last executing test programs: 47.520785457s ago: executing program 2 (id=633): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 46.184963406s ago: executing program 2 (id=636): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x6000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r3, &(0x7f0000000840)=[{&(0x7f0000001a00)=""/4083, 0xff3}], 0x1) 44.578170964s ago: executing program 2 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) pread64(r5, &(0x7f0000000200)=""/123, 0x9e, 0xc8) 42.158586105s ago: executing program 2 (id=649): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 42.016155522s ago: executing program 1 (id=651): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x4, 0x8005}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x65, 0x0, 0x0, 0x21, 0x0, @remote, @remote}, {{0x4e22, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0xa, 0x2, "00bcc1", 0x8, "530f66"}}}}}}, 0x0) 41.935653071s ago: executing program 2 (id=653): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) sendmmsg$unix(r1, &(0x7f0000006f40), 0x0, 0x40080) 41.839366203s ago: executing program 1 (id=655): r0 = socket(0x23, 0x5, 0x0) unshare(0x22020600) bind$packet(r0, &(0x7f0000000180)={0x23, 0x9, 0x0, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) 40.592345981s ago: executing program 1 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) pread64(r5, &(0x7f0000000200)=""/123, 0x9e, 0xc8) 39.200246707s ago: executing program 1 (id=663): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 38.201628152s ago: executing program 1 (id=666): openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x4}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 36.396257395s ago: executing program 2 (id=668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) syz_clone(0x5400, 0x0, 0x0, &(0x7f0000001d40), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x40000) 35.225928224s ago: executing program 32 (id=668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) syz_clone(0x5400, 0x0, 0x0, &(0x7f0000001d40), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x40000) 34.69525331s ago: executing program 1 (id=678): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) read(r4, &(0x7f00000001c0)=""/134, 0x86) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x1, @value=0x9}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20901, 0x0) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f00000011c0)={0x34, 0x3, 0x6, 0x6, 0x40000002, 0x2, 0x2, 0xf4}) 34.157144152s ago: executing program 33 (id=678): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) read(r4, &(0x7f00000001c0)=""/134, 0x86) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x1, @value=0x9}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20901, 0x0) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f00000011c0)={0x34, 0x3, 0x6, 0x6, 0x40000002, 0x2, 0x2, 0xf4}) 4.664181069s ago: executing program 4 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) migrate_pages(0x0, 0x9, &(0x7f00000000c0)=0xb, &(0x7f0000000380)=0x102) 4.477857881s ago: executing program 4 (id=839): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x326}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x5, 0x0, 0x0, 0x39, 0x0, {0x8}}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.351643254s ago: executing program 4 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x28, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) 3.185613788s ago: executing program 4 (id=842): syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2.883605623s ago: executing program 0 (id=844): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000003c0)='x', 0x1}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r0) 2.609813842s ago: executing program 0 (id=845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0xa, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r3, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = dup(r11) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) 2.111325138s ago: executing program 0 (id=849): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 1.935823019s ago: executing program 3 (id=852): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 1.921258149s ago: executing program 3 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400a9000000080026006c090000300051802c00e08004000600050002000100000011000100a3446c"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.889430405s ago: executing program 3 (id=854): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket(0xa, 0x5, 0xb) ptrace(0x10, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000000080)=""/7) 1.711793585s ago: executing program 3 (id=855): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x149a61de, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, &(0x7f0000000500)=0x84) 1.69380851s ago: executing program 3 (id=856): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 1.659695983s ago: executing program 3 (id=857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0xa, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r3, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) 1.212870096s ago: executing program 0 (id=858): r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.115712699s ago: executing program 0 (id=859): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 1.041427364s ago: executing program 0 (id=860): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x4000, 0x10, 0x8, 0xfffffcd2, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="2d637075202b706964732007fcc229bf8cba3ee26991c52fa958b037874ae909a1b0204b73"], 0xb) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000300)={0xe, 0x5}) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f00000007c0)=0x9, 0x4) r11 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r11, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x100, 0x11, 0x20}, 0x18) writev(r9, &(0x7f0000000740)=[{&(0x7f0000000380)="6f8f8a4dadd76e2992c126262914825efc21dfff1f9c9555569389176f", 0x1d}, {&(0x7f0000000400)="9001b253de7425e3d8b4975d415cb020ec0f5d45bd414aa95d8605b8f43923ce4e2abf7569761e3d3a96dc39361b2686f4fc63e1b272541561f2d3dec8363b639cf669e83c80ba9b4046f442ea2944f1f5f39efb9a79582e2b8162e859ed8cdacc34a021eaa8", 0x66}, {&(0x7f0000001a40)="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", 0xfa0}, {&(0x7f0000000480)="08909fdf342b4ade5a545a4619e9e5b30ea95ec10056983bd8baa008b184fe56e1d7e028d9f6f0b1d10bf0ed61a9dfc7ddaf2d02e6b2f440c1e5586b81c6146c09e9fefd80ed08388063e212fc950576f93007f7870214bccbaec2a652304a97ff610072401a71dc5b90be7f98b29ae5", 0x70}, {&(0x7f0000000680)="dc0ce29b2ffe2a425caa3d439e4b7e56cb4b35e1afbf2503a737a5301c108fe5ba07bf8298866957125872b4484bf427359b705e0aa20392698d4719cba0f7bb8aaf4cecc9e2e39714072ef03aeaaeae516f9057fec894e35354060d4210f5d624ec1cdb5baf3cb76df5b715023a9050411105424830c3dafab8c5747d55ccb523569bed4848ef85e310afa5d6c17d382867d1dc0aacf1c9d9cb32795dcf72b5e7124873abf35471", 0xa8}, {&(0x7f0000000500)="8694cf", 0x3}], 0x6) 53.193903ms ago: executing program 4 (id=861): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 0s ago: executing program 4 (id=862): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x1000, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) io_setup(0x9, &(0x7f0000000200)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 74.703662][ T5793] cgroup: Unknown subsys name 'net' [ 74.943717][ T5793] cgroup: Unknown subsys name 'cpuset' [ 74.979714][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.544275][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.766194][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.794683][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.795734][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.800512][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.808345][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.809912][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.810536][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.811657][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.813022][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.813732][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.813942][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.814761][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.815808][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.816212][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.832264][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.833762][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.834566][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.835476][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.837226][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.838178][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.840353][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.841219][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.859592][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.888649][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.891020][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.760884][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 79.814388][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 79.854918][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 79.974340][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 79.999536][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 80.661546][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.662812][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.663827][ T5804] bridge_slave_0: entered allmulticast mode [ 80.665379][ T5804] bridge_slave_0: entered promiscuous mode [ 80.821529][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.821598][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.821719][ T5804] bridge_slave_1: entered allmulticast mode [ 80.823090][ T5804] bridge_slave_1: entered promiscuous mode [ 80.849462][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.849577][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.849763][ T5808] bridge_slave_0: entered allmulticast mode [ 80.852160][ T5808] bridge_slave_0: entered promiscuous mode [ 80.910894][ T5817] Bluetooth: hci0: command tx timeout [ 80.911382][ T5823] Bluetooth: hci4: command tx timeout [ 80.911469][ T61] Bluetooth: hci1: command tx timeout [ 80.911546][ T5813] Bluetooth: hci3: command tx timeout [ 80.989344][ T5813] Bluetooth: hci2: command tx timeout [ 81.150112][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.150254][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.150381][ T5808] bridge_slave_1: entered allmulticast mode [ 81.153594][ T5808] bridge_slave_1: entered promiscuous mode [ 81.260169][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.260288][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.260531][ T5806] bridge_slave_0: entered allmulticast mode [ 81.262705][ T5806] bridge_slave_0: entered promiscuous mode [ 81.480072][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.480172][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.480303][ T5805] bridge_slave_0: entered allmulticast mode [ 81.482117][ T5805] bridge_slave_0: entered promiscuous mode [ 81.483549][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.483665][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.483852][ T5806] bridge_slave_1: entered allmulticast mode [ 81.485562][ T5806] bridge_slave_1: entered promiscuous mode [ 81.491788][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.492842][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.492955][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.493106][ T5803] bridge_slave_0: entered allmulticast mode [ 81.495476][ T5803] bridge_slave_0: entered promiscuous mode [ 81.594367][ T31] cfg80211: failed to load regulatory.db [ 81.610309][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.610434][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.610901][ T5805] bridge_slave_1: entered allmulticast mode [ 81.614596][ T5805] bridge_slave_1: entered promiscuous mode [ 81.693731][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.693972][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.694091][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.694248][ T5803] bridge_slave_1: entered allmulticast mode [ 81.697012][ T5803] bridge_slave_1: entered promiscuous mode [ 81.739187][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.144281][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.223169][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.472741][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.475133][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.477266][ T5804] team0: Port device team_slave_0 added [ 82.481820][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.573986][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.651575][ T5804] team0: Port device team_slave_1 added [ 82.653564][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.655330][ T5808] team0: Port device team_slave_0 added [ 82.901925][ T5808] team0: Port device team_slave_1 added [ 82.962362][ T5806] team0: Port device team_slave_0 added [ 82.989304][ T61] Bluetooth: hci0: command tx timeout [ 82.989419][ T5813] Bluetooth: hci1: command tx timeout [ 82.999624][ T61] Bluetooth: hci4: command tx timeout [ 82.999718][ T5813] Bluetooth: hci3: command tx timeout [ 83.080757][ T5813] Bluetooth: hci2: command tx timeout [ 83.221902][ T5805] team0: Port device team_slave_0 added [ 83.224657][ T5806] team0: Port device team_slave_1 added [ 83.225609][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.225617][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.225638][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.481830][ T5803] team0: Port device team_slave_0 added [ 83.542170][ T5805] team0: Port device team_slave_1 added [ 83.600772][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.600783][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.600797][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.605396][ T5803] team0: Port device team_slave_1 added [ 83.606466][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.606479][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.606503][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.920743][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.920754][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.920768][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.011556][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.011572][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.011596][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.096574][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.096591][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.096614][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.097771][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.097783][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.097796][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.101015][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.101028][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.101049][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.177289][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.177305][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.177329][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.340777][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.340788][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.340802][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.498592][ T5804] hsr_slave_0: entered promiscuous mode [ 84.505368][ T5804] hsr_slave_1: entered promiscuous mode [ 84.657076][ T5808] hsr_slave_0: entered promiscuous mode [ 84.657884][ T5808] hsr_slave_1: entered promiscuous mode [ 84.658544][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 84.658627][ T5808] Cannot create hsr debugfs directory [ 84.885416][ T5806] hsr_slave_0: entered promiscuous mode [ 84.886234][ T5806] hsr_slave_1: entered promiscuous mode [ 84.886789][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 84.886805][ T5806] Cannot create hsr debugfs directory [ 85.069432][ T5823] Bluetooth: hci1: command tx timeout [ 85.069448][ T5817] Bluetooth: hci0: command tx timeout [ 85.069539][ T61] Bluetooth: hci4: command tx timeout [ 85.069606][ T5813] Bluetooth: hci3: command tx timeout [ 85.149484][ T5813] Bluetooth: hci2: command tx timeout [ 85.174106][ T5805] hsr_slave_0: entered promiscuous mode [ 85.174864][ T5805] hsr_slave_1: entered promiscuous mode [ 85.175398][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 85.175418][ T5805] Cannot create hsr debugfs directory [ 85.250897][ T5803] hsr_slave_0: entered promiscuous mode [ 85.251689][ T5803] hsr_slave_1: entered promiscuous mode [ 85.252229][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 85.252246][ T5803] Cannot create hsr debugfs directory [ 86.725590][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.757198][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.793695][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.847449][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.951769][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.984552][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.016814][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.048017][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.149547][ T5813] Bluetooth: hci0: command tx timeout [ 87.149967][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.162583][ T5823] Bluetooth: hci1: command tx timeout [ 87.162624][ T61] Bluetooth: hci4: command tx timeout [ 87.162656][ T5813] Bluetooth: hci3: command tx timeout [ 87.207863][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.229315][ T5813] Bluetooth: hci2: command tx timeout [ 87.251732][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.302707][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.417073][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.454067][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.487344][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.520973][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.657099][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.685646][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.694205][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.730722][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.768351][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.832931][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.872784][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.876952][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.877698][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.916883][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.917003][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.970887][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.984688][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.007758][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.008036][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.044769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.044898][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.102511][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.124927][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.144787][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.144942][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.191221][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.191379][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.257668][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.314895][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.315385][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.351646][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.374938][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.375090][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.478485][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.523269][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.524415][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.567336][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.567466][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.690917][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.862008][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.193232][ T5808] veth0_vlan: entered promiscuous mode [ 89.219007][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.242780][ T5808] veth1_vlan: entered promiscuous mode [ 89.346083][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.408283][ T5808] veth0_macvtap: entered promiscuous mode [ 89.422582][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.442754][ T5808] veth1_macvtap: entered promiscuous mode [ 89.447143][ T5803] veth0_vlan: entered promiscuous mode [ 89.493242][ T5804] veth0_vlan: entered promiscuous mode [ 89.498287][ T5803] veth1_vlan: entered promiscuous mode [ 89.530116][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.566382][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.567617][ T5804] veth1_vlan: entered promiscuous mode [ 89.577381][ T5806] veth0_vlan: entered promiscuous mode [ 89.598449][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.612733][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.618200][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.646030][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.661692][ T5806] veth1_vlan: entered promiscuous mode [ 89.735504][ T5805] veth0_vlan: entered promiscuous mode [ 89.775722][ T5803] veth0_macvtap: entered promiscuous mode [ 89.806483][ T5803] veth1_macvtap: entered promiscuous mode [ 89.867852][ T5805] veth1_vlan: entered promiscuous mode [ 89.942187][ T5804] veth0_macvtap: entered promiscuous mode [ 89.980896][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.002021][ T5806] veth0_macvtap: entered promiscuous mode [ 90.004156][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.004177][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.011873][ T5804] veth1_macvtap: entered promiscuous mode [ 90.022586][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.074565][ T5806] veth1_macvtap: entered promiscuous mode [ 90.084973][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.096173][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.097523][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.097539][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.117649][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.134625][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.161937][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.186332][ T5805] veth0_macvtap: entered promiscuous mode [ 90.256285][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.260854][ T5805] veth1_macvtap: entered promiscuous mode [ 90.367363][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.377240][ T4483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.385230][ T4483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.388103][ T4483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.394353][ T4483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.398143][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.490527][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.524911][ T4483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.592386][ T4483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.620159][ T4483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.634061][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.643887][ T4483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.835863][ T4483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.845248][ T4483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.848488][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.848504][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.850802][ T4483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.874880][ T4483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.050094][ T5927] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.079524][ T3743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.079539][ T3743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.247195][ T4483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.247215][ T4483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.341991][ T4483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.342010][ T4483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.484450][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.484468][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.617300][ T3743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.617319][ T3743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.665679][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.665697][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.204362][ T5933] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.467151][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.467172][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.081119][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.138195][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 94.172971][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.254777][ T5947] bridge_slave_1 (unregistering): left allmulticast mode [ 95.254805][ T5947] bridge_slave_1 (unregistering): left promiscuous mode [ 95.254898][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.110878][ T5974] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.918057][ T5978] netlink: 120 bytes leftover after parsing attributes in process `syz.1.15'. [ 99.798321][ T5983] Zero length message leads to an empty skb [ 101.512432][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.996763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.006674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.016404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.026145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.035903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.040715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.045520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.055397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.065139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.074886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.774735][ T6017] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.078524][ T6041] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 110.526984][ T6008] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.856871][ T6008] usb 3-1: device descriptor read/all, error -71 [ 111.387529][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.541833][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 112.449089][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 112.449118][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.449137][ T9] usb 2-1: Product: syz [ 112.449151][ T9] usb 2-1: Manufacturer: syz [ 112.449164][ T9] usb 2-1: SerialNumber: syz [ 112.533765][ T9] usb 2-1: config 0 descriptor?? [ 112.584903][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 112.829766][ T9] gspca_ov534_9: reg_w failed -71 [ 117.491613][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 117.564745][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.651633][ T9] gspca_ov534_9: Unknown sensor 0000 [ 117.651740][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 117.704937][ T9] usb 2-1: USB disconnect, device number 2 [ 120.360702][ T5809] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.363528][ T6115] bridge_slave_1 (unregistering): left allmulticast mode [ 120.363553][ T6115] bridge_slave_1 (unregistering): left promiscuous mode [ 120.363883][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.509321][ T5809] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 120.509349][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.658233][ T5809] usb 4-1: config 0 descriptor?? [ 120.694906][ T5809] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 121.593798][ T5809] gspca_cpia1: usb_control_msg 05, error -71 [ 121.596896][ T5809] gspca_cpia1: usb_control_msg 01, error -71 [ 121.596915][ T5809] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 121.632122][ T5809] usb 4-1: USB disconnect, device number 2 [ 123.451242][ T6160] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.241175][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 132.374335][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.374431][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.933278][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 133.964201][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.345125][ T6243] bridge_slave_1 (unregistering): left allmulticast mode [ 136.345154][ T6243] bridge_slave_1 (unregistering): left promiscuous mode [ 136.345248][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.539931][ T37] audit: type=1326 audit(1767819446.088:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6268 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 136.539985][ T37] audit: type=1326 audit(1767819446.088:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6268 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 136.540026][ T37] audit: type=1326 audit(1767819446.088:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6268 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 136.540066][ T37] audit: type=1326 audit(1767819446.088:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6268 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 140.703269][ T6291] loop9: detected capacity change from 0 to 7 [ 140.704232][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704271][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704291][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704306][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704336][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704361][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704377][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704386][ T6291] ldm_validate_partition_table(): Disk read failed. [ 140.704400][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704416][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704432][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.704449][ T6291] Dev loop9: unable to read RDB block 0 [ 140.704494][ T6291] loop9: unable to read partition table [ 140.704613][ T6291] loop9: partition table beyond EOD, truncated [ 140.704627][ T6291] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 140.704627][ T6291] ) failed (rc=-5) [ 141.030064][ T6072] ldm_validate_partition_table(): Disk read failed. [ 141.030111][ T6072] Dev loop9: unable to read RDB block 0 [ 141.030148][ T6072] loop9: unable to read partition table [ 141.030284][ T6072] loop9: partition table beyond EOD, truncated [ 142.083438][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.100771][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.133689][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.186795][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.196833][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 144.599843][ T6314] infiniband syz1: set active [ 144.599864][ T6314] infiniband syz1: added syz_tun [ 146.076807][ T6314] RDS/IB: syz1: added [ 146.077578][ T6314] smc: adding ib device syz1 with port count 1 [ 146.077779][ T6314] smc: ib device syz1 port 1 has no pnetid [ 148.130034][ T6332] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.634787][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 155.588711][ T6381] buffer_io_error: 33 callbacks suppressed [ 155.588726][ T6381] Buffer I/O error on dev loop9, logical block 1, async page read [ 155.591442][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.591484][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.598000][ T6381] Buffer I/O error on dev loop9, logical block 1, async page read [ 155.738450][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.738502][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.751373][ T6381] Buffer I/O error on dev loop9, logical block 1, async page read [ 155.753224][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.753258][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.753391][ T6381] Buffer I/O error on dev loop9, logical block 1, async page read [ 155.760191][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.760223][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.760338][ T6381] Buffer I/O error on dev loop9, logical block 1, async page read [ 155.760510][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.760537][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.760753][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.760916][ T6381] ldm_validate_partition_table(): Disk read failed. [ 155.762014][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.763014][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.763395][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.763658][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 155.763813][ T6381] Dev loop9: unable to read RDB block 0 [ 155.764593][ T6381] loop9: unable to read partition table [ 155.764731][ T6381] loop9: partition table beyond EOD, truncated [ 163.583871][ T6430] buffer_io_error: 18 callbacks suppressed [ 163.583883][ T6430] Buffer I/O error on dev loop9, logical block 1, async page read [ 163.584016][ C0] blk_print_req_error: 4 callbacks suppressed [ 163.584030][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.584058][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.584230][ T6430] Buffer I/O error on dev loop9, logical block 1, async page read [ 163.584444][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.584472][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.584719][ T6430] Buffer I/O error on dev loop9, logical block 1, async page read [ 163.594418][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.594450][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.598956][ T6430] Buffer I/O error on dev loop9, logical block 1, async page read [ 163.603022][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.603054][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.603190][ T6430] Buffer I/O error on dev loop9, logical block 1, async page read [ 163.603772][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.603799][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.605302][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.606127][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.606190][ T6430] ldm_validate_partition_table(): Disk read failed. [ 163.606484][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.607521][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.608248][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 163.608563][ T6430] Dev loop9: unable to read RDB block 0 [ 163.609389][ T6430] loop9: unable to read partition table [ 163.609583][ T6430] loop9: partition table beyond EOD, truncated [ 165.540960][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 171.022922][ T6482] buffer_io_error: 18 callbacks suppressed [ 171.022934][ T6482] Buffer I/O error on dev loop9, logical block 1, async page read [ 171.024194][ C0] blk_print_req_error: 4 callbacks suppressed [ 171.024208][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.024231][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.024403][ T6482] Buffer I/O error on dev loop9, logical block 1, async page read [ 171.026090][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.026122][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.026439][ T6482] Buffer I/O error on dev loop9, logical block 1, async page read [ 171.028538][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.028571][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.028724][ T6482] Buffer I/O error on dev loop9, logical block 1, async page read [ 171.029589][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.029618][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.029835][ T6482] Buffer I/O error on dev loop9, logical block 1, async page read [ 171.030116][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.030145][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.033375][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.036763][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.036827][ T6482] ldm_validate_partition_table(): Disk read failed. [ 171.037053][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.037319][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.037622][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 171.037912][ T6482] Dev loop9: unable to read RDB block 0 [ 171.038625][ T6482] loop9: unable to read partition table [ 171.038813][ T6482] loop9: partition table beyond EOD, truncated [ 172.434435][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 174.727690][ T6528] ldm_validate_partition_table(): Disk read failed. [ 174.728726][ T6528] Dev loop9: unable to read RDB block 0 [ 174.729514][ T6528] loop9: unable to read partition table [ 174.729670][ T6528] loop9: partition table beyond EOD, truncated [ 178.809480][ T6572] bond0: option ad_select: unable to set because the bond device is up [ 182.780371][ T6615] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.107515][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.107601][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.571124][ T6763] tipc: Started in network mode [ 195.571142][ T6763] tipc: Node identity :, cluster identity 4711 [ 201.862541][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 201.915853][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 202.621539][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 202.621576][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 202.621630][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 207.486729][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 212.991323][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 225.379063][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 232.306738][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 235.297335][ T7070] Bluetooth: MGMT ver 1.23 [ 235.298850][ T7070] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 236.898964][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 241.778222][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 243.238229][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 243.246355][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.981687][ T7154] bridge_slave_1 (unregistering): left allmulticast mode [ 243.981714][ T7154] bridge_slave_1 (unregistering): left promiscuous mode [ 243.981807][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.781901][ T6462] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 252.973923][ T6462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.973955][ T6462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.973993][ T6462] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 252.974015][ T6462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.979354][ T6462] usb 2-1: config 0 descriptor?? [ 254.067261][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 254.113612][ T6462] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 254.113651][ T6462] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 254.113678][ T6462] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 254.113710][ T6462] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 254.113736][ T6462] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 254.113762][ T6462] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 254.113788][ T6462] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 254.193777][ T6462] logitech 0003:046D:CA04.0001: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0 [ 254.193822][ T6462] logitech 0003:046D:CA04.0001: no inputs found [ 254.215212][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.215274][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.451800][ T1243] usb 2-1: USB disconnect, device number 3 [ 257.815893][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 261.120029][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 261.471771][ T7321] netlink: 88 bytes leftover after parsing attributes in process `syz.3.421'. [ 266.697130][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 266.743480][ T7392] pim6reg: entered allmulticast mode [ 266.797573][ T7392] pim6reg: left allmulticast mode [ 266.847001][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 266.849363][ T5858] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 266.849386][ T5858] usb 3-1: config 150 has no interface number 0 [ 266.849415][ T5858] usb 3-1: config 150 interface 204 has no altsetting 0 [ 266.853951][ T5858] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 266.853976][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.853992][ T5858] usb 3-1: Product: syz [ 266.854005][ T5858] usb 3-1: Manufacturer: syz [ 266.854018][ T5858] usb 3-1: SerialNumber: syz [ 267.181561][ T5858] usb 3-1: USB disconnect, device number 4 [ 273.080622][ T7481] syz.4.481 (7481) used greatest stack depth: 18024 bytes left [ 275.960323][ T1243] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 276.124410][ T1243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.124436][ T1243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.127574][ T1243] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 276.127599][ T1243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.127617][ T1243] usb 2-1: SerialNumber: syz [ 276.507846][ T1243] usb 2-1: 0:2 : does not exist [ 276.653736][ T1243] usb 2-1: USB disconnect, device number 4 [ 277.029315][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.263775][ T7539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.337483][ T1243] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 280.580514][ T1243] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 280.580542][ T1243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.580561][ T1243] usb 5-1: Product: syz [ 280.580575][ T1243] usb 5-1: Manufacturer: syz [ 280.580588][ T1243] usb 5-1: SerialNumber: syz [ 280.638733][ T1243] usb 5-1: config 0 descriptor?? [ 281.291866][ T7582] netlink: 'syz.3.520': attribute type 21 has an invalid length. [ 281.291988][ T7582] netlink: 'syz.3.520': attribute type 6 has an invalid length. [ 281.292003][ T7582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.520'. [ 281.528021][ T1243] mos7840 5-1:0.0: required endpoints missing [ 281.625954][ T1243] usb 5-1: USB disconnect, device number 2 [ 282.506091][ T1243] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 282.655907][ T1243] usb 3-1: Using ep0 maxpacket: 32 [ 282.659859][ T1243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.659911][ T1243] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 282.659933][ T1243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.665207][ T1243] usb 3-1: config 0 descriptor?? [ 282.744048][ T1243] dvb-usb: found a 'TeVii S662' in warm state. [ 282.744098][ T1243] dw2102: su3000_power_ctrl: 1, initialized 0 [ 282.780591][ T1243] dvb-usb: bulk message failed: -22 (2/0) [ 283.573840][ T1243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.575116][ T1243] dvbdev: DVB: registering new adapter (TeVii S662) [ 283.595256][ T1243] usb 3-1: media controller created [ 283.596122][ T1243] dvb-usb: bulk message failed: -22 (6/0) [ 283.596138][ T1243] dw2102: i2c transfer failed. [ 283.596164][ T1243] dvb-usb: bulk message failed: -22 (6/0) [ 283.596177][ T1243] dw2102: i2c transfer failed. [ 283.596192][ T1243] dvb-usb: bulk message failed: -22 (6/0) [ 283.596204][ T1243] dw2102: i2c transfer failed. [ 283.596219][ T1243] dvb-usb: bulk message failed: -22 (6/0) [ 283.596231][ T1243] dw2102: i2c transfer failed. [ 283.596246][ T1243] dvb-usb: bulk message failed: -22 (6/0) [ 283.596258][ T1243] dw2102: i2c transfer failed. [ 283.596273][ T1243] dvb-usb: bulk message failed: -22 (6/0) [ 283.596283][ T1243] dw2102: i2c transfer failed. [ 283.596292][ T1243] dvb-usb: MAC address: 02:02:02:02:02:02 [ 283.700297][ T1243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.730786][ T1243] dvb-usb: bulk message failed: -22 (3/0) [ 283.730806][ T1243] dw2102: command 0x0e transfer failed. [ 283.730815][ T1243] dvb-usb: bulk message failed: -22 (3/0) [ 283.730827][ T1243] dw2102: command 0x0e transfer failed. [ 285.947778][ T1243] dvb-usb: bulk message failed: -22 (3/0) [ 285.947801][ T1243] dw2102: command 0x0e transfer failed. [ 285.947817][ T1243] dvb-usb: bulk message failed: -22 (3/0) [ 285.947829][ T1243] dw2102: command 0x0e transfer failed. [ 285.947838][ T1243] dvb-usb: bulk message failed: -22 (1/0) [ 285.947850][ T1243] dw2102: command 0x51 transfer failed. [ 285.947859][ T1243] dvb-usb: bulk message failed: -22 (5/0) [ 285.947871][ T1243] dw2102: i2c probe for address 0x68 failed. [ 285.947881][ T1243] dvb-usb: bulk message failed: -22 (5/0) [ 285.947893][ T1243] dw2102: i2c probe for address 0x69 failed. [ 285.947903][ T1243] dvb-usb: bulk message failed: -22 (5/0) [ 285.947915][ T1243] dw2102: i2c probe for address 0x6a failed. [ 285.947925][ T1243] dw2102: probing for demodulator failed. Is the external power switched on? [ 285.947934][ T1243] dvb-usb: no frontend was attached by 'TeVii S662' [ 286.254695][ T1243] rc_core: IR keymap rc-tt-1500 not found [ 286.254716][ T1243] Registered IR keymap rc-empty [ 286.258055][ T1243] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 286.261437][ T1243] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 286.320997][ T1243] dvb-usb: schedule remote query interval to 250 msecs. [ 286.321020][ T1243] dw2102: su3000_power_ctrl: 0, initialized 1 [ 286.321033][ T1243] dvb-usb: TeVii S662 successfully initialized and connected. [ 286.345535][ T1243] usb 3-1: USB disconnect, device number 5 [ 286.665896][ T61] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 286.666141][ T61] Bluetooth: hci4: Injecting HCI hardware error event [ 286.667777][ T5814] Bluetooth: hci4: hardware error 0x00 [ 287.702434][ T1243] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 288.012722][ T1243] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 288.322557][ T1243] usb 3-1: Using ep0 maxpacket: 8 [ 289.645583][ T37] audit: type=1326 audit(1769392464.296:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7666 comm="syz.3.550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89cd4f749 code=0x0 [ 290.145130][ T5814] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 290.164027][ T1243] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 290.164054][ T1243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.164073][ T1243] usb 3-1: Product: syz [ 290.164087][ T1243] usb 3-1: Manufacturer: syz [ 290.164100][ T1243] usb 3-1: SerialNumber: syz [ 290.283551][ T1243] usb 3-1: config 0 descriptor?? [ 290.380330][ T1243] gspca_main: se401-2.14.0 probing 047d:5003 [ 292.252677][ T1243] gspca_se401: read req failed req 0x06 error -19 [ 292.276539][ T1243] usb 3-1: USB disconnect, device number 6 [ 292.298347][ T6072] udevd[6072]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory [ 299.739007][ T7784] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 302.956564][ T37] audit: type=1326 audit(1769392477.613:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 302.956881][ T37] audit: type=1326 audit(1769392477.613:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 302.957155][ T37] audit: type=1326 audit(1769392477.613:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 302.960426][ T37] audit: type=1326 audit(1769392477.613:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 303.102255][ T37] audit: type=1326 audit(1769392477.753:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 303.102306][ T37] audit: type=1326 audit(1769392477.753:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 303.342608][ T37] audit: type=1326 audit(1769392477.993:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 303.342946][ T37] audit: type=1326 audit(1769392477.993:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 303.343192][ T37] audit: type=1326 audit(1769392477.993:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7820 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba63af749 code=0x7ffc0000 [ 304.374038][ T5938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 305.365357][ T5938] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 305.365384][ T5938] usb 3-1: config 1 has no interface number 0 [ 305.365428][ T5938] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 305.365453][ T5938] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 305.365477][ T5938] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 305.365499][ T5938] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.369886][ T5938] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 305.369912][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.369931][ T5938] usb 3-1: Product: syz [ 305.369945][ T5938] usb 3-1: Manufacturer: syz [ 305.369958][ T5938] usb 3-1: SerialNumber: syz [ 305.506744][ T7848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.506964][ T7848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 306.712447][ T5938] usb 3-1: Error in usbnet_get_endpoints (-71) [ 306.807145][ T7878] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 306.929786][ T5938] usb 3-1: USB disconnect, device number 7 [ 307.425044][ T7891] input: syz1 as /devices/virtual/input/input6 [ 308.186590][ T7909] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 315.660384][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.661784][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.512637][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.518184][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.540073][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.545544][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.560612][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.050525][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.470489][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.554660][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 321.571626][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 321.572871][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.576222][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 321.577088][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.614882][ T5814] Bluetooth: hci0: command tx timeout [ 322.828804][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.188333][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.640468][ T5814] Bluetooth: hci3: command tx timeout [ 324.151566][ T6009] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 324.194086][ T43] bridge_slave_0: left allmulticast mode [ 324.194263][ T43] bridge_slave_0: left promiscuous mode [ 324.197477][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.715967][ T5814] Bluetooth: hci0: command tx timeout [ 325.168384][ T6009] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.168410][ T6009] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.179775][ T6009] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 325.179803][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.179821][ T6009] usb 5-1: SerialNumber: syz [ 325.398236][ T6009] usb 5-1: 0:2 : does not exist [ 325.427116][ T6009] usb 5-1: USB disconnect, device number 3 [ 325.466107][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.691902][ T5814] Bluetooth: hci3: command tx timeout [ 326.729339][ T5814] Bluetooth: hci0: command tx timeout [ 327.343351][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.431917][ T5814] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 327.432292][ T5814] Bluetooth: hci1: Injecting HCI hardware error event [ 327.434805][ T5814] Bluetooth: hci1: hardware error 0x00 [ 327.511887][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.546571][ T8142] 9p: Bad value for 'wfdno' [ 327.583424][ T43] bond0 (unregistering): Released all slaves [ 327.682058][ T8018] chnl_net:caif_netlink_parms(): no params data found [ 327.682281][ T37] audit: type=1326 audit(1769916790.673:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.682769][ T37] audit: type=1326 audit(1769916790.683:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.683049][ T37] audit: type=1326 audit(1769916790.683:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.683364][ T37] audit: type=1326 audit(1769916790.683:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.683910][ T37] audit: type=1326 audit(1769916790.683:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.684277][ T37] audit: type=1326 audit(1769916790.683:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.686393][ T37] audit: type=1326 audit(1769916790.683:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.686796][ T37] audit: type=1326 audit(1769916790.683:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.687089][ T37] audit: type=1326 audit(1769916790.683:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.687429][ T37] audit: type=1326 audit(1769916790.683:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d4de8f749 code=0x7ffc0000 [ 327.776330][ T61] Bluetooth: hci3: command tx timeout [ 328.351902][ T5858] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 328.506226][ T5858] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 328.506245][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.506255][ T5858] usb 5-1: Product: syz [ 328.506262][ T5858] usb 5-1: Manufacturer: syz [ 328.506269][ T5858] usb 5-1: SerialNumber: syz [ 328.509949][ T5858] usb 5-1: config 0 descriptor?? [ 328.900698][ T61] Bluetooth: hci0: command tx timeout [ 328.916068][ T5858] mos7840 5-1:0.0: required endpoints missing [ 328.927010][ T5858] usb 5-1: USB disconnect, device number 4 [ 329.177462][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 329.349417][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.349543][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.349758][ T8018] bridge_slave_0: entered allmulticast mode [ 329.364781][ T8018] bridge_slave_0: entered promiscuous mode [ 329.388602][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.388755][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.388943][ T8018] bridge_slave_1: entered allmulticast mode [ 329.414835][ T8018] bridge_slave_1: entered promiscuous mode [ 329.569872][ T5814] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 329.807348][ T5814] Bluetooth: hci3: command tx timeout [ 329.936106][ T6120] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 329.973772][ T8018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.184744][ T6120] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.184769][ T6120] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.187626][ T43] hsr_slave_0: left promiscuous mode [ 330.190466][ T6120] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.190490][ T6120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.190507][ T6120] usb 5-1: SerialNumber: syz [ 331.036680][ T43] hsr_slave_1: left promiscuous mode [ 331.038851][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.038954][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.070146][ T6120] usb 5-1: 0:2 : does not exist [ 331.088877][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.088900][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.140504][ T6120] usb 5-1: USB disconnect, device number 5 [ 331.200593][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.295087][ T43] veth1_macvtap: left promiscuous mode [ 331.295367][ T43] veth0_macvtap: left promiscuous mode [ 331.295537][ T43] veth1_vlan: left promiscuous mode [ 331.295737][ T43] veth0_vlan: left promiscuous mode [ 334.216234][ T5964] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 334.377776][ T5964] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 334.377797][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.377807][ T5964] usb 5-1: Product: syz [ 334.377814][ T5964] usb 5-1: Manufacturer: syz [ 334.377821][ T5964] usb 5-1: SerialNumber: syz [ 334.386962][ T5964] usb 5-1: config 0 descriptor?? [ 334.780016][ T43] team0 (unregistering): Port device team_slave_1 removed [ 334.824103][ T5964] mos7840 5-1:0.0: required endpoints missing [ 334.867691][ T5964] usb 5-1: USB disconnect, device number 6 [ 335.023136][ T43] team0 (unregistering): Port device team_slave_0 removed [ 337.243304][ T989] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 337.316741][ T8018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.405333][ T989] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 337.405360][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.405377][ T989] usb 5-1: Product: syz [ 337.405390][ T989] usb 5-1: Manufacturer: syz [ 337.405401][ T989] usb 5-1: SerialNumber: syz [ 337.466527][ T989] usb 5-1: config 0 descriptor?? [ 337.798778][ T8018] team0: Port device team_slave_0 added [ 337.849801][ T8018] team0: Port device team_slave_1 added [ 337.852781][ T8038] chnl_net:caif_netlink_parms(): no params data found [ 337.874447][ T989] mos7840 5-1:0.0: required endpoints missing [ 337.914576][ T989] usb 5-1: USB disconnect, device number 7 [ 338.123928][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.123945][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.123970][ T8018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.347350][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.347367][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.348353][ T8018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.422431][ T8282] bpf: Bad value for 'gid' [ 339.727305][ T8297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.790'. [ 339.734009][ T37] kauditd_printk_skb: 73 callbacks suppressed [ 339.734025][ T37] audit: type=1326 audit(1770441090.951:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.734385][ T37] audit: type=1326 audit(1770441090.951:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.734559][ T37] audit: type=1326 audit(1770441090.951:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.734800][ T37] audit: type=1326 audit(1770441090.951:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.735115][ T37] audit: type=1326 audit(1770441090.951:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.735339][ T37] audit: type=1326 audit(1770441090.951:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.735675][ T37] audit: type=1326 audit(1770441090.951:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.817559][ T37] audit: type=1326 audit(1770441091.043:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.817609][ T37] audit: type=1326 audit(1770441091.043:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 339.817648][ T37] audit: type=1326 audit(1770441091.043:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89cd4f749 code=0x7ffc0000 [ 340.487625][ T8323] bpf: Bad value for 'gid' [ 340.756240][ T8018] hsr_slave_0: entered promiscuous mode [ 340.758886][ T8018] hsr_slave_1: entered promiscuous mode [ 340.764784][ T8018] debugfs: 'hsr0' already exists in 'hsr' [ 340.764808][ T8018] Cannot create hsr debugfs directory [ 340.766201][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.769796][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.769979][ T8038] bridge_slave_0: entered allmulticast mode [ 340.781250][ T8038] bridge_slave_0: entered promiscuous mode [ 340.798676][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.799704][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.799875][ T8038] bridge_slave_1: entered allmulticast mode [ 340.807460][ T8038] bridge_slave_1: entered promiscuous mode [ 341.247716][ T8038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.570678][ T8038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.242442][ T8038] team0: Port device team_slave_0 added [ 344.467706][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.587096][ T8038] team0: Port device team_slave_1 added [ 347.077306][ T805] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 348.024494][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.048622][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.048653][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.048689][ T805] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 348.048710][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.227262][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.227276][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.227294][ T8038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.249798][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.249814][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.249837][ T8038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.540746][ T805] usb 5-1: config 0 descriptor?? [ 350.241963][ T805] usbhid 5-1:0.0: can't add hid device: -71 [ 350.242083][ T805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 350.265834][ T805] usb 5-1: USB disconnect, device number 8 [ 350.466266][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.542914][ T8038] hsr_slave_0: entered promiscuous mode [ 350.544781][ T8038] hsr_slave_1: entered promiscuous mode [ 350.545855][ T8038] debugfs: 'hsr0' already exists in 'hsr' [ 350.545878][ T8038] Cannot create hsr debugfs directory [ 350.802976][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.546408][ T8451] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.572027][ T989] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 352.602390][ T8018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.701094][ T989] usb 5-1: device descriptor read/64, error -71 [ 352.755816][ T8018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.933379][ T8018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.947658][ T989] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 353.086490][ T989] usb 5-1: device descriptor read/64, error -71 [ 353.130672][ T8018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.195761][ T989] usb usb5-port1: attempt power cycle [ 353.363905][ T43] bridge_slave_0: left allmulticast mode [ 353.363932][ T43] bridge_slave_0: left promiscuous mode [ 353.364187][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.552189][ T989] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 353.574412][ T989] usb 5-1: device descriptor read/8, error -71 [ 353.809857][ T989] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 353.830879][ T989] usb 5-1: device descriptor read/8, error -71 [ 353.957990][ T989] usb usb5-port1: unable to enumerate USB device [ 355.484177][ T8534] ------------[ cut here ]------------ [ 355.484206][ T8534] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.4.862/8534 [ 355.484252][ T8534] Modules linked in: [ 355.484285][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.4.862 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 355.484309][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.484324][ T8534] RIP: 0010:path_noexec+0x1af/0x200 [ 355.484348][ T8534] Code: 02 31 ff 48 89 de e8 50 81 8f ff d1 eb eb 07 e8 e7 7b 8f ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 48 1f a5 08 cc e8 d2 7b 8f ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 355.484365][ T8534] RSP: 0018:ffffc900100f7bf8 EFLAGS: 00010283 [ 355.484382][ T8534] RAX: ffffffff8230305e RBX: ffff88803b10bcc0 RCX: 0000000000080000 [ 355.484398][ T8534] RDX: ffffc9000d739000 RSI: 000000000000005d RDI: 000000000000005e [ 355.484411][ T8534] RBP: 0000000000080000 R08: 0000000000000000 R09: 0000000000000000 [ 355.484424][ T8534] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000011 [ 355.484436][ T8534] R13: 1ffff9200201ef90 R14: 0000000000000000 R15: dffffc0000000000 [ 355.484450][ T8534] FS: 00007fc6a19466c0(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 355.484467][ T8534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.484480][ T8534] CR2: 0000001b2fc20ff8 CR3: 00000000381ca000 CR4: 00000000003526f0 [ 355.484497][ T8534] Call Trace: [ 355.484509][ T8534] [ 355.484520][ T8534] do_mmap+0xa20/0x10c0 [ 355.484555][ T8534] ? lockdep_hardirqs_on+0x7b/0x110 [ 355.484577][ T8534] ? __pfx_do_mmap+0x10/0x10 [ 355.484599][ T8534] ? rwbase_write_lock+0x56f/0x750 [ 355.484633][ T8534] vm_mmap_pgoff+0x2a9/0x4d0 [ 355.484666][ T8534] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 355.484696][ T8534] ? __fget_files+0x2a/0x420 [ 355.484716][ T8534] ? __fget_files+0x3a6/0x420 [ 355.484735][ T8534] ? __fget_files+0x2a/0x420 [ 355.484759][ T8534] ksys_mmap_pgoff+0x4e9/0x720 [ 355.484786][ T8534] ? __x64_sys_mmap+0x7f/0x140 [ 355.484810][ T8534] do_syscall_64+0xec/0xf80 [ 355.484829][ T8534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.484847][ T8534] ? trace_irq_disable+0x37/0x100 [ 355.484867][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 355.484890][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.484909][ T8534] RIP: 0033:0x7fc6a36df749 [ 355.484930][ T8534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.484945][ T8534] RSP: 002b:00007fc6a1946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 355.484964][ T8534] RAX: ffffffffffffffda RBX: 00007fc6a3935fa0 RCX: 00007fc6a36df749 [ 355.484979][ T8534] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 355.484993][ T8534] RBP: 00007fc6a3763f91 R08: 0000000000000005 R09: 0000000000000000 [ 355.485005][ T8534] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 355.485017][ T8534] R13: 00007fc6a3936038 R14: 00007fc6a3935fa0 R15: 00007ffe120ab7d8 [ 355.485050][ T8534] [ 355.485065][ T8534] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.485079][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.4.862 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 355.485100][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.485112][ T8534] Call Trace: [ 355.485120][ T8534] [ 355.485127][ T8534] vpanic+0x1e0/0x670 [ 355.485157][ T8534] panic+0xb9/0xc0 [ 355.485182][ T8534] ? __pfx_panic+0x10/0x10 [ 355.485230][ T8534] __warn+0x317/0x4b0 [ 355.485254][ T8534] ? path_noexec+0x1af/0x200 [ 355.485280][ T8534] ? path_noexec+0x1af/0x200 [ 355.485302][ T8534] __report_bug+0x288/0x500 [ 355.485331][ T8534] ? path_noexec+0x1af/0x200 [ 355.485359][ T8534] ? __pfx___report_bug+0x10/0x10 [ 355.485386][ T8534] ? __pfx_process_measurement+0x10/0x10 [ 355.485414][ T8534] ? __futex_wait+0x344/0x3d0 [ 355.485441][ T8534] ? arch_get_unmapped_area_topdown+0x251/0xbd0 [ 355.485467][ T8534] ? path_noexec+0x1af/0x200 [ 355.485489][ T8534] report_bug+0x16a/0x220 [ 355.485518][ T8534] ? path_noexec+0x1af/0x200 [ 355.485538][ T8534] ? path_noexec+0x1b1/0x200 [ 355.485560][ T8534] handle_bug+0x98/0x200 [ 355.485582][ T8534] exc_invalid_op+0x1a/0x50 [ 355.485603][ T8534] asm_exc_invalid_op+0x1a/0x20 [ 355.485621][ T8534] RIP: 0010:path_noexec+0x1af/0x200 [ 355.485644][ T8534] Code: 02 31 ff 48 89 de e8 50 81 8f ff d1 eb eb 07 e8 e7 7b 8f ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 48 1f a5 08 cc e8 d2 7b 8f ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 355.485659][ T8534] RSP: 0018:ffffc900100f7bf8 EFLAGS: 00010283 [ 355.485676][ T8534] RAX: ffffffff8230305e RBX: ffff88803b10bcc0 RCX: 0000000000080000 [ 355.485690][ T8534] RDX: ffffc9000d739000 RSI: 000000000000005d RDI: 000000000000005e [ 355.485703][ T8534] RBP: 0000000000080000 R08: 0000000000000000 R09: 0000000000000000 [ 355.485715][ T8534] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000011 [ 355.485727][ T8534] R13: 1ffff9200201ef90 R14: 0000000000000000 R15: dffffc0000000000 [ 355.485749][ T8534] ? path_noexec+0x1ae/0x200 [ 355.485777][ T8534] ? path_noexec+0x1ae/0x200 [ 355.485805][ T8534] do_mmap+0xa20/0x10c0 [ 355.485833][ T8534] ? lockdep_hardirqs_on+0x7b/0x110 [ 355.485850][ T8534] ? __pfx_do_mmap+0x10/0x10 [ 355.485872][ T8534] ? rwbase_write_lock+0x56f/0x750 [ 355.485907][ T8534] vm_mmap_pgoff+0x2a9/0x4d0 [ 355.485938][ T8534] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 355.485969][ T8534] ? __fget_files+0x2a/0x420 [ 355.485989][ T8534] ? __fget_files+0x3a6/0x420 [ 355.486008][ T8534] ? __fget_files+0x2a/0x420 [ 355.486032][ T8534] ksys_mmap_pgoff+0x4e9/0x720 [ 355.486059][ T8534] ? __x64_sys_mmap+0x7f/0x140 [ 355.486084][ T8534] do_syscall_64+0xec/0xf80 [ 355.486103][ T8534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.486121][ T8534] ? trace_irq_disable+0x37/0x100 [ 355.486141][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 355.486165][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.486183][ T8534] RIP: 0033:0x7fc6a36df749 [ 355.486205][ T8534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.486221][ T8534] RSP: 002b:00007fc6a1946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 355.486240][ T8534] RAX: ffffffffffffffda RBX: 00007fc6a3935fa0 RCX: 00007fc6a36df749 [ 355.486255][ T8534] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 355.486269][ T8534] RBP: 00007fc6a3763f91 R08: 0000000000000005 R09: 0000000000000000 [ 355.486282][ T8534] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 355.486294][ T8534] R13: 00007fc6a3936038 R14: 00007fc6a3935fa0 R15: 00007ffe120ab7d8 [ 355.486326][ T8534] [ 355.486666][ T8534] Kernel Offset: disabled