last executing test programs: 12m14.236257392s ago: executing program 3 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040054) 12m12.644532996s ago: executing program 3 (id=45): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r3, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 12m10.288720418s ago: executing program 3 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) alarm(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r1], 0x48) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x12, 0x0, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000000300)={0x8}) ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000000340)={0x8, r9}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r8, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000400)={0x8, r7}) 12m7.655206251s ago: executing program 3 (id=50): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 12m7.371386768s ago: executing program 3 (id=52): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000e40)=ANY=[], 0x158) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x1c0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x190, 0x3, 0x0, 0x1, [{0x4}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5857dc0768165e4f7473ff76ec903c65fb634dfa6b559121913b0d9ad5f7f6d821b4f0c08952bc3c32f2ba1c9d74594c9"}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "1302a3d3596be284c900fcbe888878bf237bf323a13e97745bb35014715a9763f8be336a95d22bb0c49ec8cfaf18f32e6ae0f6db26e10925452a3cc58e4962c1e7a207157c8afe0d305c7848c9a3bccf109c4bb08cd9e4ab2e80a0e5fdd4634ae083c1114f586804f7cd21c716ecc64348cbb3621e51a8c5d1a17e1aa688accdd6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, @NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xd9, 0x6, "7aba14293c0b0793ddabf09d6c3cfab4ff3a3275532366a7a67ba43c9ed0d97037de20d84f07452c5b6df31a5bee021ef9f5439465ae065853deaada20f7dc50e4f3bf5201c48be2e175bb02c1ab6e5df47b8eae92c6810b4a4f9bea285f12d21f49a89bd576a13c46b9027c6f4ddd2dc638d2fb800197fa9e1f31e514c0847aa9ef5a36a13dc536fae56640dd8789983aff58e6de3a4e799d08ec487ec311aef7d73735dd06b68c84052919db03fc19e476a97b0e577374d2ac529dbaae65bd914d0cf287b0b5645d72dcbc0c3fe7aac8a9b28d34"}]}, @NFT_MSG_NEWFLOWTABLE={0x1d0, 0x16, 0xa, 0xb05, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x520}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x1f0}, 0x1, 0x0, 0x0, 0x20040000}, 0x24020841) 12m7.174005s ago: executing program 3 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r5, &(0x7f0000001380)=[{&(0x7f0000001100)=""/26, 0x1a}], 0x1, 0x20010000, 0xd56a) read$msr(r5, &(0x7f0000000180)=""/92, 0x5c) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) r6 = signalfd(r3, &(0x7f0000001180)={[0x40000003]}, 0x8) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000001c0)={0x1, r6}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r7, r1], 0x3) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000001140), 0x3, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000001200)={{0x7, 0x0, 0x31, 0xe0, '\x00', 0x1}, 0x4, 0x153, 0x1, r0, 0x1, 0x7f, 'syz0\x00', &(0x7f00000011c0)=['sched_switch\x00'], 0xd}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11m49.392682221s ago: executing program 32 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r5, &(0x7f0000001380)=[{&(0x7f0000001100)=""/26, 0x1a}], 0x1, 0x20010000, 0xd56a) read$msr(r5, &(0x7f0000000180)=""/92, 0x5c) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) r6 = signalfd(r3, &(0x7f0000001180)={[0x40000003]}, 0x8) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000001c0)={0x1, r6}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r7, r1], 0x3) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000001140), 0x3, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000001200)={{0x7, 0x0, 0x31, 0xe0, '\x00', 0x1}, 0x4, 0x153, 0x1, r0, 0x1, 0x7f, 'syz0\x00', &(0x7f00000011c0)=['sched_switch\x00'], 0xd}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11m13.714152328s ago: executing program 4 (id=147): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 11m12.134322632s ago: executing program 4 (id=148): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) close(r0) 11m11.886657852s ago: executing program 4 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r1, 0x239, 0x70bd2a, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x0) 11m9.895060362s ago: executing program 4 (id=154): socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpid() r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x6}) 11m9.533454036s ago: executing program 4 (id=156): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 9.155445289s ago: executing program 1 (id=1172): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) socket$inet(0x2, 0x80001, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) 8.967091693s ago: executing program 2 (id=1173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket(0x15, 0x0, 0x6) getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) r2 = creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='bcache_alloc\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/25, 0x19}], 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) 7.986282865s ago: executing program 1 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) alarm(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=r1], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, 0x0) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r6, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000400)={0x8, r5}) 7.792292487s ago: executing program 2 (id=1175): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41024}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 4.869844347s ago: executing program 2 (id=1176): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000003c0)=""/142, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) 4.868701642s ago: executing program 1 (id=1177): openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000180)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r6 = fanotify_init(0xf00, 0x2) fanotify_mark(r6, 0x105, 0x8971, r5, 0x0) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') connect$inet(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 3.364804208s ago: executing program 2 (id=1178): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 3.330139505s ago: executing program 0 (id=1179): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0xf27, 0xd7b, 0x1, 0x7d0, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x800002, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) 3.20486398s ago: executing program 1 (id=1180): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x7fffffff}, 0x0, 0x0) 3.112949527s ago: executing program 0 (id=1181): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={0xfffffffffffffffc, 0x0}}, 0x0) 3.079649648s ago: executing program 2 (id=1182): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) socket$inet(0x2, 0x80001, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) 3.008582074s ago: executing program 1 (id=1183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket(0x15, 0x0, 0x6) getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) r2 = creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='bcache_alloc\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/25, 0x19}], 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) 1.614550285s ago: executing program 0 (id=1184): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) timer_create(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000180)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.302609401s ago: executing program 2 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) alarm(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=r1], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, 0x0) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r6, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000400)={0x8, r5}) 719.24352ms ago: executing program 1 (id=1186): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000003c0)=""/142, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) 0s ago: executing program 0 (id=1187): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) kernel console output (not intermixed with test programs): 66][ T7498] bridge_slave_1: entered allmulticast mode [ 385.817601][ T7498] bridge_slave_1: entered promiscuous mode [ 387.196233][ T7498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.853148][ T5878] usb 2-1: USB disconnect, device number 5 [ 389.073838][ T6321] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.228146][ T7498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.896372][ T6321] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.373553][ T7498] team0: Port device team_slave_0 added [ 391.655863][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.662727][ T6321] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.681795][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.691162][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.695140][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.696026][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.929617][ T7498] team0: Port device team_slave_1 added [ 393.700430][ T6321] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.784276][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.784294][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.784321][ T7498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.795094][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.795107][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.795122][ T7498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.802445][ T5809] Bluetooth: hci2: command tx timeout [ 394.459220][ T7498] hsr_slave_0: entered promiscuous mode [ 394.460837][ T7498] hsr_slave_1: entered promiscuous mode [ 394.461952][ T7498] debugfs: 'hsr0' already exists in 'hsr' [ 394.461978][ T7498] Cannot create hsr debugfs directory [ 395.172283][ T5786] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 395.322409][ T5786] usb 2-1: Using ep0 maxpacket: 32 [ 395.333014][ T5786] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 395.333044][ T5786] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 395.344643][ T5786] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 395.344675][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.344695][ T5786] usb 2-1: Product: syz [ 395.344709][ T5786] usb 2-1: Manufacturer: syz [ 395.344723][ T5786] usb 2-1: SerialNumber: syz [ 395.466871][ T5786] usb 2-1: config 0 descriptor?? [ 395.926195][ T5809] Bluetooth: hci2: command tx timeout [ 398.065169][ T5809] Bluetooth: hci2: command tx timeout [ 398.123072][ T6321] bridge_slave_1: left allmulticast mode [ 398.123103][ T6321] bridge_slave_1: left promiscuous mode [ 398.123404][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.494139][ T6321] bridge_slave_0: left allmulticast mode [ 398.494172][ T6321] bridge_slave_0: left promiscuous mode [ 398.494475][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.614960][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.630905][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.636734][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.646200][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.648768][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 399.896760][ T5906] usb 2-1: USB disconnect, device number 6 [ 400.122888][ T5809] Bluetooth: hci2: command tx timeout [ 400.702222][ T5809] Bluetooth: hci3: command tx timeout [ 402.765708][ T5809] Bluetooth: hci3: command tx timeout [ 404.842143][ T5809] Bluetooth: hci3: command tx timeout [ 405.099029][ T6321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.610944][ T6321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.670757][ T6321] bond0 (unregistering): Released all slaves [ 405.801731][ T7995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.804528][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 406.018346][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 406.075159][ T5878] usb 3-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 406.075192][ T5878] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.156560][ T5878] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 406.156593][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.156614][ T5878] usb 3-1: Product: syz [ 406.156628][ T5878] usb 3-1: Manufacturer: syz [ 406.156641][ T5878] usb 3-1: SerialNumber: syz [ 406.197339][ T5878] usb 3-1: config 0 descriptor?? [ 406.931841][ T5809] Bluetooth: hci3: command tx timeout [ 407.072490][ T6321] hsr_slave_0: left promiscuous mode [ 408.194222][ T6321] hsr_slave_1: left promiscuous mode [ 408.195412][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.195439][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.305792][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.305813][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.465476][ T6321] veth1_macvtap: left promiscuous mode [ 408.465557][ T6321] veth0_macvtap: left promiscuous mode [ 408.465758][ T6321] veth1_vlan: left promiscuous mode [ 408.465870][ T6321] veth0_vlan: left promiscuous mode [ 410.183268][ T43] usb 3-1: USB disconnect, device number 4 [ 416.192271][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 416.452115][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 416.486643][ T5878] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 416.486662][ T5878] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 416.541281][ T5878] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 416.541302][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.541314][ T5878] usb 1-1: Product: syz [ 416.541322][ T5878] usb 1-1: Manufacturer: syz [ 416.541329][ T5878] usb 1-1: SerialNumber: syz [ 416.555159][ T5878] usb 1-1: config 0 descriptor?? [ 416.836156][ T6321] team0 (unregistering): Port device team_slave_1 removed [ 417.230144][ T6321] team0 (unregistering): Port device team_slave_0 removed [ 419.612736][ T5878] usb 1-1: USB disconnect, device number 3 [ 422.356335][ T8081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.032306][ T5788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 425.202291][ T5788] usb 3-1: Using ep0 maxpacket: 32 [ 425.244818][ T5788] usb 3-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 425.244848][ T5788] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.256762][ T5788] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 425.256791][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.256809][ T5788] usb 3-1: Product: syz [ 425.256821][ T5788] usb 3-1: Manufacturer: syz [ 425.256833][ T5788] usb 3-1: SerialNumber: syz [ 425.360426][ T5788] usb 3-1: config 0 descriptor?? [ 427.007915][ T7897] chnl_net:caif_netlink_parms(): no params data found [ 427.969014][ T5878] usb 3-1: USB disconnect, device number 5 [ 428.570869][ T8127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.562969][ T8131] overlayfs: upper fs does not support file handles, falling back to index=off. [ 430.905758][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.905936][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.906183][ T7897] bridge_slave_0: entered allmulticast mode [ 430.948169][ T7897] bridge_slave_0: entered promiscuous mode [ 431.163846][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.163942][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.164074][ T7897] bridge_slave_1: entered allmulticast mode [ 431.165810][ T7897] bridge_slave_1: entered promiscuous mode [ 431.978350][ T6321] bridge_slave_1: left allmulticast mode [ 431.978382][ T6321] bridge_slave_1: left promiscuous mode [ 431.978667][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.113395][ T6321] bridge_slave_0: left allmulticast mode [ 432.113417][ T6321] bridge_slave_0: left promiscuous mode [ 432.114565][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.255096][ T6321] bridge_slave_1: left allmulticast mode [ 432.255117][ T6321] bridge_slave_1: left promiscuous mode [ 432.255612][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.389467][ T5878] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 432.496731][ T6321] bridge_slave_0: left allmulticast mode [ 432.496766][ T6321] bridge_slave_0: left promiscuous mode [ 432.497055][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.542261][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 432.603145][ T5878] usb 3-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 432.603176][ T5878] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 432.622671][ T5878] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 432.622701][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.622719][ T5878] usb 3-1: Product: syz [ 432.622731][ T5878] usb 3-1: Manufacturer: syz [ 432.622744][ T5878] usb 3-1: SerialNumber: syz [ 432.693728][ T5878] usb 3-1: config 0 descriptor?? [ 432.796521][ T8167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.450241][ T37] audit: type=1800 audit(1761948630.426:67): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.528" name="bus" dev="overlay" ino=844 res=0 errno=0 [ 436.139353][ T6321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.455596][ T6321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.610191][ T6321] bond0 (unregistering): Released all slaves [ 437.872264][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 437.960656][ T5789] usb 3-1: USB disconnect, device number 6 [ 438.070572][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.070606][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.070620][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.074555][ T43] usb 2-1: config 0 descriptor?? [ 438.148474][ T6321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.254829][ T6321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.406554][ T6321] bond0 (unregistering): Released all slaves [ 438.531608][ T7897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.606083][ T43] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 438.651475][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 438.764894][ T7897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.064251][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.064984][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.239896][ T43] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 439.364185][ T43] usb 2-1: USB disconnect, device number 7 [ 439.521152][ T7897] team0: Port device team_slave_0 added [ 439.548680][ T8198] fuse: Bad value for 'fd' [ 440.273956][ T8197] fido_id[8197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 440.289079][ T7897] team0: Port device team_slave_1 added [ 440.309983][ T7944] chnl_net:caif_netlink_parms(): no params data found [ 440.381516][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.381598][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.694053][ T6321] hsr_slave_0: left promiscuous mode [ 442.734652][ T6321] hsr_slave_1: left promiscuous mode [ 442.735739][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.814152][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.988135][ T6321] hsr_slave_0: left promiscuous mode [ 443.032509][ T6321] hsr_slave_1: left promiscuous mode [ 443.033699][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.095024][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.633136][ T6321] team0 (unregistering): Port device team_slave_1 removed [ 447.812922][ T6321] team0 (unregistering): Port device team_slave_0 removed [ 448.117014][ T8256] fuse: Bad value for 'fd' [ 451.303742][ T6321] team0 (unregistering): Port device team_slave_1 removed [ 451.673272][ T6321] team0 (unregistering): Port device team_slave_0 removed [ 451.809139][ T37] audit: type=1326 audit(1761948647.796:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8275 comm="syz.0.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 451.816301][ T37] audit: type=1326 audit(1761948647.796:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8275 comm="syz.0.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 452.107374][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.125407][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.128831][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.148321][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.149945][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.202165][ T61] Bluetooth: hci5: command tx timeout [ 456.290926][ T61] Bluetooth: hci5: command tx timeout [ 456.402601][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.402758][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.403132][ T7944] bridge_slave_0: entered allmulticast mode [ 456.406932][ T7944] bridge_slave_0: entered promiscuous mode [ 456.873315][ T8316] fuse: Bad value for 'fd' [ 458.386862][ T61] Bluetooth: hci5: command tx timeout [ 460.812715][ T61] Bluetooth: hci5: command tx timeout [ 460.891572][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.943353][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.962357][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.971960][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.995900][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.840168][ T8278] chnl_net:caif_netlink_parms(): no params data found [ 463.786589][ T61] Bluetooth: hci2: command tx timeout [ 464.524254][ T37] audit: type=1326 audit(1761948660.506:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 464.525047][ T37] audit: type=1326 audit(1761948660.516:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 465.802713][ T61] Bluetooth: hci2: command tx timeout [ 467.093131][ T12] bridge_slave_0: left allmulticast mode [ 467.093153][ T12] bridge_slave_0: left promiscuous mode [ 467.093340][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.140520][ T8390] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 467.140542][ T8390] binder: 8389:8390 ioctl 4018620d 200000000100 returned -1 [ 467.277473][ T12] bridge_slave_1: left allmulticast mode [ 467.277515][ T12] bridge_slave_1: left promiscuous mode [ 467.278253][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.899021][ T61] Bluetooth: hci2: command tx timeout [ 468.532772][ T12] bridge_slave_0: left allmulticast mode [ 468.532803][ T12] bridge_slave_0: left promiscuous mode [ 468.533087][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.330814][ T61] Bluetooth: hci2: command tx timeout [ 471.814181][ T12] bond0 (unregistering): Released all slaves [ 472.496005][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.133974][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.251760][ T12] bond0 (unregistering): Released all slaves [ 473.756405][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.756489][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.756617][ T8278] bridge_slave_0: entered allmulticast mode [ 473.758504][ T8278] bridge_slave_0: entered promiscuous mode [ 473.842916][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.843064][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.843294][ T8278] bridge_slave_1: entered allmulticast mode [ 473.846450][ T8278] bridge_slave_1: entered promiscuous mode [ 474.356953][ T8278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.158162][ T37] audit: type=1326 audit(1761948671.146:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 476.603371][ T12] team0 (unregistering): Port device team_slave_1 removed [ 477.283281][ T12] team0 (unregistering): Port device team_slave_0 removed [ 478.624388][ T8278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.079718][ T8278] team0: Port device team_slave_0 added [ 483.123372][ T8278] team0: Port device team_slave_1 added [ 484.133470][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.133488][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.133515][ T8278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.136930][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.136945][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.136972][ T8278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.325511][ T8278] hsr_slave_0: entered promiscuous mode [ 487.327118][ T8278] hsr_slave_1: entered promiscuous mode [ 487.328169][ T8278] debugfs: 'hsr0' already exists in 'hsr' [ 487.328195][ T8278] Cannot create hsr debugfs directory [ 487.333234][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 491.562749][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.577139][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.577374][ T8335] bridge_slave_0: entered allmulticast mode [ 491.586152][ T8335] bridge_slave_0: entered promiscuous mode [ 491.844456][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.844617][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.844823][ T8335] bridge_slave_1: entered allmulticast mode [ 491.853301][ T8335] bridge_slave_1: entered promiscuous mode [ 495.691514][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.724519][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.536610][ T8335] team0: Port device team_slave_0 added [ 498.637264][ T5786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 498.802239][ T8335] team0: Port device team_slave_1 added [ 498.812349][ T5786] usb 2-1: Using ep0 maxpacket: 32 [ 498.819711][ T5786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 498.833455][ T5786] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 498.833487][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.833507][ T5786] usb 2-1: Product: syz [ 498.833521][ T5786] usb 2-1: Manufacturer: syz [ 498.833535][ T5786] usb 2-1: SerialNumber: syz [ 498.933867][ T5786] usb 2-1: config 0 descriptor?? [ 499.368684][ T5786] gs_usb 2-1:0.0: Configuring for 158 interfaces [ 499.542382][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.542402][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.542429][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.548574][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.548592][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.548630][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.569791][ T5786] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 499.569895][ T5786] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 499.862766][ T5786] usb 2-1: USB disconnect, device number 8 [ 500.262727][ T37] audit: type=1326 audit(1761948696.046:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8572 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 500.263044][ T37] audit: type=1326 audit(1761948696.056:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8572 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 501.943743][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.943826][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.481671][ T37] audit: type=1326 audit(1761948698.466:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8588 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 502.481713][ T37] audit: type=1326 audit(1761948698.466:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8588 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 502.483331][ T37] audit: type=1326 audit(1761948698.466:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8588 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 502.483384][ T37] audit: type=1326 audit(1761948698.476:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8588 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 502.483427][ T37] audit: type=1326 audit(1761948698.476:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8588 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 502.543882][ T37] audit: type=1326 audit(1761948698.536:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8588 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 502.543940][ T37] audit: type=1326 audit(1761948698.536:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8588 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 502.543987][ T37] audit: type=1326 audit(1761948698.536:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8588 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 502.618861][ T8335] hsr_slave_0: entered promiscuous mode [ 502.620549][ T8335] hsr_slave_1: entered promiscuous mode [ 502.621672][ T8335] debugfs: 'hsr0' already exists in 'hsr' [ 502.621694][ T8335] Cannot create hsr debugfs directory [ 505.408220][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 505.408335][ T37] audit: type=1326 audit(1761948701.396:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 505.408394][ T37] audit: type=1326 audit(1761948701.396:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 506.250243][ T8278] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 508.042077][ T8278] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 510.556643][ T8634] overlayfs: upper fs does not support file handles, falling back to index=off. [ 510.659483][ T8278] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 510.700043][ T8278] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.679781][ T8647] sit1: entered allmulticast mode [ 513.012741][ T8278] kthread_run failed with err -4 [ 516.475692][ T8335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.635310][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 516.658383][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 516.659825][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 516.661351][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 516.693647][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 517.250999][ T8678] syz.2.635 (8678) used greatest stack depth: 16760 bytes left [ 519.110017][ T61] Bluetooth: hci3: command tx timeout [ 521.082706][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 521.285119][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.287971][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.289626][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.292739][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.370501][ T5809] Bluetooth: hci3: command tx timeout [ 522.226126][ T37] audit: type=1326 audit(1761948718.216:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8742 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 522.226187][ T37] audit: type=1326 audit(1761948718.216:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8742 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 523.342909][ T61] Bluetooth: hci2: command tx timeout [ 523.408873][ T61] Bluetooth: hci3: command tx timeout [ 525.413659][ T61] Bluetooth: hci2: command tx timeout [ 525.498877][ T61] Bluetooth: hci3: command tx timeout [ 527.508012][ T61] Bluetooth: hci2: command tx timeout [ 528.333316][ T37] audit: type=1326 audit(1761948724.326:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 528.333375][ T37] audit: type=1326 audit(1761948724.326:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 529.147894][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 529.562276][ T61] Bluetooth: hci2: command tx timeout [ 530.709771][ T44] bridge_slave_1: left allmulticast mode [ 530.709802][ T44] bridge_slave_1: left promiscuous mode [ 530.710085][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.913862][ T44] bridge_slave_0: left allmulticast mode [ 530.913893][ T44] bridge_slave_0: left promiscuous mode [ 530.914191][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.159026][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.160300][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.285094][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.375387][ T44] bond0 (unregistering): Released all slaves [ 533.496396][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 533.642121][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 533.674139][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 533.839995][ T5906] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 533.840015][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.840026][ T5906] usb 1-1: Product: syz [ 533.840034][ T5906] usb 1-1: Manufacturer: syz [ 533.840041][ T5906] usb 1-1: SerialNumber: syz [ 533.845275][ T5906] usb 1-1: config 0 descriptor?? [ 534.428931][ T5906] gs_usb 1-1:0.0: Configuring for 158 interfaces [ 534.642841][ T5906] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 534.643023][ T5906] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 534.830293][ T9] usb 1-1: USB disconnect, device number 4 [ 535.210308][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.303737][ T44] hsr_slave_0: left promiscuous mode [ 535.383565][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.421317][ T44] hsr_slave_1: left promiscuous mode [ 535.422809][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.486777][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.430706][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.629360][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.162113][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 540.332591][ T44] team0 (unregistering): Port device team_slave_1 removed [ 540.365693][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 540.369594][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 540.381381][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 540.381409][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.381420][ T9] usb 2-1: Product: syz [ 540.381437][ T9] usb 2-1: Manufacturer: syz [ 540.381445][ T9] usb 2-1: SerialNumber: syz [ 540.387725][ T9] usb 2-1: config 0 descriptor?? [ 540.523608][ T44] team0 (unregistering): Port device team_slave_0 removed [ 540.826378][ T9] gs_usb 2-1:0.0: Configuring for 158 interfaces [ 541.044163][ T9] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 541.044267][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 541.284440][ T5906] usb 2-1: USB disconnect, device number 9 [ 541.670557][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.670716][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.670943][ T8686] bridge_slave_0: entered allmulticast mode [ 541.695182][ T8686] bridge_slave_0: entered promiscuous mode [ 541.735811][ T8728] chnl_net:caif_netlink_parms(): no params data found [ 541.759565][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.760075][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.760299][ T8686] bridge_slave_1: entered allmulticast mode [ 541.784318][ T8686] bridge_slave_1: entered promiscuous mode [ 544.195325][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.113756][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.837477][ T8686] team0: Port device team_slave_0 added [ 547.106177][ T8686] team0: Port device team_slave_1 added [ 547.109812][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.109899][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.110029][ T8728] bridge_slave_0: entered allmulticast mode [ 547.114958][ T8728] bridge_slave_0: entered promiscuous mode [ 547.274504][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.274629][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.274798][ T8728] bridge_slave_1: entered allmulticast mode [ 547.276932][ T8728] bridge_slave_1: entered promiscuous mode [ 547.652083][ T37] audit: type=1326 audit(1761948743.636:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.652157][ T37] audit: type=1326 audit(1761948743.636:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.652204][ T37] audit: type=1326 audit(1761948743.636:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.652859][ T37] audit: type=1326 audit(1761948743.646:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.653344][ T37] audit: type=1326 audit(1761948743.646:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.653390][ T37] audit: type=1326 audit(1761948743.646:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.654339][ T37] audit: type=1326 audit(1761948743.646:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.654393][ T37] audit: type=1326 audit(1761948743.646:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.654866][ T37] audit: type=1326 audit(1761948743.646:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.654913][ T37] audit: type=1326 audit(1761948743.646:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 547.989993][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.990012][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.990038][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.265340][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.265359][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.265394][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.276159][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.348258][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.274795][ T8728] team0: Port device team_slave_0 added [ 552.505887][ T8728] team0: Port device team_slave_1 added [ 552.660686][ T8686] hsr_slave_0: entered promiscuous mode [ 552.665640][ T8686] hsr_slave_1: entered promiscuous mode [ 552.667079][ T8686] debugfs: 'hsr0' already exists in 'hsr' [ 552.667103][ T8686] Cannot create hsr debugfs directory [ 552.690454][ T9050] fuse: Bad value for 'fd' [ 553.730458][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.730477][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.730502][ T8728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.510992][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.511047][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.511220][ T8728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.741179][ T9067] program syz.1.717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.741460][ T9067] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 556.546780][ T8728] hsr_slave_0: entered promiscuous mode [ 556.551631][ T8728] hsr_slave_1: entered promiscuous mode [ 556.584658][ T8728] debugfs: 'hsr0' already exists in 'hsr' [ 556.584703][ T8728] Cannot create hsr debugfs directory [ 561.678465][ T9104] tmpfs: Unknown parameter 'usrquota_i' [ 561.685431][ T9104] overlayfs: upper fs does not support file handles, falling back to index=off. [ 562.493399][ T44] bridge_slave_1: left allmulticast mode [ 562.493432][ T44] bridge_slave_1: left promiscuous mode [ 562.493771][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.568756][ T44] bridge_slave_0: left allmulticast mode [ 562.568787][ T44] bridge_slave_0: left promiscuous mode [ 562.570023][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.003508][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 564.003537][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 564.003561][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 564.003575][ T61] Workqueue: hci1 hci_rx_work [ 564.003605][ T61] Call Trace: [ 564.003613][ T61] [ 564.003623][ T61] dump_stack_lvl+0x189/0x250 [ 564.003664][ T61] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.003697][ T61] ? __pfx__printk+0x10/0x10 [ 564.003730][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 564.003752][ T61] ? kernfs_path_from_node+0x243/0x280 [ 564.003772][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 564.003799][ T61] sysfs_create_dir_ns+0x259/0x280 [ 564.003820][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 564.003845][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.003873][ T61] ? rt_spin_unlock+0x161/0x200 [ 564.003900][ T61] kobject_add_internal+0x5a5/0xb50 [ 564.003944][ T61] kobject_add+0x155/0x220 [ 564.003982][ T61] ? __pfx_kobject_add+0x10/0x10 [ 564.004022][ T61] ? get_device_parent+0x370/0x3a0 [ 564.004064][ T61] device_add+0x408/0xb50 [ 564.004097][ T61] hci_conn_add_sysfs+0xd5/0x1e0 [ 564.004137][ T61] le_conn_complete_evt+0xf39/0x1500 [ 564.004184][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.004216][ T61] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 564.004246][ T61] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.004279][ T61] ? skb_pull_data+0xfb/0x200 [ 564.004315][ T61] hci_le_conn_complete_evt+0x187/0x450 [ 564.004353][ T61] hci_event_packet+0x78f/0x1200 [ 564.004381][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.004412][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 564.004449][ T61] ? hci_send_to_monitor+0xe2/0x570 [ 564.004483][ T61] hci_rx_work+0x46a/0xe80 [ 564.004518][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 564.004548][ T61] process_scheduled_works+0xae1/0x17b0 [ 564.004613][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 564.004663][ T61] worker_thread+0x8a0/0xda0 [ 564.004727][ T61] kthread+0x711/0x8a0 [ 564.004763][ T61] ? __pfx_worker_thread+0x10/0x10 [ 564.004790][ T61] ? __pfx_kthread+0x10/0x10 [ 564.004819][ T61] ? rt_spin_unlock+0x150/0x200 [ 564.004848][ T61] ? rt_spin_unlock+0x161/0x200 [ 564.004869][ T61] ? __pfx_kthread+0x10/0x10 [ 564.004901][ T61] ret_from_fork+0x4bc/0x870 [ 564.004931][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 564.004968][ T61] ? __switch_to_asm+0x39/0x70 [ 564.004989][ T61] ? __switch_to_asm+0x33/0x70 [ 564.005009][ T61] ? __pfx_kthread+0x10/0x10 [ 564.005050][ T61] ret_from_fork_asm+0x1a/0x30 [ 564.005096][ T61] [ 564.005129][ T61] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.005173][ T61] Bluetooth: hci1: failed to register connection device [ 564.144832][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.144912][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.093035][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.553576][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.006076][ T44] bond0 (unregistering): Released all slaves [ 570.689289][ T5809] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 575.342284][ T44] hsr_slave_0: left promiscuous mode [ 575.382796][ T44] hsr_slave_1: left promiscuous mode [ 575.384020][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.422871][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.313260][ T44] team0 (unregistering): Port device team_slave_1 removed [ 576.328252][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 576.360514][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 576.364041][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 576.365292][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 576.366059][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 576.492858][ T44] team0 (unregistering): Port device team_slave_0 removed [ 576.982566][ T9195] tipc: Enabling of bearer rejected, already enabled [ 577.413261][ T9216] fuse: Bad value for 'fd' [ 577.426305][ T9217] program syz.2.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.426599][ T9217] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 578.444681][ T61] Bluetooth: hci5: command tx timeout [ 580.557788][ T61] Bluetooth: hci5: command tx timeout [ 583.433385][ T61] Bluetooth: hci5: command tx timeout [ 583.726371][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 583.744458][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 583.782371][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 583.840712][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 583.853192][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 584.867237][ T9264] fuse: Bad value for 'fd' [ 585.482518][ T61] Bluetooth: hci5: command tx timeout [ 585.778277][ T9269] tmpfs: Unknown parameter 'usrquota_inode_hardlim' [ 585.785461][ T9269] overlayfs: upper fs does not support file handles, falling back to index=off. [ 586.521595][ T61] Bluetooth: hci6: command tx timeout [ 586.798468][ T9208] chnl_net:caif_netlink_parms(): no params data found [ 588.398951][ T44] bridge_slave_1: left allmulticast mode [ 588.398975][ T44] bridge_slave_1: left promiscuous mode [ 588.399143][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.463138][ T44] bridge_slave_0: left allmulticast mode [ 588.463165][ T44] bridge_slave_0: left promiscuous mode [ 588.463344][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.630788][ T61] Bluetooth: hci6: command tx timeout [ 589.276379][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.433542][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.678128][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 590.102771][ T44] bond0 (unregistering): Released all slaves [ 590.682392][ T61] Bluetooth: hci6: command tx timeout [ 590.768333][ T9304] bridge0: entered promiscuous mode [ 590.768523][ T9304] macvlan2: entered promiscuous mode [ 591.260790][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.260846][ T43] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 591.260872][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.275475][ T43] usb 3-1: config 0 descriptor?? [ 592.518940][ T43] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 592.596462][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input6 [ 593.027685][ T61] Bluetooth: hci6: command tx timeout [ 594.318737][ T43] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 594.362724][ T43] usb 3-1: USB disconnect, device number 7 [ 594.447322][ T9343] fido_id[9343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 594.544097][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 594.544111][ T37] audit: type=1326 audit(1761948790.536:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.544142][ T37] audit: type=1326 audit(1761948790.536:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.545557][ T37] audit: type=1326 audit(1761948790.536:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.545589][ T37] audit: type=1326 audit(1761948790.536:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.545613][ T37] audit: type=1326 audit(1761948790.536:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.546233][ T37] audit: type=1326 audit(1761948790.536:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.546262][ T37] audit: type=1326 audit(1761948790.536:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.546286][ T37] audit: type=1326 audit(1761948790.536:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.546889][ T37] audit: type=1326 audit(1761948790.536:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.546918][ T37] audit: type=1326 audit(1761948790.536:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9344 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 594.974443][ T44] hsr_slave_0: left promiscuous mode [ 595.239449][ T44] hsr_slave_1: left promiscuous mode [ 595.240575][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.275851][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.835615][ T993] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 598.150578][ T9363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.347779][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.347818][ T993] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 598.347832][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.358907][ T993] usb 1-1: config 0 descriptor?? [ 598.974662][ T993] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 599.038464][ T993] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7 [ 599.739297][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.739919][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.792981][ T44] team0 (unregistering): Port device team_slave_1 removed [ 599.923247][ T44] team0 (unregistering): Port device team_slave_0 removed [ 600.014113][ T993] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 600.045019][ T993] usb 1-1: USB disconnect, device number 5 [ 600.173725][ T9371] ======================================================= [ 600.173725][ T9371] WARNING: The mand mount option has been deprecated and [ 600.173725][ T9371] and is ignored by this kernel. Remove the mand [ 600.173725][ T9371] option from the mount to silence this warning. [ 600.173725][ T9371] ======================================================= [ 600.250621][ T9370] fido_id[9370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 601.581314][ T9208] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.581479][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.581866][ T9208] bridge_slave_0: entered allmulticast mode [ 601.613379][ T9208] bridge_slave_0: entered promiscuous mode [ 601.700550][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.700637][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.700807][ T9208] bridge_slave_1: entered allmulticast mode [ 601.833193][ T9208] bridge_slave_1: entered promiscuous mode [ 601.992758][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 601.992777][ T37] audit: type=1326 audit(1761948797.946:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.992824][ T37] audit: type=1326 audit(1761948797.946:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.992869][ T37] audit: type=1326 audit(1761948797.956:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.992914][ T37] audit: type=1326 audit(1761948797.956:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.992956][ T37] audit: type=1326 audit(1761948797.956:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.993003][ T37] audit: type=1326 audit(1761948797.956:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.993061][ T37] audit: type=1326 audit(1761948797.956:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.993107][ T37] audit: type=1326 audit(1761948797.956:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.993157][ T37] audit: type=1326 audit(1761948797.956:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 601.993203][ T37] audit: type=1326 audit(1761948797.956:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9382 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 603.841616][ T9208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.934775][ T9208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.709658][ T9208] team0: Port device team_slave_0 added [ 605.011097][ T9208] team0: Port device team_slave_1 added [ 606.044030][ T9400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.472585][ T9408] program syz.0.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.475793][ T9408] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 608.033874][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 608.033895][ T37] audit: type=1326 audit(1761948804.026:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.033957][ T37] audit: type=1326 audit(1761948804.026:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.035848][ T37] audit: type=1326 audit(1761948804.026:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.035882][ T37] audit: type=1326 audit(1761948804.026:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.035907][ T37] audit: type=1326 audit(1761948804.026:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.064478][ T37] audit: type=1326 audit(1761948804.026:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.064538][ T37] audit: type=1326 audit(1761948804.026:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.064585][ T37] audit: type=1326 audit(1761948804.026:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.064633][ T37] audit: type=1326 audit(1761948804.026:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 608.064676][ T37] audit: type=1326 audit(1761948804.026:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9414 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 609.487615][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.487635][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.487664][ T9208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.488684][ T9246] chnl_net:caif_netlink_parms(): no params data found [ 609.499433][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.499451][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.499477][ T9208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.046351][ T9437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.410499][ T6061] bridge_slave_1: left allmulticast mode [ 613.410532][ T6061] bridge_slave_1: left promiscuous mode [ 613.410907][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.497785][ T6061] bridge_slave_0: left allmulticast mode [ 613.497819][ T6061] bridge_slave_0: left promiscuous mode [ 613.500037][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.524532][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 613.524553][ T37] audit: type=1326 audit(1761948809.496:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.524604][ T37] audit: type=1326 audit(1761948809.496:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.527342][ T37] audit: type=1326 audit(1761948809.516:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.527395][ T37] audit: type=1326 audit(1761948809.516:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.527441][ T37] audit: type=1326 audit(1761948809.516:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.790187][ T37] audit: type=1326 audit(1761948809.516:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.790418][ T37] audit: type=1326 audit(1761948809.516:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.790466][ T37] audit: type=1326 audit(1761948809.516:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.790520][ T37] audit: type=1326 audit(1761948809.516:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 613.790566][ T37] audit: type=1326 audit(1761948809.516:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 618.306300][ T9477] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 618.346632][ T9477] overlayfs: upper fs does not support file handles, falling back to index=off. [ 618.462889][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.562711][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.619414][ T6061] bond0 (unregistering): Released all slaves [ 618.678903][ T9208] hsr_slave_0: entered promiscuous mode [ 618.680511][ T9208] hsr_slave_1: entered promiscuous mode [ 618.681395][ T9208] debugfs: 'hsr0' already exists in 'hsr' [ 618.681413][ T9208] Cannot create hsr debugfs directory [ 618.712784][ T5788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 618.894327][ T5788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.894380][ T5788] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 618.894396][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.967479][ T5788] usb 2-1: config 0 descriptor?? [ 619.213269][ T6061] hsr_slave_0: left promiscuous mode [ 619.252266][ T6061] hsr_slave_1: left promiscuous mode [ 619.270831][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.296141][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.410111][ T5788] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 619.483537][ T5788] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input8 [ 620.415638][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.418026][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.691309][ T5788] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 620.704341][ T5788] usb 2-1: USB disconnect, device number 10 [ 620.803442][ T9490] fido_id[9490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 621.093551][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 621.093571][ T37] audit: type=1326 audit(1761948817.086:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.093619][ T37] audit: type=1326 audit(1761948817.086:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.100737][ T37] audit: type=1326 audit(1761948817.086:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.100803][ T37] audit: type=1326 audit(1761948817.086:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.100851][ T37] audit: type=1326 audit(1761948817.086:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.143905][ T37] audit: type=1326 audit(1761948817.086:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.143955][ T37] audit: type=1326 audit(1761948817.086:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.143995][ T37] audit: type=1326 audit(1761948817.086:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.144034][ T37] audit: type=1326 audit(1761948817.086:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.144073][ T37] audit: type=1326 audit(1761948817.086:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 621.237515][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 621.402772][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 621.873165][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.873421][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.874102][ T9246] bridge_slave_0: entered allmulticast mode [ 621.877414][ T9246] bridge_slave_0: entered promiscuous mode [ 622.137036][ T9487] macvlan3: entered promiscuous mode [ 622.224511][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.224717][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.224965][ T9246] bridge_slave_1: entered allmulticast mode [ 622.228778][ T9246] bridge_slave_1: entered promiscuous mode [ 624.691262][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.691313][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.189155][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.213152][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.521496][ T9246] team0: Port device team_slave_0 added [ 634.669090][ T9246] team0: Port device team_slave_1 added [ 635.328914][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.328934][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.328963][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.293336][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.293355][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.293383][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.719069][ T9246] hsr_slave_0: entered promiscuous mode [ 636.720140][ T9246] hsr_slave_1: entered promiscuous mode [ 636.720975][ T9246] debugfs: 'hsr0' already exists in 'hsr' [ 636.720992][ T9246] Cannot create hsr debugfs directory [ 644.929652][ T9566] overlayfs: failed to resolve './file1': -2 [ 648.556337][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 648.573914][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 648.575834][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 648.577208][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 648.578159][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.522086][ T993] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 649.522373][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 649.652191][ T993] usb 3-1: device descriptor read/64, error -32 [ 649.823135][ T9587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.827739][ T9587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.830456][ T9587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.841058][ T9587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.849847][ T9587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.942134][ T993] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 650.132134][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 650.134722][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 650.137791][ T993] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 650.137808][ T993] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 650.137820][ T993] usb 3-1: Product: syz [ 650.137829][ T993] usb 3-1: Manufacturer: syz [ 650.137837][ T993] usb 3-1: SerialNumber: syz [ 650.191246][ T993] usb 3-1: config 0 descriptor?? [ 650.211732][ T993] hub 3-1:0.0: bad descriptor, ignoring hub [ 650.211759][ T993] hub 3-1:0.0: probe with driver hub failed with error -5 [ 650.292197][ T9305] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 651.306461][ T9305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.306518][ T9305] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 651.306542][ T9305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.342085][ T9587] Bluetooth: hci2: command tx timeout [ 651.487392][ T9305] usb 1-1: config 0 descriptor?? [ 651.677038][ T10] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 652.101412][ T9587] Bluetooth: hci3: command tx timeout [ 652.330661][ T9305] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 652.365246][ T9305] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input9 [ 652.673491][ T9305] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 652.903663][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.907353][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.980853][ T9611] usb 1-1: USB disconnect, device number 6 [ 652.983152][ T10] usb 3-1: device descriptor read/all, error -71 [ 653.662143][ T9587] Bluetooth: hci2: command tx timeout [ 654.144842][ T9587] Bluetooth: hci3: command tx timeout [ 654.718905][ T10] usb 3-1: USB disconnect, device number 9 [ 655.513583][ T9627] binder: BINDER_SET_CONTEXT_MGR already set [ 655.513602][ T9627] binder: 9625:9627 ioctl 4018620d 200000000040 returned -16 [ 655.584664][ T9627] binder: 9625:9627 ioctl c0306201 200000000500 returned -11 [ 655.724488][ T9587] Bluetooth: hci2: command tx timeout [ 656.335285][ T9587] Bluetooth: hci3: command tx timeout [ 657.802128][ T9587] Bluetooth: hci2: command tx timeout [ 658.362149][ T9587] Bluetooth: hci3: command tx timeout [ 661.396899][ T9581] chnl_net:caif_netlink_parms(): no params data found [ 661.479549][ T9597] chnl_net:caif_netlink_parms(): no params data found [ 661.705182][ T1143] bridge_slave_1: left allmulticast mode [ 661.705214][ T1143] bridge_slave_1: left promiscuous mode [ 661.705496][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.943334][ T1143] bridge_slave_0: left allmulticast mode [ 661.943359][ T1143] bridge_slave_0: left promiscuous mode [ 661.943564][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.212681][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.284639][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.417219][ T1143] bond0 (unregistering): Released all slaves [ 664.573948][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 664.573963][ T37] audit: type=1326 audit(1761948860.446:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.573994][ T37] audit: type=1326 audit(1761948860.446:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.574020][ T37] audit: type=1326 audit(1761948860.456:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.656878][ T37] audit: type=1326 audit(1761948860.646:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.656937][ T37] audit: type=1326 audit(1761948860.646:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.656979][ T37] audit: type=1326 audit(1761948860.646:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.657026][ T37] audit: type=1326 audit(1761948860.646:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.661190][ T37] audit: type=1326 audit(1761948860.646:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.661246][ T37] audit: type=1326 audit(1761948860.646:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 664.857764][ T37] audit: type=1326 audit(1761948860.786:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.2.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 665.254275][ T9695] mkiss: ax0: crc mode is auto. [ 665.782159][ T1143] hsr_slave_0: left promiscuous mode [ 665.822687][ T1143] hsr_slave_1: left promiscuous mode [ 665.823470][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.983403][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.276272][ T61] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 667.012101][ T8731] Bluetooth: hci3: command 0x0405 tx timeout [ 668.023008][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 668.222944][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 671.814748][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.814986][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.815303][ T9581] bridge_slave_0: entered allmulticast mode [ 672.790700][ T9581] bridge_slave_0: entered promiscuous mode [ 673.258815][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.258943][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.259107][ T9581] bridge_slave_1: entered allmulticast mode [ 673.260836][ T9581] bridge_slave_1: entered promiscuous mode [ 673.261877][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.262225][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.262406][ T9597] bridge_slave_0: entered allmulticast mode [ 673.265062][ T9597] bridge_slave_0: entered promiscuous mode [ 673.269504][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.269703][ T9597] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.269891][ T9597] bridge_slave_1: entered allmulticast mode [ 673.277826][ T9597] bridge_slave_1: entered promiscuous mode [ 674.370446][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.445728][ T9597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.458529][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.486941][ T9597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.534658][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 674.534685][ T37] audit: type=1326 audit(1761948870.526:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 674.536467][ T37] audit: type=1326 audit(1761948870.526:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 674.536760][ T37] audit: type=1326 audit(1761948870.526:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 674.539446][ T37] audit: type=1326 audit(1761948870.526:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 674.541141][ T37] audit: type=1326 audit(1761948870.526:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 674.541468][ T37] audit: type=1326 audit(1761948870.526:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 674.897780][ T8731] Bluetooth: hci4: connection err: -111 [ 675.159856][ T37] audit: type=1326 audit(1761948870.526:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 675.185193][ T37] audit: type=1326 audit(1761948871.176:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 675.185936][ T37] audit: type=1326 audit(1761948871.176:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 675.186284][ T37] audit: type=1326 audit(1761948871.176:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9769 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 677.637071][ T9581] team0: Port device team_slave_0 added [ 677.638862][ T9597] team0: Port device team_slave_0 added [ 677.645398][ T9597] team0: Port device team_slave_1 added [ 677.807561][ T9581] team0: Port device team_slave_1 added [ 679.628367][ T8731] Bluetooth: hci0: connection err: -111 [ 679.717186][ T9597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.717206][ T9597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.717236][ T9597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.260395][ T9597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.260414][ T9597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.260445][ T9597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.261373][ T1143] bridge_slave_1: left allmulticast mode [ 680.261401][ T1143] bridge_slave_1: left promiscuous mode [ 680.261676][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.404115][ T1143] bridge_slave_0: left allmulticast mode [ 680.404164][ T1143] bridge_slave_0: left promiscuous mode [ 680.441092][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.635417][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.863126][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.539302][ T9851] netlink: 236 bytes leftover after parsing attributes in process `syz.2.908'. [ 684.567923][ T1143] bond0 (unregistering): Released all slaves [ 684.798187][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.798205][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.798235][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.267745][ T8731] Bluetooth: hci1: connection err: -111 [ 685.391256][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.391269][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.391286][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.255627][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.257925][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.225093][ T9875] binder: 9874:9875 ioctl c0306201 200000000500 returned -11 [ 688.071490][ T9597] hsr_slave_0: entered promiscuous mode [ 688.079110][ T9597] hsr_slave_1: entered promiscuous mode [ 688.088356][ T9597] debugfs: 'hsr0' already exists in 'hsr' [ 688.088386][ T9597] Cannot create hsr debugfs directory [ 688.200407][ T1143] hsr_slave_0: left promiscuous mode [ 688.232119][ T1143] hsr_slave_1: left promiscuous mode [ 688.232878][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.262850][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.334093][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.665604][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.849394][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.203337][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.656842][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.334913][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.662061][ T8731] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 692.726616][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 692.950408][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.019321][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.102841][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.447007][ T9912] binder: 9911:9912 ioctl c0306201 200000000500 returned -11 [ 693.489785][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 694.546788][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.645096][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.744026][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.229091][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.557090][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.869895][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.931381][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.096344][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.108357][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.645357][ T9944] binder: 9941:9944 ioctl c0306201 200000000500 returned -11 [ 699.728439][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 699.728460][ T37] audit: type=1326 audit(1761948895.716:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728512][ T37] audit: type=1326 audit(1761948895.716:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728560][ T37] audit: type=1326 audit(1761948895.716:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728606][ T37] audit: type=1326 audit(1761948895.716:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728655][ T37] audit: type=1326 audit(1761948895.716:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728703][ T37] audit: type=1326 audit(1761948895.716:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728750][ T37] audit: type=1326 audit(1761948895.716:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728797][ T37] audit: type=1326 audit(1761948895.716:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728844][ T37] audit: type=1326 audit(1761948895.716:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 699.728892][ T37] audit: type=1326 audit(1761948895.716:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9948 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd261fefc9 code=0x7ffc0000 [ 700.093070][ T8731] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 700.128214][ T8731] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 700.146481][ T8731] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 700.159430][ T8731] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 700.189066][ T8731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 701.730173][ T8731] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 702.353151][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.360891][ T9587] Bluetooth: hci5: command tx timeout [ 702.572053][ T9305] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 702.723556][ T9305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.723589][ T9305] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 702.723603][ T9305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.727389][ T9305] usb 2-1: config 0 descriptor?? [ 703.163670][ T9305] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 703.196733][ T9305] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input10 [ 704.109120][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.125462][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.362350][ T9587] Bluetooth: hci5: command tx timeout [ 704.436584][ T9305] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 704.478193][ T9305] usb 2-1: USB disconnect, device number 11 [ 704.790495][ T9994] fido_id[9994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 705.077325][ T1143] bridge_slave_1: left allmulticast mode [ 705.077358][ T1143] bridge_slave_1: left promiscuous mode [ 705.077640][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.190995][ T1143] bridge_slave_0: left allmulticast mode [ 705.191029][ T1143] bridge_slave_0: left promiscuous mode [ 705.191335][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.876785][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.964743][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.075319][ T8731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 706.099399][ T61] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 706.103906][ T8731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 706.110179][ T8731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 706.245291][ T8731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 706.246429][ T8731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 706.321276][ T1143] bond0 (unregistering): Released all slaves [ 706.404327][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 706.460820][ T8731] Bluetooth: hci5: command tx timeout [ 707.309128][T10024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 707.644510][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.723136][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.366852][ T8731] Bluetooth: hci2: command tx timeout [ 708.418472][ T8731] Bluetooth: hci0: connection err: -111 [ 708.522925][ T8731] Bluetooth: hci5: command tx timeout [ 709.053568][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 709.883810][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 710.424140][ T9611] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 710.452164][ T8731] Bluetooth: hci2: command tx timeout [ 710.586505][ T9611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.586561][ T9611] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 710.586586][ T9611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.603886][ T9611] usb 2-1: config 0 descriptor?? [ 711.038695][ T9611] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 711.090675][ T9611] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input11 [ 711.578763][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.602888][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.619341][ T9611] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 711.633566][ T9611] usb 2-1: USB disconnect, device number 12 [ 711.823932][T10070] fido_id[10070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 712.528016][ T8731] Bluetooth: hci2: command tx timeout [ 712.724384][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 714.508985][ T8731] Bluetooth: hci1: connection err: -111 [ 714.602113][ T8731] Bluetooth: hci2: command tx timeout [ 715.014374][ T9958] chnl_net:caif_netlink_parms(): no params data found [ 716.884832][T10011] chnl_net:caif_netlink_parms(): no params data found [ 717.222111][ T9611] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 717.790871][ T9611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.790907][ T9611] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 717.790920][ T9611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.797141][ T9611] usb 2-1: config 0 descriptor?? [ 718.148295][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.148485][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.148731][ T9958] bridge_slave_0: entered allmulticast mode [ 718.151762][ T9958] bridge_slave_0: entered promiscuous mode [ 718.194369][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.204302][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.295788][ T9611] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 718.302989][ T9958] bridge_slave_1: entered allmulticast mode [ 718.347258][ T9611] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input12 [ 718.627191][ T9958] bridge_slave_1: entered promiscuous mode [ 718.752769][T10124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.754774][T10124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.955511][ T9611] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 719.034853][ T9611] usb 2-1: USB disconnect, device number 13 [ 719.220698][T10147] fido_id[10147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 719.594435][ T8731] Bluetooth: hci1: connection err: -111 [ 720.193841][ T9958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.665215][ T9958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.811574][T10176] binder: 10174:10176 ioctl 4018620d 0 returned -22 [ 725.184924][T10181] netlink: 36 bytes leftover after parsing attributes in process `syz.1.981'. [ 725.876806][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.876958][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.877222][T10011] bridge_slave_0: entered allmulticast mode [ 725.880944][T10011] bridge_slave_0: entered promiscuous mode [ 725.918443][ T9958] team0: Port device team_slave_0 added [ 725.919186][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.919418][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.919621][T10011] bridge_slave_1: entered allmulticast mode [ 725.956461][T10011] bridge_slave_1: entered promiscuous mode [ 725.964440][ T9958] team0: Port device team_slave_1 added [ 729.859896][T10214] binder: 10213:10214 ioctl 4018620d 0 returned -22 [ 729.946573][T10011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.948927][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.948944][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.948972][ T9958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.958951][T10011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.960695][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.960710][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.960735][ T9958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.373346][ T5789] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 731.435333][T10011] team0: Port device team_slave_0 added [ 732.018898][ T5789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.018955][ T5789] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 732.018979][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.092467][ T5789] usb 1-1: config 0 descriptor?? [ 732.161656][T10011] team0: Port device team_slave_1 added [ 732.937022][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.937730][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.946218][ T9958] hsr_slave_0: entered promiscuous mode [ 732.950534][ T9958] hsr_slave_1: entered promiscuous mode [ 732.953110][ T9958] debugfs: 'hsr0' already exists in 'hsr' [ 732.953137][ T9958] Cannot create hsr debugfs directory [ 733.256504][T10248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 733.442568][T10011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.442625][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.442642][T10011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.762090][T10011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.762109][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.762243][T10011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.765239][T10259] syz_tun: entered allmulticast mode [ 734.147326][ T5789] usbhid 1-1:0.0: can't add hid device: -71 [ 734.147489][ T5789] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 734.224399][ T5789] usb 1-1: USB disconnect, device number 7 [ 734.626426][T10269] binder: 10268:10269 ioctl 4018620d 0 returned -22 [ 734.759351][T10257] syz_tun: left allmulticast mode [ 735.518512][T10278] program syz.0.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.518921][T10278] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 735.722307][T10011] hsr_slave_0: entered promiscuous mode [ 735.723945][T10011] hsr_slave_1: entered promiscuous mode [ 735.772277][T10011] debugfs: 'hsr0' already exists in 'hsr' [ 735.773293][T10011] Cannot create hsr debugfs directory [ 736.597649][ T1143] bridge_slave_1: left allmulticast mode [ 736.597696][ T1143] bridge_slave_1: left promiscuous mode [ 736.597982][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.825310][ T1143] bridge_slave_0: left allmulticast mode [ 736.825342][ T1143] bridge_slave_0: left promiscuous mode [ 736.825639][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.322902][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 738.694915][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.695081][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 738.695156][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.275835][ T10] usb 1-1: config 0 descriptor?? [ 740.678516][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.687075][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.924240][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.925248][T10310] binder: BINDER_SET_CONTEXT_MGR already set [ 740.925263][T10310] binder: 10309:10310 ioctl 4018620d 200000000040 returned -16 [ 740.962974][T10310] binder: 10309:10310 ioctl c0306201 200000000500 returned -11 [ 741.043608][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.351723][ T1143] bond0 (unregistering): Released all slaves [ 742.325570][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 742.325666][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 742.364946][ T10] usb 1-1: USB disconnect, device number 8 [ 743.153627][T10321] syz_tun: entered allmulticast mode [ 743.446463][ T1143] hsr_slave_0: left promiscuous mode [ 743.734295][ T1143] hsr_slave_1: left promiscuous mode [ 743.734987][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.793117][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.572831][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.572924][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.554999][ C0] vkms_vblank_simulate: vblank timer overrun [ 748.589962][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 749.303904][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.554605][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.131613][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.174245][T10374] binder: BINDER_SET_CONTEXT_MGR already set [ 751.174262][T10374] binder: 10373:10374 ioctl 4018620d 200000000040 returned -16 [ 751.175614][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 751.226134][T10374] binder: 10373:10374 ioctl c0306201 200000000500 returned -11 [ 751.541355][T10380] program syz.2.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.541636][T10380] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 752.185014][T10317] syz_tun: left allmulticast mode [ 753.677515][T10391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.606890][ T9587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 761.610209][ T9587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 761.612405][ T9587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 761.620131][ T9587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 761.627199][ T9587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.087555][T10431] syz_tun: entered allmulticast mode [ 762.835084][T10428] syz_tun: left allmulticast mode [ 763.742054][ T9587] Bluetooth: hci3: command tx timeout [ 763.963828][T10450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.038510][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 765.853593][ T9587] Bluetooth: hci3: command tx timeout [ 765.860388][ T10] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 765.891022][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 765.891057][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.072215][ T10] usb 3-1: can't set config #17, error -71 [ 766.187058][ T10] usb 3-1: USB disconnect, device number 10 [ 766.396085][ T44] bridge_slave_1: left allmulticast mode [ 766.396117][ T44] bridge_slave_1: left promiscuous mode [ 766.396442][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.453751][ T44] bridge_slave_0: left allmulticast mode [ 766.453774][ T44] bridge_slave_0: left promiscuous mode [ 766.454022][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.734041][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.832934][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.894032][ T44] bond0 (unregistering): Released all slaves [ 767.238436][T10426] chnl_net:caif_netlink_parms(): no params data found [ 769.766118][ T9587] Bluetooth: hci3: command tx timeout [ 769.836169][T10464] program syz.0.1046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.836438][T10464] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 771.353144][ T9587] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 771.434535][ T44] hsr_slave_0: left promiscuous mode [ 771.542019][ T44] hsr_slave_1: left promiscuous mode [ 771.543156][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.585668][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.806905][ T8731] Bluetooth: hci3: command tx timeout [ 772.418356][ T9587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 772.439785][ T9587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 772.461454][ T9587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 772.479021][ T9587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 772.480111][ T9587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 773.276766][T10506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.760546][ T9587] Bluetooth: hci5: command tx timeout [ 776.843286][ T9587] Bluetooth: hci5: command tx timeout [ 777.896633][ T44] team0 (unregistering): Port device team_slave_1 removed [ 778.669682][ T44] team0 (unregistering): Port device team_slave_0 removed [ 778.960363][ T8731] Bluetooth: hci5: command tx timeout [ 778.981432][ T9587] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 781.002573][ T9587] Bluetooth: hci5: command tx timeout [ 781.526501][T10518] syz_tun: entered allmulticast mode [ 781.580121][T10517] syz_tun: left allmulticast mode [ 781.965030][T10575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.611197][T10426] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.611347][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.611568][T10426] bridge_slave_0: entered allmulticast mode [ 784.619324][T10426] bridge_slave_0: entered promiscuous mode [ 784.676093][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.676250][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.676476][T10426] bridge_slave_1: entered allmulticast mode [ 784.702660][T10426] bridge_slave_1: entered promiscuous mode [ 786.831265][ T9587] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 787.796839][T10426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.003365][T10426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.372046][ T5786] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 790.528768][ T5786] usb 3-1: config 151 has an invalid interface number: 131 but max is 0 [ 790.528801][ T5786] usb 3-1: config 151 has no interface number 0 [ 790.528838][ T5786] usb 3-1: config 151 interface 131 has no altsetting 0 [ 790.547410][ T5786] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=4b.2c [ 790.547442][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.547464][ T5786] usb 3-1: Product: syz [ 790.547488][ T5786] usb 3-1: Manufacturer: syz [ 790.547503][ T5786] usb 3-1: SerialNumber: syz [ 790.900906][ T5786] usb 3-1: unknown interface protocol 0xc1, assuming v1 [ 790.900935][ T5786] usb 3-1: cannot find UAC_HEADER [ 791.082727][ T5786] snd-usb-audio 3-1:151.131: probe with driver snd-usb-audio failed with error -22 [ 791.102726][ T5786] usb 3-1: USB disconnect, device number 11 [ 791.170527][T10263] udevd[10263]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:151.131/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.205534][T10426] team0: Port device team_slave_0 added [ 791.227188][T10426] team0: Port device team_slave_1 added [ 792.784217][T10426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.784236][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.784265][T10426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.789434][T10426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.789451][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.789478][T10426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.342922][ T9587] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 795.198083][ T44] bridge_slave_1: left allmulticast mode [ 795.198115][ T44] bridge_slave_1: left promiscuous mode [ 795.198399][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.352571][ T44] bridge_slave_0: left allmulticast mode [ 795.352603][ T44] bridge_slave_0: left promiscuous mode [ 795.352900][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.285800][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.316597][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.285416][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.878702][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.319450][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.249238][ T9587] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 800.362836][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.386942][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.642367][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.141028][ T44] bond0 (unregistering): Released all slaves [ 807.766947][T10426] hsr_slave_0: entered promiscuous mode [ 807.776765][T10426] hsr_slave_1: entered promiscuous mode [ 807.778610][T10426] debugfs: 'hsr0' already exists in 'hsr' [ 807.778640][T10426] Cannot create hsr debugfs directory [ 809.340046][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.161907][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.311961][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.313953][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.286932][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.987289][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.022007][ T9587] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 812.040075][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.112862][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.491130][ T44] hsr_slave_0: left promiscuous mode [ 812.522341][ T44] hsr_slave_1: left promiscuous mode [ 812.523405][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.662754][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.738465][ T8731] Bluetooth: hci0: connection err: -111 [ 814.192014][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 814.629605][ T9] usb 1-1: config 151 has an invalid interface number: 131 but max is 0 [ 814.629636][ T9] usb 1-1: config 151 has no interface number 0 [ 814.629669][ T9] usb 1-1: config 151 interface 131 has no altsetting 0 [ 814.633160][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=4b.2c [ 814.633187][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.633206][ T9] usb 1-1: Product: syz [ 814.633219][ T9] usb 1-1: Manufacturer: syz [ 814.633233][ T9] usb 1-1: SerialNumber: syz [ 814.794662][T10787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.279208][ T9] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 817.279236][ T9] usb 1-1: cannot find UAC_HEADER [ 817.541198][ T9] snd-usb-audio 1-1:151.131: probe with driver snd-usb-audio failed with error -22 [ 817.556454][ T9] usb 1-1: USB disconnect, device number 9 [ 817.668298][ T8731] Bluetooth: hci0: connection err: -111 [ 818.149515][ T8731] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 818.622457][T10263] udevd[10263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:151.131/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.734279][T10818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.672975][ T44] team0 (unregistering): Port device team_slave_1 removed [ 822.712015][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 822.861971][ T43] usb 2-1: device descriptor read/64, error -71 [ 822.989116][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 823.009536][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.010959][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.027128][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.028739][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 823.114465][ T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 823.143051][ T44] team0 (unregistering): Port device team_slave_0 removed [ 823.252239][ T43] usb 2-1: device descriptor read/64, error -71 [ 823.382635][ T43] usb usb2-port1: attempt power cycle [ 823.432524][ T9587] Bluetooth: hci4: connection err: -111 [ 824.534448][ T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 824.735172][ T9587] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 825.032311][ T43] usb 2-1: device descriptor read/8, error -71 [ 825.082515][ T9587] Bluetooth: hci2: command tx timeout [ 825.532096][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 825.764752][ T43] usb 2-1: device not accepting address 17, error -71 [ 825.765710][ T43] usb usb2-port1: unable to enumerate USB device [ 825.950789][T10849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.807326][ T9587] Bluetooth: hci2: command tx timeout [ 829.882253][ T9587] Bluetooth: hci2: command tx timeout [ 832.898321][ T9587] Bluetooth: hci2: command tx timeout [ 833.348316][ T9587] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 834.553116][ T9587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 834.705098][ T9587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 834.709690][ T9587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 834.729726][ T9587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 834.769757][ T9587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 837.280920][ T9587] Bluetooth: hci3: command tx timeout [ 837.987342][T10830] chnl_net:caif_netlink_parms(): no params data found [ 839.322099][ T9587] Bluetooth: hci3: command tx timeout [ 839.351332][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.808875][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.861328][ T9587] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 839.987752][ T6282] bond0 (unregistering): Released all slaves [ 840.148069][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.351280][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.949877][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.104454][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.404814][ T8731] Bluetooth: hci3: command tx timeout [ 842.364787][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.352357][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.922199][ T8731] Bluetooth: hci3: command tx timeout [ 844.138791][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 844.138811][ T37] audit: type=1326 audit(1761949040.126:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.138868][ T37] audit: type=1326 audit(1761949040.126:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.139651][ T37] audit: type=1326 audit(1761949040.126:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.139699][ T37] audit: type=1326 audit(1761949040.126:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.139744][ T37] audit: type=1326 audit(1761949040.126:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.140243][ T37] audit: type=1326 audit(1761949040.126:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.140291][ T37] audit: type=1326 audit(1761949040.126:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.140336][ T37] audit: type=1326 audit(1761949040.126:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.141023][ T37] audit: type=1326 audit(1761949040.126:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.141069][ T37] audit: type=1326 audit(1761949040.126:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.0.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 844.478016][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.478101][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.478224][T10830] bridge_slave_0: entered allmulticast mode [ 844.493613][T10830] bridge_slave_0: entered promiscuous mode [ 844.717275][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.717359][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.717500][T10830] bridge_slave_1: entered allmulticast mode [ 844.719361][T10830] bridge_slave_1: entered promiscuous mode [ 845.207788][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.344389][ T8731] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 845.351929][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.909517][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.023659][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.119692][T10830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.156959][T10830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.281049][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.748943][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.884575][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.984341][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.143222][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.381927][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.445351][T10830] team0: Port device team_slave_0 added [ 849.462534][T10830] team0: Port device team_slave_1 added [ 849.891712][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 849.891729][ T37] audit: type=1326 audit(1761949045.876:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.891775][ T37] audit: type=1326 audit(1761949045.876:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.894314][ T37] audit: type=1326 audit(1761949045.876:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.894365][ T37] audit: type=1326 audit(1761949045.876:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.894406][ T37] audit: type=1326 audit(1761949045.876:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.894446][ T37] audit: type=1326 audit(1761949045.876:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.894487][ T37] audit: type=1326 audit(1761949045.876:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.894527][ T37] audit: type=1326 audit(1761949045.876:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.894567][ T37] audit: type=1326 audit(1761949045.876:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 849.894607][ T37] audit: type=1326 audit(1761949045.876:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa488efc9 code=0x7ffc0000 [ 850.307293][ T6282] bridge_slave_1: left allmulticast mode [ 850.307327][ T6282] bridge_slave_1: left promiscuous mode [ 850.307603][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.413810][ T6282] bridge_slave_0: left allmulticast mode [ 850.413841][ T6282] bridge_slave_0: left promiscuous mode [ 850.414135][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.205033][ T8731] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 851.934902][ T6282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.651853][T11028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.883607][ T6282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.945366][ T6282] bond0 (unregistering): Released all slaves [ 856.207245][T10830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.207265][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.207294][T10830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.340958][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 856.340979][ T37] audit: type=1326 audit(1761949052.326:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.341395][ T37] audit: type=1326 audit(1761949052.326:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.341699][ T37] audit: type=1326 audit(1761949052.326:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.416319][ T37] audit: type=1326 audit(1761949052.406:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.416658][ T37] audit: type=1326 audit(1761949052.406:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.417104][ T37] audit: type=1326 audit(1761949052.406:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.417821][ T37] audit: type=1326 audit(1761949052.406:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.418282][ T37] audit: type=1326 audit(1761949052.406:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.418738][ T37] audit: type=1326 audit(1761949052.406:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 856.419354][ T37] audit: type=1326 audit(1761949052.406:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.2.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f97dc0befc9 code=0x7ffc0000 [ 857.590719][T10830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.590737][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.590767][T10830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.782087][ T6282] hsr_slave_0: left promiscuous mode [ 860.043273][ T6282] hsr_slave_1: left promiscuous mode [ 860.044383][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.249926][T11067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.883384][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.477331][ T23] ================================================================== [ 862.477348][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 862.477390][ T23] Read of size 8 at addr ffffc9000c4b1090 by task irq_work/0/23 [ 862.477408][ T23] [ 862.477424][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 862.477452][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 862.477464][ T23] Call Trace: [ 862.477478][ T23] [ 862.477487][ T23] dump_stack_lvl+0x189/0x250 [ 862.477522][ T23] ? run_irq_workd+0x116/0x190 [ 862.477548][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 862.477577][ T23] ? __pfx__printk+0x10/0x10 [ 862.477603][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 862.477639][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 862.477669][ T23] print_report+0xca/0x240 [ 862.477700][ T23] ? run_irq_workd+0x116/0x190 [ 862.477726][ T23] kasan_report+0x118/0x150 [ 862.477761][ T23] ? run_irq_workd+0x116/0x190 [ 862.477796][ T23] run_irq_workd+0x116/0x190 [ 862.477830][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 862.477855][ T23] ? schedule+0x91/0x360 [ 862.477895][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 862.477920][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 862.477956][ T23] smpboot_thread_fn+0x542/0xa60 [ 862.477993][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 862.478020][ T23] kthread+0x711/0x8a0 [ 862.478060][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 862.478097][ T23] ? __pfx_kthread+0x10/0x10 [ 862.478123][ T23] ? rt_spin_unlock+0x150/0x200 [ 862.478146][ T23] ? rt_spin_unlock+0x161/0x200 [ 862.478166][ T23] ? __pfx_kthread+0x10/0x10 [ 862.478193][ T23] ret_from_fork+0x4bc/0x870 [ 862.478225][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 862.478251][ T23] ? __switch_to_asm+0x39/0x70 [ 862.478271][ T23] ? __switch_to_asm+0x33/0x70 [ 862.478289][ T23] ? __pfx_kthread+0x10/0x10 [ 862.478324][ T23] ret_from_fork_asm+0x1a/0x30 [ 862.478359][ T23] [ 862.478366][ T23] [ 862.478372][ T23] The buggy address belongs to a vmalloc virtual mapping [ 862.478390][ T23] Memory state around the buggy address: [ 862.478402][ T23] ffffc9000c4b0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 862.478416][ T23] ffffc9000c4b1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 862.478429][ T23] >ffffc9000c4b1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 862.478440][ T23] ^ [ 862.478450][ T23] ffffc9000c4b1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 862.478463][ T23] ffffc9000c4b1180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 862.478473][ T23] ================================================================== [ 862.478485][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 862.478500][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 862.478522][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 862.478540][ T23] Call Trace: [ 862.478547][ T23] [ 862.478555][ T23] dump_stack_lvl+0x99/0x250 [ 862.478585][ T23] ? __asan_memcpy+0x40/0x70 [ 862.478606][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 862.478633][ T23] ? __pfx__printk+0x10/0x10 [ 862.478661][ T23] vpanic+0x237/0x6d0 [ 862.478680][ T23] ? __pfx_vpanic+0x10/0x10 [ 862.478703][ T23] panic+0xb9/0xc0 [ 862.478720][ T23] ? __pfx_panic+0x10/0x10 [ 862.478737][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 862.478766][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 862.478795][ T23] ? run_irq_workd+0x116/0x190 [ 862.478821][ T23] check_panic_on_warn+0x89/0xb0 [ 862.478840][ T23] ? run_irq_workd+0x116/0x190 [ 862.478866][ T23] end_report+0x78/0x160 [ 862.478891][ T23] kasan_report+0x129/0x150 [ 862.478919][ T23] ? run_irq_workd+0x116/0x190 [ 862.478958][ T23] run_irq_workd+0x116/0x190 [ 862.478985][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 862.479010][ T23] ? schedule+0x91/0x360 [ 862.479035][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 862.479060][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 862.479083][ T23] smpboot_thread_fn+0x542/0xa60 [ 862.479108][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 862.479136][ T23] kthread+0x711/0x8a0 [ 862.479163][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 862.479187][ T23] ? __pfx_kthread+0x10/0x10 [ 862.479214][ T23] ? rt_spin_unlock+0x150/0x200 [ 862.479236][ T23] ? rt_spin_unlock+0x161/0x200 [ 862.479255][ T23] ? __pfx_kthread+0x10/0x10 [ 862.479284][ T23] ret_from_fork+0x4bc/0x870 [ 862.479308][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 862.479335][ T23] ? __switch_to_asm+0x39/0x70 [ 862.479354][ T23] ? __switch_to_asm+0x33/0x70 [ 862.479373][ T23] ? __pfx_kthread+0x10/0x10 [ 862.479399][ T23] ret_from_fork_asm+0x1a/0x30 [ 862.479435][ T23] [ 862.479728][ T23] Kernel Offset: disabled