last executing test programs: 8m28.172007163s ago: executing program 1 (id=2): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14053d5ecd974dd5bc7f2a7caad26f028485485d5c100abe6e6fc9cc95e00ad260cb7372338c406f50"], 0x20}}, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) 8m26.11169077s ago: executing program 2 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0x97, 0x4}, 'syz1\x00', 0x2b}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/time\x00') read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m12.818355794s ago: executing program 32 (id=2): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14053d5ecd974dd5bc7f2a7caad26f028485485d5c100abe6e6fc9cc95e00ad260cb7372338c406f50"], 0x20}}, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) 8m9.450352915s ago: executing program 33 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0x97, 0x4}, 'syz1\x00', 0x2b}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/time\x00') read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.814397092s ago: executing program 4 (id=529): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12.712747016s ago: executing program 0 (id=531): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5, 0x9d, &(0x7f0000000140)=""/157, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x600088d9}, 0x20008090) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r5, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xe8, 0xffff, 0x3, 0x3}, 0x10) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 9.769710916s ago: executing program 0 (id=532): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 9.693349105s ago: executing program 3 (id=533): socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) syz_create_resource$binfmt(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd2(0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) listen(r3, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 9.54653452s ago: executing program 0 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x54, 0x30, 0xb, 0x5, 0x25dfdbfc, {}, [{0x40, 0x1, [@m_ct={0x3c, 0x1, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xd56f}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80d0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000400)={0xa, @sliced={0x7, [0x4, 0x3, 0xff, 0x7, 0x2, 0xbf27, 0x81, 0x4, 0x9, 0x800, 0x4, 0xf, 0x2bd8, 0x51, 0x48, 0x6, 0x6, 0x8000, 0x8, 0x26, 0x40, 0x7, 0x3, 0x5f, 0x802, 0x800, 0x2, 0x66, 0x100, 0x970a, 0x200, 0x10, 0x5a, 0x4, 0x100, 0x180, 0x1, 0x8, 0xade4, 0x9, 0x9, 0x1, 0x1, 0x253, 0x8, 0xfffb, 0xff, 0xa], 0x10001}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) 9.253276736s ago: executing program 4 (id=535): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x5cb, &(0x7f0000000380)={0x0, 0xc70d, 0x800, 0x3, 0x57}, &(0x7f0000000040)=0x0, 0x0) r5 = socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000740)={0x0, 0xfad6, 0x100, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x5, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000280)=0x3ff, 0x0, 0x4) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r0, 0x1) 9.124595477s ago: executing program 3 (id=536): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) 7.27488254s ago: executing program 3 (id=537): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14053d5ecd974dd5bc7f2a7caad26f028485485d5c100abe6e6fc9cc95e00ad260cb7372338c406f50"], 0x20}}, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 7.234044464s ago: executing program 0 (id=538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x54, 0x30, 0xb, 0x5, 0x25dfdbfc, {}, [{0x40, 0x1, [@m_ct={0x3c, 0x1, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xd56f}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80d0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000400)={0xa, @sliced={0x7, [0x4, 0x3, 0xff, 0x7, 0x2, 0xbf27, 0x81, 0x4, 0x9, 0x800, 0x4, 0xf, 0x2bd8, 0x51, 0x48, 0x6, 0x6, 0x8000, 0x8, 0x26, 0x40, 0x7, 0x3, 0x5f, 0x802, 0x800, 0x2, 0x66, 0x100, 0x970a, 0x200, 0x10, 0x5a, 0x4, 0x100, 0x180, 0x1, 0x8, 0xade4, 0x9, 0x9, 0x1, 0x1, 0x253, 0x8, 0xfffb, 0xff, 0xa], 0x10001}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) 7.232887047s ago: executing program 4 (id=539): preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="58e21a62", 0x4, 0x89a643c95679b487, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x19}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB]) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) 5.566564709s ago: executing program 3 (id=540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) unshare(0x8040480) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) r4 = open(&(0x7f0000000340)='./file0\x00', 0x180501, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x40a0}, 0x20004000) unshare(0x28000600) r7 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.418547492s ago: executing program 0 (id=541): creat(&(0x7f0000000080)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 5.386805599s ago: executing program 4 (id=542): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 4.351365212s ago: executing program 4 (id=543): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471", 0x36}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6bba919736d34290000080008"], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) syz_genetlink_get_family_id$smc(0x0, r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 4.151630954s ago: executing program 3 (id=544): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0x97, 0x4}, 'syz1\x00', 0x2b}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000280)='ns/time\x00') read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.871055ms ago: executing program 0 (id=545): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019580)=ANY=[], &(0x7f0000000280)={0x0, 0x3, [0xbb6, 0x3f, 0x4b3, 0xec]}) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0x401, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 16.160113ms ago: executing program 3 (id=546): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) memfd_create(0x0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000001, 0x20000000000, 0xacc, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa19, 0x9, 0xd, 0x0, 0x3, 0x2, 0x2], 0x8000000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f00000c6000/0xf000)=nil, 0xf000, 0x1000005, 0x10, r0, 0x475fd000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x45, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) pipe(&(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10002abd7000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0a001a000800000000000a001a00ffffffffffff00"/36], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_emit_ethernet(0xb6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000803afffe80000000000000000000000000001fff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aaff0200000000000000e7000000000001010b909f50c218fa30165debb32c1997043f1c9ffeca5ab1225605024d58164e9cea3822ef2d41c58f08089a7f8687c5062f504a94e0dad5a7557dee3e4542e3d1342a4a735d0c9d276a7d7767714d09be6e294917c38356"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 0s ago: executing program 4 (id=547): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5, 0x9d, &(0x7f0000000140)=""/157, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x600088d9}, 0x20008090) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r5, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xe8, 0xffff, 0x3, 0x3}, 0x10) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) kernel console output (not intermixed with test programs): ) entered disabled state [ 137.713556][ T6127] ntfs3(loop3): try to read out of volume at offset 0x0 [ 137.714413][ T56] bridge_slave_0: left allmulticast mode [ 137.714441][ T56] bridge_slave_0: left promiscuous mode [ 137.715998][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.320555][ T6137] comedi comedi3: comedi_config --init_data is deprecated [ 138.975902][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.035650][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.077254][ T56] bond0 (unregistering): Released all slaves [ 139.300693][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 139.396786][ T6014] chnl_net:caif_netlink_parms(): no params data found [ 141.331560][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.331754][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.331951][ T5996] bridge_slave_0: entered allmulticast mode [ 141.360594][ T5996] bridge_slave_0: entered promiscuous mode [ 141.720112][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 143.197369][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.197467][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.197684][ T5996] bridge_slave_1: entered allmulticast mode [ 143.199686][ T5996] bridge_slave_1: entered promiscuous mode [ 143.200757][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.200877][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.201064][ T6014] bridge_slave_0: entered allmulticast mode [ 143.204821][ T6014] bridge_slave_0: entered promiscuous mode [ 143.440732][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.440853][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.441081][ T6014] bridge_slave_1: entered allmulticast mode [ 143.509197][ T6014] bridge_slave_1: entered promiscuous mode [ 143.920102][ T6178] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.190962][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.251863][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.176421][ T6185] overlayfs: failed to resolve './file0': -2 [ 145.463436][ T6187] netlink: 'syz.4.50': attribute type 4 has an invalid length. [ 147.456639][ T5784] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 147.544291][ T6014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.672574][ T6014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.777554][ T6182] netlink: 'syz.0.51': attribute type 9 has an invalid length. [ 147.777571][ T6182] netlink: 'syz.0.51': attribute type 11 has an invalid length. [ 147.777581][ T6182] netlink: 'syz.0.51': attribute type 12 has an invalid length. [ 147.777593][ T6182] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.51'. [ 147.777676][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 147.834720][ T5784] usb 4-1: device not accepting address 3, error -71 [ 147.875380][ T56] hsr_slave_0: left promiscuous mode [ 147.903164][ T56] hsr_slave_1: left promiscuous mode [ 148.058471][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.059236][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.532922][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.532973][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.649380][ T56] veth1_macvtap: left promiscuous mode [ 148.649653][ T56] veth0_macvtap: left promiscuous mode [ 148.650529][ T56] veth1_vlan: left promiscuous mode [ 148.650853][ T56] veth0_vlan: left promiscuous mode [ 149.485990][ T56] team0 (unregistering): Port device team_slave_1 removed [ 149.547562][ T56] team0 (unregistering): Port device team_slave_0 removed [ 149.899113][ T5996] team0: Port device team_slave_0 added [ 150.457678][ T5996] team0: Port device team_slave_1 added [ 150.460092][ T6014] team0: Port device team_slave_0 added [ 150.557458][ T6198] netlink: 'syz.4.52': attribute type 9 has an invalid length. [ 150.557475][ T6198] netlink: 'syz.4.52': attribute type 11 has an invalid length. [ 150.557485][ T6198] netlink: 'syz.4.52': attribute type 12 has an invalid length. [ 150.557497][ T6198] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.52'. [ 150.557590][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 150.969006][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 151.046691][ T6209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.57'. [ 151.107005][ T6014] team0: Port device team_slave_1 added [ 152.399985][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.400000][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.400020][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.438973][ T6215] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 152.438996][ T6215] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.729126][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.729146][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.729174][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.737746][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.737765][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.737792][ T6014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.773630][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.773650][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.773679][ T6014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.897747][ T5996] hsr_slave_0: entered promiscuous mode [ 153.899180][ T5996] hsr_slave_1: entered promiscuous mode [ 153.900339][ T5996] debugfs: 'hsr0' already exists in 'hsr' [ 153.900365][ T5996] Cannot create hsr debugfs directory [ 154.017654][ T37] audit: type=1326 audit(1773765394.422:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6214 comm="syz.4.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f533a0ac799 code=0x0 [ 154.284542][ T6014] hsr_slave_0: entered promiscuous mode [ 154.301038][ T6014] hsr_slave_1: entered promiscuous mode [ 154.302408][ T6014] debugfs: 'hsr0' already exists in 'hsr' [ 154.302436][ T6014] Cannot create hsr debugfs directory [ 154.745010][ T1232] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 154.900308][ T1232] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 154.900353][ T1232] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 154.900396][ T1232] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 154.903204][ T1232] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.903235][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.903256][ T1232] usb 5-1: SerialNumber: syz [ 155.242735][ T1232] usb 5-1: bad CDC descriptors [ 155.306079][ T1232] usb 5-1: USB disconnect, device number 4 [ 156.139043][ T6246] netlink: 'syz.0.64': attribute type 9 has an invalid length. [ 156.139060][ T6246] netlink: 'syz.0.64': attribute type 11 has an invalid length. [ 156.139070][ T6246] netlink: 'syz.0.64': attribute type 12 has an invalid length. [ 156.139082][ T6246] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.64'. [ 156.139165][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 158.673230][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.359092][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.728306][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.831634][ T5996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.919665][ T5996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.950378][ T5996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.378751][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.516485][ T5807] Bluetooth: hci0: command 0x0405 tx timeout [ 162.249865][ T5996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.951018][ T6301] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 162.951035][ T6301] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.973391][ T37] audit: type=1326 audit(1773765404.642:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6300 comm="syz.3.70" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6129c9c799 code=0x0 [ 163.625129][ T6314] netlink: 'syz.4.71': attribute type 9 has an invalid length. [ 163.625151][ T6314] netlink: 'syz.4.71': attribute type 11 has an invalid length. [ 163.625174][ T6314] netlink: 'syz.4.71': attribute type 12 has an invalid length. [ 163.625188][ T6314] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.71'. [ 163.625312][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 164.245675][ T6014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.261219][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 164.455477][ T6014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.507736][ T6014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.708343][ T6014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.996117][ T56] bridge_slave_1: left allmulticast mode [ 164.996147][ T56] bridge_slave_1: left promiscuous mode [ 164.996405][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.350815][ T56] bridge_slave_0: left allmulticast mode [ 165.350847][ T56] bridge_slave_0: left promiscuous mode [ 165.351111][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.304940][ T6352] netlink: 40 bytes leftover after parsing attributes in process `syz.4.76'. [ 171.525136][ T6105] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.694042][ T6105] usb 4-1: config 0 has no interfaces? [ 171.694084][ T6105] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 171.694108][ T6105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.725893][ T6105] usb 4-1: config 0 descriptor?? [ 171.934487][ T6105] usb 4-1: string descriptor 0 read error: -71 [ 171.985976][ T6105] usb 4-1: USB disconnect, device number 5 [ 172.257701][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.347413][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.398355][ T56] bond0 (unregistering): Released all slaves [ 173.011663][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 173.011748][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.011776][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.011792][ T5807] Workqueue: hci2 hci_rx_work [ 173.011850][ T5807] Call Trace: [ 173.011859][ T5807] [ 173.011870][ T5807] dump_stack_lvl+0xe8/0x150 [ 173.011909][ T5807] sysfs_create_dir_ns+0x271/0x2a0 [ 173.011936][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.011966][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 173.011997][ T5807] ? rt_spin_unlock+0x160/0x200 [ 173.012038][ T5807] kobject_add_internal+0x631/0xd10 [ 173.012073][ T5807] kobject_add+0x163/0x240 [ 173.012103][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 173.012136][ T5807] ? get_device_parent+0x370/0x3a0 [ 173.012167][ T5807] device_add+0x408/0xb80 [ 173.012196][ T5807] hci_conn_add_sysfs+0xd5/0x210 [ 173.012231][ T5807] le_conn_complete_evt+0xf1d/0x1430 [ 173.012268][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 173.012294][ T5807] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.012327][ T5807] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.012364][ T5807] ? skb_pull_data+0xfb/0x200 [ 173.012396][ T5807] hci_le_conn_complete_evt+0x187/0x470 [ 173.012428][ T5807] hci_event_packet+0x7af/0x12c0 [ 173.012466][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 173.012524][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 173.012554][ T5807] ? rt_spin_unlock+0x14f/0x200 [ 173.012593][ T5807] ? hci_send_to_monitor+0xe2/0x590 [ 173.012623][ T5807] hci_rx_work+0x3ee/0x1030 [ 173.012665][ T5807] ? process_scheduled_works+0xa8d/0x18c0 [ 173.012699][ T5807] process_scheduled_works+0xb6e/0x18c0 [ 173.012766][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 173.012806][ T5807] ? assign_work+0x3d5/0x5e0 [ 173.012843][ T5807] worker_thread+0xa53/0xfc0 [ 173.012906][ T5807] kthread+0x388/0x470 [ 173.012931][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 173.012962][ T5807] ? __pfx_kthread+0x10/0x10 [ 173.012987][ T5807] ret_from_fork+0x51e/0xb90 [ 173.013031][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 173.013062][ T5807] ? __switch_to+0xc7d/0x1450 [ 173.013096][ T5807] ? __pfx_kthread+0x10/0x10 [ 173.013121][ T5807] ret_from_fork_asm+0x1a/0x30 [ 173.013166][ T5807] [ 173.013479][ T5807] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.013616][ T5807] Bluetooth: hci2: failed to register connection device [ 173.474826][ T6371] netlink: 'syz.0.83': attribute type 9 has an invalid length. [ 173.474845][ T6371] netlink: 'syz.0.83': attribute type 11 has an invalid length. [ 173.474855][ T6371] netlink: 'syz.0.83': attribute type 12 has an invalid length. [ 173.474938][ T6371] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.83'. [ 173.475060][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 174.463938][ T6386] netlink: 'syz.0.85': attribute type 9 has an invalid length. [ 174.463961][ T6386] netlink: 'syz.0.85': attribute type 11 has an invalid length. [ 174.463973][ T6386] netlink: 'syz.0.85': attribute type 12 has an invalid length. [ 174.463988][ T6386] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.85'. [ 174.464092][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 174.770358][ T6389] comedi comedi3: comedi_config --init_data is deprecated [ 179.919325][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.924609][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.945264][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.974569][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.978447][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.052068][ T5812] Bluetooth: hci4: command tx timeout [ 182.256367][ T56] hsr_slave_0: left promiscuous mode [ 182.337820][ T56] hsr_slave_1: left promiscuous mode [ 182.338653][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.338672][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.436644][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.436675][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.662701][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.684996][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.686864][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.725661][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.742717][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.896551][ T56] veth1_macvtap: left promiscuous mode [ 182.896625][ T56] veth0_macvtap: left promiscuous mode [ 182.896790][ T56] veth1_vlan: left promiscuous mode [ 182.896904][ T56] veth0_vlan: left promiscuous mode [ 184.856993][ T6443] netlink: 'syz.0.95': attribute type 4 has an invalid length. [ 185.372867][ T5812] Bluetooth: hci4: command tx timeout [ 185.372936][ T5812] Bluetooth: hci6: command tx timeout [ 186.346638][ T6449] ntfs3(loop3): try to read out of volume at offset 0x0 [ 187.395693][ T5812] Bluetooth: hci4: command tx timeout [ 187.395789][ T5807] Bluetooth: hci6: command tx timeout [ 187.538425][ T6459] tmpfs: Bad value for 'mpol' [ 187.825748][ T56] team0 (unregistering): Port device team_slave_1 removed [ 187.868052][ T6467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.102'. [ 187.887566][ T56] team0 (unregistering): Port device team_slave_0 removed [ 189.224994][ T1232] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.611396][ T5812] Bluetooth: hci4: command tx timeout [ 189.611452][ T5807] Bluetooth: hci6: command tx timeout [ 189.637887][ T1232] usb 4-1: config 0 has no interfaces? [ 189.637928][ T1232] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 189.637953][ T1232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.831470][ T6477] binder_alloc: binder_alloc_mmap_handler: 6474 200000fed000-200001000000 already mapped failed -16 [ 191.359496][ T1232] usb 4-1: config 0 descriptor?? [ 191.359950][ T1232] usb 4-1: can't set config #0, error -71 [ 191.362545][ T1232] usb 4-1: USB disconnect, device number 6 [ 191.639160][ T5807] Bluetooth: hci6: command tx timeout [ 191.682064][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 191.682090][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.682117][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.682131][ T5807] Workqueue: hci3 hci_rx_work [ 191.682167][ T5807] Call Trace: [ 191.682176][ T5807] [ 191.682186][ T5807] dump_stack_lvl+0xe8/0x150 [ 191.682224][ T5807] sysfs_create_dir_ns+0x271/0x2a0 [ 191.682252][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 191.682285][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.682316][ T5807] ? rt_spin_unlock+0x160/0x200 [ 191.682346][ T5807] kobject_add_internal+0x631/0xd10 [ 191.682381][ T5807] kobject_add+0x163/0x240 [ 191.682410][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 191.682442][ T5807] ? get_device_parent+0x370/0x3a0 [ 191.682473][ T5807] device_add+0x408/0xb80 [ 191.682502][ T5807] hci_conn_add_sysfs+0xd5/0x210 [ 191.682537][ T5807] le_conn_complete_evt+0xf1d/0x1430 [ 191.682573][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 191.682599][ T5807] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.682633][ T5807] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.682670][ T5807] ? skb_pull_data+0xfb/0x200 [ 191.682702][ T5807] hci_le_conn_complete_evt+0x187/0x470 [ 191.682745][ T5807] hci_event_packet+0x7af/0x12c0 [ 191.682785][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 191.682822][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 191.682854][ T5807] ? rt_spin_unlock+0x14f/0x200 [ 191.682893][ T5807] ? hci_send_to_monitor+0xe2/0x590 [ 191.682923][ T5807] hci_rx_work+0x3ee/0x1030 [ 191.682963][ T5807] ? process_scheduled_works+0xa8d/0x18c0 [ 191.682996][ T5807] process_scheduled_works+0xb6e/0x18c0 [ 191.683063][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 191.683103][ T5807] ? assign_work+0x3d5/0x5e0 [ 191.683140][ T5807] worker_thread+0xa53/0xfc0 [ 191.683202][ T5807] kthread+0x388/0x470 [ 191.683227][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 191.683258][ T5807] ? __pfx_kthread+0x10/0x10 [ 191.683285][ T5807] ret_from_fork+0x51e/0xb90 [ 191.683321][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 191.683352][ T5807] ? __switch_to+0xc7d/0x1450 [ 191.683384][ T5807] ? __pfx_kthread+0x10/0x10 [ 191.683410][ T5807] ret_from_fork_asm+0x1a/0x30 [ 191.683451][ T5807] [ 191.683496][ T5807] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.683550][ T5807] Bluetooth: hci3: failed to register connection device [ 194.381393][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.382490][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.558333][ T6499] comedi comedi3: comedi_config --init_data is deprecated [ 196.118846][ T6500] netlink: 'syz.3.110': attribute type 9 has an invalid length. [ 196.118864][ T6500] netlink: 'syz.3.110': attribute type 11 has an invalid length. [ 196.118873][ T6500] netlink: 'syz.3.110': attribute type 12 has an invalid length. [ 196.118884][ T6500] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.110'. [ 200.002904][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 200.186607][ T6543] comedi comedi3: comedi_config --init_data is deprecated [ 201.949678][ T6419] chnl_net:caif_netlink_parms(): no params data found [ 202.674667][ T6569] ntfs3(loop4): try to read out of volume at offset 0x0 [ 204.510629][ T5812] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 204.510695][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.510724][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.510741][ T5812] Workqueue: hci1 hci_rx_work [ 204.510779][ T5812] Call Trace: [ 204.510789][ T5812] [ 204.510798][ T5812] dump_stack_lvl+0xe8/0x150 [ 204.510836][ T5812] sysfs_create_dir_ns+0x271/0x2a0 [ 204.510864][ T5812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 204.510895][ T5812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 204.510925][ T5812] ? rt_spin_unlock+0x160/0x200 [ 204.510956][ T5812] kobject_add_internal+0x631/0xd10 [ 204.510990][ T5812] kobject_add+0x163/0x240 [ 204.511020][ T5812] ? __pfx_kobject_add+0x10/0x10 [ 204.511076][ T5812] ? get_device_parent+0x370/0x3a0 [ 204.511109][ T5812] device_add+0x408/0xb80 [ 204.511139][ T5812] hci_conn_add_sysfs+0xd5/0x210 [ 204.511174][ T5812] le_conn_complete_evt+0xf1d/0x1430 [ 204.511211][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 204.511236][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.511272][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.511309][ T5812] ? skb_pull_data+0xfb/0x200 [ 204.511348][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 204.511381][ T5812] hci_event_packet+0x7af/0x12c0 [ 204.511421][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 204.511458][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 204.511490][ T5812] ? preempt_schedule_common+0x82/0xd0 [ 204.511523][ T5812] ? preempt_schedule_thunk+0x16/0x30 [ 204.511556][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 204.511587][ T5812] hci_rx_work+0x3ee/0x1030 [ 204.511627][ T5812] ? process_scheduled_works+0xa8d/0x18c0 [ 204.511662][ T5812] process_scheduled_works+0xb6e/0x18c0 [ 204.511727][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 204.511768][ T5812] ? assign_work+0x3d5/0x5e0 [ 204.511805][ T5812] worker_thread+0xa53/0xfc0 [ 204.511863][ T5812] kthread+0x388/0x470 [ 204.511887][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 204.511916][ T5812] ? __pfx_kthread+0x10/0x10 [ 204.511942][ T5812] ret_from_fork+0x51e/0xb90 [ 204.511977][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 204.512007][ T5812] ? __switch_to+0xc7d/0x1450 [ 204.512040][ T5812] ? __pfx_kthread+0x10/0x10 [ 204.512066][ T5812] ret_from_fork_asm+0x1a/0x30 [ 204.512107][ T5812] [ 204.512202][ T5812] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 204.512290][ T5812] Bluetooth: hci1: failed to register connection device [ 204.945154][ T6582] netlink: 52 bytes leftover after parsing attributes in process `syz.3.124'. [ 204.946069][ T6582] nbd: must specify at least one socket [ 207.819046][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.819141][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.819331][ T6437] bridge_slave_0: entered allmulticast mode [ 207.821253][ T6437] bridge_slave_0: entered promiscuous mode [ 207.903226][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.903364][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.903566][ T6437] bridge_slave_1: entered allmulticast mode [ 207.936939][ T6437] bridge_slave_1: entered promiscuous mode [ 214.355070][ T5812] Bluetooth: hci6: command 0x0405 tx timeout [ 214.573956][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.673685][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.773203][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.773331][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.773569][ T6419] bridge_slave_0: entered allmulticast mode [ 214.802084][ T6419] bridge_slave_0: entered promiscuous mode [ 214.860389][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.860568][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.860772][ T6419] bridge_slave_1: entered allmulticast mode [ 214.862783][ T6419] bridge_slave_1: entered promiscuous mode [ 214.908459][ T6437] team0: Port device team_slave_0 added [ 214.965401][ T6437] team0: Port device team_slave_1 added [ 215.168636][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.242744][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.277584][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.277605][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.277634][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.403187][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.403207][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.403249][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.790230][ T6419] team0: Port device team_slave_0 added [ 216.825611][ T6419] team0: Port device team_slave_1 added [ 216.985121][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 218.121343][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 218.121517][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 220.890741][ T6644] overlayfs: missing 'lowerdir' [ 222.001917][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.001936][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.001963][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.085368][ T6437] hsr_slave_0: entered promiscuous mode [ 222.086318][ T6437] hsr_slave_1: entered promiscuous mode [ 222.086946][ T6437] debugfs: 'hsr0' already exists in 'hsr' [ 222.086963][ T6437] Cannot create hsr debugfs directory [ 222.087878][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.087889][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.087909][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.279484][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 224.217082][ T6419] hsr_slave_0: entered promiscuous mode [ 224.219783][ T6419] hsr_slave_1: entered promiscuous mode [ 224.222283][ T6419] debugfs: 'hsr0' already exists in 'hsr' [ 224.222303][ T6419] Cannot create hsr debugfs directory [ 230.725379][ T6688] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 232.248761][ T6697] overlayfs: missing 'lowerdir' [ 234.289919][ T6711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.147'. [ 237.986128][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 238.146269][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 238.148549][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.148577][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.148600][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.148623][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.148661][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.148683][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.258077][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.269965][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.278299][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.296461][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.297900][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.377394][ T56] bridge_slave_1: left allmulticast mode [ 238.377418][ T56] bridge_slave_1: left promiscuous mode [ 238.377618][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.488287][ T56] bridge_slave_0: left allmulticast mode [ 238.488538][ T56] bridge_slave_0: left promiscuous mode [ 238.493533][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.581814][ T10] usb 4-1: usb_control_msg returned -32 [ 238.581868][ T10] usbtmc 4-1:16.0: can't read capabilities [ 238.731084][ T56] bridge_slave_1: left allmulticast mode [ 238.731113][ T56] bridge_slave_1: left promiscuous mode [ 238.731317][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.777542][ T10] usb 4-1: USB disconnect, device number 7 [ 238.806890][ T56] bridge_slave_0: left allmulticast mode [ 238.806922][ T56] bridge_slave_0: left promiscuous mode [ 238.807172][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.779754][ T6756] netlink: 68 bytes leftover after parsing attributes in process `syz.0.157'. [ 240.541106][ T5807] Bluetooth: hci0: command tx timeout [ 242.415387][ T6751] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 242.818981][ T5807] Bluetooth: hci0: command tx timeout [ 243.278253][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.305619][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.310446][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.312692][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.313422][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.479886][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.827542][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.897557][ T56] bond0 (unregistering): Released all slaves [ 244.241514][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.318360][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.438184][ T56] bond0 (unregistering): Released all slaves [ 244.838540][ T5807] Bluetooth: hci0: command tx timeout [ 245.136957][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 245.137006][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.137042][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.137056][ T5807] Workqueue: hci1 hci_rx_work [ 245.137094][ T5807] Call Trace: [ 245.137103][ T5807] [ 245.137114][ T5807] dump_stack_lvl+0xe8/0x150 [ 245.137152][ T5807] sysfs_create_dir_ns+0x271/0x2a0 [ 245.137181][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 245.137211][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 245.137243][ T5807] ? rt_spin_unlock+0x160/0x200 [ 245.137274][ T5807] kobject_add_internal+0x631/0xd10 [ 245.137310][ T5807] kobject_add+0x163/0x240 [ 245.137340][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 245.137371][ T5807] ? get_device_parent+0x370/0x3a0 [ 245.137401][ T5807] device_add+0x408/0xb80 [ 245.137430][ T5807] hci_conn_add_sysfs+0xd5/0x210 [ 245.137466][ T5807] le_conn_complete_evt+0xf1d/0x1430 [ 245.137504][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 245.137530][ T5807] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 245.137564][ T5807] ? lockdep_hardirqs_on+0x7a/0x110 [ 245.137600][ T5807] ? skb_pull_data+0xfb/0x200 [ 245.137632][ T5807] hci_le_conn_complete_evt+0x187/0x470 [ 245.137665][ T5807] hci_event_packet+0x7af/0x12c0 [ 245.137704][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 245.137740][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 245.137771][ T5807] ? rt_spin_unlock+0x14f/0x200 [ 245.137809][ T5807] ? hci_send_to_monitor+0xe2/0x590 [ 245.137839][ T5807] hci_rx_work+0x3ee/0x1030 [ 245.137879][ T5807] ? process_scheduled_works+0xa8d/0x18c0 [ 245.137914][ T5807] process_scheduled_works+0xb6e/0x18c0 [ 245.137980][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 245.138020][ T5807] ? assign_work+0x3d5/0x5e0 [ 245.138067][ T5807] worker_thread+0xa53/0xfc0 [ 245.138130][ T5807] kthread+0x388/0x470 [ 245.138156][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 245.138186][ T5807] ? __pfx_kthread+0x10/0x10 [ 245.138212][ T5807] ret_from_fork+0x51e/0xb90 [ 245.138250][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 245.138280][ T5807] ? __switch_to+0xc7d/0x1450 [ 245.138313][ T5807] ? __pfx_kthread+0x10/0x10 [ 245.138339][ T5807] ret_from_fork_asm+0x1a/0x30 [ 245.138381][ T5807] [ 245.138464][ T5807] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 245.138558][ T5807] Bluetooth: hci1: failed to register connection device [ 245.405301][ T5807] Bluetooth: hci5: command tx timeout [ 247.498826][ T5807] Bluetooth: hci0: command tx timeout [ 247.498865][ T5807] Bluetooth: hci5: command tx timeout [ 247.699124][ T6783] netlink: 'syz.4.159': attribute type 9 has an invalid length. [ 247.699142][ T6783] netlink: 'syz.4.159': attribute type 11 has an invalid length. [ 247.699152][ T6783] netlink: 'syz.4.159': attribute type 12 has an invalid length. [ 247.699164][ T6783] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.159'. [ 247.699293][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 250.385034][ T5807] Bluetooth: hci5: command tx timeout [ 251.039998][ T6803] netlink: 68 bytes leftover after parsing attributes in process `syz.3.166'. [ 252.495014][ T5807] Bluetooth: hci5: command tx timeout [ 254.315904][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 255.804439][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804536][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.636265][ T5802] Bluetooth: hci5: command 0x0405 tx timeout [ 259.926664][ T56] hsr_slave_0: left promiscuous mode [ 260.261723][ T56] hsr_slave_1: left promiscuous mode [ 260.263281][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.312718][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.080098][ T56] hsr_slave_0: left promiscuous mode [ 261.292173][ T56] hsr_slave_1: left promiscuous mode [ 261.293021][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.466108][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.062246][ T6877] ntfs3(loop4): try to read out of volume at offset 0x0 [ 267.001261][ T56] team0 (unregistering): Port device team_slave_1 removed [ 270.210033][ T6886] overlayfs: missing 'workdir' [ 270.460188][ T6889] netlink: 'syz.4.185': attribute type 4 has an invalid length. [ 271.820869][ T56] team0 (unregistering): Port device team_slave_0 removed [ 272.957597][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 273.001300][ T6900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.189'. [ 273.235955][ T56] team0 (unregistering): Port device team_slave_1 removed [ 273.448630][ T56] team0 (unregistering): Port device team_slave_0 removed [ 275.518979][ T6924] netlink: 68 bytes leftover after parsing attributes in process `syz.0.194'. [ 276.533434][ T5802] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 276.648575][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 279.926643][ T6919] nbd: socks must be embedded in a SOCK_ITEM attr [ 280.049919][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 281.513423][ T6770] chnl_net:caif_netlink_parms(): no params data found [ 283.953740][ T6909] udevd[6909]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 284.489218][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.489378][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.489603][ T6735] bridge_slave_0: entered allmulticast mode [ 284.629958][ T6735] bridge_slave_0: entered promiscuous mode [ 284.853664][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.853875][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.854646][ T6735] bridge_slave_1: entered allmulticast mode [ 284.876434][ T6735] bridge_slave_1: entered promiscuous mode [ 285.089536][ T6960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.267524][ T5807] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 285.431131][ T6976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.201'. [ 286.449968][ T6960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.719666][ T6960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.958700][ T6960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.989827][ T6909] udevd[6909]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 287.066306][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.190136][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.190376][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.190635][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.190832][ T6770] bridge_slave_0: entered allmulticast mode [ 287.193637][ T6770] bridge_slave_0: entered promiscuous mode [ 287.465297][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.465385][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.465588][ T6770] bridge_slave_1: entered allmulticast mode [ 287.475935][ T6770] bridge_slave_1: entered promiscuous mode [ 287.505613][ T94] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.635068][ T94] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.655018][ T810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 288.871245][ T94] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.920092][ T6735] team0: Port device team_slave_0 added [ 288.920818][ T94] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.815010][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 290.182831][ T810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 290.185481][ T810] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 290.185503][ T810] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 290.185518][ T810] usb 1-1: Product: syz [ 290.185527][ T810] usb 1-1: Manufacturer: syz [ 290.185538][ T810] usb 1-1: SerialNumber: syz [ 290.268072][ T810] usb 1-1: config 0 descriptor?? [ 290.282196][ T6770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.532436][ T810] usb 1-1: can't set config #0, error -71 [ 290.551078][ T6735] team0: Port device team_slave_1 added [ 290.561033][ T810] usb 1-1: USB disconnect, device number 3 [ 291.483546][ T6770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.249422][ T7001] netlink: 'syz.4.207': attribute type 9 has an invalid length. [ 292.249470][ T7001] netlink: 'syz.4.207': attribute type 11 has an invalid length. [ 292.249508][ T7001] netlink: 'syz.4.207': attribute type 12 has an invalid length. [ 292.249610][ T7001] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.207'. [ 292.250831][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 292.850758][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.850772][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.850791][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.853384][ T6770] team0: Port device team_slave_0 added [ 292.914595][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.914609][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.914629][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.003639][ T6770] team0: Port device team_slave_1 added [ 294.735740][ T7012] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 294.735759][ T7012] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 295.737864][ T37] audit: type=1326 audit(1773765537.432:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.3.210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6129c9c799 code=0x0 [ 296.429627][ T6770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.429646][ T6770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.429677][ T6770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.372673][ T56] bridge_slave_1: left allmulticast mode [ 297.372704][ T56] bridge_slave_1: left promiscuous mode [ 297.372987][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.461056][ T56] bridge_slave_0: left allmulticast mode [ 297.461089][ T56] bridge_slave_0: left promiscuous mode [ 297.461360][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.728921][ T5807] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 297.834876][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 298.248262][ T7048] nbd: socks must be embedded in a SOCK_ITEM attr [ 298.682386][ T56] bridge_slave_1: left allmulticast mode [ 298.682418][ T56] bridge_slave_1: left promiscuous mode [ 298.717476][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.523484][ T56] bridge_slave_0: left allmulticast mode [ 299.523551][ T56] bridge_slave_0: left promiscuous mode [ 299.540856][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 300.194139][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.200316][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.320088][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.404569][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.524966][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.542494][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.489041][ T6946] udevd[6946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 303.759075][ T6909] udevd[6909]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 303.935777][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.956605][ T5802] Bluetooth: hci4: command tx timeout [ 304.050745][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.053359][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.054657][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.064803][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.093916][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.115372][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.315564][ T56] bond0 (unregistering): Released all slaves [ 306.455020][ T5807] Bluetooth: hci6: command tx timeout [ 306.534971][ T5807] Bluetooth: hci4: command tx timeout [ 306.716024][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.915866][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.857466][ T56] bond0 (unregistering): Released all slaves [ 307.957678][ T6770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.957707][ T6770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.957738][ T6770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.034418][ T6735] hsr_slave_0: entered promiscuous mode [ 308.046359][ T6735] hsr_slave_1: entered promiscuous mode [ 308.053669][ T6735] debugfs: 'hsr0' already exists in 'hsr' [ 308.053710][ T6735] Cannot create hsr debugfs directory [ 308.546355][ T5807] Bluetooth: hci6: command 0x041b tx timeout [ 308.594927][ T5807] Bluetooth: hci4: command tx timeout [ 310.295034][ T56] hsr_slave_0: left promiscuous mode [ 310.494932][ T56] hsr_slave_1: left promiscuous mode [ 310.495955][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.619807][ T5802] Bluetooth: hci6: command 0x041b tx timeout [ 310.677870][ T5802] Bluetooth: hci4: command tx timeout [ 311.401991][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.881700][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 312.559524][ T7121] JFS: discard option not supported on device [ 312.563440][ T7121] Mount JFS Failure: -22 [ 312.563459][ T7121] jfs_mount failed w/return code = -22 [ 312.680573][ T5802] Bluetooth: hci6: command 0x041b tx timeout [ 312.726432][ T56] hsr_slave_0: left promiscuous mode [ 312.785072][ T56] hsr_slave_1: left promiscuous mode [ 312.786089][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.852661][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.088917][ T5802] Bluetooth: hci6: command 0x041b tx timeout [ 316.642019][ T5802] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 317.255742][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.255816][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.695804][ T56] team0 (unregistering): Port device team_slave_1 removed [ 317.775798][ T56] team0 (unregistering): Port device team_slave_0 removed [ 317.990425][ T7149] overlayfs: missing 'workdir' [ 318.205023][ T810] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 318.375014][ T810] usb 4-1: Using ep0 maxpacket: 32 [ 318.377512][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 318.380095][ T810] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 318.380125][ T810] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 318.380145][ T810] usb 4-1: Product: syz [ 318.380158][ T810] usb 4-1: Manufacturer: syz [ 318.380172][ T810] usb 4-1: SerialNumber: syz [ 319.001478][ T810] usb 4-1: config 0 descriptor?? [ 319.073259][ T7150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.421731][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.422325][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.775670][ T56] team0 (unregistering): Port device team_slave_1 removed [ 322.767155][ T56] team0 (unregistering): Port device team_slave_0 removed [ 324.834973][ T5881] usb 4-1: USB disconnect, device number 8 [ 327.495702][ T7174] comedi comedi3: comedi_config --init_data is deprecated [ 328.170411][ T7186] overlayfs: missing 'workdir' [ 331.814200][ T7053] chnl_net:caif_netlink_parms(): no params data found [ 332.245854][ T7074] chnl_net:caif_netlink_parms(): no params data found [ 332.441802][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.441925][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.442158][ T7053] bridge_slave_0: entered allmulticast mode [ 332.444592][ T7053] bridge_slave_0: entered promiscuous mode [ 332.599926][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.600072][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.600322][ T7053] bridge_slave_1: entered allmulticast mode [ 332.603114][ T7053] bridge_slave_1: entered promiscuous mode [ 333.006824][ T7053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.068811][ T5802] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 334.086247][ T7053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.201855][ T7234] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 337.464718][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.466036][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.466766][ T7074] bridge_slave_0: entered allmulticast mode [ 337.499696][ T7074] bridge_slave_0: entered promiscuous mode [ 337.793335][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.793467][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.793716][ T7074] bridge_slave_1: entered allmulticast mode [ 337.800304][ T7074] bridge_slave_1: entered promiscuous mode [ 337.812722][ T7053] team0: Port device team_slave_0 added [ 338.834727][ T7053] team0: Port device team_slave_1 added [ 340.192444][ T7074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.288366][ T7074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.881570][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.881588][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.881617][ T7053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.916148][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.916202][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.916285][ T7053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.708182][ T7253] netlink: 'syz.0.260': attribute type 4 has an invalid length. [ 343.997893][ T7074] team0: Port device team_slave_0 added [ 344.167318][ T7074] team0: Port device team_slave_1 added [ 344.296231][ T56] bridge_slave_1: left allmulticast mode [ 344.296254][ T56] bridge_slave_1: left promiscuous mode [ 344.296431][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.380192][ T56] bridge_slave_0: left allmulticast mode [ 344.380215][ T56] bridge_slave_0: left promiscuous mode [ 344.380441][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.463316][ T56] bridge_slave_1: left allmulticast mode [ 344.463340][ T56] bridge_slave_1: left promiscuous mode [ 344.463518][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.627820][ T56] bridge_slave_0: left allmulticast mode [ 344.628013][ T56] bridge_slave_0: left promiscuous mode [ 344.628204][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.068275][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.196825][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.903515][ T56] bond0 (unregistering): Released all slaves [ 348.293340][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.317646][ T7291] tmpfs: Bad value for 'mpol' [ 350.189339][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.282808][ T56] bond0 (unregistering): Released all slaves [ 351.767871][ T7053] hsr_slave_0: entered promiscuous mode [ 351.781945][ T7053] hsr_slave_1: entered promiscuous mode [ 351.783040][ T7053] debugfs: 'hsr0' already exists in 'hsr' [ 351.783068][ T7053] Cannot create hsr debugfs directory [ 351.805239][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.805254][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.805279][ T7074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.866427][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.866447][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.866476][ T7074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.927985][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 354.994455][ T7074] hsr_slave_0: entered promiscuous mode [ 355.051267][ T7074] hsr_slave_1: entered promiscuous mode [ 355.072673][ T7074] debugfs: 'hsr0' already exists in 'hsr' [ 355.072752][ T7074] Cannot create hsr debugfs directory [ 361.823631][ T56] hsr_slave_0: left promiscuous mode [ 361.915024][ T56] hsr_slave_1: left promiscuous mode [ 361.916298][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.963252][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.997616][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.015834][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.196701][ T56] team0 (unregistering): Port device team_slave_1 removed [ 362.248131][ T56] team0 (unregistering): Port device team_slave_0 removed [ 366.277076][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.304009][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.344700][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.385730][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.410020][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.450222][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.466654][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.495190][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.505228][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.506103][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.586526][ T56] team0 (unregistering): Port device team_slave_1 removed [ 366.743951][ T56] team0 (unregistering): Port device team_slave_0 removed [ 367.561171][ T7361] JFS: discard option not supported on device [ 367.587122][ T7361] Mount JFS Failure: -22 [ 367.587205][ T7361] jfs_mount failed w/return code = -22 [ 368.536486][ T5806] Bluetooth: hci0: command tx timeout [ 368.605516][ T5806] Bluetooth: hci5: command tx timeout [ 370.595063][ T5806] Bluetooth: hci0: command tx timeout [ 370.675011][ T5806] Bluetooth: hci5: command 0x041b tx timeout [ 371.125062][ T5993] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 371.285011][ T5993] usb 4-1: Using ep0 maxpacket: 32 [ 371.288018][ T5993] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 371.322624][ T5993] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 371.322660][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 371.322721][ T5993] usb 4-1: Product: syz [ 371.322736][ T5993] usb 4-1: Manufacturer: syz [ 371.322752][ T5993] usb 4-1: SerialNumber: syz [ 371.368894][ T5993] usb 4-1: config 0 descriptor?? [ 371.375713][ T7371] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.655076][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.655764][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.318177][ T5806] Bluetooth: hci5: command 0x041b tx timeout [ 373.323088][ T5807] Bluetooth: hci0: command tx timeout [ 376.058085][ T5807] Bluetooth: hci0: command tx timeout [ 376.058126][ T5807] Bluetooth: hci5: command 0x041b tx timeout [ 376.285052][ T5881] usb 4-1: USB disconnect, device number 9 [ 378.124955][ T5806] Bluetooth: hci5: command 0x041b tx timeout [ 379.104941][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.105026][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.137239][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 384.087396][ T7347] chnl_net:caif_netlink_parms(): no params data found [ 385.660235][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.660548][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.661042][ T7339] bridge_slave_0: entered allmulticast mode [ 385.668658][ T7339] bridge_slave_0: entered promiscuous mode [ 386.498687][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.498817][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.499072][ T7339] bridge_slave_1: entered allmulticast mode [ 386.501970][ T7339] bridge_slave_1: entered promiscuous mode [ 386.912493][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.974992][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 387.007568][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.105038][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.105308][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.105572][ T7347] bridge_slave_0: entered allmulticast mode [ 387.116106][ T7347] bridge_slave_0: entered promiscuous mode [ 387.135007][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 387.137378][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 387.137409][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.200837][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 387.200859][ T10] pvrusb2: ********** [ 387.200866][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 387.200878][ T10] pvrusb2: Important functionality might not be entirely working. [ 387.200887][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 387.200899][ T10] pvrusb2: ********** [ 387.478927][ T2372] pvrusb2: Invalid write control endpoint [ 389.141470][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.141611][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.141856][ T7347] bridge_slave_1: entered allmulticast mode [ 389.185887][ T7347] bridge_slave_1: entered promiscuous mode [ 389.371477][ T2372] pvrusb2: Invalid write control endpoint [ 389.371495][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 389.371506][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 389.371515][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 389.371526][ T2372] pvrusb2: Device being rendered inoperable [ 389.424724][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 389.434077][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 389.466569][ T2372] pvrusb2: Attached sub-driver cx25840 [ 389.466588][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 389.466599][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 389.505089][ T10] usb 1-1: USB disconnect, device number 4 [ 390.491049][ T7339] team0: Port device team_slave_0 added [ 390.717835][ T7339] team0: Port device team_slave_1 added [ 390.744931][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 390.779797][ T56] bridge_slave_1: left allmulticast mode [ 390.779826][ T56] bridge_slave_1: left promiscuous mode [ 390.780083][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.887618][ T7488] ======================================================= [ 390.887618][ T7488] WARNING: The mand mount option has been deprecated and [ 390.887618][ T7488] and is ignored by this kernel. Remove the mand [ 390.887618][ T7488] option from the mount to silence this warning. [ 390.887618][ T7488] ======================================================= [ 390.934377][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 390.937117][ T56] bridge_slave_0: left allmulticast mode [ 390.937191][ T56] bridge_slave_0: left promiscuous mode [ 390.937692][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.963645][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 390.965631][ T10] usb 1-1: config 3 has an invalid interface number: 49 but max is 0 [ 390.965658][ T10] usb 1-1: config 3 has no interface number 0 [ 390.965704][ T10] usb 1-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 390.965732][ T10] usb 1-1: config 3 interface 49 has no altsetting 0 [ 391.008618][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=33.bd [ 391.008648][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.008668][ T10] usb 1-1: Product: syz [ 391.008683][ T10] usb 1-1: Manufacturer: syz [ 391.008697][ T10] usb 1-1: SerialNumber: syz [ 391.085681][ T56] bridge_slave_1: left allmulticast mode [ 391.085717][ T56] bridge_slave_1: left promiscuous mode [ 391.087981][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.200435][ T56] bridge_slave_0: left allmulticast mode [ 391.200473][ T56] bridge_slave_0: left promiscuous mode [ 391.200951][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.816494][ T10] usb 1-1: USB disconnect, device number 5 [ 393.847926][ T7504] JFS: discard option not supported on device [ 393.856461][ T7504] Mount JFS Failure: -22 [ 393.856504][ T7504] jfs_mount failed w/return code = -22 [ 394.648490][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 395.644169][ T7515] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 395.876503][ T7517] trusted_key: encrypted_key: master key parameter ':syz' is invalid [ 396.782336][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.875667][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.798364][ T56] bond0 (unregistering): Released all slaves [ 398.041717][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.115915][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.176714][ T56] bond0 (unregistering): Released all slaves [ 398.200090][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.312596][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.326409][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.326425][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.326449][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.440137][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.440158][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.440187][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.916709][ T7347] team0: Port device team_slave_0 added [ 398.920410][ T7347] team0: Port device team_slave_1 added [ 399.075082][ T5881] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 399.357130][ T7339] hsr_slave_0: entered promiscuous mode [ 399.358632][ T7339] hsr_slave_1: entered promiscuous mode [ 399.359641][ T7339] debugfs: 'hsr0' already exists in 'hsr' [ 399.359666][ T7339] Cannot create hsr debugfs directory [ 399.360730][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.360741][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.360760][ T7347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.365887][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 399.368607][ T5881] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 399.368636][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.596626][ T5881] pvrusb2: Hardware description: Terratec Grabster AV400 [ 400.596641][ T5881] pvrusb2: ********** [ 400.596645][ T5881] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 400.596654][ T5881] pvrusb2: Important functionality might not be entirely working. [ 400.596660][ T5881] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 400.596668][ T5881] pvrusb2: ********** [ 401.165393][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.165406][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.169074][ T7347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.170975][ T2372] pvrusb2: Invalid write control endpoint [ 401.386724][ T5881] usb 4-1: USB disconnect, device number 10 [ 401.402459][ T2372] pvrusb2: Invalid write control endpoint [ 401.402475][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 401.402486][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 401.402495][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 401.402505][ T2372] pvrusb2: Device being rendered inoperable [ 401.402575][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 401.402626][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 401.440027][ T2372] pvrusb2: Attached sub-driver cx25840 [ 401.440076][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 401.440100][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 401.705062][ T56] hsr_slave_0: left promiscuous mode [ 401.760707][ T56] hsr_slave_1: left promiscuous mode [ 401.761778][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.798579][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.918777][ T56] hsr_slave_0: left promiscuous mode [ 401.955857][ T56] hsr_slave_1: left promiscuous mode [ 401.956735][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.035942][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.455634][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 403.286571][ T56] team0 (unregistering): Port device team_slave_1 removed [ 403.805623][ T56] team0 (unregistering): Port device team_slave_0 removed [ 404.257281][ T7561] tmpfs: Bad value for 'mpol' [ 405.554490][ T56] team0 (unregistering): Port device team_slave_1 removed [ 405.885949][ T56] team0 (unregistering): Port device team_slave_0 removed [ 409.603942][ T7576] siw: device registration error -23 [ 412.485047][ T7571] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 412.499806][ T7571] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 414.625066][ T7584] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 414.885037][ T7347] hsr_slave_0: entered promiscuous mode [ 414.886457][ T7347] hsr_slave_1: entered promiscuous mode [ 414.887375][ T7347] debugfs: 'hsr0' already exists in 'hsr' [ 414.887400][ T7347] Cannot create hsr debugfs directory [ 415.004909][ T5881] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 415.165108][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 415.167879][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 415.172214][ T5881] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.172246][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.172269][ T5881] usb 1-1: Product: syz [ 415.172284][ T5881] usb 1-1: Manufacturer: syz [ 415.172309][ T5881] usb 1-1: SerialNumber: syz [ 415.242018][ T5881] usb 1-1: config 0 descriptor?? [ 415.250747][ T7586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.534622][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.540666][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.051785][ T5881] usb 1-1: USB disconnect, device number 6 [ 421.063856][ T7339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.286983][ T7622] netlink: 'syz.3.330': attribute type 4 has an invalid length. [ 422.628265][ T7339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.957999][ T7347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.782051][ T7347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.753646][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 425.766330][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 425.767519][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.770912][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 425.771911][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 426.130858][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.340'. [ 427.001163][ T7662] trusted_key: encrypted_key: insufficient parameters specified [ 427.141239][ T5806] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 428.447509][ T5806] Bluetooth: hci4: command tx timeout [ 429.222987][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.238158][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.253079][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.254296][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.285707][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.295859][ T5993] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 429.702924][ T5993] usb 5-1: Using ep0 maxpacket: 32 [ 429.719426][ T5993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 429.722413][ T5993] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 429.722445][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 429.722467][ T5993] usb 5-1: Product: syz [ 429.722483][ T5993] usb 5-1: Manufacturer: syz [ 429.722505][ T5993] usb 5-1: SerialNumber: syz [ 429.785645][ T5993] usb 5-1: config 0 descriptor?? [ 429.801880][ T7669] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.030133][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.030611][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.525120][ T5807] Bluetooth: hci4: command tx timeout [ 431.566508][ T5807] Bluetooth: hci0: command tx timeout [ 432.629430][ T5807] Bluetooth: hci4: command tx timeout [ 433.113349][ T7696] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 434.593083][ T5807] Bluetooth: hci0: command tx timeout [ 434.675021][ T5806] Bluetooth: hci4: command tx timeout [ 434.836667][ T5970] usb 5-1: USB disconnect, device number 5 [ 436.229916][ T5938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 436.384893][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 436.387341][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.387376][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.387417][ T5938] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 436.387442][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.446667][ T5938] usb 4-1: config 0 descriptor?? [ 436.595764][ T5806] Bluetooth: hci0: command tx timeout [ 439.032583][ T5806] Bluetooth: hci0: command tx timeout [ 440.770956][ T5938] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 440.957451][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.957623][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.039818][ T5938] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71). [ 441.062387][ T5938] usb 4-1: USB disconnect, device number 11 [ 441.447919][ T7652] chnl_net:caif_netlink_parms(): no params data found [ 441.576809][ T7746] siw: device registration error -23 [ 442.995448][ T5938] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 443.881602][ T7737] fido_id[7737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 443.975907][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 443.980699][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.980735][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.980776][ T5938] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 443.980800][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.295101][ T5938] usb 4-1: config 0 descriptor?? [ 444.317654][ T5938] usb 4-1: can't set config #0, error -71 [ 444.320260][ T5938] usb 4-1: USB disconnect, device number 12 [ 445.675031][ T811] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 445.827326][ T811] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 445.827358][ T811] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 445.827406][ T811] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.828899][ T811] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 445.828928][ T811] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 445.828950][ T811] usb 1-1: Manufacturer: syz [ 445.863506][ T811] usb 1-1: config 0 descriptor?? [ 445.898211][ T811] igorplugusb 1-1:0.0: incorrect number of endpoints [ 446.115531][ T6105] usb 1-1: USB disconnect, device number 7 [ 446.368144][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.368358][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.368564][ T7652] bridge_slave_0: entered allmulticast mode [ 446.371101][ T7652] bridge_slave_0: entered promiscuous mode [ 446.407175][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.407313][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.407518][ T7652] bridge_slave_1: entered allmulticast mode [ 446.410284][ T7652] bridge_slave_1: entered promiscuous mode [ 446.568222][ T7788] netlink: 188 bytes leftover after parsing attributes in process `syz.3.358'. [ 446.615747][ T5807] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 446.729581][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 447.122946][ T7789] nbd: socks must be embedded in a SOCK_ITEM attr [ 451.021650][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.056082][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.056502][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 451.239451][ T7741] udevd[7741]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 451.246925][ T7756] udevd[7756]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 451.362977][ T7812] JFS: discard option not supported on device [ 451.376445][ T7812] Mount JFS Failure: -22 [ 451.376490][ T7812] jfs_mount failed w/return code = -22 [ 452.239934][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 452.327152][ T7652] team0: Port device team_slave_0 added [ 452.695154][ T7652] team0: Port device team_slave_1 added [ 452.718104][ T7819] loop5: detected capacity change from 0 to 7 [ 453.035079][ T5970] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 453.234102][ T5970] usb 5-1: config 0 has no interfaces? [ 453.241890][ T5970] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 453.241922][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.241942][ T5970] usb 5-1: Product: syz [ 453.241958][ T5970] usb 5-1: Manufacturer: syz [ 453.241973][ T5970] usb 5-1: SerialNumber: syz [ 453.269164][ T5970] usb 5-1: config 0 descriptor?? [ 453.415772][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.415786][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.415805][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.505175][ T7819] Dev loop5: unable to read RDB block 7 [ 453.505215][ T7819] loop5: unable to read partition table [ 453.505374][ T7819] loop5: partition table beyond EOD, truncated [ 453.505398][ T7819] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 453.626093][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.626113][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.626142][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.727941][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1 [ 453.728020][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 453.757336][ T1232] usb 5-1: USB disconnect, device number 6 [ 454.043117][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.043243][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.043494][ T7673] bridge_slave_0: entered allmulticast mode [ 454.086389][ T7673] bridge_slave_0: entered promiscuous mode [ 454.104930][ T1232] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 454.135154][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.135241][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.135436][ T7673] bridge_slave_1: entered allmulticast mode [ 454.137271][ T7673] bridge_slave_1: entered promiscuous mode [ 454.290475][ T1232] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 454.290515][ T1232] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.290534][ T1232] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 454.290550][ T1232] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.290580][ T1232] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.290604][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.386920][ T1232] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.392564][ T1232] usb 5-1: invalid MIDI out EP 0 [ 456.418183][ T1232] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 456.462735][ T1232] usb 5-1: USB disconnect, device number 7 [ 457.657118][ T7652] hsr_slave_0: entered promiscuous mode [ 457.658475][ T7652] hsr_slave_1: entered promiscuous mode [ 457.659385][ T7652] debugfs: 'hsr0' already exists in 'hsr' [ 457.659409][ T7652] Cannot create hsr debugfs directory [ 457.701262][ T7673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.746037][ T7673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.294806][ T7860] overlayfs: missing 'workdir' [ 458.488264][ T1232] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 458.697058][ T1232] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 458.697080][ T1232] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 458.697113][ T1232] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.698234][ T1232] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 458.698255][ T1232] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 458.698269][ T1232] usb 5-1: Manufacturer: syz [ 458.799192][ T1232] usb 5-1: config 0 descriptor?? [ 460.383799][ T1232] igorplugusb 5-1:0.0: incorrect number of endpoints [ 460.460686][ T7863] netlink: 'syz.0.371': attribute type 4 has an invalid length. [ 460.765622][ T5970] usb 5-1: USB disconnect, device number 8 [ 461.847093][ T7673] team0: Port device team_slave_0 added [ 461.949824][ T7673] team0: Port device team_slave_1 added [ 462.181603][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.181623][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.181652][ T7673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.255820][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.255835][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.255855][ T7673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.389777][ T7884] loop5: detected capacity change from 0 to 7 [ 462.674958][ T5993] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 462.857699][ T5993] usb 5-1: config 0 has no interfaces? [ 462.862402][ T5993] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 462.862430][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.862448][ T5993] usb 5-1: Product: syz [ 462.862460][ T5993] usb 5-1: Manufacturer: syz [ 462.862472][ T5993] usb 5-1: SerialNumber: syz [ 462.941711][ T5993] usb 5-1: config 0 descriptor?? [ 462.965529][ T7673] hsr_slave_0: entered promiscuous mode [ 462.966918][ T7673] hsr_slave_1: entered promiscuous mode [ 462.967871][ T7673] debugfs: 'hsr0' already exists in 'hsr' [ 462.967896][ T7673] Cannot create hsr debugfs directory [ 463.119136][ T7756] Dev loop5: unable to read RDB block 7 [ 463.119195][ T7756] loop5: unable to read partition table [ 463.119453][ T7756] loop5: partition table beyond EOD, truncated [ 463.462524][ T5993] usb 5-1: USB disconnect, device number 9 [ 463.644190][ T7884] Dev loop5: unable to read RDB block 7 [ 463.644229][ T7884] loop5: unable to read partition table [ 463.644392][ T7884] loop5: partition table beyond EOD, truncated [ 463.644421][ T7884] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 463.665003][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1 [ 463.665098][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 463.768696][ T56] bridge_slave_1: left allmulticast mode [ 463.768719][ T56] bridge_slave_1: left promiscuous mode [ 463.768908][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.860765][ T56] bridge_slave_0: left allmulticast mode [ 463.860797][ T56] bridge_slave_0: left promiscuous mode [ 463.863179][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.949069][ T56] bridge_slave_1: left allmulticast mode [ 464.949102][ T56] bridge_slave_1: left promiscuous mode [ 464.949361][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.187950][ T6105] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 465.286591][ T56] bridge_slave_0: left allmulticast mode [ 465.286626][ T56] bridge_slave_0: left promiscuous mode [ 465.286903][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.656864][ T6105] usb 5-1: Using ep0 maxpacket: 32 [ 465.662666][ T6105] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 465.662697][ T6105] usb 5-1: config 0 has no interface number 0 [ 465.685980][ T6105] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 465.686014][ T6105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.686037][ T6105] usb 5-1: Product: syz [ 465.686053][ T6105] usb 5-1: Manufacturer: syz [ 465.686069][ T6105] usb 5-1: SerialNumber: syz [ 465.868370][ T7917] siw: device registration error -23 [ 466.678552][ T6105] usb 5-1: config 0 descriptor?? [ 466.857953][ T6105] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 467.114979][ T6105] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 467.135148][ T7885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 467.167274][ T6105] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 467.298495][ T7885] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 467.298596][ T7885] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 467.298649][ T7885] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.301390][ T7885] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 467.301478][ T7885] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 467.301502][ T7885] usb 4-1: Manufacturer: syz [ 467.365079][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 467.365936][ T6105] usb 5-1: USB disconnect, device number 10 [ 467.416160][ T7885] usb 4-1: config 0 descriptor?? [ 467.436926][ T7885] igorplugusb 4-1:0.0: incorrect number of endpoints [ 467.444372][ T6105] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 467.496411][ T6105] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 467.500165][ T6105] quatech2 5-1:0.51: device disconnected [ 467.643497][ T7885] usb 4-1: USB disconnect, device number 13 [ 468.777009][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.044927][ T6105] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 469.045966][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.745053][ T6105] usb 1-1: Using ep0 maxpacket: 32 [ 469.747520][ T6105] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 469.750617][ T6105] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 469.750649][ T6105] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 469.750672][ T6105] usb 1-1: Product: syz [ 469.750688][ T6105] usb 1-1: Manufacturer: syz [ 469.750704][ T6105] usb 1-1: SerialNumber: syz [ 469.756808][ T6105] usb 1-1: config 0 descriptor?? [ 469.764911][ T7925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.155923][ T56] bond0 (unregistering): Released all slaves [ 470.398639][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.404668][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.131006][ T31] usb 1-1: USB disconnect, device number 8 [ 474.610671][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.905623][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.957261][ T56] bond0 (unregistering): Released all slaves [ 475.518537][ T7961] siw: device registration error -23 [ 476.534925][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 476.634492][ T7963] loop5: detected capacity change from 0 to 7 [ 477.085154][ T5881] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 477.158986][ T7756] Dev loop5: unable to read RDB block 7 [ 477.159050][ T7756] loop5: unable to read partition table [ 477.159306][ T7756] loop5: partition table beyond EOD, truncated [ 477.238789][ T5881] usb 5-1: config 0 has no interfaces? [ 477.241865][ T5881] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 477.241899][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.241922][ T5881] usb 5-1: Product: syz [ 477.241937][ T5881] usb 5-1: Manufacturer: syz [ 477.241954][ T5881] usb 5-1: SerialNumber: syz [ 477.306162][ T5881] usb 5-1: config 0 descriptor?? [ 477.950913][ T31] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 477.950975][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.952525][ T31] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 477.952556][ T31] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 477.952578][ T31] usb 4-1: Manufacturer: syz [ 477.962632][ T31] usb 4-1: config 0 descriptor?? [ 478.225757][ T31] igorplugusb 4-1:0.0: incorrect number of endpoints [ 478.279043][ T5881] usb 4-1: USB disconnect, device number 14 [ 478.375961][ T7963] Dev loop5: unable to read RDB block 7 [ 478.376000][ T7963] loop5: unable to read partition table [ 478.376156][ T7963] loop5: partition table beyond EOD, truncated [ 478.376180][ T7963] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 478.454968][ T56] hsr_slave_0: left promiscuous mode [ 478.484988][ T31] usb 5-1: USB disconnect, device number 11 [ 478.503225][ T56] hsr_slave_1: left promiscuous mode [ 478.504236][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.548572][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.755036][ T56] hsr_slave_0: left promiscuous mode [ 478.805101][ T56] hsr_slave_1: left promiscuous mode [ 478.806105][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.855949][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.597345][ T7981] trusted_key: encrypted_key: insufficient parameters specified [ 480.250520][ T5807] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 485.731630][ T56] team0 (unregistering): Port device team_slave_1 removed [ 485.787358][ T56] team0 (unregistering): Port device team_slave_0 removed [ 486.328404][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 486.332307][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 486.333603][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 486.356118][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 486.357506][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.908657][ T8008] netlink: 'syz.4.406': attribute type 4 has an invalid length. [ 488.996288][ T5807] Bluetooth: hci5: command tx timeout [ 489.247942][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 489.275073][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 489.281423][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 489.283130][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 489.283930][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 489.324949][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 489.725034][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 490.867810][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 490.867850][ T31] usb 4-1: can't read configurations, error -71 [ 490.918411][ T56] team0 (unregistering): Port device team_slave_1 removed [ 491.016941][ T56] team0 (unregistering): Port device team_slave_0 removed [ 491.084874][ T5807] Bluetooth: hci5: command tx timeout [ 491.394927][ T5807] Bluetooth: hci6: command tx timeout [ 493.154890][ T5807] Bluetooth: hci5: command tx timeout [ 494.561266][ T5807] Bluetooth: hci6: command tx timeout [ 495.085031][ T7885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 495.236208][ T7885] usb 4-1: Using ep0 maxpacket: 16 [ 495.236284][ T5806] Bluetooth: hci5: command tx timeout [ 495.238405][ T7885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.238430][ T7885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.238458][ T7885] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 495.238474][ T7885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.242172][ T7885] usb 4-1: config 0 descriptor?? [ 495.736005][ T7885] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 495.892334][ T7885] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error 0). [ 496.120474][ T5938] usb 4-1: USB disconnect, device number 17 [ 496.606248][ T5806] Bluetooth: hci6: command tx timeout [ 498.092542][ T8072] siw: device registration error -23 [ 499.722920][ T5806] Bluetooth: hci6: command tx timeout [ 501.591132][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.591235][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.828994][ T8076] overlayfs: missing 'workdir' [ 502.511455][ T8000] chnl_net:caif_netlink_parms(): no params data found [ 502.554097][ T8012] chnl_net:caif_netlink_parms(): no params data found [ 505.565344][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.565476][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.565732][ T8000] bridge_slave_0: entered allmulticast mode [ 505.569300][ T8000] bridge_slave_0: entered promiscuous mode [ 505.573464][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.573594][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.573789][ T8012] bridge_slave_0: entered allmulticast mode [ 505.596236][ T8012] bridge_slave_0: entered promiscuous mode [ 505.631624][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.631840][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.632145][ T8000] bridge_slave_1: entered allmulticast mode [ 505.657490][ T8000] bridge_slave_1: entered promiscuous mode [ 505.664721][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.668357][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.668608][ T8012] bridge_slave_1: entered allmulticast mode [ 505.676420][ T8012] bridge_slave_1: entered promiscuous mode [ 506.414903][ T8129] siw: device registration error -23 [ 507.278908][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.559219][ T8012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.577131][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.350551][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 509.461489][ T8012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.775212][ T8148] netlink: 180 bytes leftover after parsing attributes in process `syz.0.432'. [ 509.820409][ T5806] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 509.896703][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 513.325545][ T8000] team0: Port device team_slave_0 added [ 513.373956][ T56] bridge_slave_1: left allmulticast mode [ 513.374032][ T56] bridge_slave_1: left promiscuous mode [ 513.376030][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.626696][ T56] bridge_slave_0: left allmulticast mode [ 513.626768][ T56] bridge_slave_0: left promiscuous mode [ 513.652022][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.970227][ T56] bridge_slave_1: left allmulticast mode [ 513.970260][ T56] bridge_slave_1: left promiscuous mode [ 513.970512][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.109129][ T8157] siw: device registration error -23 [ 516.066647][ T8149] nbd: socks must be embedded in a SOCK_ITEM attr [ 516.188189][ T56] bridge_slave_0: left allmulticast mode [ 516.188220][ T56] bridge_slave_0: left promiscuous mode [ 516.188461][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.016225][ T8174] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 518.126857][ T8158] udevd[8158]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 518.198283][ T8158] udevd[8158]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 518.367072][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.706015][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.694076][ T56] bond0 (unregistering): Released all slaves [ 519.998158][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.113101][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.144280][ T56] bond0 (unregistering): Released all slaves [ 520.451171][ T8000] team0: Port device team_slave_1 added [ 520.488014][ T8012] team0: Port device team_slave_0 added [ 520.506928][ T8012] team0: Port device team_slave_1 added [ 520.589902][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.589923][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.589953][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.592938][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.592956][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.592995][ T8012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.692000][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.692021][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.692062][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.740249][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.740269][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.740301][ T8012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.777697][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 521.777745][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.777796][ T5806] Tainted: [L]=SOFTLOCKUP [ 521.777805][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.777820][ T5806] Workqueue: hci2 hci_rx_work [ 521.777871][ T5806] Call Trace: [ 521.777881][ T5806] [ 521.777891][ T5806] dump_stack_lvl+0xe8/0x150 [ 521.777929][ T5806] sysfs_create_dir_ns+0x271/0x2a0 [ 521.777957][ T5806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 521.777988][ T5806] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 521.778013][ T5806] ? __rcu_read_unlock+0x83/0xe0 [ 521.778047][ T5806] ? rt_spin_unlock+0x160/0x200 [ 521.778077][ T5806] kobject_add_internal+0x631/0xd10 [ 521.778112][ T5806] kobject_add+0x163/0x240 [ 521.778141][ T5806] ? __pfx_kobject_add+0x10/0x10 [ 521.778173][ T5806] ? get_device_parent+0x370/0x3a0 [ 521.778202][ T5806] device_add+0x408/0xb80 [ 521.778233][ T5806] hci_conn_add_sysfs+0xd5/0x210 [ 521.778266][ T5806] le_conn_complete_evt+0xf1d/0x1430 [ 521.778300][ T5806] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 521.778327][ T5806] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 521.778362][ T5806] ? lockdep_hardirqs_on+0x7a/0x110 [ 521.778399][ T5806] ? skb_pull_data+0xfb/0x200 [ 521.778438][ T5806] hci_le_conn_complete_evt+0x187/0x470 [ 521.778472][ T5806] hci_event_packet+0x7af/0x12c0 [ 521.778512][ T5806] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 521.778549][ T5806] ? __pfx_hci_event_packet+0x10/0x10 [ 521.778579][ T5806] ? rt_spin_unlock+0x14f/0x200 [ 521.778618][ T5806] ? hci_send_to_monitor+0xe2/0x590 [ 521.778648][ T5806] hci_rx_work+0x3ee/0x1030 [ 521.778688][ T5806] ? process_scheduled_works+0xa8d/0x18c0 [ 521.778723][ T5806] process_scheduled_works+0xb6e/0x18c0 [ 521.778788][ T5806] ? __pfx_process_scheduled_works+0x10/0x10 [ 521.778827][ T5806] ? assign_work+0x3d5/0x5e0 [ 521.778864][ T5806] worker_thread+0xa53/0xfc0 [ 521.778926][ T5806] kthread+0x388/0x470 [ 521.778951][ T5806] ? __pfx_worker_thread+0x10/0x10 [ 521.778983][ T5806] ? __pfx_kthread+0x10/0x10 [ 521.779009][ T5806] ret_from_fork+0x51e/0xb90 [ 521.779046][ T5806] ? __pfx_ret_from_fork+0x10/0x10 [ 521.779077][ T5806] ? __switch_to+0xc7d/0x1450 [ 521.779110][ T5806] ? __pfx_kthread+0x10/0x10 [ 521.779136][ T5806] ret_from_fork_asm+0x1a/0x30 [ 521.779179][ T5806] [ 521.779273][ T5806] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 521.779317][ T5806] Bluetooth: hci2: failed to register connection device [ 521.861911][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 522.343741][ T8194] nbd: socks must be embedded in a SOCK_ITEM attr [ 524.455094][ T8000] hsr_slave_0: entered promiscuous mode [ 524.517048][ T8000] hsr_slave_1: entered promiscuous mode [ 524.570349][ T8000] debugfs: 'hsr0' already exists in 'hsr' [ 524.570417][ T8000] Cannot create hsr debugfs directory [ 525.081390][ T8012] hsr_slave_0: entered promiscuous mode [ 525.157315][ T8012] hsr_slave_1: entered promiscuous mode [ 525.198858][ T8012] debugfs: 'hsr0' already exists in 'hsr' [ 525.198924][ T8012] Cannot create hsr debugfs directory [ 525.821355][ T8204] udevd[8204]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 525.838841][ T8204] udevd[8204]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 526.017988][ T56] hsr_slave_0: left promiscuous mode [ 526.045398][ T8011] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 526.067075][ T56] hsr_slave_1: left promiscuous mode [ 526.067793][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.136881][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.204904][ T8011] usb 1-1: Using ep0 maxpacket: 8 [ 526.220699][ T8011] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 526.220727][ T8011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.251904][ T8011] pvrusb2: Hardware description: Terratec Grabster AV400 [ 526.251924][ T8011] pvrusb2: ********** [ 526.251933][ T8011] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 526.251947][ T8011] pvrusb2: Important functionality might not be entirely working. [ 526.251957][ T8011] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 526.251969][ T8011] pvrusb2: ********** [ 526.405028][ T56] hsr_slave_0: left promiscuous mode [ 526.447031][ T56] hsr_slave_1: left promiscuous mode [ 526.461091][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.490018][ T2372] pvrusb2: Invalid write control endpoint [ 526.538954][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.766010][ T8215] pvrusb2: Invalid write control endpoint [ 526.772445][ T8011] usb 1-1: USB disconnect, device number 9 [ 527.000416][ T2372] pvrusb2: Invalid write control endpoint [ 527.000440][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 527.000451][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 527.000461][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 527.000472][ T2372] pvrusb2: Device being rendered inoperable [ 527.000690][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 527.000743][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 527.091630][ T2372] pvrusb2: Attached sub-driver cx25840 [ 527.091642][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 527.091650][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 528.276211][ T5807] Bluetooth: hci6: command 0x0405 tx timeout [ 528.524894][ T5938] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 528.547770][ T56] team0 (unregistering): Port device team_slave_1 removed [ 528.625560][ T56] team0 (unregistering): Port device team_slave_0 removed [ 528.699271][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 528.699308][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.699349][ T5938] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 528.699374][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.825816][ T5938] usb 1-1: config 0 descriptor?? [ 529.290879][ T5938] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 529.290925][ T5938] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 529.290954][ T5938] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 529.290982][ T5938] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 529.291010][ T5938] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 529.293044][ T5938] elan 0003:04F3:0755.0003: failed to start in urb: -90 [ 529.397753][ T5938] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 529.484407][ T5993] usb 1-1: USB disconnect, device number 10 [ 529.677947][ T8256] fido_id[8256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 530.270061][ T56] team0 (unregistering): Port device team_slave_1 removed [ 530.345648][ T56] team0 (unregistering): Port device team_slave_0 removed [ 531.584148][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 538.775505][ T37] audit: type=1326 audit(1773765780.432:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2096f9c799 code=0x7ffc0000 [ 538.809326][ T37] audit: type=1326 audit(1773765780.502:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2096f9c799 code=0x7ffc0000 [ 541.626947][ T8327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.582530][ T8000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 543.915269][ T8000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 544.405934][ T8340] ntfs3(loop0): try to read out of volume at offset 0x0 [ 544.502020][ T8000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 545.485664][ T8000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 546.714411][ T8000] kthread_run failed with err -4 [ 549.372679][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.388010][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.391474][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.427914][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 549.428962][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 551.542797][ T8388] netlink: 'syz.0.478': attribute type 4 has an invalid length. [ 551.631619][ T5806] Bluetooth: hci0: command tx timeout [ 551.872447][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.899883][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.925042][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.975607][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 552.004972][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 553.661896][ T5806] Bluetooth: hci0: command tx timeout [ 554.358325][ T5806] Bluetooth: hci4: command tx timeout [ 554.505465][ T8421] trusted_key: encrypted_key: insufficient parameters specified [ 554.560157][ T5806] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 555.717160][ T5806] Bluetooth: hci0: command tx timeout [ 556.434852][ T5806] Bluetooth: hci4: command tx timeout [ 556.843528][ T8439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.394972][ T5806] Bluetooth: hci0: command tx timeout [ 559.395015][ T5806] Bluetooth: hci4: command tx timeout [ 562.282852][ T5807] Bluetooth: hci4: command tx timeout [ 564.141480][ T8463] netlink: 'syz.3.492': attribute type 4 has an invalid length. [ 564.240491][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.240690][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.375458][ T5993] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 565.804824][ T5993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 565.805627][ T5993] usb 5-1: not running at top speed; connect to a high speed hub [ 565.809843][ T5993] usb 5-1: config 3 has an invalid interface number: 49 but max is 0 [ 565.809864][ T5993] usb 5-1: config 3 has no interface number 0 [ 565.809897][ T5993] usb 5-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 565.809920][ T5993] usb 5-1: config 3 interface 49 has no altsetting 0 [ 565.814248][ T5993] usb 5-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=33.bd [ 565.814271][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.814286][ T5993] usb 5-1: Product: syz [ 565.814298][ T5993] usb 5-1: Manufacturer: syz [ 565.814330][ T5993] usb 5-1: SerialNumber: syz [ 566.223589][ T5993] usb 5-1: USB disconnect, device number 12 [ 566.902291][ T8379] chnl_net:caif_netlink_parms(): no params data found [ 567.793096][ T87] bridge_slave_1: left allmulticast mode [ 567.793126][ T87] bridge_slave_1: left promiscuous mode [ 567.793371][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.906436][ T87] bridge_slave_0: left allmulticast mode [ 567.906468][ T87] bridge_slave_0: left promiscuous mode [ 567.906756][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.262368][ T8528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.635805][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.330476][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.607608][ T87] bond0 (unregistering): Released all slaves [ 578.033165][ T8397] chnl_net:caif_netlink_parms(): no params data found [ 580.984903][ T87] hsr_slave_0: left promiscuous mode [ 581.004896][ T87] hsr_slave_1: left promiscuous mode [ 581.005966][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.055855][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.114602][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.507'. [ 581.520142][ T87] team0 (unregistering): Port device team_slave_1 removed [ 581.585719][ T87] team0 (unregistering): Port device team_slave_0 removed [ 582.017145][ T8564] binder: 8563:8564 ioctl c0306201 200000000680 returned -14 [ 582.196155][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.196296][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.196545][ T8379] bridge_slave_0: entered allmulticast mode [ 582.244592][ T8379] bridge_slave_0: entered promiscuous mode [ 582.319988][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.320232][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.320449][ T8379] bridge_slave_1: entered allmulticast mode [ 582.323104][ T8379] bridge_slave_1: entered promiscuous mode [ 583.129173][ T8379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.157389][ T8379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.234894][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.252770][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.253031][ T8397] bridge_slave_0: entered allmulticast mode [ 583.279870][ T8397] bridge_slave_0: entered promiscuous mode [ 583.369345][ T8397] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.369475][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.369725][ T8397] bridge_slave_1: entered allmulticast mode [ 583.372519][ T8397] bridge_slave_1: entered promiscuous mode [ 583.455085][ T8379] team0: Port device team_slave_0 added [ 583.538026][ T8379] team0: Port device team_slave_1 added [ 583.744950][ T5993] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 583.813598][ T8397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.838657][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.838670][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.838691][ T8379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.841821][ T8397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.842497][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.842509][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.842534][ T8379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.947087][ T5993] usb 1-1: config 0 has no interfaces? [ 583.974749][ T5993] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 583.974780][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.974800][ T5993] usb 1-1: Product: syz [ 583.974815][ T5993] usb 1-1: Manufacturer: syz [ 583.974830][ T5993] usb 1-1: SerialNumber: syz [ 584.027162][ T5993] usb 1-1: config 0 descriptor?? [ 585.446138][ T10] usb 1-1: USB disconnect, device number 11 [ 585.620387][ T8397] team0: Port device team_slave_0 added [ 585.692483][ T8397] team0: Port device team_slave_1 added [ 585.774934][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 585.850823][ T8379] hsr_slave_0: entered promiscuous mode [ 585.865389][ T8379] hsr_slave_1: entered promiscuous mode [ 585.876556][ T8379] debugfs: 'hsr0' already exists in 'hsr' [ 585.876651][ T8379] Cannot create hsr debugfs directory [ 585.927499][ T10] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 585.927569][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 585.927599][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 585.927624][ T10] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.927670][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.927695][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.037900][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.038936][ T10] usb 1-1: invalid MIDI out EP 0 [ 586.304184][ T8397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.304203][ T8397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.304235][ T8397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.437393][ T8606] siw: device registration error -23 [ 588.392588][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 588.406561][ T8397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.406580][ T8397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.406611][ T8397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.663432][ T8608] udevd[8608]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.671821][ T7885] usb 1-1: USB disconnect, device number 12 [ 588.851433][ T87] bridge_slave_1: left allmulticast mode [ 588.851467][ T87] bridge_slave_1: left promiscuous mode [ 588.851723][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.081851][ T37] audit: type=1326 audit(1773765830.752:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8612 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2096f9c799 code=0x7ffc0000 [ 589.138525][ T37] audit: type=1326 audit(1773765830.822:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8612 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2096f9c799 code=0x7ffc0000 [ 589.142950][ T37] audit: type=1326 audit(1773765830.832:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8612 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2096f9c799 code=0x7ffc0000 [ 589.167460][ T87] bridge_slave_0: left allmulticast mode [ 589.167870][ T87] bridge_slave_0: left promiscuous mode [ 589.182395][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.315592][ T37] audit: type=1326 audit(1773765831.002:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8612 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2096f9c799 code=0x7ffc0000 [ 589.316014][ T37] audit: type=1326 audit(1773765831.002:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8612 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2096f9c799 code=0x7ffc0000 [ 589.511514][ T8616] binder: 8614:8616 ioctl c0306201 200000000680 returned -14 [ 591.415447][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.602275][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.646587][ T87] bond0 (unregistering): Released all slaves [ 593.293863][ T8639] Bluetooth: MGMT ver 1.23 [ 593.329388][ T8397] hsr_slave_0: entered promiscuous mode [ 593.330809][ T8397] hsr_slave_1: entered promiscuous mode [ 593.331749][ T8397] debugfs: 'hsr0' already exists in 'hsr' [ 593.331775][ T8397] Cannot create hsr debugfs directory [ 594.374905][ T87] hsr_slave_0: left promiscuous mode [ 594.422172][ T87] hsr_slave_1: left promiscuous mode [ 594.423236][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.476762][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.466981][ T5807] Bluetooth: hci0: command tx timeout [ 597.589628][ T8662] siw: device registration error -23 [ 597.632353][ T87] team0 (unregistering): Port device team_slave_1 removed [ 597.755230][ T87] team0 (unregistering): Port device team_slave_0 removed [ 598.200168][ T8663] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.401152][ T8663] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.543275][ T8663] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.697195][ T8663] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.143409][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.165213][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.214364][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.126889][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.495486][ T5806] Bluetooth: hci4: command 0x0405 tx timeout [ 605.954198][ T8720] netlink: 180 bytes leftover after parsing attributes in process `syz.4.543'. [ 606.081080][ T5806] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 608.130740][ T8397] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 608.171744][ T8397] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 608.211150][ T8397] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 608.249934][ T8397] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 610.486548][ T8750] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 610.486639][ T8750] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 610.514844][ C0] ------------[ cut here ]------------ [ 610.514859][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 610.514905][ C0] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd16/0xff0, CPU#0: ktimers/0/16 [ 610.514955][ C0] Modules linked in: [ 610.514977][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.515010][ C0] Tainted: [L]=SOFTLOCKUP [ 610.515018][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.515032][ C0] RIP: 0010:__queue_work+0xd40/0xff0 [ 610.515067][ C0] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 10 27 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 610.515088][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010082 [ 610.515107][ C0] RAX: 1ffff1100b35f153 RBX: ffff888059af8a98 RCX: ffff88801ca98000 [ 610.515124][ C0] RDX: ffff888033c6c168 RSI: ffffffff8a1412a0 RDI: ffffffff8f6d0700 [ 610.515142][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 610.515156][ C0] R10: dffffc0000000000 R11: ffffffff818d6720 R12: 0000000000000100 [ 610.515171][ C0] R13: dffffc0000000000 R14: ffffffff8f6d0700 R15: ffff888033c6c168 [ 610.515189][ C0] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 610.515207][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.515223][ C0] CR2: 00007f9c8b239b38 CR3: 0000000059994000 CR4: 00000000003526f0 [ 610.515243][ C0] Call Trace: [ 610.515252][ C0] [ 610.515278][ C0] call_timer_fn+0x192/0x640 [ 610.515304][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 610.515347][ C0] ? call_timer_fn+0xd4/0x640 [ 610.515368][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 610.515402][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 610.515435][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 610.515472][ C0] __run_timer_base+0x764/0x9f0 [ 610.515523][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 610.515575][ C0] run_timer_softirq+0xb7/0x170 [ 610.515609][ C0] handle_softirqs+0x1de/0x6f0 [ 610.515651][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 610.515684][ C0] run_ktimerd+0x69/0x100 [ 610.515705][ C0] smpboot_thread_fn+0x541/0xa50 [ 610.515741][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 610.515783][ C0] kthread+0x388/0x470 [ 610.515809][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 610.515844][ C0] ? __pfx_kthread+0x10/0x10 [ 610.515870][ C0] ret_from_fork+0x51e/0xb90 [ 610.515907][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 610.515939][ C0] ? __switch_to+0xc7d/0x1450 [ 610.515973][ C0] ? __pfx_kthread+0x10/0x10 [ 610.516000][ C0] ret_from_fork_asm+0x1a/0x30 [ 610.516042][ C0] [ 610.516065][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 610.516085][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.516118][ C0] Tainted: [L]=SOFTLOCKUP [ 610.516126][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.516140][ C0] Call Trace: [ 610.516149][ C0] [ 610.516158][ C0] vpanic+0x56c/0xa60 [ 610.516195][ C0] ? __pfx__printk+0x10/0x10 [ 610.516220][ C0] ? __pfx_vpanic+0x10/0x10 [ 610.516251][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 610.516283][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 610.516333][ C0] panic+0xc5/0xd0 [ 610.516366][ C0] ? __pfx_panic+0x10/0x10 [ 610.516411][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 610.516440][ C0] __warn+0x315/0x4f0 [ 610.516471][ C0] ? __queue_work+0xd16/0xff0 [ 610.516507][ C0] ? __queue_work+0xd16/0xff0 [ 610.516542][ C0] __report_bug+0x29a/0x540 [ 610.516585][ C0] ? __queue_work+0xd16/0xff0 [ 610.516619][ C0] ? __pfx___report_bug+0x10/0x10 [ 610.516650][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 610.516681][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 610.516724][ C0] ? look_up_lock_class+0x57/0x110 [ 610.516760][ C0] ? register_lock_class+0x31/0x2e0 [ 610.516803][ C0] report_bug_entry+0x19a/0x290 [ 610.516837][ C0] ? __queue_work+0xd40/0xff0 [ 610.516868][ C0] ? __queue_work+0xd45/0xff0 [ 610.516900][ C0] handle_bug+0xce/0x200 [ 610.516925][ C0] exc_invalid_op+0x1a/0x50 [ 610.516950][ C0] asm_exc_invalid_op+0x1a/0x20 [ 610.516973][ C0] RIP: 0010:__queue_work+0xd40/0xff0 [ 610.517007][ C0] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 10 27 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 610.517028][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010082 [ 610.517049][ C0] RAX: 1ffff1100b35f153 RBX: ffff888059af8a98 RCX: ffff88801ca98000 [ 610.517067][ C0] RDX: ffff888033c6c168 RSI: ffffffff8a1412a0 RDI: ffffffff8f6d0700 [ 610.517085][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 610.517099][ C0] R10: dffffc0000000000 R11: ffffffff818d6720 R12: 0000000000000100 [ 610.517116][ C0] R13: dffffc0000000000 R14: ffffffff8f6d0700 R15: ffff888033c6c168 [ 610.517140][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 610.517180][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 610.517234][ C0] call_timer_fn+0x192/0x640 [ 610.517257][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 610.517291][ C0] ? call_timer_fn+0xd4/0x640 [ 610.517313][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 610.517355][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 610.517387][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 610.517425][ C0] __run_timer_base+0x764/0x9f0 [ 610.517477][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 610.517531][ C0] run_timer_softirq+0xb7/0x170 [ 610.517567][ C0] handle_softirqs+0x1de/0x6f0 [ 610.517611][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 610.517645][ C0] run_ktimerd+0x69/0x100 [ 610.517666][ C0] smpboot_thread_fn+0x541/0xa50 [ 610.517705][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 610.517750][ C0] kthread+0x388/0x470 [ 610.517775][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 610.517809][ C0] ? __pfx_kthread+0x10/0x10 [ 610.517835][ C0] ret_from_fork+0x51e/0xb90 [ 610.517872][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 610.517903][ C0] ? __switch_to+0xc7d/0x1450 [ 610.517935][ C0] ? __pfx_kthread+0x10/0x10 [ 610.517963][ C0] ret_from_fork_asm+0x1a/0x30 [ 610.518004][ C0] [ 610.518620][ C0] Kernel Offset: disabled