last executing test programs: 4m11.041352427s ago: executing program 2 (id=257): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x38) 4m10.821263525s ago: executing program 2 (id=259): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) 4m10.526634429s ago: executing program 2 (id=262): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1015, 0x0, 0x0) 4m10.25299128s ago: executing program 2 (id=265): syz_emit_ethernet(0x66, &(0x7f0000001040)={@local, @random="7004f5b37507", @val, {@ipv6}}, 0x0) 4m7.465143734s ago: executing program 2 (id=270): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 4m6.841160407s ago: executing program 2 (id=273): r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x810, r4, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m49.366904312s ago: executing program 32 (id=273): r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x810, r4, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m3.780130554s ago: executing program 0 (id=378): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m53.703841987s ago: executing program 0 (id=389): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 2m52.882993344s ago: executing program 0 (id=391): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r3, 0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000/0xe000)=nil], 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000100)={@private=0xa010102, @loopback, 0x0, "8a85f08f7ffb2d5f5e7d3c27e4d7cff5b43b477105e105716f54d008a5009e05", 0x8, 0x1, 0x0, 0x6}, 0x3c) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc989, 0x0, 0x1, 0x274}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) io_uring_enter(r5, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 2m41.400128776s ago: executing program 0 (id=416): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, &(0x7f00000000c0)) 2m41.160832012s ago: executing program 0 (id=419): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 2m25.311982131s ago: executing program 33 (id=419): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 1m1.553162555s ago: executing program 3 (id=589): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 1m1.297971153s ago: executing program 3 (id=591): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) writev(r0, &(0x7f0000001940)=[{&(0x7f0000001300)="00fc327d4f1cb19a8a2ef3ed2e25588df6d18c716fa3cf8c01dc28328e6fa2878a76e97e0ecbf84338b038ed192e28f91161cd707ed9d190dada1f177e", 0x3d}, {&(0x7f0000001340)="3b9a3fd1fa7d057ee4f319b0ce75044e710e23cd9d4fda341acb253711597c7b2fb2e8358e1e0416903bc34dac21cdd1ad0ebcc0ec0b75c55b7321e22f3b004b762110533e94b19d74b34d3191d85a15541371e04b6f05cc", 0x58}, {&(0x7f0000001480)="ccb1849091224a18960c695598577b2493d4b07d27ae4d62588018511c7611c5d2c91eab8ec0ff7ce635f08505128ba38ef9710cf67f9f5e62e2d0aaab6f2bbc71442895b8b5bea27d6222c39cafce8f3f", 0x51}, {&(0x7f0000001cc0)="fda5f3e14a3bd855c58e9dff428088317136dff98fa068c3eb29b900a3c7d95f239e6ce601a305be9d5899c2c4fb8a39a4fffc820c458ebed2315a7e40a7f3446f36d0e2243820d98966e9cdd15ce04c023c35f3f0ea474193f709616830164c0481fb6f2346ae5fe0dfc2f54f8b93c16f7437f959bb78a2ceff334994376182e2acc27b71a72ec4a3dbe529cb617b01fde61ec612b080767fb0a9d318dcac3dac266e1d7c1b0f72eca09a8affb05ddbaffc4d7057325e3a3df4466ce265421953225241c06f5394e8c17a798ad555e33939cdce9845fbab86bef93e67fda720687f1c0d7da4fe4d80fa64a9fbec5b44341015e334ddb2658b3e4505f4a843e51e7948d1d3599364e588cdf945bfb8d8b99ee7bc6ee8fb9278066ede041f53d02ea1790279c5141385c4dc6aa43f1a2e3700946522fe991fd75dde2d89ec5c7b524c04cbc1835e7cc8ace4a7378b4b80b6685242ba6e3dc062b299b8bd29a310b1bfcbd92935865448f910a247d924905f5d8ccde77074632916a3e15657a1231b6af6079e9880de0409072b03eb8d692bcbbf99cedab3bbdce0d266ea00e49492989b6ece8248fa796233e5d1b412b834cdd8a6a80e5e9f5aacd55af88a0e78952d255600c4713f696ff8430a179bcd0efee5ecb4c42624044c3168d4a8a30001b3d55c3ebb8617a3bd62229d7318f53571a724ab0f452ee23e7facb509ebd3011345fd28d70d3e575ec82f237a27b5bb398b69c210c13b8d439b9189572fd2faf9762c3b333ac906b15ce1e2968f61e0459f7ea265643ecc83509e0a772f02ae627fb3760a27b4a140a2b8e130ba8a3b49a9381803c7a163895d5d9481db4826a94a9c7e93c4034effb1db38465a154790b95a7a92f8717e01f9b3692038472fcc448e70ec2e11bbc3d968dce191462218ed024d2d5752105f8848d2f62ffc9ffcaee4d2efb33c22c6aea3c2ca4de7d0c78b8b5816c3dbf283c49b16e700173a2f3cfced566d3e7f1da225e58c4c7deccd277e1278673f3e9db98d7b6b997d79d07a5794e289ca00e976fdc950aaa1e71f7ae70cbe3105c74d917aff4ab1c41ca38f243fba8231cf7cc97f5c12e49bcf", 0x311}, {&(0x7f0000001680)="3fae", 0x2}, {0x0}], 0x6) 1m0.120654435s ago: executing program 3 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_clone(0x26020000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setuid(0xee00) 59.597095082s ago: executing program 3 (id=595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 58.311554732s ago: executing program 3 (id=597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_open_dev$cec(0x0, 0x0, 0x29a001) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0x3, 0x1ff, 0x2, 0x400, 0x4, 0x1, "70b738f57f24127c0751534c69fbf0d9", 0x8, 0x6, 0x0, 0x4, 0x27, 0x3, 0x30}) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000cab000/0x1000)=nil) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 54.701479777s ago: executing program 3 (id=604): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x24004008) recvfrom(r1, &(0x7f0000000a00)=""/201, 0xc9, 0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 39.005308448s ago: executing program 34 (id=604): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x24004008) recvfrom(r1, &(0x7f0000000a00)=""/201, 0xc9, 0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 7.50262298s ago: executing program 1 (id=660): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) 7.495377856s ago: executing program 1 (id=661): syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 6.946228357s ago: executing program 1 (id=662): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f0000000140)={0xe97, 0x3, 0x3}, 0x18, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-arm)\x00'}, 0x58) socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x808, 0x80, 0x2, 0x3, 0x80, 0x100, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x98e, 0xffffff01, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x8, 0xd, 0x2, 0x80, 0xffffffff, 0xe65e, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x40000008, 0x3ff, 0x80, 0x0, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8], [0x8, 0x9, 0x8000012f, 0xf7, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffe, 0x6c7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x7f, 0x27, 0xe, 0x312, 0x78, 0xea1, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x4, 0x1, 0x9, 0x3, 0x3, 0x0, 0xebf, 0x48c93693, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x9, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x1, 0x6, 0x5, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x2080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x24ac5e56, 0x5, 0x1c, 0x120000, 0x3, 0x200a, 0x80a2ed, 0x4, 0x25], [0x9, 0xd9, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xa, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x227, 0x5, 0x8, 0x8, 0x30b1d693, 0xa1f, 0x89, 0xa673, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x200, 0xffff3443, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000100)=[@enter_looper, @dead_binder_done, @register_looper, @free_buffer], 0x0, 0x0, 0x0}) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) socket$packet(0x11, 0x1, 0x300) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 5.673303567s ago: executing program 1 (id=663): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_open_dev$cec(0x0, 0x0, 0x29a001) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0x3, 0x1ff, 0x2, 0x400, 0x4, 0x1, "70b738f57f24127c0751534c69fbf0d9", 0x8, 0x6, 0x0, 0x4, 0x27, 0x3, 0x30}) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000cab000/0x1000)=nil) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 5.667124168s ago: executing program 4 (id=664): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) 5.475451547s ago: executing program 4 (id=665): syz_io_uring_setup(0xc17, 0x0, &(0x7f0000000000), &(0x7f0000000280)) r0 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x3c4, 0xd, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x4, 0x723, 0x400, 0x7, 0x13, 0x4000100, 0xfeffffa7, 0xd, 0x59, 0x1, 0x3ff, 0x9, 0x1f7, 0xe2df, 0xaa14, 0x1, 0x6, 0xa, 0x7, 0x2, 0x6]}) 5.136925054s ago: executing program 4 (id=666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) 3.948918802s ago: executing program 4 (id=667): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = signalfd(r0, &(0x7f0000000280)={[0x9]}, 0x8) recvmsg$qrtr(r2, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)=[{&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/83, 0x53}, {&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000500)=""/118, 0x76}, {&(0x7f0000000580)=""/196, 0xc4}, {0x0}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f0000000680)=""/85, 0x55}], 0x8, &(0x7f0000001d40)=[{0x100c, 0x0, 0x0, ""/4096}, {0xa0, 0x0, 0x0, ""/148}], 0x10ac, 0x1}, 0x1c, 0x40000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f09000000080000000200"}) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000003000/0x4000)=nil) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000004c0)={0xc, &(0x7f00000003c0)={0x0, 0x9, 0xf9, {0xf9, 0xb, "8147bc4aef56fe7b4dcab398e3f07c3e56accef5b5e6989834c9bbbf51a12aea164f93027d1d1e2099bcfc85aab62ad6cc5bd73b1c976d3c6de7468640935330f5fd471a600ec62afa8d4d5225aff2488570fb9b829b3b9cf1ca92c3ed71cb61b7c221b646551d7bcfc258963dc1e40d23ded7f77a735c7a8c322e0794874544e99bd422e312db681df93734f34561f6a4e8d93229b366aa4a7f9226c8d964377f1409f0b0698a3dd84262f99cbee014327dbc95dfc65239148f740b2a7c2c55b52fc512da6049d3f0f16d31b9278f57392a65cb6a86592856e4593e11f4a2fe764da38e2fba1a591f8de5813661c6b0e5e4a993fff5c7"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x10, &(0x7f0000000500)={0x20, 0x16, 0xec, "a94b3c3406b29b16ebfc6dae124a1b16506eedc5be8e23de34b1147304f647b1fa2b870e24a6b39af82a262c15825c634525c0cad32d02a9ea87b224f46e0059b87c6d5b266a4db7ba81cf32f479561363703754628d77e5fe993cb1b0773c59005ced26f50d0d7b78d6df5b3a61a57ba26f6b5a129cf3a666e3340548c358416c305baa664e4f7ce4075d0ddff579de034ad63a780b34933041551f2314d2299449c0c1e49239082a6200f663b35a80fea0e169dae4af68283569a8707c6ff6fb0cd3495d7ee088bf0afce028b93779c12eb24f50db5e0ab510d5f28ac7f3a12a3d17e75377339223c703a5"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x74}}) munmap(&(0x7f0000005000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) sendmsg$802154_raw(r5, 0x0, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000580)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) 1.306688099s ago: executing program 4 (id=668): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) 1.244666165s ago: executing program 1 (id=669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 1.117048663s ago: executing program 4 (id=670): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f0000000140)={0xe97, 0x3, 0x3}, 0x18, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-arm)\x00'}, 0x58) socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x808, 0x80, 0x2, 0x3, 0x80, 0x100, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x98e, 0xffffff01, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x8, 0xd, 0x2, 0x80, 0xffffffff, 0xe65e, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x40000008, 0x3ff, 0x80, 0x0, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8], [0x8, 0x9, 0x8000012f, 0xf7, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffe, 0x6c7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x7f, 0x27, 0xe, 0x312, 0x78, 0xea1, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x4, 0x1, 0x9, 0x3, 0x3, 0x0, 0xebf, 0x48c93693, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x9, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x1, 0x6, 0x5, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x2080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x24ac5e56, 0x5, 0x1c, 0x120000, 0x3, 0x200a, 0x80a2ed, 0x4, 0x25], [0x9, 0xd9, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xa, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a4, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x227, 0x5, 0x8, 0x8, 0x30b1d693, 0xa1f, 0x89, 0xa673, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x200, 0xffff3443, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000100)=[@enter_looper, @dead_binder_done, @register_looper, @free_buffer], 0x0, 0x0, 0x0}) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) socket$packet(0x11, 0x1, 0x300) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 0s ago: executing program 1 (id=671): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000003c0)=[@register_looper, @free_buffer, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x300}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000002b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 114.492020][ T5799] cgroup: Unknown subsys name 'net' [ 114.733099][ T5799] cgroup: Unknown subsys name 'cpuset' [ 114.827570][ T5799] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 116.749502][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 121.841547][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.846347][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.861528][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.878033][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.878758][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.910864][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.917934][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.922250][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.928101][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.928973][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.001407][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.004888][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.005630][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.009906][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.011306][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.068205][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.070244][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.072320][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.087543][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.095013][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.097003][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.102853][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.103798][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.127159][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.130689][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.071148][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 123.108653][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 123.270486][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 123.276399][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 123.398045][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 123.908589][ T5118] Bluetooth: hci0: command tx timeout [ 123.986984][ T5118] Bluetooth: hci1: command tx timeout [ 124.067036][ T5118] Bluetooth: hci2: command tx timeout [ 124.095593][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.097624][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.098330][ T5814] bridge_slave_0: entered allmulticast mode [ 124.101745][ T5814] bridge_slave_0: entered promiscuous mode [ 124.132291][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.132379][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.132502][ T5811] bridge_slave_0: entered allmulticast mode [ 124.134531][ T5811] bridge_slave_0: entered promiscuous mode [ 124.148426][ T5118] Bluetooth: hci3: command tx timeout [ 124.150170][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.150356][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.150922][ T5814] bridge_slave_1: entered allmulticast mode [ 124.154019][ T5814] bridge_slave_1: entered promiscuous mode [ 124.227032][ T5118] Bluetooth: hci4: command tx timeout [ 124.310156][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.310286][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.311516][ T5811] bridge_slave_1: entered allmulticast mode [ 124.314108][ T5811] bridge_slave_1: entered promiscuous mode [ 124.777849][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.777977][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.778157][ T5820] bridge_slave_0: entered allmulticast mode [ 124.780295][ T5820] bridge_slave_0: entered promiscuous mode [ 124.782183][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.782314][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.783134][ T5818] bridge_slave_0: entered allmulticast mode [ 124.785678][ T5818] bridge_slave_0: entered promiscuous mode [ 124.941718][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.941988][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.942131][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.942304][ T5820] bridge_slave_1: entered allmulticast mode [ 124.944326][ T5820] bridge_slave_1: entered promiscuous mode [ 124.946388][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.946496][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.947673][ T5818] bridge_slave_1: entered allmulticast mode [ 124.950598][ T5818] bridge_slave_1: entered promiscuous mode [ 124.958690][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.960140][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.960273][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.960816][ T5823] bridge_slave_0: entered allmulticast mode [ 124.963921][ T5823] bridge_slave_0: entered promiscuous mode [ 124.972567][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.130238][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.130479][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.130604][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.130736][ T5823] bridge_slave_1: entered allmulticast mode [ 125.132541][ T5823] bridge_slave_1: entered promiscuous mode [ 125.682683][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.685970][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.830181][ T5814] team0: Port device team_slave_0 added [ 125.833266][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.835784][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.839752][ T5811] team0: Port device team_slave_0 added [ 125.845724][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.848601][ T5814] team0: Port device team_slave_1 added [ 125.969829][ T5811] team0: Port device team_slave_1 added [ 125.972560][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.987053][ T5118] Bluetooth: hci0: command tx timeout [ 126.067437][ T5118] Bluetooth: hci1: command tx timeout [ 126.146946][ T5118] Bluetooth: hci2: command tx timeout [ 126.228112][ T5118] Bluetooth: hci3: command tx timeout [ 126.307052][ T5118] Bluetooth: hci4: command tx timeout [ 126.449984][ T5820] team0: Port device team_slave_0 added [ 126.680051][ T5818] team0: Port device team_slave_0 added [ 126.829237][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.829251][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.829270][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.832733][ T5820] team0: Port device team_slave_1 added [ 126.834588][ T5818] team0: Port device team_slave_1 added [ 126.835597][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.835611][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.835629][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.842050][ T5823] team0: Port device team_slave_0 added [ 126.845225][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.845242][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.845290][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.090997][ T5823] team0: Port device team_slave_1 added [ 127.102766][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.102783][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.102810][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.397761][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.397778][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.397806][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.399171][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.399184][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.399211][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.581169][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.581182][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.581200][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.582240][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.582251][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.582269][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.642863][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.642881][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.642910][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.755125][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.755144][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.755163][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.904975][ T5814] hsr_slave_0: entered promiscuous mode [ 127.906226][ T5814] hsr_slave_1: entered promiscuous mode [ 127.993298][ T5811] hsr_slave_0: entered promiscuous mode [ 127.994265][ T5811] hsr_slave_1: entered promiscuous mode [ 127.995103][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 127.995199][ T5811] Cannot create hsr debugfs directory [ 128.067095][ T5118] Bluetooth: hci0: command tx timeout [ 128.146974][ T5118] Bluetooth: hci1: command tx timeout [ 128.227024][ T5118] Bluetooth: hci2: command tx timeout [ 128.307008][ T5118] Bluetooth: hci3: command tx timeout [ 128.386998][ T5118] Bluetooth: hci4: command tx timeout [ 128.524464][ T5820] hsr_slave_0: entered promiscuous mode [ 128.525499][ T5820] hsr_slave_1: entered promiscuous mode [ 128.526235][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 128.526255][ T5820] Cannot create hsr debugfs directory [ 128.533839][ T5818] hsr_slave_0: entered promiscuous mode [ 128.535667][ T5818] hsr_slave_1: entered promiscuous mode [ 128.536359][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 128.536389][ T5818] Cannot create hsr debugfs directory [ 128.879381][ T5823] hsr_slave_0: entered promiscuous mode [ 128.880910][ T5823] hsr_slave_1: entered promiscuous mode [ 128.882700][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 128.882724][ T5823] Cannot create hsr debugfs directory [ 130.147196][ T5118] Bluetooth: hci0: command tx timeout [ 130.228763][ T5118] Bluetooth: hci1: command tx timeout [ 130.306999][ T5118] Bluetooth: hci2: command tx timeout [ 130.387048][ T5118] Bluetooth: hci3: command tx timeout [ 130.408649][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.436473][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.467078][ T5118] Bluetooth: hci4: command tx timeout [ 130.503292][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.522319][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.643592][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.687719][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.732877][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.785217][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.884296][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.921983][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.954810][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.991720][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.130890][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.185203][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.214597][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.266414][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.391662][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.442903][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.479219][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.481919][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.525493][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.628790][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.665800][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.673077][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.673914][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.712113][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.712491][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.798740][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.816059][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.853130][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.853322][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.891047][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.891458][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.937720][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.965279][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.982249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.982385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.011922][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.012067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.093172][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.126164][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.151123][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.151286][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.195486][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.195633][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.280647][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.331777][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.332042][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.394454][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.396488][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.479046][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.723317][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.016545][ T5811] veth0_vlan: entered promiscuous mode [ 133.053330][ T5811] veth1_vlan: entered promiscuous mode [ 133.205277][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.271373][ T5811] veth0_macvtap: entered promiscuous mode [ 133.311272][ T5811] veth1_macvtap: entered promiscuous mode [ 133.353570][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.367001][ T5814] veth0_vlan: entered promiscuous mode [ 133.391986][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.404063][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.426095][ T5814] veth1_vlan: entered promiscuous mode [ 133.438254][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.471773][ T5820] veth0_vlan: entered promiscuous mode [ 133.489865][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.510322][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.520931][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.533517][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.550693][ T5820] veth1_vlan: entered promiscuous mode [ 133.749405][ T5818] veth0_vlan: entered promiscuous mode [ 133.775685][ T5814] veth0_macvtap: entered promiscuous mode [ 133.800137][ T5823] veth0_vlan: entered promiscuous mode [ 133.817389][ T5814] veth1_macvtap: entered promiscuous mode [ 133.845274][ T5818] veth1_vlan: entered promiscuous mode [ 133.877937][ T5823] veth1_vlan: entered promiscuous mode [ 133.883494][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.883519][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.886457][ T5820] veth0_macvtap: entered promiscuous mode [ 133.952205][ T5820] veth1_macvtap: entered promiscuous mode [ 133.974474][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.003896][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.006349][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.006369][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.062965][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.091011][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.094493][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.104988][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.113772][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.133467][ T5818] veth0_macvtap: entered promiscuous mode [ 134.175084][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.176545][ T5823] veth0_macvtap: entered promiscuous mode [ 134.182363][ T5818] veth1_macvtap: entered promiscuous mode [ 134.249321][ T5823] veth1_macvtap: entered promiscuous mode [ 134.256572][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.290042][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.355285][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.374313][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.406285][ T5118] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 134.475691][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.544483][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.548445][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.548464][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.554805][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.636263][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.700174][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.721886][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.726552][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.771872][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.774873][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.774891][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.794061][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.817781][ T5898] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 134.822788][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.837021][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.879153][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.885514][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.885535][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.018240][ T5898] usb 4-1: config 16 has an invalid interface number: 224 but max is 0 [ 135.018269][ T5898] usb 4-1: config 16 has no interface number 0 [ 135.025988][ T5898] usb 4-1: New USB device found, idVendor=19d2, idProduct=3ee3, bcdDevice=c9.d1 [ 135.026018][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.026040][ T5898] usb 4-1: Product: syz [ 135.026054][ T5898] usb 4-1: Manufacturer: syz [ 135.026068][ T5898] usb 4-1: SerialNumber: syz [ 135.134405][ T5898] usb 4-1: bad CDC descriptors [ 135.233277][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.233298][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.385513][ T5870] usb 4-1: USB disconnect, device number 2 [ 135.455147][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.455168][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.553551][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.553570][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.552365][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.552387][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.588560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.594055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.276332][ T38] audit: type=1326 audit(1763773501.585:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5935 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 137.276384][ T38] audit: type=1326 audit(1763773501.585:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5935 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 137.276426][ T38] audit: type=1326 audit(1763773501.585:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5935 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 137.276467][ T38] audit: type=1326 audit(1763773501.585:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5935 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 137.276508][ T38] audit: type=1326 audit(1763773501.585:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5935 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 137.602928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.603004][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.867501][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.154325][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.154403][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.317183][ T5964] Illegal XDP return value 571429213 on prog (id 4) dev N/A, expect packet loss! [ 143.668144][ T1243] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.914096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.914320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.186929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.852924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.854525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.854911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.855243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.855908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.820830][ T1243] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 145.820859][ T1243] usb 4-1: config 0 has no interface number 0 [ 145.820909][ T1243] usb 4-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 145.820945][ T1243] usb 4-1: config 0 interface 11 has no altsetting 0 [ 145.820978][ T1243] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 145.821001][ T1243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.574233][ T1243] usb 4-1: config 0 descriptor?? [ 146.678868][ T1243] usb 4-1: can't set config #0, error -71 [ 146.757282][ T1243] usb 4-1: USB disconnect, device number 3 [ 150.197515][ T6071] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 152.846983][ T6086] batadv_slave_1: entered promiscuous mode [ 152.847227][ T6089] batadv_slave_1: left promiscuous mode [ 155.070544][ T5779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.504154][ T5779] usb 2-1: Using ep0 maxpacket: 32 [ 155.715063][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.715098][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.715139][ T5779] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 155.715163][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.744121][ T5779] usb 2-1: config 0 descriptor?? [ 156.267644][ T5779] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x1 [ 156.267676][ T5779] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x7 [ 156.318081][ T5779] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 156.359809][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.462666][ T5968] usb 2-1: USB disconnect, device number 2 [ 156.692389][ T6114] fido_id[6114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 156.861128][ T5816] Bluetooth: hci1: hardware error 0x0c [ 160.259733][ T5816] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 165.175457][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'. [ 165.386926][ T5779] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 165.860271][ T5779] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.862285][ T5779] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 165.862314][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 4 [ 165.862339][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 0 [ 165.862365][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.862385][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 165.862407][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 165.862427][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 165.977581][ T5816] Bluetooth: Unexpected continuation frame (len 16) [ 166.921178][ T5779] usb 5-1: string descriptor 0 read error: -22 [ 166.921336][ T5779] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 166.921356][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.956661][ T5779] usb 5-1: config 0 descriptor?? [ 166.968537][ T6217] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.991138][ T5779] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.407997][ T5779] usb 5-1: USB disconnect, device number 2 [ 167.484768][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.063924][ T38] audit: type=1326 audit(1763773533.365:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.063981][ T38] audit: type=1326 audit(1763773533.375:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.136157][ T38] audit: type=1326 audit(1763773533.445:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.136211][ T38] audit: type=1326 audit(1763773533.445:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.141619][ T38] audit: type=1326 audit(1763773533.455:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.141671][ T38] audit: type=1326 audit(1763773533.455:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.159193][ T38] audit: type=1326 audit(1763773533.475:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.159247][ T38] audit: type=1326 audit(1763773533.475:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.159292][ T38] audit: type=1326 audit(1763773533.475:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.159354][ T38] audit: type=1326 audit(1763773533.475:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 169.778984][ T5883] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.568942][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 170.886786][ T5883] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 170.886815][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.886834][ T5883] usb 5-1: config 0 has no interface number 0 [ 170.886866][ T5883] usb 5-1: config 0 interface 31 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.886887][ T5883] usb 5-1: config 0 interface 31 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 170.893293][ T5883] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 170.893322][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.893342][ T5883] usb 5-1: Product: syz [ 170.893356][ T5883] usb 5-1: Manufacturer: syz [ 170.893370][ T5883] usb 5-1: SerialNumber: syz [ 170.899194][ T5883] usb 5-1: config 0 descriptor?? [ 171.296841][ T5883] usb 5-1: USB disconnect, device number 3 [ 171.352829][ T5862] udevd[5862]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 171.860070][ T6287] tun0: tun_chr_ioctl cmd 1074025677 [ 171.860198][ T6287] tun0: linktype set to 778 [ 171.894482][ T6289] netlink: 112 bytes leftover after parsing attributes in process `syz.1.124'. [ 178.508812][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 178.508829][ T38] audit: type=1326 audit(1763773542.825:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2b79f749 code=0x7ffc0000 [ 178.508873][ T38] audit: type=1326 audit(1763773542.825:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2b79f749 code=0x7ffc0000 [ 178.520591][ T38] audit: type=1326 audit(1763773542.835:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d2b79f749 code=0x7ffc0000 [ 178.535958][ T38] audit: type=1326 audit(1763773542.845:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2b79f749 code=0x7ffc0000 [ 178.537047][ T38] audit: type=1326 audit(1763773542.845:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f9d2b79f749 code=0x7ffc0000 [ 178.537840][ T38] audit: type=1326 audit(1763773542.855:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.0.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2b79f749 code=0x7ffc0000 [ 180.870765][ T6360] netlink: 68 bytes leftover after parsing attributes in process `syz.2.147'. [ 189.316607][ T6438] capability: warning: `syz.0.176' uses deprecated v2 capabilities in a way that may be insecure [ 194.592431][ T5965] kernel read not supported for file /rfkill (pid: 5965 comm: kworker/0:5) [ 200.684608][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.686015][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.507018][ T5779] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 204.868660][ T5779] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.868693][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.868712][ T5779] usb 1-1: SerialNumber: syz [ 205.245780][ T5779] usb 1-1: bad CDC descriptors [ 205.317368][ T5779] usb 1-1: USB disconnect, device number 2 [ 215.661255][ T38] audit: type=1326 audit(1763773579.975:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.666304][ T38] audit: type=1326 audit(1763773579.975:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.710486][ T38] audit: type=1326 audit(1763773580.025:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.710544][ T38] audit: type=1326 audit(1763773580.025:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.710591][ T38] audit: type=1326 audit(1763773580.025:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.710665][ T38] audit: type=1326 audit(1763773580.025:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.710723][ T38] audit: type=1326 audit(1763773580.025:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.710860][ T38] audit: type=1326 audit(1763773580.025:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.720679][ T38] audit: type=1326 audit(1763773580.025:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 215.720752][ T38] audit: type=1326 audit(1763773580.035:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6673 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6252f749 code=0x7ffc0000 [ 224.256880][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 224.410559][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 224.413048][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 224.413104][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.413125][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.413148][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.413171][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.413210][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.413238][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.884498][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 224.884547][ T9] usbtmc 5-1:16.0: can't read capabilities [ 226.267648][ T1243] usb 5-1: USB disconnect, device number 4 [ 226.758495][ T6755] netlink: 'syz.1.286': attribute type 2 has an invalid length. [ 226.800970][ T6755] !: entered promiscuous mode [ 226.847119][ T6755] netlink: 'syz.1.286': attribute type 2 has an invalid length. [ 226.847204][ T6755] !: left promiscuous mode [ 226.852640][ T6757] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.287'. [ 226.852928][ T6757] openvswitch: netlink: Missing key (keys=40, expected=80) [ 227.504654][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 227.504672][ T38] audit: type=1326 audit(1763773591.815:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.4.289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ce41f749 code=0x0 [ 228.636297][ T6755] Bluetooth: MGMT ver 1.23 [ 230.237148][ T6785] cgroup: Unknown subsys name 'cpuset' [ 230.982608][ T6795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.297'. [ 230.982633][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 230.990425][ T6795] veth1: entered promiscuous mode [ 233.082419][ T6814] Bluetooth: MGMT ver 1.23 [ 233.804234][ T38] audit: type=1326 audit(1763773598.115:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6816 comm="syz.0.302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d2b79f749 code=0x0 [ 237.951230][ T6830] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 238.477577][ T6841] warning: `syz.1.308' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.760981][ T6845] 9pnet_virtio: no channels available for device syz [ 238.848083][ T38] audit: type=1804 audit(1763773603.115:45): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.309" name="/newroot/60/file0" dev="tmpfs" ino=330 res=1 errno=0 [ 238.955489][ T6846] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 238.955509][ T6846] ref_ctr increment failed for inode: 0x14a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038f00000 [ 239.261117][ T6843] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 239.261140][ T6843] ref_ctr decrement failed for inode: 0x14a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038f00000 [ 239.301887][ T6843] uprobe: syz.3.309:6843 failed to unregister, leaking uprobe [ 239.751781][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.754807][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.755655][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.788101][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.790092][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.466007][ T6871] infiniband syz2: set down [ 242.466029][ T6871] infiniband syz2: added ipvlan0 [ 242.579036][ T6871] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 242.585326][ T6871] infiniband syz2: Couldn't open port 1 [ 243.279006][ T5816] Bluetooth: hci5: command tx timeout [ 243.359709][ T6871] RDS/IB: syz2: added [ 243.360386][ T6871] smc: adding ib device syz2 with port count 1 [ 243.360619][ T6871] smc: ib device syz2 port 1 has no pnetid [ 245.353731][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 246.307064][ T61] Bluetooth: hci5: command tx timeout [ 246.389835][ T6884] netlink: 76 bytes leftover after parsing attributes in process `syz.3.318'. [ 247.243793][ T6886] netlink: 64 bytes leftover after parsing attributes in process `syz.3.318'. [ 247.343346][ T38] audit: type=1326 audit(1763773611.655:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6892 comm="syz.4.320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ce41f749 code=0x0 [ 248.066902][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 248.387303][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 248.387341][ T5816] Bluetooth: hci5: command tx timeout [ 250.477115][ T5118] Bluetooth: hci5: command tx timeout [ 258.603218][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.739104][ T6955] Invalid logical block size (16384) [ 259.290848][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.614033][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.629073][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.683085][ T6854] bridge_slave_0: entered allmulticast mode [ 260.491779][ T6854] bridge_slave_0: entered promiscuous mode [ 260.559830][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.559958][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.560232][ T6854] bridge_slave_1: entered allmulticast mode [ 260.638306][ T6854] bridge_slave_1: entered promiscuous mode [ 263.149171][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.149246][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.212390][ T6973] syz.1.336 (6973) used greatest stack depth: 15760 bytes left [ 263.241636][ T6974] syz.1.336 (6974) used greatest stack depth: 15736 bytes left [ 263.412288][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.383298][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.458318][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.631125][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.669008][ T6998] netlink: 'syz.3.346': attribute type 4 has an invalid length. [ 267.669030][ T6998] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 267.669041][ T6998] netlink: 228 bytes leftover after parsing attributes in process `syz.3.346'. [ 267.959769][ T6999] mmap: syz.4.345 (6999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 268.150434][ T6854] team0: Port device team_slave_0 added [ 268.154083][ T6854] team0: Port device team_slave_1 added [ 271.196648][ T7020] kAFS: unparsable volume name [ 271.667476][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.667493][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.667521][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.730327][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.730344][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.730383][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.369830][ T12] bridge_slave_1: left allmulticast mode [ 272.370939][ T12] bridge_slave_1: left promiscuous mode [ 272.402356][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.576508][ T12] bridge_slave_0: left allmulticast mode [ 272.576533][ T12] bridge_slave_0: left promiscuous mode [ 272.576712][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.268046][ T7020] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 273.828638][ T7034] block device autoloading is deprecated and will be removed. [ 277.303205][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.477634][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.069855][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.293839][ T7060] tty tty29: ldisc open failed (-12), clearing slot 28 [ 278.442495][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.568045][ T7065] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 279.019606][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.010046][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.299820][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.672299][ T7090] input: syz0 as /devices/virtual/input/input6 [ 282.423848][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.497593][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.539086][ T12] bond0 (unregistering): Released all slaves [ 282.616405][ T6854] hsr_slave_0: entered promiscuous mode [ 282.635541][ T6854] hsr_slave_1: entered promiscuous mode [ 282.646202][ T6854] debugfs: 'hsr0' already exists in 'hsr' [ 282.646240][ T6854] Cannot create hsr debugfs directory [ 283.054225][ T5870] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 283.186169][ T7084] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 283.186198][ T7084] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 283.209148][ T7110] Zero length message leads to an empty skb [ 283.259321][ T5870] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.259342][ T5870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.259354][ T5870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.259388][ T5870] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.261676][ T5870] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.261697][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.261711][ T5870] usb 2-1: Product: syz [ 283.261721][ T5870] usb 2-1: Manufacturer: syz [ 283.374549][ T7084] vhci_hcd vhci_hcd.0: Device attached [ 283.481879][ T983] usb 40-1: SetAddress Request (2) to port 0 [ 283.481965][ T983] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 283.582045][ T5870] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 289.948781][ T10] usb 2-1: USB disconnect, device number 3 [ 290.723225][ T7108] vhci_hcd: connection reset by peer [ 290.756814][ T13] vhci_hcd: stop threads [ 290.767298][ T13] vhci_hcd: release socket [ 290.787984][ T983] usb 40-1: device descriptor read/8, error -110 [ 290.820671][ T13] vhci_hcd: disconnect device [ 291.368250][ T983] usb usb40-port1: attempt power cycle [ 292.299299][ T5884] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 292.521744][ T5884] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 292.521775][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.521894][ T5884] usb 4-1: Product: syz [ 292.521910][ T5884] usb 4-1: Manufacturer: syz [ 292.521925][ T5884] usb 4-1: SerialNumber: syz [ 292.579621][ T5884] usb 4-1: config 0 descriptor?? [ 292.780686][ T983] usb usb40-port1: unable to enumerate USB device [ 292.839490][ T5884] usb 4-1: Firmware version (0.0) predates our first public release. [ 292.839510][ T5884] usb 4-1: Please update to version 0.2 or newer [ 293.193977][ T5884] usb 4-1: USB disconnect, device number 4 [ 295.222129][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 295.222158][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 295.365483][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 296.336961][ T7184] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 296.336988][ T7184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 296.337946][ T7184] vhci_hcd vhci_hcd.0: Device attached [ 296.349412][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 296.483005][ T7187] process 'syz.0.391' launched '/dev/fd/12' with NULL argv: empty string added [ 296.531991][ T5884] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.532020][ T5884] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 296.532041][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.532093][ T5884] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.532118][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 296.532147][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.541469][ T5884] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.541501][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.541522][ T5884] usb 4-1: Product: syz [ 296.541537][ T5884] usb 4-1: Manufacturer: syz [ 296.755730][ T7185] vhci_hcd: connection closed [ 296.772330][ T1498] vhci_hcd: stop threads [ 296.772401][ T1498] vhci_hcd: release socket [ 296.772399][ T7173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.774851][ T5884] cdc_wdm 4-1:1.0: skipping garbage [ 296.774867][ T5884] cdc_wdm 4-1:1.0: skipping garbage [ 296.777105][ T5779] usb 34-1: SetAddress Request (2) to port 0 [ 296.777185][ T5779] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 296.838245][ T1498] vhci_hcd: disconnect device [ 296.990174][ T7174] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 297.001195][ T5884] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 297.001231][ T5884] cdc_wdm 4-1:1.0: Unknown control protocol [ 298.067399][ T5118] Bluetooth: hci4: command 0x0406 tx timeout [ 298.280419][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.281340][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.281825][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.281879][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.282326][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.282380][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.282729][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.282787][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.283265][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.283331][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.283734][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.283795][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.284212][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.284275][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.284601][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.284621][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.285020][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.285079][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.285536][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 298.285608][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 298.352609][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 298.353606][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 301.157257][ T5884] usb 4-1: USB disconnect, device number 5 [ 301.831071][ T5779] usb 34-1: device descriptor read/8, error -110 [ 302.598153][ T5779] usb usb34-port1: attempt power cycle [ 303.828865][ T5779] usb usb34-port1: unable to enumerate USB device [ 306.951137][ T7273] ntfs3(nullb0): Primary boot signature is not NTFS. [ 306.951939][ T7273] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 307.250738][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.257108][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.278889][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.298790][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.299548][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.432801][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.438515][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.439528][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.445410][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.472730][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.834944][ T7291] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 307.834972][ T7291] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 307.837297][ T7291] vhci_hcd vhci_hcd.0: Device attached [ 308.157003][ T5891] usb 40-1: SetAddress Request (6) to port 0 [ 308.157068][ T5891] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 308.233802][ T7292] vhci_hcd: connection reset by peer [ 308.246908][ T37] vhci_hcd: stop threads [ 308.246927][ T37] vhci_hcd: release socket [ 308.247000][ T37] vhci_hcd: disconnect device [ 309.506894][ T5118] Bluetooth: hci3: command tx timeout [ 310.198258][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.424'. [ 311.586795][ T5118] Bluetooth: hci3: command tx timeout [ 313.812654][ T5118] Bluetooth: hci3: command tx timeout [ 313.830183][ T5891] usb 40-1: device descriptor read/8, error -110 [ 314.408700][ T5891] usb usb40-port1: attempt power cycle [ 314.684091][ T7357] input: syz0 as /devices/virtual/input/input10 [ 314.993641][ T5891] usb usb40-port1: unable to enumerate USB device [ 315.116853][ T12] hsr_slave_0: left promiscuous mode [ 315.151097][ T38] audit: type=1326 audit(1763773679.465:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.3.440" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2b576f749 code=0x0 [ 315.188674][ T12] hsr_slave_1: left promiscuous mode [ 315.189916][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.190064][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.251043][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.251073][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.831294][ T5118] Bluetooth: hci3: command tx timeout [ 315.925254][ T12] veth1_macvtap: left promiscuous mode [ 315.925540][ T12] veth0_macvtap: left promiscuous mode [ 315.944250][ T12] veth1_vlan: left promiscuous mode [ 315.944840][ T12] veth0_vlan: left promiscuous mode [ 321.460763][ T38] audit: type=1326 audit(1763773685.775:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.1.453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dae93f749 code=0x0 [ 322.261358][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.267184][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.284888][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.306851][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.317809][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.472526][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.472599][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.782119][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 324.390358][ T5118] Bluetooth: hci5: command tx timeout [ 326.600640][ T5118] Bluetooth: hci5: command tx timeout [ 327.583934][ T38] audit: type=1326 audit(1763773691.895:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.4.464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ce41f749 code=0x0 [ 327.973777][ T12] team0 (unregistering): Port device team_slave_1 removed [ 328.307443][ T12] team0 (unregistering): Port device team_slave_0 removed [ 328.647907][ T5118] Bluetooth: hci5: command tx timeout [ 328.686932][ T1243] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 328.849395][ T1243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.849428][ T1243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.849456][ T1243] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 328.849472][ T1243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.853330][ T1243] usb 5-1: config 0 descriptor?? [ 329.286175][ T1243] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 329.286204][ T1243] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 329.286223][ T1243] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 329.286241][ T1243] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 329.286262][ T1243] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 329.422968][ T1243] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 329.551198][ T5884] usb 5-1: USB disconnect, device number 5 [ 330.707041][ T5118] Bluetooth: hci5: command tx timeout [ 334.214586][ T38] audit: type=1326 audit(1763773698.515:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.3.473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2b576f749 code=0x0 [ 337.493571][ T7219] chnl_net:caif_netlink_parms(): no params data found [ 339.922813][ T38] audit: type=1326 audit(1763773704.235:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7525 comm="syz.4.485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ce41f749 code=0x0 [ 340.633916][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.634056][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.634310][ T7219] bridge_slave_0: entered allmulticast mode [ 340.650029][ T7219] bridge_slave_0: entered promiscuous mode [ 340.706994][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.707145][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.707423][ T7219] bridge_slave_1: entered allmulticast mode [ 340.720925][ T7219] bridge_slave_1: entered promiscuous mode [ 342.724243][ T7519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.724268][ T7519] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 342.930365][ T7219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.934988][ T7219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.968796][ T7519] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 342.968819][ T7519] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 343.400625][ T7568] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 343.686992][ T38] audit: type=1326 audit(1763773707.985:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.3.494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2b576f749 code=0x0 [ 345.789365][ T7219] team0: Port device team_slave_0 added [ 346.084419][ T7219] team0: Port device team_slave_1 added [ 346.085197][ T12] bridge_slave_1: left allmulticast mode [ 346.085223][ T12] bridge_slave_1: left promiscuous mode [ 346.085466][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.004843][ T12] bridge_slave_0: left allmulticast mode [ 347.004866][ T12] bridge_slave_0: left promiscuous mode [ 347.005087][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.082451][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.200857][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.283167][ T12] bond0 (unregistering): Released all slaves [ 349.478419][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.478437][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.478467][ T7219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.539688][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.539706][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.539735][ T7219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.795773][ T7414] chnl_net:caif_netlink_parms(): no params data found [ 351.174055][ T38] audit: type=1326 audit(1763773715.485:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7647 comm="syz.3.505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2b576f749 code=0x0 [ 351.174497][ T7219] hsr_slave_0: entered promiscuous mode [ 351.178932][ T7219] hsr_slave_1: entered promiscuous mode [ 351.181639][ T7219] debugfs: 'hsr0' already exists in 'hsr' [ 351.181671][ T7219] Cannot create hsr debugfs directory [ 352.176615][ T12] hsr_slave_0: left promiscuous mode [ 352.213335][ T12] hsr_slave_1: left promiscuous mode [ 352.214423][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.695916][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.551529][ T12] team0 (unregistering): Port device team_slave_1 removed [ 354.668178][ T12] team0 (unregistering): Port device team_slave_0 removed [ 356.271528][ T38] audit: type=1326 audit(1763773720.585:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.1.515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dae93f749 code=0x0 [ 357.236406][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.236544][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.237213][ T7414] bridge_slave_0: entered allmulticast mode [ 357.251625][ T7414] bridge_slave_0: entered promiscuous mode [ 357.263700][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.263865][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.264084][ T7414] bridge_slave_1: entered allmulticast mode [ 357.278861][ T7414] bridge_slave_1: entered promiscuous mode [ 358.671607][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.882104][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.840716][ T7414] team0: Port device team_slave_0 added [ 361.878039][ T7414] team0: Port device team_slave_1 added [ 362.578200][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.578215][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.578240][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.588169][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.588188][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.588219][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.799028][ T38] audit: type=1326 audit(1763773727.115:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7741 comm="syz.1.527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dae93f749 code=0x0 [ 364.449266][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.453058][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.454155][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.455238][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.455947][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.513514][ T7414] hsr_slave_0: entered promiscuous mode [ 364.515515][ T7414] hsr_slave_1: entered promiscuous mode [ 364.516191][ T7414] debugfs: 'hsr0' already exists in 'hsr' [ 364.516208][ T7414] Cannot create hsr debugfs directory [ 364.582001][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.582516][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.582944][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.584134][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.584960][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.093879][ T6105] bridge_slave_1: left allmulticast mode [ 365.093901][ T6105] bridge_slave_1: left promiscuous mode [ 365.094577][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.171566][ T6105] bridge_slave_0: left allmulticast mode [ 365.171591][ T6105] bridge_slave_0: left promiscuous mode [ 365.171822][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.195218][ T5779] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 365.385787][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.385823][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.385865][ T5779] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 365.385888][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.480152][ T5779] usb 5-1: config 0 descriptor?? [ 365.929421][ T5779] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 365.929459][ T5779] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 365.929486][ T5779] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 365.929514][ T5779] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 365.929541][ T5779] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 366.042905][ T5779] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 366.078143][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.110073][ T5779] usb 5-1: USB disconnect, device number 6 [ 367.417048][ T7776] fido_id[7776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 368.385172][ T5118] Bluetooth: hci3: command tx timeout [ 368.760900][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.952107][ T6105] bond0 (unregistering): Released all slaves [ 370.389387][ T5118] Bluetooth: hci3: command tx timeout [ 371.772167][ T38] audit: type=1326 audit(1763773736.085:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7813 comm="syz.4.540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ce41f749 code=0x0 [ 372.466945][ T5118] Bluetooth: hci3: command tx timeout [ 373.052728][ T6105] hsr_slave_0: left promiscuous mode [ 373.148479][ T6105] hsr_slave_1: left promiscuous mode [ 373.150635][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.201456][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.267548][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 373.420982][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.421007][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.421036][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 373.421052][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.520644][ T9] usb 4-1: config 0 descriptor?? [ 374.241831][ T9] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 374.241870][ T9] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 374.241898][ T9] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 374.241926][ T9] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 374.241953][ T9] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 374.334254][ T9] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 374.476134][ T5779] usb 4-1: USB disconnect, device number 6 [ 374.554608][ T5118] Bluetooth: hci3: command tx timeout [ 374.689911][ T7829] fido_id[7829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 375.920632][ T6105] team0 (unregistering): Port device team_slave_1 removed [ 378.537510][ T6105] team0 (unregistering): Port device team_slave_0 removed [ 378.727887][ T38] audit: type=1326 audit(1763773743.045:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.1.552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dae93f749 code=0x0 [ 385.824481][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.824558][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.611661][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.613932][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.632388][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.633904][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.635382][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.707176][ T61] Bluetooth: hci6: command tx timeout [ 390.787228][ T61] Bluetooth: hci6: command tx timeout [ 390.941081][ T6105] bridge_slave_1: left allmulticast mode [ 390.941111][ T6105] bridge_slave_1: left promiscuous mode [ 390.941371][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.008021][ T6105] bridge_slave_0: left allmulticast mode [ 391.008053][ T6105] bridge_slave_0: left promiscuous mode [ 391.008264][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.620318][ T7911] Failed to get privilege flags for destination (handle=0x2:0x0) [ 391.718260][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.907780][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.058819][ T6105] bond0 (unregistering): Released all slaves [ 392.182822][ T7750] chnl_net:caif_netlink_parms(): no params data found [ 392.868232][ T61] Bluetooth: hci6: command tx timeout [ 393.313931][ T38] audit: type=1326 audit(1763773757.625:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.1.569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dae93f749 code=0x0 [ 394.946800][ T61] Bluetooth: hci6: command tx timeout [ 394.972313][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 395.886820][ T6105] hsr_slave_0: left promiscuous mode [ 395.924500][ T6105] hsr_slave_1: left promiscuous mode [ 395.926255][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.956179][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.027863][ T6105] team0 (unregistering): Port device team_slave_1 removed [ 397.116823][ T5891] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 397.181729][ T6105] team0 (unregistering): Port device team_slave_0 removed [ 397.283220][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 397.283250][ T5891] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.289238][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 397.289269][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.289291][ T5891] usb 2-1: Product: syz [ 397.289308][ T5891] usb 2-1: Manufacturer: syz [ 397.289324][ T5891] usb 2-1: SerialNumber: syz [ 397.313584][ T5891] hub 2-1:1.0: bad descriptor, ignoring hub [ 397.313630][ T5891] hub 2-1:1.0: probe with driver hub failed with error -5 [ 397.521992][ T5891] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 398.343500][ T5965] usb 2-1: USB disconnect, device number 4 [ 398.349728][ T5965] usblp0: removed [ 399.194368][ T38] audit: type=1326 audit(1763773763.505:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7981 comm="syz.1.582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dae93f749 code=0x0 [ 400.079138][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.079273][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.079492][ T7750] bridge_slave_0: entered allmulticast mode [ 400.130793][ T7750] bridge_slave_0: entered promiscuous mode [ 400.320628][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.320837][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.326136][ T7750] bridge_slave_1: entered allmulticast mode [ 400.340133][ T7750] bridge_slave_1: entered promiscuous mode [ 401.517180][ T7999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.517278][ T7999] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 402.227196][ T7999] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 402.338665][ T7999] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 402.338747][ T7999] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 402.381768][ T7750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.499065][ T7999] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 402.530669][ T7750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.535216][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.546474][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.548533][ T7870] bridge_slave_0: entered allmulticast mode [ 402.600523][ T7870] bridge_slave_0: entered promiscuous mode [ 402.862600][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.862740][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.862945][ T7870] bridge_slave_1: entered allmulticast mode [ 402.865819][ T7870] bridge_slave_1: entered promiscuous mode [ 403.153610][ T38] audit: type=1326 audit(1763773767.465:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 403.153667][ T38] audit: type=1326 audit(1763773767.465:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 403.153713][ T38] audit: type=1326 audit(1763773767.465:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 403.346014][ T38] audit: type=1326 audit(1763773767.655:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 403.870320][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.882620][ T38] audit: type=1326 audit(1763773768.195:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 403.882664][ T38] audit: type=1326 audit(1763773768.195:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 403.917310][ T38] audit: type=1326 audit(1763773768.235:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 403.919642][ T38] audit: type=1326 audit(1763773768.235:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 403.920578][ T38] audit: type=1326 audit(1763773768.235:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 404.361229][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 404.361291][ T38] audit: type=1326 audit(1763773768.655:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 404.403312][ T61] Bluetooth: hci6: command 0x0c1a tx timeout [ 404.415997][ T38] audit: type=1326 audit(1763773768.725:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8016 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ce41f749 code=0x7ffc0000 [ 404.469533][ T7750] team0: Port device team_slave_0 added [ 404.607300][ T7750] team0: Port device team_slave_1 added [ 404.613969][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.733506][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.049071][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.049089][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.049115][ T7750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.992941][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 406.231966][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.231978][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.231995][ T7750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.444228][ T38] audit: type=1326 audit(1763773770.755:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b576f749 code=0x7ffc0000 [ 406.444282][ T38] audit: type=1326 audit(1763773770.755:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b576f749 code=0x7ffc0000 [ 406.445616][ T7870] team0: Port device team_slave_0 added [ 406.445807][ T38] audit: type=1326 audit(1763773770.755:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b576f749 code=0x7ffc0000 [ 406.445858][ T38] audit: type=1326 audit(1763773770.755:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b576f749 code=0x7ffc0000 [ 406.445905][ T38] audit: type=1326 audit(1763773770.755:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd2b576f749 code=0x7ffc0000 [ 406.445950][ T38] audit: type=1326 audit(1763773770.755:84): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b576f749 code=0x7ffc0000 [ 406.445998][ T38] audit: type=1326 audit(1763773770.755:85): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b576f749 code=0x7ffc0000 [ 406.446631][ T38] audit: type=1326 audit(1763773770.755:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b576f749 code=0x7ffc0000 [ 406.467278][ T61] Bluetooth: hci6: command 0x0c1a tx timeout [ 406.696158][ T7870] team0: Port device team_slave_1 added [ 408.067398][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 408.151297][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.151308][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.151325][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.267259][ T8051] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.267412][ T8051] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 408.350196][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.350212][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.350235][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.410012][ T7750] hsr_slave_0: entered promiscuous mode [ 408.414181][ T7750] hsr_slave_1: entered promiscuous mode [ 408.428094][ T7750] debugfs: 'hsr0' already exists in 'hsr' [ 408.428112][ T7750] Cannot create hsr debugfs directory [ 409.919598][ T7870] hsr_slave_0: entered promiscuous mode [ 409.921029][ T7870] hsr_slave_1: entered promiscuous mode [ 409.922041][ T7870] debugfs: 'hsr0' already exists in 'hsr' [ 409.922064][ T7870] Cannot create hsr debugfs directory [ 410.437133][ T5118] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.143801][ T5118] Bluetooth: hci6: command 0x0c1a tx timeout [ 413.356865][ T5965] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 413.539112][ T5965] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 413.539144][ T5965] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 413.539186][ T5965] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 413.539208][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.592738][ T8121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 413.592947][ T8121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 413.633770][ T5965] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.896985][ T5965] usb 2-1: USB disconnect, device number 5 [ 414.396121][ T7750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.444480][ T7750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 414.594736][ T7750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 414.707417][ T7750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.843652][ T8141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.843911][ T8141] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 416.022776][ T7870] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 416.185439][ T7870] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 416.226821][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 416.327920][ T7870] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 416.619355][ T7870] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 416.955957][ T61] Bluetooth: hci6: command 0x0c1a tx timeout [ 417.249835][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.476502][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.519007][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.580206][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.586204][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.659469][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.666273][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.721876][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.778376][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.854646][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.899564][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.899747][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.036789][ T61] Bluetooth: hci6: command 0x0c1a tx timeout [ 423.143062][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.787675][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.793866][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.814690][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.824249][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.825563][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.611432][ T61] Bluetooth: hci3: command tx timeout [ 428.626839][ T61] Bluetooth: hci3: command tx timeout [ 430.707195][ T61] Bluetooth: hci3: command tx timeout [ 432.796848][ T61] Bluetooth: hci3: command tx timeout [ 433.078962][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 433.116951][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 433.122093][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 433.123676][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 433.124517][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.640055][ T8117] Set syz1 is full, maxelem 65536 reached [ 433.866823][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 434.051076][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.051110][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.051150][ T5883] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 434.051173][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.110441][ T5883] usb 2-1: config 0 descriptor?? [ 434.676840][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 434.676957][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 434.681698][ T5883] usb 2-1: USB disconnect, device number 6 [ 435.496116][ T61] Bluetooth: hci5: command tx timeout [ 435.732778][ T7870] veth0_vlan: entered promiscuous mode [ 436.022147][ T7870] veth1_vlan: entered promiscuous mode [ 437.060569][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 437.220067][ T7870] veth0_macvtap: entered promiscuous mode [ 437.370793][ T166] bridge_slave_1: left allmulticast mode [ 437.370822][ T166] bridge_slave_1: left promiscuous mode [ 437.371070][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.457919][ T166] bridge_slave_0: left allmulticast mode [ 437.457941][ T166] bridge_slave_0: left promiscuous mode [ 437.458128][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.510941][ T61] Bluetooth: hci5: command tx timeout [ 439.588667][ T61] Bluetooth: hci5: command tx timeout [ 442.523479][ T61] Bluetooth: hci5: command tx timeout [ 443.447674][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.528144][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.581075][ T166] bond0 (unregistering): Released all slaves [ 444.804920][ T7870] veth1_macvtap: entered promiscuous mode [ 445.354703][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.354776][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.458060][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.458198][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.458369][ T8204] bridge_slave_0: entered allmulticast mode [ 445.508063][ T8204] bridge_slave_0: entered promiscuous mode [ 445.937362][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.937508][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.937763][ T8204] bridge_slave_1: entered allmulticast mode [ 445.977348][ T8204] bridge_slave_1: entered promiscuous mode [ 447.165374][ T166] hsr_slave_0: left promiscuous mode [ 447.207105][ T166] hsr_slave_1: left promiscuous mode [ 447.208089][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.299974][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.359607][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.377111][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.380370][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.415127][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.426963][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.677341][ T5118] Bluetooth: hci0: command tx timeout [ 451.753755][ T61] Bluetooth: hci0: command tx timeout [ 452.891951][ T166] team0 (unregistering): Port device team_slave_1 removed [ 452.946045][ T8364] binder: 8362:8364 ioctl c00c6211 0 returned -14 [ 453.717648][ T166] team0 (unregistering): Port device team_slave_0 removed [ 453.827112][ T61] Bluetooth: hci0: command tx timeout [ 455.907184][ T61] Bluetooth: hci0: command tx timeout [ 459.340923][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.574748][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.023100][ T8204] team0: Port device team_slave_0 added [ 461.023852][ T8239] chnl_net:caif_netlink_parms(): no params data found [ 461.097400][ T8204] team0: Port device team_slave_1 added [ 465.177372][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.177388][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.177415][ T8204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.260262][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.260278][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.260304][ T8204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.690278][ T39] INFO: task syz.0.419:7273 blocked for more than 150 seconds. [ 469.690316][ T39] Not tainted syzkaller #0 [ 469.690327][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.690336][ T39] task:syz.0.419 state:D stack:27048 pid:7273 tgid:7269 ppid:5820 task_flags:0x400140 flags:0x00080002 [ 469.690420][ T39] Call Trace: [ 469.690431][ T39] [ 469.690446][ T39] __schedule+0x16f3/0x4c20 [ 469.690512][ T39] ? __pfx___schedule+0x10/0x10 [ 469.690565][ T39] ? schedule+0x91/0x360 [ 469.690592][ T39] schedule+0x165/0x360 [ 469.690618][ T39] futex_hash_allocate+0x773/0xe80 [ 469.690651][ T39] ? __pfx_futex_hash_allocate+0x10/0x10 [ 469.690675][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 469.690698][ T39] ? static_key_count+0x41/0x70 [ 469.690729][ T39] __se_sys_prctl+0x9f1/0x1830 [ 469.690751][ T39] ? __pfx___se_sys_prctl+0x10/0x10 [ 469.690772][ T39] ? do_syscall_64+0xbe/0xfa0 [ 469.690797][ T39] ? __x64_sys_prctl+0x20/0xc0 [ 469.690818][ T39] do_syscall_64+0xfa/0xfa0 [ 469.690843][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.690869][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 469.690887][ T39] ? clear_bhb_loop+0x60/0xb0 [ 469.690910][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.690928][ T39] RIP: 0033:0x7f9d2b79f749 [ 469.690949][ T39] RSP: 002b:00007f9d299e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 469.690967][ T39] RAX: ffffffffffffffda RBX: 00007f9d2b9f6090 RCX: 00007f9d2b79f749 [ 469.690981][ T39] RDX: 0000000000004000 RSI: 0000000000000001 RDI: 000000000000004e [ 469.690992][ T39] RBP: 00007f9d2b823f91 R08: 0000000000000000 R09: 0000000000000000 [ 469.691003][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.691013][ T39] R13: 00007f9d2b9f6128 R14: 00007f9d2b9f6090 R15: 00007ffe2bd0f6c8 [ 469.691044][ T39] [ 469.691075][ T39] [ 469.691075][ T39] Showing all locks held in the system: [ 469.691088][ T39] 3 locks held by kworker/u8:1/13: [ 469.691099][ T39] #0: ffff88814d09d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 469.691148][ T39] #1: ffffc90000127ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 469.691195][ T39] #2: ffffffff8e863938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 469.691238][ T39] 3 locks held by kworker/u8:2/37: [ 469.691249][ T39] 1 lock held by khungtaskd/39: [ 469.691258][ T39] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 469.691305][ T39] 2 locks held by kworker/1:1H/65: [ 469.691318][ T39] 4 locks held by kworker/u8:5/166: [ 469.691328][ T39] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 469.691381][ T39] #1: ffffc90003ba7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 469.691427][ T39] #2: ffffffff8e856a40 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 469.691471][ T39] #3: ffffffff8e863938 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x20/0x90 [ 469.691522][ T39] 3 locks held by kworker/0:2/1243: [ 469.691544][ T39] 5 locks held by kworker/u8:9/3483: [ 469.691554][ T39] 5 locks held by kworker/u8:12/3582: [ 469.691565][ T39] 2 locks held by dhcpcd/5464: [ 469.691575][ T39] #0: ffff888029d6a920 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 469.691617][ T39] #1: ffffffff8e863938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 469.691657][ T39] 2 locks held by getty/5560: [ 469.691667][ T39] #0: ffff88823bf740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 469.691712][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 469.691765][ T39] 1 lock held by syz-executor/5814: [ 469.691775][ T39] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: __se_sys_kill+0xfd/0x450 [ 469.691823][ T39] 1 lock held by syz-executor/5823: [ 469.691833][ T39] #0: ffffffff8d20c0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 469.691879][ T39] 1 lock held by syz-executor/8204: [ 469.691889][ T39] #0: ffffffff8e863938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 469.691930][ T39] 3 locks held by syz-executor/8239: [ 469.691940][ T39] #0: ffffffff8dfed740 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 469.691988][ T39] #1: ffffffff8e863938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 469.692028][ T39] #2: ffff88813ff74238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x2c2/0x520 [ 469.692072][ T39] 5 locks held by syz-executor/8334: [ 469.692083][ T39] 1 lock held by syz.4.670/8419: [ 469.692093][ T39] 2 locks held by syz.1.671/8420: [ 469.692103][ T39] 2 locks held by syz.1.671/8424: [ 469.692113][ T39] #0: ffff888032722920 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 469.692155][ T39] #1: ffffffff8e863938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 469.692195][ T39] [ 469.692199][ T39] ============================================= [ 469.692199][ T39] [ 469.692212][ T39] NMI backtrace for cpu 0 [ 469.692235][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 469.692255][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.692264][ T39] Call Trace: [ 469.692272][ T39] [ 469.692279][ T39] dump_stack_lvl+0x189/0x250 [ 469.692309][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.692336][ T39] ? __pfx__printk+0x10/0x10 [ 469.692375][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 469.692401][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 469.692424][ T39] ? __pfx__printk+0x10/0x10 [ 469.692450][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 469.692472][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 469.692496][ T39] watchdog+0xf60/0xfa0 [ 469.692526][ T39] ? watchdog+0x1e2/0xfa0 [ 469.692556][ T39] kthread+0x711/0x8a0 [ 469.692586][ T39] ? __pfx_watchdog+0x10/0x10 [ 469.692610][ T39] ? __pfx_kthread+0x10/0x10 [ 469.692634][ T39] ? rt_spin_unlock+0x150/0x200 [ 469.692660][ T39] ? rt_spin_unlock+0x161/0x200 [ 469.692680][ T39] ? __pfx_kthread+0x10/0x10 [ 469.692706][ T39] ret_from_fork+0x4bc/0x870 [ 469.692730][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 469.692758][ T39] ? __switch_to_asm+0x39/0x70 [ 469.692775][ T39] ? __switch_to_asm+0x33/0x70 [ 469.692791][ T39] ? __pfx_kthread+0x10/0x10 [ 469.692819][ T39] ret_from_fork_asm+0x1a/0x30 [ 469.692851][ T39] [ 469.692858][ T39] Sending NMI from CPU 0 to CPUs 1: [ 469.692879][ C1] NMI backtrace for cpu 1 [ 469.692892][ C1] CPU: 1 UID: 0 PID: 8334 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 469.692926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.692936][ C1] RIP: 0010:trace_irq_disable+0x30/0x110 [ 469.692961][ C1] Code: 8b 05 18 31 dc 0f 83 f8 08 73 3c 89 c3 c1 e8 06 48 8d 3c c5 70 42 d6 8e be 08 00 00 00 e8 58 ff 59 00 48 0f a3 1d 30 d3 0f 0d <73> 12 e8 d9 7d de ff 84 c0 75 09 80 3d 7b 03 fa 0c 00 74 0f 5b 41 [ 469.692975][ C1] RSP: 0018:ffffc9000514f388 EFLAGS: 00000057 [ 469.692989][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81c66f38 [ 469.693000][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ed64270 [ 469.693010][ C1] RBP: ffffc9000514f430 R08: ffffffff8ed64277 R09: 1ffffffff1dac84e [ 469.693023][ C1] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: dffffc0000000000 [ 469.693035][ C1] R13: ffff88813ff741e0 R14: 0000000000000a06 R15: 1ffff92000a29e74 [ 469.693046][ C1] FS: 000055557df9d500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 469.693060][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.693071][ C1] CR2: 0000200000007000 CR3: 000000006557c000 CR4: 00000000003526f0 [ 469.693085][ C1] Call Trace: [ 469.693091][ C1] [ 469.693097][ C1] _raw_spin_lock_irqsave+0x82/0xf0 [ 469.693131][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 469.693154][ C1] ? do_raw_spin_lock+0x121/0x290 [ 469.693177][ C1] rt_mutex_slowunlock+0xb0/0x8a0 [ 469.693193][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.693217][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 469.693240][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 469.693258][ C1] ? kernfs_add_one+0xf0/0x520 [ 469.693280][ C1] kernfs_add_one+0xf0/0x520 [ 469.693300][ C1] __kernfs_create_file+0x22b/0x2e0 [ 469.693325][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 469.693354][ C1] internal_create_group+0x66d/0x1110 [ 469.693383][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 469.693406][ C1] sysfs_create_groups+0x59/0x120 [ 469.693435][ C1] ib_setup_port_attrs+0x140c/0x2070 [ 469.693464][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.693490][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 469.693509][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 469.693528][ C1] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 469.693545][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 469.693569][ C1] ? device_add+0x70b/0xb50 [ 469.693590][ C1] add_one_compat_dev+0x3d6/0x5c0 [ 469.693611][ C1] rdma_dev_init_net+0x1dd/0x270 [ 469.693628][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 469.693650][ C1] ops_init+0x35c/0x5c0 [ 469.693670][ C1] setup_net+0xfe/0x320 [ 469.693691][ C1] ? __pfx_setup_net+0x10/0x10 [ 469.693706][ C1] ? __mutex_rt_init+0x3b/0x50 [ 469.693722][ C1] ? preinit_net+0x4ab/0x770 [ 469.693736][ C1] copy_net_ns+0x34e/0x4e0 [ 469.693752][ C1] create_new_namespaces+0x3f3/0x720 [ 469.693772][ C1] ? security_capable+0x7e/0x2e0 [ 469.693794][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 469.693814][ C1] ksys_unshare+0x4c8/0x8c0 [ 469.693839][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 469.693859][ C1] ? dnotify_flush+0x1e8/0x5c0 [ 469.693875][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 469.693896][ C1] __x64_sys_unshare+0x38/0x50 [ 469.693917][ C1] do_syscall_64+0xfa/0xfa0 [ 469.693939][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.693960][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.693975][ C1] ? clear_bhb_loop+0x60/0xb0 [ 469.693993][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.694007][ C1] RIP: 0033:0x7ff8adf30f47 [ 469.694019][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.694032][ C1] RSP: 002b:00007ffc73a779c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 469.694046][ C1] RAX: ffffffffffffffda RBX: 00007ff8ae185f40 RCX: 00007ff8adf30f47 [ 469.694057][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 469.694066][ C1] RBP: 00007ff8ae1867b8 R08: 0000000000000000 R09: 0000000000000000 [ 469.694076][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 469.694085][ C1] R13: 0000000000000003 R14: 00007ffc73a77c98 R15: 0000000000000000 [ 469.694107][ C1] [ 477.432012][ T166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.680064][ T166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.952074][ T166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.209663][ T166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.552888][ T166] bridge_slave_1: left allmulticast mode [ 478.552917][ T166] bridge_slave_1: left promiscuous mode [ 478.553176][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.628520][ T166] bridge_slave_0: left allmulticast mode [ 478.628548][ T166] bridge_slave_0: left promiscuous mode [ 478.628788][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.690175][ T166] bridge_slave_1: left allmulticast mode [ 478.690195][ T166] bridge_slave_1: left promiscuous mode [ 478.690384][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.767737][ T166] bridge_slave_0: left allmulticast mode [ 478.767775][ T166] bridge_slave_0: left promiscuous mode [ 478.767931][ T166] bridge0: port 1(bridge_slave_0) entered disabled state