfs: 'hsr0' already exists in 'hsr' [ 624.542693][ T9645] Cannot create hsr debugfs directory [ 624.544822][ T6606] bridge_slave_1: left allmulticast mode [ 624.544848][ T6606] bridge_slave_1: left promiscuous mode [ 624.545096][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.624702][ T6606] bridge_slave_0: left allmulticast mode [ 624.624737][ T6606] bridge_slave_0: left promiscuous mode [ 625.407836][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.584019][ T6606] bridge_slave_1: left allmulticast mode [ 625.584054][ T6606] bridge_slave_1: left promiscuous mode [ 625.584334][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.491589][ T6606] bridge_slave_0: left allmulticast mode [ 626.491625][ T6606] bridge_slave_0: left promiscuous mode [ 626.491932][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.484207][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.543707][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.566549][ T6606] bond0 (unregistering): Released all slaves [ 630.764519][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.823734][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.894969][ T6606] bond0 (unregistering): Released all slaves [ 630.913774][ T9917] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 630.914038][ T9917] bond0: (slave sit0): Error -95 calling set_mac_address [ 630.933214][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'. [ 630.934073][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'. [ 631.384456][ T6606] tipc: Left network mode [ 632.874158][ T9928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.929'. [ 635.035089][ T9954] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 635.035677][ T9954] bond0: (slave sit0): Error -95 calling set_mac_address [ 635.349727][ T9757] chnl_net:caif_netlink_parms(): no params data found [ 639.222515][ T9979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.943'. [ 644.404219][ T6606] hsr_slave_0: left promiscuous mode [ 644.628469][ T6606] hsr_slave_1: left promiscuous mode [ 644.629872][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.629900][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.454585][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.454627][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.586204][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.644034][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.747690][ T6606] veth1_macvtap: left promiscuous mode [ 645.747807][ T6606] veth0_macvtap: left promiscuous mode [ 645.748105][ T6606] veth1_vlan: left promiscuous mode [ 645.748322][ T6606] veth0_vlan: left promiscuous mode [ 647.212343][T10054] fuse: Unknown parameter '0xffffffffffffffff' [ 647.243518][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 647.253631][ T37] audit: type=1326 audit(1765417741.378:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 647.253693][ T37] audit: type=1326 audit(1765417741.378:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 647.257570][T10054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.958'. [ 647.260038][ T37] audit: type=1326 audit(1765417741.378:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 647.261759][ T37] audit: type=1326 audit(1765417741.378:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 647.261810][ T37] audit: type=1326 audit(1765417741.388:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f811b4adf90 code=0x7ffc0000 [ 647.261860][ T37] audit: type=1326 audit(1765417741.388:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 647.261910][ T37] audit: type=1326 audit(1765417741.388:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 647.261961][ T37] audit: type=1326 audit(1765417741.388:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 647.262008][ T37] audit: type=1326 audit(1765417741.388:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 647.262054][ T37] audit: type=1326 audit(1765417741.388:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811b4af749 code=0x7ffc0000 [ 652.935535][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 654.554077][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 654.707152][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 654.750766][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 654.758855][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.762661][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.767951][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.823357][ T5804] Bluetooth: hci1: command tx timeout [ 659.441405][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 659.491341][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 659.492803][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 659.541804][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 659.555381][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 659.907813][ T5804] Bluetooth: hci1: command tx timeout [ 660.825669][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 660.963880][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 661.433964][T10040] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 661.434249][T10040] bond0: (slave sit0): Error -95 calling set_mac_address [ 661.434821][T10105] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 661.435294][T10105] bond0: (slave sit0): Error -95 calling set_mac_address [ 661.588277][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.588541][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.588805][ T9757] bridge_slave_0: entered allmulticast mode [ 661.608670][ T9757] bridge_slave_0: entered promiscuous mode [ 661.773011][ T5804] Bluetooth: hci6: command tx timeout [ 661.987958][ T5804] Bluetooth: hci1: command tx timeout [ 664.079947][ T5806] Bluetooth: hci1: command tx timeout [ 664.080005][ T5804] Bluetooth: hci6: command tx timeout [ 664.166362][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.166498][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.166747][ T9757] bridge_slave_1: entered allmulticast mode [ 664.168970][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.169547][ T9757] bridge_slave_1: entered promiscuous mode [ 664.217326][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.814273][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 665.338804][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 665.340080][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 666.143271][ T5806] Bluetooth: hci6: command tx timeout [ 667.445091][ T5806] Bluetooth: hci2: command tx timeout [ 667.986594][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 667.998278][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 667.999733][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.001686][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.002676][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 668.303037][ T5804] Bluetooth: hci6: command tx timeout [ 669.523781][ T5804] Bluetooth: hci2: command tx timeout [ 670.073062][ T5804] Bluetooth: hci3: command tx timeout [ 670.724451][T10156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.982'. [ 671.583690][ T5804] Bluetooth: hci2: command tx timeout [ 672.196774][ T5804] Bluetooth: hci3: command tx timeout [ 672.710168][T10079] chnl_net:caif_netlink_parms(): no params data found [ 672.770202][T10107] chnl_net:caif_netlink_parms(): no params data found [ 672.892329][T10122] chnl_net:caif_netlink_parms(): no params data found [ 673.695383][ T5804] Bluetooth: hci2: command tx timeout [ 674.223369][ T5804] Bluetooth: hci3: command tx timeout [ 675.613550][T10139] chnl_net:caif_netlink_parms(): no params data found [ 675.645402][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.989'. [ 676.303021][ T5804] Bluetooth: hci3: command tx timeout [ 676.483742][T10079] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.483961][T10079] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.484124][T10079] bridge_slave_0: entered allmulticast mode [ 676.485780][T10079] bridge_slave_0: entered promiscuous mode [ 676.529377][T10107] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.529536][T10107] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.529806][T10107] bridge_slave_0: entered allmulticast mode [ 676.555481][T10107] bridge_slave_0: entered promiscuous mode [ 677.767291][T10079] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.774029][T10079] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.774319][T10079] bridge_slave_1: entered allmulticast mode [ 677.780621][T10079] bridge_slave_1: entered promiscuous mode [ 677.812774][T10107] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.813159][T10107] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.813437][T10107] bridge_slave_1: entered allmulticast mode [ 677.816785][T10107] bridge_slave_1: entered promiscuous mode [ 677.855759][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.855938][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.856160][T10122] bridge_slave_0: entered allmulticast mode [ 677.859991][T10122] bridge_slave_0: entered promiscuous mode [ 679.023758][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.023867][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.024052][T10122] bridge_slave_1: entered allmulticast mode [ 679.026843][T10122] bridge_slave_1: entered promiscuous mode [ 680.639487][T10079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.649329][T10107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.817449][T10079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.817517][T10236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.996'. [ 680.819626][T10107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.907347][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.909324][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.909550][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.909668][T10139] bridge_slave_0: entered allmulticast mode [ 680.911055][T10139] bridge_slave_0: entered promiscuous mode [ 681.118528][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.118867][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.118940][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.119079][T10139] bridge_slave_1: entered allmulticast mode [ 681.122210][T10139] bridge_slave_1: entered promiscuous mode [ 681.470739][T10079] team0: Port device team_slave_0 added [ 681.479016][T10107] team0: Port device team_slave_0 added [ 681.626611][T10079] team0: Port device team_slave_1 added [ 681.630221][T10107] team0: Port device team_slave_1 added [ 681.633390][T10122] team0: Port device team_slave_0 added [ 681.649115][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.965734][T10122] team0: Port device team_slave_1 added [ 681.967872][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.605772][T10079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.605785][T10079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.605801][T10079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.609046][T10107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.609062][T10107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.609088][T10107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.082741][T10079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.082759][T10079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.082787][T10079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.175085][T10107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.175099][T10107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.175114][T10107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.176002][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.176012][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.176026][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.226116][T10139] team0: Port device team_slave_0 added [ 685.243624][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.243644][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.243673][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.434409][T10139] team0: Port device team_slave_1 added [ 685.549776][T10264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1003'. [ 685.669763][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.669872][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.169087][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.169158][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.169189][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.984857][T10079] hsr_slave_0: entered promiscuous mode [ 686.985568][T10079] hsr_slave_1: entered promiscuous mode [ 686.986018][T10079] debugfs: 'hsr0' already exists in 'hsr' [ 686.986031][T10079] Cannot create hsr debugfs directory [ 687.174987][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.174998][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.175011][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.179725][T10107] hsr_slave_0: entered promiscuous mode [ 687.180486][T10107] hsr_slave_1: entered promiscuous mode [ 687.180988][T10107] debugfs: 'hsr0' already exists in 'hsr' [ 687.181002][T10107] Cannot create hsr debugfs directory [ 688.219256][T10122] hsr_slave_0: entered promiscuous mode [ 688.220433][T10122] hsr_slave_1: entered promiscuous mode [ 688.221440][T10122] debugfs: 'hsr0' already exists in 'hsr' [ 688.221465][T10122] Cannot create hsr debugfs directory [ 688.460517][ T6606] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.079434][T10285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1010'. [ 691.617488][ T6606] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.963774][T10296] overlayfs: overlapping lowerdir path [ 692.734012][T10139] hsr_slave_0: entered promiscuous mode [ 692.734792][T10139] hsr_slave_1: entered promiscuous mode [ 692.735298][T10139] debugfs: 'hsr0' already exists in 'hsr' [ 692.735312][T10139] Cannot create hsr debugfs directory [ 694.019006][ T6606] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.335526][ T6606] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.608548][T10312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1017'. [ 697.060280][ T6606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.347753][ T6606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.655181][ T6606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.938262][ T6606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.120316][T10079] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 700.086317][T10079] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 700.193777][T10079] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 700.314957][T10079] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 703.183505][T10122] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 703.398322][T10122] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 703.453139][ T6606] bridge_slave_1: left allmulticast mode [ 703.453162][ T6606] bridge_slave_1: left promiscuous mode [ 703.453348][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.545863][ T6606] bridge_slave_0: left allmulticast mode [ 703.545896][ T6606] bridge_slave_0: left promiscuous mode [ 703.546211][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.650933][ T6606] bridge_slave_1: left allmulticast mode [ 703.650966][ T6606] bridge_slave_1: left promiscuous mode [ 703.651254][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.724969][ T6606] bridge_slave_0: left allmulticast mode [ 703.724993][ T6606] bridge_slave_0: left promiscuous mode [ 703.725181][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.800345][ T6606] bridge_slave_1: left allmulticast mode [ 703.800365][ T6606] bridge_slave_1: left promiscuous mode [ 703.800502][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.863815][ T6606] bridge_slave_0: left allmulticast mode [ 703.863834][ T6606] bridge_slave_0: left promiscuous mode [ 703.863984][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.936046][ T6606] bridge_slave_1: left allmulticast mode [ 703.936066][ T6606] bridge_slave_1: left promiscuous mode [ 703.936316][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.004121][ T6606] bridge_slave_0: left allmulticast mode [ 704.004143][ T6606] bridge_slave_0: left promiscuous mode [ 704.004303][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.893528][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.974353][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.035684][ T6606] bond0 (unregistering): Released all slaves [ 705.160658][ T6606] bond0 (unregistering): Released all slaves [ 706.964774][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.043888][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.067380][ T6606] bond0 (unregistering): Released all slaves [ 708.789663][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.843508][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.869980][ T6606] bond0 (unregistering): Released all slaves [ 709.036771][ T6606] bond0 (unregistering): Released all slaves [ 709.065916][T10122] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 709.144459][T10354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1024'. [ 709.259811][T10122] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 709.831379][ T6606] tipc: Left network mode [ 710.012470][T10107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 710.095489][T10107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 710.097473][ T6606] tipc: Left network mode [ 710.257976][T10107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 710.354683][T10107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 712.040305][T10139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 712.245011][T10139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 712.316307][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1031'. [ 713.005870][T10139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 713.084825][T10139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 713.152453][T10079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.893882][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 714.914859][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 714.916401][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 714.921111][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 714.922168][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 717.206155][ T5806] Bluetooth: hci4: command tx timeout [ 719.302121][ T5806] Bluetooth: hci4: command tx timeout [ 720.924168][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 720.940227][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 720.943606][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 720.949433][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 720.950750][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 721.413399][ T5804] Bluetooth: hci4: command tx timeout [ 722.053212][ T6606] hsr_slave_0: left promiscuous mode [ 722.093005][ T6606] hsr_slave_1: left promiscuous mode [ 722.094124][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.155787][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.563219][ T6606] hsr_slave_0: left promiscuous mode [ 722.727933][T10459] overlayfs: overlapping lowerdir path [ 723.333957][ T6606] hsr_slave_1: left promiscuous mode [ 723.351098][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.351127][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.453213][ T5804] Bluetooth: hci4: command tx timeout [ 723.553199][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.553220][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.588383][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 723.609954][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 723.611578][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 723.635060][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 723.636777][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 723.789745][ T5804] Bluetooth: hci1: command tx timeout [ 724.148843][ T6606] hsr_slave_0: left promiscuous mode [ 724.812959][ T6606] hsr_slave_1: left promiscuous mode [ 724.813567][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.813582][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.854662][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.854692][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.015612][ T6606] veth1_macvtap: left promiscuous mode [ 725.015752][ T6606] veth0_macvtap: left promiscuous mode [ 725.016098][ T6606] veth1_vlan: left promiscuous mode [ 725.016316][ T6606] veth0_vlan: left promiscuous mode [ 725.099486][ T6606] veth1_macvtap: left promiscuous mode [ 725.099614][ T6606] veth0_macvtap: left promiscuous mode [ 725.822931][ T5804] Bluetooth: hci1: command tx timeout [ 725.884600][ T5804] Bluetooth: hci5: command tx timeout [ 726.635336][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 726.772156][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 727.903927][ T5804] Bluetooth: hci5: command tx timeout [ 727.903969][ T5804] Bluetooth: hci1: command tx timeout [ 729.224404][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 729.276288][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 729.278996][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 729.282588][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 729.330360][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 729.493473][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 729.693524][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 729.983166][ T5804] Bluetooth: hci5: command tx timeout [ 729.983457][ T5806] Bluetooth: hci1: command tx timeout [ 731.423055][ T5804] Bluetooth: hci6: command tx timeout [ 732.084393][ T5804] Bluetooth: hci5: command tx timeout [ 733.503002][ T5804] Bluetooth: hci6: command tx timeout [ 733.724273][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 733.975334][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 735.593111][ T5804] Bluetooth: hci6: command tx timeout [ 736.541937][T10472] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 736.542206][T10472] bond0: (slave sit0): Error -95 calling set_mac_address [ 736.578855][T10122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.162906][ T5804] Bluetooth: hci6: command tx timeout [ 740.883982][T10412] chnl_net:caif_netlink_parms(): no params data found [ 742.906345][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.906566][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.906805][T10412] bridge_slave_0: entered allmulticast mode [ 742.910237][T10412] bridge_slave_0: entered promiscuous mode [ 743.011542][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.011621][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.011790][T10412] bridge_slave_1: entered allmulticast mode [ 743.015322][T10412] bridge_slave_1: entered promiscuous mode [ 743.305531][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.530736][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.075051][T10412] team0: Port device team_slave_0 added [ 746.075605][T10462] chnl_net:caif_netlink_parms(): no params data found [ 746.129573][T10412] team0: Port device team_slave_1 added [ 746.141652][T10444] chnl_net:caif_netlink_parms(): no params data found [ 746.354224][T10474] chnl_net:caif_netlink_parms(): no params data found [ 746.779239][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.779258][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.779287][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.974633][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.974646][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.974658][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.227338][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.227419][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.217628][T10462] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.217791][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.217917][T10462] bridge_slave_0: entered allmulticast mode [ 750.219318][T10462] bridge_slave_0: entered promiscuous mode [ 750.524425][T10462] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.525189][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.525429][T10462] bridge_slave_1: entered allmulticast mode [ 750.528543][T10462] bridge_slave_1: entered promiscuous mode [ 750.529863][T10444] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.529936][T10444] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.530045][T10444] bridge_slave_0: entered allmulticast mode [ 750.531489][T10444] bridge_slave_0: entered promiscuous mode [ 750.583659][T10412] hsr_slave_0: entered promiscuous mode [ 750.588657][T10412] hsr_slave_1: entered promiscuous mode [ 750.589714][T10412] debugfs: 'hsr0' already exists in 'hsr' [ 750.589737][T10412] Cannot create hsr debugfs directory [ 750.590133][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.591056][T10474] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.591283][T10474] bridge_slave_0: entered allmulticast mode [ 750.595977][T10474] bridge_slave_0: entered promiscuous mode [ 750.706407][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.706476][T10444] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.706646][T10444] bridge_slave_1: entered allmulticast mode [ 750.708110][T10444] bridge_slave_1: entered promiscuous mode [ 750.710541][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.710661][T10474] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.710905][T10474] bridge_slave_1: entered allmulticast mode [ 750.712610][T10474] bridge_slave_1: entered promiscuous mode [ 751.080370][T10462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.410639][T10462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.416007][T10444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.688357][T10474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.775548][T10444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.844151][T10474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.504461][T10462] team0: Port device team_slave_0 added [ 753.722338][T10444] team0: Port device team_slave_0 added [ 753.725905][T10462] team0: Port device team_slave_1 added [ 753.730853][T10474] team0: Port device team_slave_0 added [ 753.877131][T10444] team0: Port device team_slave_1 added [ 753.879000][T10474] team0: Port device team_slave_1 added [ 754.212404][T10462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.212458][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.212486][T10462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.457189][T10462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.457208][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.457236][T10462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.459301][T10444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.459315][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.459343][T10444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.461324][T10474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.461336][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.461357][T10474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.474472][T10474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.474489][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.474513][T10474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.956450][T10444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.956464][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.956479][T10444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.284156][T10462] hsr_slave_0: entered promiscuous mode [ 758.286116][T10462] hsr_slave_1: entered promiscuous mode [ 758.287325][T10462] debugfs: 'hsr0' already exists in 'hsr' [ 758.287352][T10462] Cannot create hsr debugfs directory [ 758.315861][T10474] hsr_slave_0: entered promiscuous mode [ 758.317494][T10474] hsr_slave_1: entered promiscuous mode [ 758.318550][T10474] debugfs: 'hsr0' already exists in 'hsr' [ 758.318575][T10474] Cannot create hsr debugfs directory [ 760.575675][T10587] overlayfs: overlapping lowerdir path [ 761.427514][T10444] hsr_slave_0: entered promiscuous mode [ 761.429191][T10444] hsr_slave_1: entered promiscuous mode [ 761.430381][T10444] debugfs: 'hsr0' already exists in 'hsr' [ 761.430409][T10444] Cannot create hsr debugfs directory [ 763.223258][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 763.223280][T10593] bridge: RTM_NEWNEIGH with invalid ether address [ 768.559950][T10632] netlink: 'syz.1.1085': attribute type 28 has an invalid length. [ 771.273674][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 771.273706][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 773.423966][ T6606] bridge_slave_1: left allmulticast mode [ 773.423998][ T6606] bridge_slave_1: left promiscuous mode [ 773.425199][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.593951][ T6606] bridge_slave_0: left allmulticast mode [ 773.593987][ T6606] bridge_slave_0: left promiscuous mode [ 773.594304][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.677937][ T6606] bridge_slave_1: left allmulticast mode [ 773.677970][ T6606] bridge_slave_1: left promiscuous mode [ 773.678267][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.774750][ T6606] bridge_slave_0: left allmulticast mode [ 773.774792][ T6606] bridge_slave_0: left promiscuous mode [ 773.775070][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.858350][ T6606] bridge_slave_1: left allmulticast mode [ 773.858385][ T6606] bridge_slave_1: left promiscuous mode [ 773.858685][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.955371][ T6606] bridge_slave_0: left allmulticast mode [ 773.955405][ T6606] bridge_slave_0: left promiscuous mode [ 773.955679][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.018263][ T6606] bridge_slave_1: left allmulticast mode [ 774.018298][ T6606] bridge_slave_1: left promiscuous mode [ 774.019005][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.114723][ T6606] bridge_slave_0: left allmulticast mode [ 774.114755][ T6606] bridge_slave_0: left promiscuous mode [ 774.115028][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.953931][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.965226][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 775.020489][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 775.024040][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 775.037989][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 775.984752][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.073772][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.134789][ T6606] bond0 (unregistering): Released all slaves [ 776.544860][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.624346][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.684744][ T6606] bond0 (unregistering): Released all slaves [ 777.103021][ T5804] Bluetooth: hci2: command tx timeout [ 777.293701][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.383799][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.456356][ T6606] bond0 (unregistering): Released all slaves [ 779.153836][ T6606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.182994][ T5804] Bluetooth: hci2: command tx timeout [ 779.264204][ T6606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.344671][ T6606] bond0 (unregistering): Released all slaves [ 780.498598][ T6606] hsr_slave_0: left promiscuous mode [ 780.544259][ T6606] hsr_slave_1: left promiscuous mode [ 780.545566][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.584424][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.732997][ T6606] hsr_slave_0: left promiscuous mode [ 780.834783][ T6606] hsr_slave_1: left promiscuous mode [ 780.835946][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.864075][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.072982][ T6606] hsr_slave_0: left promiscuous mode [ 781.123048][ T6606] hsr_slave_1: left promiscuous mode [ 781.123668][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.146345][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.262934][ T5804] Bluetooth: hci2: command tx timeout [ 781.279509][ T6606] hsr_slave_0: left promiscuous mode [ 781.313244][ T6606] hsr_slave_1: left promiscuous mode [ 781.313871][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.368452][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.368695][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 781.383620][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 781.404181][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 781.407961][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 781.408954][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 782.094235][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 782.253642][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 783.352926][ T5804] Bluetooth: hci2: command tx timeout [ 783.516820][ T5804] Bluetooth: hci3: command tx timeout [ 783.818597][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.822059][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.825029][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.861293][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.877485][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 783.910921][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 784.113668][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 784.605836][T10783] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 785.592987][ T5806] Bluetooth: hci3: command tx timeout [ 785.983137][ T5806] Bluetooth: hci4: command tx timeout [ 787.662928][ T5806] Bluetooth: hci3: command tx timeout [ 788.063253][ T5806] Bluetooth: hci4: command tx timeout [ 789.742971][ T5806] Bluetooth: hci3: command tx timeout [ 790.077687][ T5804] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 790.098985][ T5804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 790.100579][ T5804] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 790.102545][ T5804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 790.112578][ T5804] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 790.146205][ T5806] Bluetooth: hci4: command tx timeout [ 790.991023][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 791.862420][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 792.163143][ T5804] Bluetooth: hci7: command tx timeout [ 792.223054][ T5804] Bluetooth: hci4: command tx timeout [ 794.223084][ T5804] Bluetooth: hci7: command tx timeout [ 796.302881][ T5804] Bluetooth: hci7: command tx timeout [ 798.384954][ T5804] Bluetooth: hci7: command tx timeout [ 803.736992][ T6606] team0 (unregistering): Port device team_slave_1 removed [ 806.730023][ T6606] team0 (unregistering): Port device team_slave_0 removed [ 808.679646][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.688838][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.308688][ T5806] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 821.300185][ T5806] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 821.318788][ T5806] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 821.320069][ T5806] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 821.320928][ T5806] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 823.425050][ T5804] Bluetooth: hci8: command tx timeout [ 825.502925][ T5804] Bluetooth: hci8: command tx timeout [ 827.582974][ T5804] Bluetooth: hci8: command tx timeout [ 829.662989][ T5804] Bluetooth: hci8: command tx timeout [ 837.372133][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 837.390159][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 837.391595][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 837.407582][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 837.409032][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 839.502993][ T5804] Bluetooth: hci0: command tx timeout [ 841.583488][ T5804] Bluetooth: hci0: command tx timeout [ 842.574567][ T5806] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 842.580599][ T5806] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 842.582032][ T5806] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 842.603596][ T5806] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 842.604400][ T5806] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 843.662902][ T5804] Bluetooth: hci0: command tx timeout [ 844.970584][T10845] Bluetooth: hci9: command tx timeout [ 845.783326][T10845] Bluetooth: hci0: command tx timeout [ 846.582186][T10849] Bluetooth: hci1: command 0x0406 tx timeout [ 846.582233][T10849] Bluetooth: hci5: command 0x0406 tx timeout [ 847.022993][T10845] Bluetooth: hci9: command tx timeout [ 849.112818][ T5806] Bluetooth: hci9: command tx timeout [ 849.177067][ T5804] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 849.213672][ T5804] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 849.216350][ T5804] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 849.263098][ T5804] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 849.264129][ T5804] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 851.183298][ T5804] Bluetooth: hci9: command tx timeout [ 851.589552][ T5804] Bluetooth: hci6: command 0x0406 tx timeout [ 851.748037][ T5804] Bluetooth: hci10: command tx timeout [ 851.861993][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 851.872639][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 851.881313][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 851.898127][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 851.899152][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 853.822878][T10845] Bluetooth: hci10: command tx timeout [ 854.325100][T10845] Bluetooth: hci2: command tx timeout [ 855.902980][T10845] Bluetooth: hci10: command tx timeout [ 856.382967][T10845] Bluetooth: hci2: command tx timeout [ 857.983057][T10845] Bluetooth: hci10: command tx timeout [ 858.463072][T10845] Bluetooth: hci2: command tx timeout [ 860.543304][T10845] Bluetooth: hci2: command tx timeout [ 870.055228][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.055311][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.875218][T10838] chnl_net:caif_netlink_parms(): no params data found [ 874.346649][T10830] chnl_net:caif_netlink_parms(): no params data found [ 876.387194][T10842] chnl_net:caif_netlink_parms(): no params data found [ 879.174677][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 879.180718][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 879.182647][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 879.239586][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 879.241278][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 884.062910][T10845] Bluetooth: hci3: command tx timeout [ 886.142878][T10845] Bluetooth: hci3: command tx timeout [ 888.223139][T10845] Bluetooth: hci3: command tx timeout [ 890.303774][T10845] Bluetooth: hci3: command tx timeout [ 900.376998][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 900.404010][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 900.406226][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 900.408185][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 900.409680][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 902.037881][T10853] chnl_net:caif_netlink_parms(): no params data found [ 902.566012][ T5806] Bluetooth: hci4: command tx timeout [ 903.748002][T10842] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 904.703366][ T5806] Bluetooth: hci4: command tx timeout [ 906.815374][T10845] Bluetooth: hci4: command tx timeout [ 908.892915][T10845] Bluetooth: hci4: command tx timeout [ 909.410481][T10862] chnl_net:caif_netlink_parms(): no params data found [ 909.564319][ T5806] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 909.583516][ T5806] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 909.591592][ T5806] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 909.679200][ T5806] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 909.680216][ T5806] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 910.072222][T10845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 910.087754][T10845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 910.089186][T10845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 910.090549][T10845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 910.091441][T10845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 911.742975][T10845] Bluetooth: hci8: command tx timeout [ 912.142892][T10845] Bluetooth: hci0: command tx timeout [ 913.122374][T10845] Bluetooth: hci7: command 0x0406 tx timeout [ 913.992885][ T5806] Bluetooth: hci8: command tx timeout [ 914.166987][T10845] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 914.180138][T10845] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 914.181628][T10845] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 914.186208][T10845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 914.195477][T10845] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 914.222912][ T5806] Bluetooth: hci0: command tx timeout [ 916.062952][T10845] Bluetooth: hci8: command tx timeout [ 916.312890][ T5806] Bluetooth: hci0: command tx timeout [ 916.313105][T10845] Bluetooth: hci9: command tx timeout [ 918.142890][T10845] Bluetooth: hci8: command tx timeout [ 918.382931][ T5806] Bluetooth: hci0: command tx timeout [ 918.382985][T10845] Bluetooth: hci9: command tx timeout [ 920.493900][T10845] Bluetooth: hci9: command tx timeout [ 922.542869][T10845] Bluetooth: hci9: command tx timeout [ 926.304849][ T38] INFO: task syz-executor:10462 blocked for more than 143 seconds. [ 926.304873][ T38] Not tainted syzkaller #0 [ 926.304881][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 926.304889][ T38] task:syz-executor state:D stack:22144 pid:10462 tgid:10462 ppid:1 task_flags:0x400140 flags:0x00080002 [ 926.304932][ T38] Call Trace: [ 926.304962][ T38] [ 926.304974][ T38] __schedule+0x1480/0x50a0 [ 926.305010][ T38] ? do_raw_spin_lock+0x121/0x290 [ 926.305042][ T38] ? __pfx___schedule+0x10/0x10 [ 926.305077][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 926.305100][ T38] rt_mutex_schedule+0x77/0xf0 [ 926.305126][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 926.305145][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 926.305178][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 926.305199][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 926.305222][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 926.305269][ T38] ? new_device_store+0x12c/0x6f0 [ 926.305305][ T38] ? __pfx_sscanf+0x10/0x10 [ 926.305334][ T38] ? new_device_store+0x12c/0x6f0 [ 926.305361][ T38] mutex_lock_nested+0x16a/0x1d0 [ 926.305392][ T38] new_device_store+0x12c/0x6f0 [ 926.305425][ T38] ? __pfx_new_device_store+0x10/0x10 [ 926.305454][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 926.305482][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 926.305510][ T38] ? sysfs_kf_write+0x166/0x260 [ 926.305541][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 926.305566][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 926.305598][ T38] vfs_write+0x5d5/0xb40 [ 926.305633][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 926.305668][ T38] ? __pfx_vfs_write+0x10/0x10 [ 926.305709][ T38] ? do_sys_openat2+0x15a/0x200 [ 926.305730][ T38] ? fput_close_sync+0x113/0x220 [ 926.305765][ T38] ksys_write+0x14b/0x260 [ 926.305798][ T38] ? __pfx_ksys_write+0x10/0x10 [ 926.305830][ T38] ? do_syscall_64+0xbe/0xf80 [ 926.305864][ T38] do_syscall_64+0xfa/0xf80 [ 926.305892][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.305912][ T38] ? clear_bhb_loop+0x60/0xb0 [ 926.305939][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.305961][ T38] RIP: 0033:0x7f7b4dc7e1ff [ 926.305980][ T38] RSP: 002b:00007ffd027386c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 926.306003][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7b4dc7e1ff [ 926.306019][ T38] RDX: 0000000000000003 RSI: 00007ffd02738710 RDI: 0000000000000005 [ 926.306033][ T38] RBP: 00007f7b4dd052ef R08: 0000000000000000 R09: 00007ffd02738517 [ 926.306047][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 926.306060][ T38] R13: 00007ffd02738710 R14: 00007f7b4ea04620 R15: 0000000000000003 [ 926.306097][ T38] [ 926.306106][ T38] INFO: task syz-executor:10474 blocked for more than 143 seconds. [ 926.306121][ T38] Not tainted syzkaller #0 [ 926.306132][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 926.306141][ T38] task:syz-executor state:D stack:17240 pid:10474 tgid:10474 ppid:1 task_flags:0x400140 flags:0x00080002 [ 926.306193][ T38] Call Trace: [ 926.306200][ T38] [ 926.306213][ T38] __schedule+0x1480/0x50a0 [ 926.306270][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 926.306300][ T38] ? __pfx___schedule+0x10/0x10 [ 926.306345][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 926.306386][ T38] rt_mutex_schedule+0x77/0xf0 [ 926.306404][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 926.306425][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 926.306467][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 926.306494][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 926.306518][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 926.306556][ T38] ? new_device_store+0x12c/0x6f0 [ 926.306592][ T38] ? __pfx_sscanf+0x10/0x10 [ 926.306620][ T38] ? new_device_store+0x12c/0x6f0 [ 926.306647][ T38] mutex_lock_nested+0x16a/0x1d0 [ 926.306686][ T38] new_device_store+0x12c/0x6f0 [ 926.306719][ T38] ? __pfx_new_device_store+0x10/0x10 [ 926.306747][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 926.306774][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 926.306801][ T38] ? sysfs_kf_write+0x166/0x260 [ 926.306833][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 926.306857][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 926.306890][ T38] vfs_write+0x5d5/0xb40 [ 926.306923][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 926.306949][ T38] ? __pfx_vfs_write+0x10/0x10 [ 926.306989][ T38] ? do_sys_openat2+0x15a/0x200 [ 926.307010][ T38] ? fput_close_sync+0x113/0x220 [ 926.307054][ T38] ksys_write+0x14b/0x260 [ 926.307086][ T38] ? __pfx_ksys_write+0x10/0x10 [ 926.307126][ T38] ? do_syscall_64+0xbe/0xf80 [ 926.307160][ T38] do_syscall_64+0xfa/0xf80 [ 926.307189][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.307211][ T38] ? clear_bhb_loop+0x60/0xb0 [ 926.307244][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.307264][ T38] RIP: 0033:0x7fdbff79e1ff [ 926.307282][ T38] RSP: 002b:00007ffd1593ef90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 926.307304][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fdbff79e1ff [ 926.307319][ T38] RDX: 0000000000000003 RSI: 00007ffd1593efe0 RDI: 0000000000000005 [ 926.307332][ T38] RBP: 00007fdbff8252ef R08: 0000000000000000 R09: 00007ffd1593ede7 [ 926.307347][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 926.307359][ T38] R13: 00007ffd1593efe0 R14: 00007fdc00524620 R15: 0000000000000003 [ 926.307396][ T38] [ 926.307435][ T38] [ 926.307435][ T38] Showing all locks held in the system: [ 926.307445][ T38] 5 locks held by rcuc/0/20: [ 926.307459][ T38] 3 locks held by ksoftirqd/1/30: [ 926.307471][ T38] 1 lock held by khungtaskd/38: [ 926.307482][ T38] #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 926.307549][ T38] 7 locks held by kworker/u8:4/69: [ 926.307580][ T38] 2 locks held by kworker/u8:8/1321: [ 926.307592][ T38] 3 locks held by kworker/u8:9/1457: [ 926.307603][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 926.307669][ T38] #1: ffffc9000590fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 926.307720][ T38] #2: ffffffff8e8a33f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 926.307784][ T38] 3 locks held by dhcpcd/5462: [ 926.307795][ T38] #0: ffffffff8e90b860 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 926.307849][ T38] #1: ffff88803187c928 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 926.307898][ T38] #2: ffffffff8e8a33f8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_prepare_wdev_dump+0x3dc/0x6a0 [ 926.307948][ T38] 2 locks held by getty/5561: [ 926.307959][ T38] #0: ffff88814e6780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 926.308009][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 926.308068][ T38] 5 locks held by kworker/u8:23/6606: [ 926.308080][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 926.308131][ T38] #1: ffffc9000cb17b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 926.308181][ T38] #2: ffffffff8e8962c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 926.308227][ T38] #3: ffff88805b1e57b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 926.308279][ T38] #4: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.308330][ T38] 3 locks held by kworker/u8:25/7405: [ 926.308344][ T38] 1 lock held by syz-executor/10412: [ 926.308356][ T38] #0: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.308406][ T38] 7 locks held by syz-executor/10444: [ 926.308418][ T38] #0: ffff888034f08480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 926.308477][ T38] #1: ffff88805e581878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 926.308524][ T38] #2: ffff8881443c73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 926.308578][ T38] #3: ffffffff8e12a1f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 926.308645][ T38] #4: ffff888032d1f0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 926.308715][ T38] #5: ffff888032d1e300 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 926.308777][ T38] #6: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.308827][ T38] 4 locks held by syz-executor/10462: [ 926.308838][ T38] #0: ffff888034f08480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 926.308898][ T38] #1: ffff888031ed7078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 926.308946][ T38] #2: ffff8881443c72d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 926.309001][ T38] #3: ffffffff8e12a1f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 926.309057][ T38] 4 locks held by syz-executor/10474: [ 926.309068][ T38] #0: ffff888034f08480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 926.309127][ T38] #1: ffff88805f3cf078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 926.309177][ T38] #2: ffff8881443c72d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 926.309231][ T38] #3: ffffffff8e12a1f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 926.309290][ T38] 1 lock held by syz-executor/10722: [ 926.309302][ T38] #0: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.309353][ T38] 2 locks held by syz-executor/10801: [ 926.309365][ T38] #0: ffffffff8e8962c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 926.309421][ T38] #1: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.309469][ T38] 1 lock held by syz.1.1122/10827: [ 926.309481][ T38] #0: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.309530][ T38] 1 lock held by syz-executor/10830: [ 926.309542][ T38] #0: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.309591][ T38] 1 lock held by syz-executor/10838: [ 926.309602][ T38] #0: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.309658][ T38] 1 lock held by syz-executor/10842: [ 926.309670][ T38] #0: ffffffff8d5b42f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 926.309720][ T38] 1 lock held by syz-executor/10853: [ 926.309731][ T38] 1 lock held by syz-executor/10862: [ 926.309742][ T38] #0: ffffffff8e8a33f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 926.309791][ T38] 2 locks held by syz-executor/10887: [ 926.309802][ T38] #0: ffffffff8e8962c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 926.309857][ T38] #1: ffffffff8e8a33f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 926.309909][ T38] 2 locks held by syz-executor/10903: [ 926.309920][ T38] #0: ffffffff8e8962c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 926.309976][ T38] #1: ffffffff8e8a33f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 926.310025][ T38] 1 lock held by syz-executor/10912: [ 926.310036][ T38] #0: ffffffff8e8a33f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 926.310094][ T38] 1 lock held by syz-executor/10914: [ 926.310106][ T38] #0: ffffffff8e8a33f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 926.310163][ T38] 1 lock held by syz-executor/10919: [ 926.310174][ T38] #0: ffffffff8e8a33f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 926.310231][ T38] [ 926.310236][ T38] ============================================= [ 926.310236][ T38] [ 926.310246][ T38] NMI backtrace for cpu 1 [ 926.310260][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 926.310283][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.310294][ T38] Call Trace: [ 926.310302][ T38] [ 926.310310][ T38] dump_stack_lvl+0x189/0x250 [ 926.310342][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.310368][ T38] ? __pfx__printk+0x10/0x10 [ 926.310402][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 926.310429][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 926.310454][ T38] ? __pfx__printk+0x10/0x10 [ 926.310480][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 926.310506][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 926.310532][ T38] sys_info+0x135/0x170 [ 926.310551][ T38] watchdog+0xf95/0xfe0 [ 926.310580][ T38] ? watchdog+0x20a/0xfe0 [ 926.310609][ T38] kthread+0x711/0x8a0 [ 926.310640][ T38] ? __pfx_watchdog+0x10/0x10 [ 926.310670][ T38] ? __pfx_kthread+0x10/0x10 [ 926.310695][ T38] ? rt_spin_unlock+0x150/0x200 [ 926.310723][ T38] ? rt_spin_unlock+0x161/0x200 [ 926.310743][ T38] ? __pfx_kthread+0x10/0x10 [ 926.310772][ T38] ret_from_fork+0x599/0xb30 [ 926.310797][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 926.310831][ T38] ? __switch_to_asm+0x39/0x70 [ 926.310858][ T38] ? __switch_to_asm+0x33/0x70 [ 926.310885][ T38] ? __pfx_kthread+0x10/0x10 [ 926.310913][ T38] ret_from_fork_asm+0x1a/0x30 [ 926.310960][ T38] [ 926.310968][ T38] Sending NMI from CPU 1 to CPUs 0: [ 926.310996][ C0] NMI backtrace for cpu 0 [ 926.311012][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 926.311030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.311039][ C0] RIP: 0010:__lock_acquire+0xa99/0x2cf0 [ 926.311063][ C0] Code: 27 90 e8 da a4 dd 02 85 c0 74 1c 83 3d 13 f6 3d 0d 00 75 13 48 8d 3d e6 f9 40 0d 48 c7 c6 94 21 ee 8c 67 48 0f b9 3a 90 31 c0 <48> 83 78 40 00 0f 84 5a 1b 00 00 48 09 dd 41 8b 45 20 89 c1 81 e1 [ 926.311078][ C0] RSP: 0018:ffffc90000196658 EFLAGS: 00000002 [ 926.311093][ C0] RAX: ffffffff925bf398 RBX: 000000000e63bcdf RCX: 00000000c89cf2fe [ 926.311105][ C0] RDX: 0000000018180f6f RSI: 0000000055871cd2 RDI: ffff88801ba8dac0 [ 926.311117][ C0] RBP: feb6511800000000 R08: ffffffff8ad55240 R09: ffff8880b8838cb8 [ 926.311128][ C0] R10: dffffc0000000000 R11: fffffbfff1db614f R12: ffff88801ba8e718 [ 926.311140][ C0] R13: ffff88801ba8e718 R14: ffff88801ba8dac0 R15: 0000000000000005 [ 926.311151][ C0] FS: 0000000000000000(0000) GS:ffff888126d06000(0000) knlGS:0000000000000000 [ 926.311165][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.311177][ C0] CR2: 00007f52871ddb10 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 926.311194][ C0] Call Trace: [ 926.311200][ C0] [ 926.311210][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 926.311232][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 926.311252][ C0] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 926.311268][ C0] lock_acquire+0x117/0x340 [ 926.311288][ C0] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 926.311305][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 926.311328][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 926.311348][ C0] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 926.311364][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 926.311385][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 926.311404][ C0] rt_mutex_slowunlock+0xb0/0x8a0 [ 926.311421][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 926.311438][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 926.311457][ C0] ? rt_spin_unlock+0x150/0x200 [ 926.311474][ C0] ? rt_spin_unlock+0x161/0x200 [ 926.311492][ C0] napi_skb_cache_get+0x2e4/0x410 [ 926.311507][ C0] ? __alloc_skb+0x200/0x430 [ 926.311528][ C0] __alloc_skb+0x214/0x430 [ 926.311550][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 926.311576][ C0] synproxy_send_client_synack_ipv6+0x169/0xca0 [ 926.311601][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 926.311621][ C0] ? nft_synproxy_do_eval+0x400/0x570 [ 926.311644][ C0] ? synproxy_pernet+0x45/0x270 [ 926.311667][ C0] nft_synproxy_eval_v6+0x36e/0x560 [ 926.311692][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 926.311715][ C0] ? nf_ip_checksum+0x13c/0x510 [ 926.311737][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 926.311761][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 926.311788][ C0] nft_do_chain+0x40c/0x1920 [ 926.311811][ C0] ? nft_do_chain+0x16a1/0x1920 [ 926.311834][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 926.311854][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 926.311889][ C0] nft_do_chain_inet+0x25d/0x340 [ 926.311917][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 926.311938][ C0] ? nf_conntrack_in+0x1a1/0x15d0 [ 926.311962][ C0] ? NF_HOOK+0x9a/0x3a0 [ 926.311983][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 926.312005][ C0] nf_hook_slow+0xc5/0x220 [ 926.312024][ C0] NF_HOOK+0x206/0x3a0 [ 926.312044][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 926.312064][ C0] ? NF_HOOK+0x9a/0x3a0 [ 926.312082][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 926.312102][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 926.312127][ C0] ip6_input+0x16a/0x270 [ 926.312146][ C0] ? ip6_input+0x23/0x270 [ 926.312166][ C0] NF_HOOK+0x30c/0x3a0 [ 926.312184][ C0] ? skb_orphan+0xaf/0xd0 [ 926.312204][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 926.312223][ C0] ? NF_HOOK+0x9a/0x3a0 [ 926.312241][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 926.312261][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 926.312283][ C0] ? process_backlog+0x272/0x8f0 [ 926.312305][ C0] __netif_receive_skb+0xd3/0x380 [ 926.312327][ C0] ? process_backlog+0x272/0x8f0 [ 926.312349][ C0] process_backlog+0x315/0x8f0 [ 926.312374][ C0] __napi_poll+0xae/0x520 [ 926.312395][ C0] net_rx_action+0x672/0xe00 [ 926.312422][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 926.312445][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 926.312467][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 926.312507][ C0] handle_softirqs+0x226/0x6d0 [ 926.312528][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 926.312549][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 926.312568][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 926.312589][ C0] ? rcu_cpu_kthread+0x243/0x1c40 [ 926.312612][ C0] ? rcu_cpu_kthread+0x243/0x1c40 [ 926.312633][ C0] rcu_cpu_kthread+0xcdd/0x1c40 [ 926.312654][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 926.312676][ C0] ? rcu_cpu_kthread+0x243/0x1c40 [ 926.312708][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 926.312728][ C0] ? preempt_schedule_notrace+0xd1/0x110 [ 926.312753][ C0] ? __pfx___schedule+0x10/0x10 [ 926.312776][ C0] ? schedule+0x91/0x360 [ 926.312797][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 926.312815][ C0] smpboot_thread_fn+0x542/0xa60 [ 926.312834][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 926.312854][ C0] kthread+0x711/0x8a0 [ 926.312875][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 926.312893][ C0] ? __pfx_kthread+0x10/0x10 [ 926.312919][ C0] ? rt_spin_unlock+0x150/0x200 [ 926.312938][ C0] ? rt_spin_unlock+0x161/0x200 [ 926.312953][ C0] ? __pfx_kthread+0x10/0x10 [ 926.312973][ C0] ret_from_fork+0x599/0xb30 [ 926.312991][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 926.313011][ C0] ? __switch_to_asm+0x39/0x70 [ 926.313031][ C0] ? __switch_to_asm+0x33/0x70 [ 926.313051][ C0] ? __pfx_kthread+0x10/0x10 [ 926.313071][ C0] ret_from_fork_asm+0x1a/0x30 [ 926.313098][ C0] [ 926.314025][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 926.314041][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 926.314061][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.314071][ T38] Call Trace: [ 926.314079][ T38] [ 926.314087][ T38] dump_stack_lvl+0x99/0x250 [ 926.314114][ T38] ? __asan_memcpy+0x40/0x70 [ 926.314147][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.314170][ T38] ? __pfx__printk+0x10/0x10 [ 926.314204][ T38] vpanic+0x237/0x6d0 [ 926.314233][ T38] ? __pfx_vpanic+0x10/0x10 [ 926.314261][ T38] ? preempt_schedule_common+0x83/0xd0 [ 926.314295][ T38] panic+0xb9/0xc0 [ 926.314321][ T38] ? __pfx_panic+0x10/0x10 [ 926.314349][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 926.314375][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 926.314403][ T38] watchdog+0xfdf/0xfe0 [ 926.314431][ T38] ? watchdog+0x20a/0xfe0 [ 926.314462][ T38] kthread+0x711/0x8a0 [ 926.314490][ T38] ? __pfx_watchdog+0x10/0x10 [ 926.314511][ T38] ? __pfx_kthread+0x10/0x10 [ 926.314534][ T38] ? rt_spin_unlock+0x150/0x200 [ 926.314560][ T38] ? rt_spin_unlock+0x161/0x200 [ 926.314580][ T38] ? __pfx_kthread+0x10/0x10 [ 926.314610][ T38] ret_from_fork+0x599/0xb30 [ 926.314634][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 926.314673][ T38] ? __switch_to_asm+0x39/0x70 [ 926.314698][ T38] ? __switch_to_asm+0x33/0x70 [ 926.314724][ T38] ? __pfx_kthread+0x10/0x10 [ 926.314754][ T38] ret_from_fork_asm+0x1a/0x30 [ 926.314800][ T38] [ 926.315288][ T38] Kernel Offset: disabled