last executing test programs: 8m23.03063832s ago: executing program 2 (id=141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff", 0x4, 0x0, 0x0, 0x2}]) 8m22.75690692s ago: executing program 2 (id=142): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='v'], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x80, 0x20, 0x3, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x57, 0x2f, 0x0, @empty, @local}}}}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001400190100"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m22.598313684s ago: executing program 0 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 8m21.318669381s ago: executing program 2 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) 8m19.902860428s ago: executing program 2 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 8m18.276682067s ago: executing program 2 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 8m17.002314792s ago: executing program 0 (id=153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000000)) sendmmsg(r4, 0x0, 0x0, 0x0) 8m12.247766058s ago: executing program 0 (id=156): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000082861490000000000024000000f0ffffff9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005480), 0x0, 0x4004) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002810000000000000000000002c0008802800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400020077673000000000000074a35b158973a0bc06b8370000"], 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000400)={[{}]}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e22, @empty}}) 8m9.256609886s ago: executing program 0 (id=160): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io'], 0xc) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000011}) write$vga_arbiter(r0, &(0x7f0000000200)=@other={'decodes', ' ', 'none'}, 0xd) 8m8.907439015s ago: executing program 0 (id=162): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x9200000000000080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 8m5.060617824s ago: executing program 0 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x90, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0xfd, 0x7, 0x200}, [@RTA_METRICS={0x64, 0x8, 0x0, 0x1, "37ab445def33a56803ccfa1a875b27d15ada9b15ec4e3e4ba9e94d34a19384945b9730f66e7e4a72f73d439edf5bf92b91dc56ae6b3c8d31801d1376ed3dde3fc3942a61bead15d733f7eb6318a537af03f5bea5c433af3e28e8302325c76450"}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) 8m5.059972932s ago: executing program 2 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xe, 0x12}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) 7m49.862969703s ago: executing program 32 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x90, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0xfd, 0x7, 0x200}, [@RTA_METRICS={0x64, 0x8, 0x0, 0x1, "37ab445def33a56803ccfa1a875b27d15ada9b15ec4e3e4ba9e94d34a19384945b9730f66e7e4a72f73d439edf5bf92b91dc56ae6b3c8d31801d1376ed3dde3fc3942a61bead15d733f7eb6318a537af03f5bea5c433af3e28e8302325c76450"}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) 7m49.794172702s ago: executing program 33 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xe, 0x12}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) 6m44.053861235s ago: executing program 1 (id=257): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 6m40.381187025s ago: executing program 1 (id=258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000082861490000000000024000000f0ffffff9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005480), 0x0, 0x4004) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002810000000000000000000002c0008802800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400020077673000000000000074a35b158973a0bc06b8370000"], 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xb4, r9, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x58, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e22, @empty}}) 6m31.074827922s ago: executing program 1 (id=270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000000)) sendmmsg(r4, 0x0, 0x0, 0x0) 6m29.737277659s ago: executing program 1 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet(0x2, 0x801, 0x0) listen(r8, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x48, 0x0, 0x1, 0x1000000, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r1}}, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) 6m26.564334364s ago: executing program 1 (id=276): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r5}, 0x18) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="ff071d6ce89d96666b08e828be032f55097076e40148c200000000fb00000200"/50, 0x32}, {&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0a38bc757e61b5aab090000000000000051ed697ff263589940cf437f1efae8e2342bb1adc1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab63a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa", 0xa6}, {&(0x7f0000000000)="a9e47d4ed965685b48214fff756364b93155b267f07697b50eede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b405e7d2", 0x34}, {&(0x7f00000001c0)="10", 0x1}], 0x4) 6m25.157957121s ago: executing program 1 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 6m9.620270439s ago: executing program 34 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 8.850080637s ago: executing program 3 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 7.844890033s ago: executing program 3 (id=698): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x2400c080) 7.621665952s ago: executing program 3 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) dup(0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = openat$cgroup_int(r4, &(0x7f0000000340)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000240)=0x6, 0x12) socket$packet(0x11, 0x2, 0x300) 4.477645271s ago: executing program 4 (id=701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) 4.317902639s ago: executing program 4 (id=702): socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x4, 0x0, 0xa6, 0xe26, 0x800, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_open_procfs(r0, &(0x7f00000001c0)='net/vlan/vlan1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2.317159435s ago: executing program 3 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.082355848s ago: executing program 4 (id=704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.668158826s ago: executing program 4 (id=705): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 1.584856939s ago: executing program 4 (id=706): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000380), 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r5, 0x852ac000) 1.028039688s ago: executing program 3 (id=707): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 538.092626ms ago: executing program 4 (id=708): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000012c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 0s ago: executing program 3 (id=709): syz_emit_ethernet(0x2c, &(0x7f0000001f40)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x2, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xa, 0x0, @opaque="a497"}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): nched '/dev/fd/3' with NULL argv: empty string added [ 102.928311][ T5968] syz.1.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.218310][ T5788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.357986][ T5788] usb 3-1: device not accepting address 2, error -71 [ 108.376477][ T5804] Dead loop on virtual device wlan1, fix it urgently! [ 109.727556][ T5998] 9pnet_fd: Insufficient options for proto=fd [ 110.906082][ T6000] binder: 5999:6000 ioctl c0306201 200000000280 returned -14 [ 111.158081][ T5885] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.339801][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.339854][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 111.339877][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.425324][ T5885] usb 3-1: config 0 descriptor?? [ 111.662438][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 111.662564][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 111.703689][ T5885] usb 3-1: USB disconnect, device number 4 [ 114.036517][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.075636][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.845513][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.594591][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.894187][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.979742][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.067547][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.129712][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.333655][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.533297][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.811295][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.195783][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.773162][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.050242][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.190959][ T6058] bridge0: port 3(gretap0) entered blocking state [ 122.191089][ T6058] bridge0: port 3(gretap0) entered disabled state [ 122.191749][ T6058] gretap0: entered allmulticast mode [ 122.292372][ T6058] gretap0: entered promiscuous mode [ 122.364810][ T6058] bridge0: port 3(gretap0) entered blocking state [ 122.365577][ T6058] bridge0: port 3(gretap0) entered forwarding state [ 123.359344][ T5945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.926969][ T6076] 9pnet_fd: Insufficient options for proto=fd [ 126.057554][ T5945] usb 5-1: device not accepting address 2, error -71 [ 128.808133][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.957971][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 128.960826][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.960852][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.960902][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 128.960929][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 128.960970][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 128.960992][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.018671][ T6075] tty tty4: ldisc open failed (-12), clearing slot 3 [ 129.653078][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 129.653117][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 129.654144][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 129.654159][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 129.679794][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 129.679829][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 130.949981][ T5789] usb 3-1: USB disconnect, device number 5 [ 133.194449][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.260130][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.783096][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.163703][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.494733][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.765980][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.815282][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.815381][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.381426][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.583850][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.465644][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.580264][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.629334][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.719340][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.102651][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.003018][ T6178] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 148.394647][ T6180] 9pnet_fd: Insufficient options for proto=fd [ 150.903661][ T6186] binder: 6183:6186 ioctl c0306201 200000000280 returned -14 [ 153.680226][ T5938] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 154.205125][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.397544][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.889869][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.360400][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.417010][ T6216] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 155.549527][ T5938] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.845529][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.748913][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.920367][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.964649][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.964699][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 156.964722][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.987491][ T5938] usb 4-1: config 0 descriptor?? [ 157.082805][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.206056][ T5938] usbhid 4-1:0.0: can't add hid device: -71 [ 157.206183][ T5938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.349305][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.365851][ T5938] usb 4-1: USB disconnect, device number 2 [ 157.497511][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.005266][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.309509][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.602565][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.266463][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.904056][ T6243] 9pnet_fd: Insufficient options for proto=fd [ 168.484405][ T6287] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 168.673054][ T6293] 9pnet_fd: Insufficient options for proto=fd [ 172.588784][ T6305] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 172.937932][ T5789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 173.094457][ T5789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.094508][ T5789] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 173.094530][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.199528][ T5789] usb 1-1: config 0 descriptor?? [ 175.681416][ T5789] usbhid 1-1:0.0: can't add hid device: -71 [ 175.681548][ T5789] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 175.704942][ T5789] usb 1-1: USB disconnect, device number 3 [ 180.387428][ T6352] 9pnet_fd: Insufficient options for proto=fd [ 181.407614][ T6358] 9pnet_fd: Insufficient options for proto=fd [ 183.748585][ T6366] binder: 6365:6366 ioctl 4018620d 0 returned -22 [ 183.780701][ T6366] fuse: Bad value for 'fd' [ 190.697988][ T5885] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 191.151544][ T6402] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 192.362772][ T6413] binder: 6412:6413 ioctl 4018620d 0 returned -22 [ 199.802603][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.802670][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.164836][ T6473] 9pnet_fd: Insufficient options for proto=fd [ 205.920739][ T6496] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 207.646578][ T6493] Bluetooth: hci4: command 0x0406 tx timeout [ 207.708368][ T6487] kthread_run failed with err -4 [ 207.841577][ T6493] Bluetooth: hci0: command 0x0406 tx timeout [ 207.841827][ T6493] Bluetooth: hci1: command 0x0406 tx timeout [ 207.841954][ T6493] Bluetooth: hci2: command 0x0406 tx timeout [ 207.842037][ T6493] Bluetooth: hci3: command 0x0406 tx timeout [ 212.066524][ T6525] binder: 6522:6525 ioctl 4018620d 0 returned -22 [ 214.924661][ T6533] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 215.099820][ T6538] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 218.490910][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 219.509449][ T6565] netlink: 2 bytes leftover after parsing attributes in process `syz.2.166'. [ 220.238713][ T6571] binder: 6561:6571 ioctl 4018620d 0 returned -22 [ 227.721213][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.743917][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.281539][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.290096][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.878932][ T6611] 9pnet_fd: Insufficient options for proto=fd [ 235.742964][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.755618][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.756678][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.758928][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.759676][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.905031][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.907586][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.914104][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.915300][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.916040][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.234844][ T61] Bluetooth: hci5: command tx timeout [ 238.238024][ T61] Bluetooth: hci6: command tx timeout [ 240.558835][ T5118] Bluetooth: hci6: command tx timeout [ 240.558937][ T61] Bluetooth: hci5: command tx timeout [ 241.109945][ T1105] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.156527][ T1012] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.156582][ T1012] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.156616][ T1012] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.521944][ T6654] hub 2-0:1.0: USB hub found [ 242.522953][ T6654] hub 2-0:1.0: 1 port detected [ 242.637991][ T5118] Bluetooth: hci6: command tx timeout [ 242.639783][ T61] Bluetooth: hci5: command tx timeout [ 245.358726][ T5118] Bluetooth: hci6: command tx timeout [ 245.358870][ T61] Bluetooth: hci5: command tx timeout [ 253.506320][ T1537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.975761][ T6696] tty tty28: ldisc open failed (-12), clearing slot 27 [ 258.135443][ T1537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.360815][ T6617] chnl_net:caif_netlink_parms(): no params data found [ 259.371518][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 261.448612][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.448681][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.577923][ T5945] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 262.930620][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.930670][ T5945] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 262.930693][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.936295][ T5945] usb 5-1: config 0 descriptor?? [ 264.026569][ T1537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.487419][ T5945] usbhid 5-1:0.0: can't add hid device: -71 [ 268.487543][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 268.737879][ T5945] usb 5-1: USB disconnect, device number 4 [ 270.061570][ T1537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.872464][ T6789] hub 2-0:1.0: USB hub found [ 273.092247][ T6789] hub 2-0:1.0: 1 port detected [ 274.609668][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.610532][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.610870][ T6617] bridge_slave_0: entered allmulticast mode [ 274.617144][ T6617] bridge_slave_0: entered promiscuous mode [ 274.622450][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.622579][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.622750][ T6613] bridge_slave_0: entered allmulticast mode [ 274.631160][ T6613] bridge_slave_0: entered promiscuous mode [ 274.636078][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.636241][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.636419][ T6617] bridge_slave_1: entered allmulticast mode [ 274.646422][ T6617] bridge_slave_1: entered promiscuous mode [ 274.654888][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.655096][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.655293][ T6613] bridge_slave_1: entered allmulticast mode [ 274.692780][ T6613] bridge_slave_1: entered promiscuous mode [ 275.989288][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 279.414815][ T6815] 9pnet_fd: Insufficient options for proto=fd [ 280.043704][ T6617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.073481][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.109086][ T6617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.310665][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.162354][ T5885] usb 4-1: device descriptor read/all, error -71 [ 285.088714][ T6851] kthread_run failed with err -4 [ 286.926582][ T6876] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 287.395922][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 287.418402][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 287.945064][ T6617] team0: Port device team_slave_0 added [ 288.326289][ T6613] team0: Port device team_slave_0 added [ 288.370247][ T6617] team0: Port device team_slave_1 added [ 288.389031][ T6613] team0: Port device team_slave_1 added [ 289.368771][ T5789] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 289.606748][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.606800][ T5789] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 289.606823][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.641835][ T5789] usb 4-1: config 0 descriptor?? [ 291.982363][ T5789] usbhid 4-1:0.0: can't add hid device: -71 [ 292.001378][ T5789] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.010639][ T5789] usb 4-1: USB disconnect, device number 6 [ 293.431699][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.431712][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.431730][ T6617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.436752][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.436767][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.436791][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.448682][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.448697][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.448720][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.450263][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.450274][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.450297][ T6617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.643444][ T1537] bridge_slave_1: left allmulticast mode [ 295.643663][ T1537] bridge_slave_1: left promiscuous mode [ 295.646348][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.827998][ T5789] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 295.839786][ T1537] bridge_slave_0: left allmulticast mode [ 295.839813][ T1537] bridge_slave_0: left promiscuous mode [ 295.840495][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.990811][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.990862][ T5789] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 295.990885][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.001146][ T5789] usb 4-1: config 0 descriptor?? [ 297.024845][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.050447][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.052322][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.055473][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.056339][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.220189][ T5789] usbhid 4-1:0.0: can't add hid device: -71 [ 297.222665][ T5789] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.263537][ T5789] usb 4-1: USB disconnect, device number 7 [ 297.264735][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.278716][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.280574][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.281952][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.316519][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.697468][ T61] Bluetooth: hci3: command tx timeout [ 299.699420][ T61] Bluetooth: hci4: command tx timeout [ 303.568043][ T5789] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 303.578571][ T5803] Bluetooth: hci4: command tx timeout [ 303.578600][ T5803] Bluetooth: hci3: command tx timeout [ 306.369088][ T5803] Bluetooth: hci4: command tx timeout [ 306.369177][ T61] Bluetooth: hci3: command tx timeout [ 307.732717][ T37] audit: type=1326 audit(1760034393.948:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 307.735240][ T37] audit: type=1326 audit(1760034393.948:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 307.742849][ T37] audit: type=1326 audit(1760034393.948:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b18b60d5c code=0x7ffc0000 [ 308.520645][ T5803] Bluetooth: hci4: command tx timeout [ 308.520704][ T61] Bluetooth: hci3: command tx timeout [ 309.178629][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.258418][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.280811][ T1537] bond0 (unregistering): Released all slaves [ 309.408442][ T6945] kthread_run failed with err -4 [ 312.847936][ T5885] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 313.166988][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.167039][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 313.167060][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.863599][ T5885] usb 4-1: config 0 descriptor?? [ 314.485218][ T6999] binder: BINDER_SET_CONTEXT_MGR already set [ 314.485233][ T6999] binder: 6998:6999 ioctl 4018620d 2000000002c0 returned -16 [ 314.748028][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 314.748158][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 314.785439][ T5885] usb 4-1: USB disconnect, device number 9 [ 315.328320][ T5945] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 315.552370][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.552419][ T5945] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 315.552441][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.626951][ T5945] usb 2-1: config 0 descriptor?? [ 316.121211][ T6613] syz-executor (6613) used greatest stack depth: 16120 bytes left [ 317.453080][ T5945] usbhid 2-1:0.0: can't add hid device: -71 [ 317.453206][ T5945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 317.477016][ T5945] usb 2-1: USB disconnect, device number 2 [ 319.077922][ T1537] hsr_slave_0: left promiscuous mode [ 320.037909][ T1537] hsr_slave_1: left promiscuous mode [ 320.040102][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.040237][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.080096][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.080122][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.181202][ T1537] veth1_macvtap: left promiscuous mode [ 320.181474][ T1537] veth0_macvtap: left promiscuous mode [ 320.181808][ T1537] veth1_vlan: left promiscuous mode [ 320.182132][ T1537] veth0_vlan: left promiscuous mode [ 323.148035][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 323.149120][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 324.035038][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.035115][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.724643][ T7063] hub 2-0:1.0: USB hub found [ 326.725941][ T7063] hub 2-0:1.0: 1 port detected [ 333.800220][ T7098] hub 2-0:1.0: USB hub found [ 333.800597][ T7098] hub 2-0:1.0: 1 port detected [ 333.947862][ T5938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 334.432663][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.432714][ T5938] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 334.432737][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.506176][ T5938] usb 5-1: config 0 descriptor?? [ 335.267258][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 335.286243][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 336.749650][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 336.805539][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.837208][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.842530][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.853655][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.857161][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.942197][ T5938] usbhid 5-1:0.0: can't add hid device: -71 [ 336.942320][ T5938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 336.976461][ T5938] usb 5-1: USB disconnect, device number 5 [ 337.030053][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 338.957988][ T5803] Bluetooth: hci5: command tx timeout [ 340.581065][ T7133] hub 2-0:1.0: USB hub found [ 340.581431][ T7133] hub 2-0:1.0: 1 port detected [ 341.038013][ T5803] Bluetooth: hci5: command tx timeout [ 341.377805][ T7137] 9pnet_fd: Insufficient options for proto=fd [ 343.277382][ T5803] Bluetooth: hci5: command tx timeout [ 345.277901][ T5803] Bluetooth: hci5: command tx timeout [ 345.351298][ T7152] binder: 7151:7152 ioctl 4018620d 0 returned -22 [ 348.860445][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 349.489388][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 349.506267][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 350.416942][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 350.610167][ T7107] chnl_net:caif_netlink_parms(): no params data found [ 350.898859][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.899004][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.899146][ T6914] bridge_slave_0: entered allmulticast mode [ 350.900781][ T6914] bridge_slave_0: entered promiscuous mode [ 350.941598][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.941704][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.941886][ T6914] bridge_slave_1: entered allmulticast mode [ 350.943517][ T6914] bridge_slave_1: entered promiscuous mode [ 350.997866][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 351.147907][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 351.150910][ T5885] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 351.150959][ T5885] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 351.150985][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 351.151019][ T5885] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 351.151042][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.157082][ T5885] usb 5-1: config 0 descriptor?? [ 352.392935][ T5885] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x1 [ 352.392982][ T5885] gt683r_led 0003:1770:FF00.0001: item fetching failed at offset 3/5 [ 352.393869][ T5885] gt683r_led 0003:1770:FF00.0001: hid parsing failed [ 352.393968][ T5885] gt683r_led 0003:1770:FF00.0001: probe with driver gt683r_led failed with error -22 [ 352.527967][ T5885] usb 5-1: USB disconnect, device number 6 [ 352.614649][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.316141][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.720639][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.720841][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.721071][ T6916] bridge_slave_0: entered allmulticast mode [ 353.723688][ T6916] bridge_slave_0: entered promiscuous mode [ 353.956040][ T5886] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 354.288565][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.288848][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 354.288898][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.466028][ T5886] usb 4-1: config 0 descriptor?? [ 355.790698][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.790964][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.791966][ T6916] bridge_slave_1: entered allmulticast mode [ 355.800181][ T6916] bridge_slave_1: entered promiscuous mode [ 355.885336][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 355.885464][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 355.918695][ T5886] usb 4-1: USB disconnect, device number 10 [ 357.510979][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.511100][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.511362][ T7107] bridge_slave_0: entered allmulticast mode [ 357.592502][ T7107] bridge_slave_0: entered promiscuous mode [ 357.928468][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.928607][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.928912][ T7107] bridge_slave_1: entered allmulticast mode [ 357.931556][ T7107] bridge_slave_1: entered promiscuous mode [ 358.451739][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.484410][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.486533][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.489251][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.501280][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.158967][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.164881][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.166238][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.167389][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.214304][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.356050][ T7259] hub 2-0:1.0: USB hub found [ 359.356470][ T7259] hub 2-0:1.0: 1 port detected [ 360.171457][ T7107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.468162][ T5803] Bluetooth: hci3: command tx timeout [ 361.470150][ T61] Bluetooth: hci0: command tx timeout [ 361.551575][ T7107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.432948][ T1537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.910510][ T5803] Bluetooth: hci3: command tx timeout [ 363.910599][ T61] Bluetooth: hci0: command tx timeout [ 364.512538][ T7107] team0: Port device team_slave_0 added [ 365.238228][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 365.720808][ T1537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.709840][ T7107] team0: Port device team_slave_1 added [ 367.490156][ T5803] Bluetooth: hci0: command tx timeout [ 367.490189][ T5803] Bluetooth: hci3: command tx timeout [ 369.520903][ T61] Bluetooth: hci3: command tx timeout [ 369.520937][ T61] Bluetooth: hci0: command tx timeout [ 370.132524][ T1537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.169111][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.169122][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.169136][ T7107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.774645][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.774661][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.774684][ T7107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.028369][ T5953] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 373.210136][ T5953] usb 4-1: unable to read config index 0 descriptor/all [ 373.210187][ T5953] usb 4-1: can't read configurations, error -71 [ 373.541305][ T1537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.449040][ T7107] hsr_slave_0: entered promiscuous mode [ 376.452474][ T7107] hsr_slave_1: entered promiscuous mode [ 376.454392][ T7107] debugfs: 'hsr0' already exists in 'hsr' [ 376.454428][ T7107] Cannot create hsr debugfs directory [ 378.177837][ T5953] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 378.370419][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.370482][ T5953] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 378.370506][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.409721][ T5953] usb 4-1: config 0 descriptor?? [ 379.078005][ T5945] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 379.103341][ T7242] chnl_net:caif_netlink_parms(): no params data found [ 379.208386][ T7254] chnl_net:caif_netlink_parms(): no params data found [ 379.228105][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 379.237461][ T5945] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 379.237508][ T5945] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 379.237571][ T5945] usb 5-1: config 0 interface 0 has no altsetting 0 [ 379.237605][ T5945] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 379.237616][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.246959][ T5945] usb 5-1: config 0 descriptor?? [ 379.717500][ T5945] usbhid 5-1:0.0: can't add hid device: -71 [ 379.717691][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 379.731226][ T5945] usb 5-1: USB disconnect, device number 7 [ 379.954995][ T5953] usbhid 4-1:0.0: can't add hid device: -71 [ 379.955119][ T5953] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 379.960403][ T5953] usb 4-1: USB disconnect, device number 13 [ 383.211987][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.212114][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.212309][ T7242] bridge_slave_0: entered allmulticast mode [ 383.215019][ T7242] bridge_slave_0: entered promiscuous mode [ 383.319599][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.319811][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.322385][ T7242] bridge_slave_1: entered allmulticast mode [ 383.326529][ T7242] bridge_slave_1: entered promiscuous mode [ 383.561823][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.562000][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.562221][ T7254] bridge_slave_0: entered allmulticast mode [ 383.564491][ T7254] bridge_slave_0: entered promiscuous mode [ 383.690575][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.690699][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.690918][ T7254] bridge_slave_1: entered allmulticast mode [ 383.693696][ T7254] bridge_slave_1: entered promiscuous mode [ 383.904939][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.905005][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.068435][ T7242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.403292][ T7242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.408644][ T7107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 391.964588][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.811467][ T7107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 393.826212][ T7427] 9pnet_fd: Insufficient options for proto=fd [ 393.974900][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.090281][ T7107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 394.231748][ T7242] team0: Port device team_slave_0 added [ 394.233360][ T7107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.692798][ T7242] team0: Port device team_slave_1 added [ 394.693618][ T7107] kthread_run failed with err -4 [ 394.729157][ T7254] team0: Port device team_slave_0 added [ 394.847902][ T5789] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 394.997861][ T5789] usb 4-1: Using ep0 maxpacket: 8 [ 395.000420][ T5789] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 395.000468][ T5789] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 395.000495][ T5789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.000528][ T5789] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 395.000550][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.094794][ T5789] usb 4-1: config 0 descriptor?? [ 396.047868][ T5789] usbhid 4-1:0.0: can't add hid device: -71 [ 396.047990][ T5789] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 396.076113][ T5789] usb 4-1: USB disconnect, device number 14 [ 396.154047][ T7254] team0: Port device team_slave_1 added [ 396.273280][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.290305][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.291405][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.292555][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.293312][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.613713][ T5789] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 398.504300][ T5118] Bluetooth: hci4: command tx timeout [ 398.656951][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.657000][ T5789] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 398.657022][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.670004][ T5789] usb 5-1: config 0 descriptor?? [ 399.881292][ T7242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.881308][ T7242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.881329][ T7242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.276575][ T1537] gretap0: left allmulticast mode [ 400.276603][ T1537] gretap0: left promiscuous mode [ 400.278231][ T1537] bridge0: port 3(gretap0) entered disabled state [ 400.558056][ T5118] Bluetooth: hci4: command tx timeout [ 400.574829][ T1537] bridge_slave_1: left allmulticast mode [ 400.576536][ T1537] bridge_slave_1: left promiscuous mode [ 400.577058][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.315886][ T5789] usbhid 5-1:0.0: can't add hid device: -71 [ 401.321601][ T5789] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 401.330557][ T5789] usb 5-1: USB disconnect, device number 8 [ 401.729339][ T1537] bridge_slave_0: left allmulticast mode [ 401.729369][ T1537] bridge_slave_0: left promiscuous mode [ 401.729617][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.875468][ T7484] 9pnet_fd: Insufficient options for proto=fd [ 402.150507][ T1537] bridge_slave_1: left allmulticast mode [ 402.150537][ T1537] bridge_slave_1: left promiscuous mode [ 402.150708][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.209173][ T1537] bridge_slave_0: left allmulticast mode [ 402.209192][ T1537] bridge_slave_0: left promiscuous mode [ 402.209363][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.362542][ T1537] bridge_slave_1: left allmulticast mode [ 402.362570][ T1537] bridge_slave_1: left promiscuous mode [ 402.362868][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.558930][ T5118] Bluetooth: hci4: command tx timeout [ 404.326146][ T1537] bridge_slave_0: left allmulticast mode [ 404.326175][ T1537] bridge_slave_0: left promiscuous mode [ 404.326448][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.202666][ T5118] Bluetooth: hci4: command tx timeout [ 406.212444][ T1537] bridge_slave_1: left allmulticast mode [ 406.212472][ T1537] bridge_slave_1: left promiscuous mode [ 406.224185][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.623100][ T1537] bridge_slave_0: left allmulticast mode [ 409.623130][ T1537] bridge_slave_0: left promiscuous mode [ 409.623372][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.065304][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 412.066411][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 414.566967][ T7543] 9pnet_fd: Insufficient options for proto=fd [ 418.730873][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.736549][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.753233][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.762543][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.763434][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.659197][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 419.661683][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 419.662757][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 419.664208][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 419.664952][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.535066][ T61] Bluetooth: hci5: command tx timeout [ 421.729012][ T61] Bluetooth: hci6: command tx timeout [ 423.995564][ T61] Bluetooth: hci5: command tx timeout [ 423.995599][ T61] Bluetooth: hci6: command tx timeout [ 424.135944][ T7586] capability: warning: `syz.3.395' uses 32-bit capabilities (legacy support in use) [ 426.879713][ T5118] Bluetooth: hci6: command tx timeout [ 426.879747][ T5118] Bluetooth: hci5: command tx timeout [ 427.715997][ T7604] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 429.567194][ T5118] Bluetooth: hci6: command tx timeout [ 429.567241][ T61] Bluetooth: hci5: command tx timeout [ 431.999133][ T7629] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 431.999752][ T7629] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 433.854386][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.051638][ T7638] binder: BINDER_SET_CONTEXT_MGR already set [ 434.051653][ T7638] binder: 7637:7638 ioctl 4018620d 2000000002c0 returned -16 [ 436.751119][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.850351][ T1537] bond0 (unregistering): Released all slaves [ 436.877648][ T5789] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 437.030471][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.030521][ T5789] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 437.030544][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.035833][ T5789] usb 4-1: config 0 descriptor?? [ 438.248701][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.395406][ T5789] usbhid 4-1:0.0: can't add hid device: -71 [ 438.395539][ T5789] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 438.422922][ T5789] usb 4-1: USB disconnect, device number 15 [ 438.473924][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.709813][ T1537] bond0 (unregistering): Released all slaves [ 439.705934][ T7656] binder: 7655:7656 ioctl c0306201 0 returned -14 [ 439.928569][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.498375][ T5882] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 440.777613][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.839839][ T1537] bond0 (unregistering): Released all slaves [ 440.889985][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.890034][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 440.890055][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.894941][ T5882] usb 4-1: config 0 descriptor?? [ 442.268667][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.308547][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.348882][ T1537] bond0 (unregistering): Released all slaves [ 442.388919][ T7242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.388935][ T7242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.388960][ T7242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.508617][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.508633][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.508656][ T7254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.833430][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 442.833555][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 443.021675][ T5882] usb 4-1: USB disconnect, device number 16 [ 446.900224][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.900293][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.408291][ T7703] binder: 7702:7703 ioctl c0306201 0 returned -14 [ 452.098781][ T7714] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 452.902308][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 452.917301][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 453.707601][ T7731] binder: 7730:7731 ioctl c0306201 0 returned -14 [ 456.201952][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 456.204247][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.210803][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.211888][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.212959][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 456.582711][ T7566] chnl_net:caif_netlink_parms(): no params data found [ 456.606796][ T7562] chnl_net:caif_netlink_parms(): no params data found [ 458.237896][ T5118] Bluetooth: hci0: command tx timeout [ 460.369546][ T5118] Bluetooth: hci0: command tx timeout [ 462.543762][ T5118] Bluetooth: hci0: command tx timeout [ 464.000231][ T37] audit: type=1326 audit(1760034550.068:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 464.000631][ T37] audit: type=1326 audit(1760034550.068:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 464.000674][ T37] audit: type=1326 audit(1760034550.078:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 464.001029][ T37] audit: type=1326 audit(1760034550.088:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 464.001327][ T37] audit: type=1326 audit(1760034550.088:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 464.001595][ T37] audit: type=1326 audit(1760034550.088:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b18b60de7 code=0x7ffc0000 [ 464.002101][ T37] audit: type=1326 audit(1760034550.098:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b18b60d5c code=0x7ffc0000 [ 464.002532][ T37] audit: type=1326 audit(1760034550.098:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 464.002632][ T37] audit: type=1326 audit(1760034550.108:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 464.002936][ T37] audit: type=1326 audit(1760034550.108:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2b18b5db2a code=0x7ffc0000 [ 464.651056][ T5118] Bluetooth: hci0: command tx timeout [ 472.027518][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 472.028928][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 473.431050][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.434672][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.495545][ T7566] bridge_slave_0: entered allmulticast mode [ 473.640148][ T7566] bridge_slave_0: entered promiscuous mode [ 474.276737][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.276870][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.277125][ T7562] bridge_slave_0: entered allmulticast mode [ 474.282179][ T7562] bridge_slave_0: entered promiscuous mode [ 474.305039][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.305163][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.305434][ T7566] bridge_slave_1: entered allmulticast mode [ 474.308693][ T7566] bridge_slave_1: entered promiscuous mode [ 474.320649][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.320770][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.320963][ T7562] bridge_slave_1: entered allmulticast mode [ 474.327977][ T7562] bridge_slave_1: entered promiscuous mode [ 476.514996][ T7566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.542142][ T7566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.743155][ T7566] team0: Port device team_slave_0 added [ 477.545498][ T1537] hsr_slave_0: left promiscuous mode [ 477.992278][ T1537] hsr_slave_1: left promiscuous mode [ 477.993262][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.993285][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.130165][ T7864] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 478.440583][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.459487][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.461179][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.468674][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.469531][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 478.472338][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.472362][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.548784][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.598672][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.649182][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.928639][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.067865][ T1537] hsr_slave_0: left promiscuous mode [ 479.095722][ T1537] hsr_slave_1: left promiscuous mode [ 479.096725][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.133380][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.134115][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 479.137146][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 479.139581][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 479.140682][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 479.141413][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.276752][ T1537] veth1_macvtap: left promiscuous mode [ 479.276841][ T1537] veth0_macvtap: left promiscuous mode [ 479.277618][ T1537] veth1_vlan: left promiscuous mode [ 479.278704][ T1537] veth0_vlan: left promiscuous mode [ 481.867630][ T5118] Bluetooth: hci4: command tx timeout [ 481.890089][ T7882] fuse: Bad value for 'group_id' [ 481.890109][ T7882] fuse: Bad value for 'group_id' [ 481.954791][ T5118] Bluetooth: hci3: command tx timeout [ 483.397318][ T7891] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 483.918189][ T5118] Bluetooth: hci4: command tx timeout [ 484.007121][ T5118] Bluetooth: hci3: command tx timeout [ 484.457637][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 486.392057][ T5118] Bluetooth: hci4: command tx timeout [ 486.392090][ T5118] Bluetooth: hci3: command tx timeout [ 486.536391][ T7910] fuse: Bad value for 'group_id' [ 486.536404][ T7910] fuse: Bad value for 'group_id' [ 487.802070][ T7917] overlayfs: missing 'workdir' [ 491.317971][ T5118] Bluetooth: hci4: command tx timeout [ 491.321215][ T61] Bluetooth: hci3: command tx timeout [ 493.236786][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 493.236805][ T37] audit: type=1326 audit(1760034579.398:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 493.237150][ T37] audit: type=1326 audit(1760034579.398:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 493.268391][ T37] audit: type=1326 audit(1760034579.408:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 493.268636][ T37] audit: type=1326 audit(1760034579.408:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 493.268922][ T37] audit: type=1326 audit(1760034579.408:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 493.269226][ T37] audit: type=1326 audit(1760034579.418:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b18b60d5c code=0x7ffc0000 [ 493.269429][ T37] audit: type=1326 audit(1760034579.418:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 493.269614][ T37] audit: type=1326 audit(1760034579.428:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 493.269780][ T37] audit: type=1326 audit(1760034579.428:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 493.270066][ T37] audit: type=1326 audit(1760034579.428:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 497.958524][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 498.158661][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 500.348482][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 500.448469][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 500.998389][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 501.102590][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 503.338476][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 503.538441][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 505.780178][ T7566] team0: Port device team_slave_1 added [ 505.816186][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 505.816203][ T37] audit: type=1800 audit(1760034592.038:31): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.479" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 505.816784][ T7934] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 505.816825][ T7934] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 505.816844][ T7934] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 509.511066][ T7982] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 509.606898][ T7985] binder: BINDER_SET_CONTEXT_MGR already set [ 509.606912][ T7985] binder: 7984:7985 ioctl 4018620d 2000000002c0 returned -16 [ 509.670935][ T7987] binder: 7984:7987 ioctl c0306201 0 returned -14 [ 511.198301][ T7743] chnl_net:caif_netlink_parms(): no params data found [ 511.823603][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 511.885278][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 512.991226][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.991300][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.671399][ T7871] chnl_net:caif_netlink_parms(): no params data found [ 515.613874][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.614042][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.614332][ T7743] bridge_slave_0: entered allmulticast mode [ 515.617053][ T7743] bridge_slave_0: entered promiscuous mode [ 515.758292][ T7865] chnl_net:caif_netlink_parms(): no params data found [ 516.189245][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 517.349499][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 517.360090][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 517.362329][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 517.363774][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 517.364552][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 519.630330][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.630464][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.630694][ T7871] bridge_slave_0: entered allmulticast mode [ 519.633628][ T7871] bridge_slave_0: entered promiscuous mode [ 519.882013][ T5118] Bluetooth: hci5: command tx timeout [ 520.377466][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.377591][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.378000][ T7871] bridge_slave_1: entered allmulticast mode [ 520.381262][ T7871] bridge_slave_1: entered promiscuous mode [ 524.982843][ T5118] Bluetooth: hci5: command tx timeout [ 525.439010][ T37] audit: type=1326 audit(1760034611.588:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 525.440177][ T37] audit: type=1326 audit(1760034611.588:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 525.440492][ T37] audit: type=1326 audit(1760034611.598:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 525.440772][ T37] audit: type=1326 audit(1760034611.608:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 525.440902][ T37] audit: type=1326 audit(1760034611.608:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 525.441102][ T37] audit: type=1326 audit(1760034611.618:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b18b60d5c code=0x7ffc0000 [ 525.441577][ T37] audit: type=1326 audit(1760034611.618:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 525.442168][ T37] audit: type=1326 audit(1760034611.618:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 525.442409][ T37] audit: type=1326 audit(1760034611.618:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 525.442677][ T37] audit: type=1326 audit(1760034611.628:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 526.191277][ T8082] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 526.191328][ T8082] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 526.191348][ T8082] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 526.317752][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.623349][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.632484][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.633245][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.633528][ T7865] bridge_slave_0: entered allmulticast mode [ 526.636564][ T7865] bridge_slave_0: entered promiscuous mode [ 526.832016][ T8088] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 527.447756][ T61] Bluetooth: hci5: command tx timeout [ 527.818250][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.818386][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.818642][ T7865] bridge_slave_1: entered allmulticast mode [ 527.821384][ T7865] bridge_slave_1: entered promiscuous mode [ 529.157535][ T8093] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 529.157578][ T8093] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 529.157597][ T8093] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 529.190662][ T7871] team0: Port device team_slave_0 added [ 530.142642][ T61] Bluetooth: hci5: command tx timeout [ 531.778394][ T7871] team0: Port device team_slave_1 added [ 532.260471][ T5882] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 532.573421][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.573472][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 532.573504][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.586494][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.629685][ T5882] usb 5-1: config 0 descriptor?? [ 532.796172][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.310105][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.310120][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.310143][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.510236][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.510252][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.510274][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.541075][ T7865] team0: Port device team_slave_0 added [ 533.602914][ T7865] team0: Port device team_slave_1 added [ 534.066014][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.066031][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.066054][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.263317][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.263333][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.263356][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.567321][ T5882] usbhid 5-1:0.0: can't add hid device: -71 [ 534.577510][ T5882] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 534.593517][ T5882] usb 5-1: USB disconnect, device number 9 [ 535.482175][ T8134] binder: BINDER_SET_CONTEXT_MGR already set [ 535.482190][ T8134] binder: 8132:8134 ioctl 4018620d 2000000002c0 returned -16 [ 535.547913][ T5804] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 535.675247][ T7871] hsr_slave_0: entered promiscuous mode [ 535.676132][ T7871] hsr_slave_1: entered promiscuous mode [ 535.676757][ T7871] debugfs: 'hsr0' already exists in 'hsr' [ 535.676773][ T7871] Cannot create hsr debugfs directory [ 535.709681][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.709714][ T5804] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 535.709726][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.714438][ T5804] usb 4-1: config 0 descriptor?? [ 537.021024][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 537.021045][ T37] audit: type=1326 audit(1760034623.138:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 537.021092][ T37] audit: type=1326 audit(1760034623.138:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 537.022150][ T37] audit: type=1326 audit(1760034623.148:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 537.023225][ T37] audit: type=1326 audit(1760034623.148:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 537.027562][ T37] audit: type=1326 audit(1760034623.148:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 537.717812][ T37] audit: type=1326 audit(1760034623.158:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b18b60d5c code=0x7ffc0000 [ 537.717861][ T37] audit: type=1326 audit(1760034623.158:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 537.717902][ T37] audit: type=1326 audit(1760034623.158:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 537.717943][ T37] audit: type=1326 audit(1760034623.158:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 537.717982][ T37] audit: type=1326 audit(1760034623.168:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8137 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 537.909103][ T5804] usbhid 4-1:0.0: can't add hid device: -71 [ 537.909226][ T5804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 537.938566][ T5804] usb 4-1: USB disconnect, device number 17 [ 537.941286][ T8141] syz.4.518 (8141) used greatest stack depth: 15000 bytes left [ 539.831866][ T8050] chnl_net:caif_netlink_parms(): no params data found [ 540.892277][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.903962][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 540.907813][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 540.923073][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 540.927859][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.007798][ T5938] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 541.170204][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.170255][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 541.170279][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.182463][ T5938] usb 4-1: config 0 descriptor?? [ 543.037925][ T5118] Bluetooth: hci0: command tx timeout [ 544.052631][ T5938] usbhid 4-1:0.0: can't add hid device: -71 [ 544.052784][ T5938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 544.077988][ T5938] usb 4-1: USB disconnect, device number 18 [ 544.269264][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 544.288023][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 544.289237][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 544.290763][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 544.292044][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.472306][ T8184] binder: BINDER_SET_CONTEXT_MGR already set [ 544.472320][ T8184] binder: 8183:8184 ioctl 4018620d 2000000002c0 returned -16 [ 546.538255][ T5804] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 546.591617][ T5118] Bluetooth: hci3: command tx timeout [ 546.591952][ T61] Bluetooth: hci0: command tx timeout [ 546.745882][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.745932][ T5804] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 546.745953][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.797354][ T5804] usb 4-1: config 0 descriptor?? [ 548.541764][ T5804] usbhid 4-1:0.0: can't add hid device: -71 [ 548.541897][ T5804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 549.583422][ T5804] usb 4-1: USB disconnect, device number 19 [ 549.794769][ T5118] Bluetooth: hci3: command tx timeout [ 549.794859][ T61] Bluetooth: hci0: command tx timeout [ 551.338959][ T8208] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 551.841336][ T5118] Bluetooth: hci3: command tx timeout [ 552.529599][ T61] Bluetooth: hci0: command tx timeout [ 552.731815][ T8222] binder: BINDER_SET_CONTEXT_MGR already set [ 552.731829][ T8222] binder: 8221:8222 ioctl 4018620d 2000000002c0 returned -16 [ 552.734840][ T8224] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 553.468604][ T5804] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 553.809838][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.810623][ T5804] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 553.810801][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.851436][ T5804] usb 4-1: config 0 descriptor?? [ 554.316383][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.317537][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.320259][ T8050] bridge_slave_0: entered allmulticast mode [ 554.359091][ T8050] bridge_slave_0: entered promiscuous mode [ 554.389702][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.389925][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.390322][ T8050] bridge_slave_1: entered allmulticast mode [ 554.394535][ T8050] bridge_slave_1: entered promiscuous mode [ 554.574342][ T61] Bluetooth: hci3: command tx timeout [ 555.168706][ T8235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.538'. [ 555.168732][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 555.168746][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.538'. [ 555.329398][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.373088][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.767235][ T5804] usbhid 4-1:0.0: can't add hid device: -71 [ 555.767356][ T5804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 555.772928][ T5804] usb 4-1: USB disconnect, device number 20 [ 557.219076][ T8050] team0: Port device team_slave_0 added [ 557.241029][ T8050] team0: Port device team_slave_1 added [ 559.315999][ T8262] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 560.854099][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.854115][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.854139][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.942537][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.942553][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.942577][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.971123][ T8050] hsr_slave_0: entered promiscuous mode [ 562.972594][ T8050] hsr_slave_1: entered promiscuous mode [ 562.973539][ T8050] debugfs: 'hsr0' already exists in 'hsr' [ 562.973562][ T8050] Cannot create hsr debugfs directory [ 563.389771][ T8178] chnl_net:caif_netlink_parms(): no params data found [ 564.212126][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 565.950224][ T1537] bridge_slave_0: left allmulticast mode [ 565.950251][ T1537] bridge_slave_0: left promiscuous mode [ 565.950497][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.074274][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 566.085792][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 566.971962][ T1537] bridge_slave_1: left allmulticast mode [ 566.971990][ T1537] bridge_slave_1: left promiscuous mode [ 566.972248][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.188587][ T1537] bridge_slave_0: left allmulticast mode [ 567.188607][ T1537] bridge_slave_0: left promiscuous mode [ 567.188764][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.259097][ T1537] bridge_slave_1: left allmulticast mode [ 567.259126][ T1537] bridge_slave_1: left promiscuous mode [ 567.259372][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.334628][ T1537] bridge_slave_0: left allmulticast mode [ 567.334657][ T1537] bridge_slave_0: left promiscuous mode [ 567.335306][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.438472][ T8326] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 568.066930][ T1537] bridge_slave_1: left allmulticast mode [ 568.066958][ T1537] bridge_slave_1: left promiscuous mode [ 568.098502][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.179445][ T1537] bridge_slave_0: left allmulticast mode [ 568.179471][ T1537] bridge_slave_0: left promiscuous mode [ 568.179738][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.242043][ T8333] netlink: 2 bytes leftover after parsing attributes in process `syz.4.559'. [ 569.341341][ T1537] bridge_slave_1: left allmulticast mode [ 569.341367][ T1537] bridge_slave_1: left promiscuous mode [ 569.341602][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.558709][ T1537] bridge_slave_0: left allmulticast mode [ 569.558729][ T1537] bridge_slave_0: left promiscuous mode [ 569.558914][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.899259][ T1537] bridge_slave_1: left allmulticast mode [ 570.899289][ T1537] bridge_slave_1: left promiscuous mode [ 570.899529][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.088709][ T1537] bridge_slave_0: left allmulticast mode [ 571.088729][ T1537] bridge_slave_0: left promiscuous mode [ 571.088924][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.482264][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 571.482282][ T37] audit: type=1326 audit(1760034657.648:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 571.483245][ T37] audit: type=1326 audit(1760034657.648:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 571.483488][ T37] audit: type=1326 audit(1760034657.658:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 571.484536][ T37] audit: type=1326 audit(1760034657.658:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 571.609135][ T37] audit: type=1326 audit(1760034657.658:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 571.613712][ T37] audit: type=1326 audit(1760034657.668:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff789f10d5c code=0x7ffc0000 [ 571.640337][ T37] audit: type=1326 audit(1760034657.668:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff789f10c94 code=0x7ffc0000 [ 571.668551][ T37] audit: type=1326 audit(1760034657.668:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff789f10c94 code=0x7ffc0000 [ 571.668603][ T37] audit: type=1326 audit(1760034657.668:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 571.745979][ T37] audit: type=1326 audit(1760034657.668:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8338 comm="syz.3.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 572.200255][ T1537] bridge_slave_1: left allmulticast mode [ 572.200275][ T1537] bridge_slave_1: left promiscuous mode [ 572.200422][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.259366][ T1537] bridge_slave_0: left allmulticast mode [ 572.259395][ T1537] bridge_slave_0: left promiscuous mode [ 572.259672][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.350419][ T1537] bridge_slave_1: left allmulticast mode [ 572.350438][ T1537] bridge_slave_1: left promiscuous mode [ 572.350584][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.418693][ T1537] bridge_slave_0: left allmulticast mode [ 572.418712][ T1537] bridge_slave_0: left promiscuous mode [ 572.418869][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.603210][ T1537] bond0 (unregistering): Released all slaves [ 572.728370][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.819690][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.880909][ T1537] bond0 (unregistering): Released all slaves [ 573.001927][ T1537] bond0 (unregistering): Released all slaves [ 573.115540][ T1537] bond0 (unregistering): Released all slaves [ 573.240696][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.282987][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.283080][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.338616][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.410191][ T1537] bond0 (unregistering): Released all slaves [ 573.538439][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.600136][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.660041][ T1537] bond0 (unregistering): Released all slaves [ 573.819880][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.898562][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.960850][ T1537] bond0 (unregistering): Released all slaves [ 574.075093][ T1537] bond0 (unregistering): Released all slaves [ 574.248422][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.308396][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.359876][ T1537] bond0 (unregistering): Released all slaves [ 574.533135][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.533531][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.014342][ T8333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.019786][ T8333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.977972][ T8343] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 575.978011][ T8343] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 575.978037][ T8343] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 576.123433][ T1512] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.152261][ T1512] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.286521][ T1512] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.470287][ T1512] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.473431][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.473629][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.473864][ T8178] bridge_slave_0: entered allmulticast mode [ 576.475588][ T8178] bridge_slave_0: entered promiscuous mode [ 577.594467][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.594613][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.594824][ T8178] bridge_slave_1: entered allmulticast mode [ 577.632462][ T8178] bridge_slave_1: entered promiscuous mode [ 578.589194][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.589337][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.589589][ T8155] bridge_slave_0: entered allmulticast mode [ 578.592738][ T8155] bridge_slave_0: entered promiscuous mode [ 579.917260][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 579.917278][ T37] audit: type=1326 audit(1760034666.068:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 579.917324][ T37] audit: type=1326 audit(1760034666.068:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 579.917364][ T37] audit: type=1326 audit(1760034666.078:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 579.917402][ T37] audit: type=1326 audit(1760034666.088:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 579.917441][ T37] audit: type=1326 audit(1760034666.088:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 579.917480][ T37] audit: type=1326 audit(1760034666.088:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b18b60d5c code=0x7ffc0000 [ 579.917519][ T37] audit: type=1326 audit(1760034666.098:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 579.917558][ T37] audit: type=1326 audit(1760034666.098:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 579.917597][ T37] audit: type=1326 audit(1760034666.098:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 580.141943][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.151351][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.152709][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.154273][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.155708][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.236118][ T37] audit: type=1326 audit(1760034666.098:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 580.738282][ T5945] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 580.925428][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.925837][ T5945] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 580.925905][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.089673][ T5945] usb 4-1: config 0 descriptor?? [ 581.159847][ T8354] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 581.159891][ T8354] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 581.159909][ T8354] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 581.369815][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.370232][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.370412][ T8155] bridge_slave_1: entered allmulticast mode [ 581.372834][ T8155] bridge_slave_1: entered promiscuous mode [ 582.238051][ T5118] Bluetooth: hci4: command tx timeout [ 583.597398][ T5945] usbhid 4-1:0.0: can't add hid device: -71 [ 583.599144][ T5945] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 583.643283][ T5945] usb 4-1: USB disconnect, device number 21 [ 583.680267][ T8178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.815320][ T8178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.846439][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.935386][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.319624][ T5118] Bluetooth: hci4: command tx timeout [ 585.459904][ T8178] team0: Port device team_slave_0 added [ 586.404849][ T5118] Bluetooth: hci4: command tx timeout [ 587.673175][ T8178] team0: Port device team_slave_1 added [ 587.676271][ T8155] team0: Port device team_slave_0 added [ 587.689933][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.709513][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.750835][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.927041][ T8403] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 588.838182][ T5118] Bluetooth: hci4: command tx timeout [ 588.937995][ T1537] hsr_slave_0: left promiscuous mode [ 589.213715][ T1537] hsr_slave_1: left promiscuous mode [ 589.214718][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.238486][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.457389][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 591.688621][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 592.348750][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 592.458433][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 593.158426][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 593.301620][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 593.309276][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 594.322448][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 597.164832][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 597.179927][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 599.338553][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 599.480465][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 601.054889][ T37] audit: type=1326 audit(1760034686.628:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8443 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 601.054957][ T37] audit: type=1326 audit(1760034686.628:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8443 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 601.054998][ T37] audit: type=1326 audit(1760034686.648:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8443 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 601.055036][ T37] audit: type=1326 audit(1760034686.648:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8443 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 601.055073][ T37] audit: type=1326 audit(1760034686.648:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8443 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff789f0eec9 code=0x7ffc0000 [ 601.055112][ T37] audit: type=1326 audit(1760034686.648:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8443 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff789f10d5c code=0x7ffc0000 [ 601.531299][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.674309][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.675320][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.676867][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.677552][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.750595][ T8155] team0: Port device team_slave_1 added [ 603.729221][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 603.733905][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 603.735043][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 603.736437][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 603.737353][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 603.757797][ T61] Bluetooth: hci5: command tx timeout [ 605.402730][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 605.880896][ T5118] Bluetooth: hci5: command tx timeout [ 606.891776][ T5118] Bluetooth: hci6: command tx timeout [ 608.820584][ T5118] Bluetooth: hci5: command tx timeout [ 608.948025][ T8501] fuse: Unknown parameter 'group_id00000000000000000000' [ 608.966557][ T61] Bluetooth: hci6: command tx timeout [ 609.619371][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 610.878035][ T61] Bluetooth: hci5: command tx timeout [ 610.911369][ T37] audit: type=1326 audit(1760034696.388:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 610.911421][ T37] audit: type=1326 audit(1760034696.388:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 610.911461][ T37] audit: type=1326 audit(1760034696.398:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 610.911499][ T37] audit: type=1326 audit(1760034696.398:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 610.911537][ T37] audit: type=1326 audit(1760034696.398:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 610.911575][ T37] audit: type=1326 audit(1760034696.408:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b18b60d5c code=0x7ffc0000 [ 610.911614][ T37] audit: type=1326 audit(1760034696.408:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 610.911654][ T37] audit: type=1326 audit(1760034696.408:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b18b60c94 code=0x7ffc0000 [ 610.911690][ T37] audit: type=1326 audit(1760034696.408:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 610.911733][ T37] audit: type=1326 audit(1760034696.408:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b18b5eec9 code=0x7ffc0000 [ 611.040571][ T61] Bluetooth: hci6: command tx timeout [ 612.302620][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.302838][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.303053][ T8363] bridge_slave_0: entered allmulticast mode [ 612.305779][ T8363] bridge_slave_0: entered promiscuous mode [ 612.325062][ T8528] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 612.327841][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.327954][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.328193][ T8363] bridge_slave_1: entered allmulticast mode [ 612.339000][ T8363] bridge_slave_1: entered promiscuous mode [ 613.118222][ T5118] Bluetooth: hci6: command tx timeout [ 613.328100][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.328303][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.328557][ T8450] bridge_slave_0: entered allmulticast mode [ 613.331564][ T8450] bridge_slave_0: entered promiscuous mode [ 613.341378][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.627980][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.628107][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.628352][ T8450] bridge_slave_1: entered allmulticast mode [ 613.633105][ T8450] bridge_slave_1: entered promiscuous mode [ 613.639156][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.708809][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.711774][ T8363] team0: Port device team_slave_0 added [ 618.715942][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.738450][ T8363] team0: Port device team_slave_1 added [ 619.761530][ T8559] netlink: 'syz.4.604': attribute type 5 has an invalid length. [ 619.959486][ T8562] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 619.980526][ T8559] ip6erspan0: entered promiscuous mode [ 620.698618][ T5804] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 621.139708][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.139757][ T5804] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 621.139780][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.147229][ T5804] usb 5-1: config 0 descriptor?? [ 621.235216][ T8450] team0: Port device team_slave_0 added [ 621.236599][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.236612][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.236637][ T8363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.237582][ T8462] chnl_net:caif_netlink_parms(): no params data found [ 621.255122][ T8450] team0: Port device team_slave_1 added [ 621.258535][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.258549][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.258574][ T8363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.282921][ T5804] usbhid 5-1:0.0: can't add hid device: -71 [ 623.283046][ T5804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 623.899272][ T5804] usb 5-1: USB disconnect, device number 10 [ 624.241977][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.241994][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.242021][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.261456][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.261472][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.261499][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.811877][ T8363] hsr_slave_0: entered promiscuous mode [ 627.813338][ T8363] hsr_slave_1: entered promiscuous mode [ 627.814328][ T8363] debugfs: 'hsr0' already exists in 'hsr' [ 627.814351][ T8363] Cannot create hsr debugfs directory [ 629.959613][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.959784][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.959991][ T8462] bridge_slave_0: entered allmulticast mode [ 629.962778][ T8462] bridge_slave_0: entered promiscuous mode [ 630.096049][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.096192][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.096389][ T8462] bridge_slave_1: entered allmulticast mode [ 630.120130][ T8462] bridge_slave_1: entered promiscuous mode [ 630.136197][ T8450] hsr_slave_0: entered promiscuous mode [ 630.143585][ T8450] hsr_slave_1: entered promiscuous mode [ 630.144842][ T8450] debugfs: 'hsr0' already exists in 'hsr' [ 630.144866][ T8450] Cannot create hsr debugfs directory [ 631.610519][ T8462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.553561][ T8462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.265251][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.265319][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.344495][ T8462] team0: Port device team_slave_0 added [ 635.379202][ T8462] team0: Port device team_slave_1 added [ 635.905194][ T8462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.905211][ T8462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.905246][ T8462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.984523][ T8462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.984540][ T8462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.984566][ T8462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.026929][ T8462] hsr_slave_0: entered promiscuous mode [ 638.028861][ T8462] hsr_slave_1: entered promiscuous mode [ 638.029804][ T8462] debugfs: 'hsr0' already exists in 'hsr' [ 638.029826][ T8462] Cannot create hsr debugfs directory [ 640.450492][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 640.474179][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 640.475642][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 640.476800][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 640.495397][ T8691] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 642.557753][ T5118] Bluetooth: hci0: command tx timeout [ 644.650275][ T5118] Bluetooth: hci0: command tx timeout [ 646.727784][ T5118] Bluetooth: hci0: command tx timeout [ 648.914564][ T8450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.945569][ T5118] Bluetooth: hci0: command tx timeout [ 648.987712][ T8450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 650.310171][ T8450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 650.797804][ T8739] 9pnet_fd: Insufficient options for proto=fd [ 651.422741][ T8450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 651.912102][ T8462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 652.130702][ T8462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 653.832137][ T8462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 655.134592][ T8462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 655.174768][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 655.420089][ T8797] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 658.210583][ T5882] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 658.560184][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.560235][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 658.560258][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.627951][ T5882] usb 4-1: config 0 descriptor?? [ 659.598987][ T1537] bridge_slave_1: left allmulticast mode [ 659.599017][ T1537] bridge_slave_1: left promiscuous mode [ 659.603483][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.781079][ T1537] bridge_slave_0: left allmulticast mode [ 659.781107][ T1537] bridge_slave_0: left promiscuous mode [ 659.781351][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.021619][ T1537] bridge_slave_1: left allmulticast mode [ 660.021638][ T1537] bridge_slave_1: left promiscuous mode [ 660.021858][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.928298][ T5953] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 660.929406][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 660.929527][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 660.963514][ T5882] usb 4-1: USB disconnect, device number 22 [ 661.068691][ T1537] bridge_slave_0: left allmulticast mode [ 661.068711][ T1537] bridge_slave_0: left promiscuous mode [ 661.069302][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.130595][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.130635][ T5953] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 661.130647][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.135214][ T5953] usb 5-1: config 0 descriptor?? [ 661.182211][ T1537] bridge_slave_1: left allmulticast mode [ 661.182236][ T1537] bridge_slave_1: left promiscuous mode [ 661.182857][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.232487][ T1537] bridge_slave_0: left allmulticast mode [ 661.232515][ T1537] bridge_slave_0: left promiscuous mode [ 661.232754][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.331584][ T1537] bridge_slave_1: left allmulticast mode [ 661.331614][ T1537] bridge_slave_1: left promiscuous mode [ 661.331824][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.411110][ T1537] bridge_slave_0: left allmulticast mode [ 661.411138][ T1537] bridge_slave_0: left promiscuous mode [ 661.411480][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.472165][ T1537] bridge_slave_1: left allmulticast mode [ 661.472196][ T1537] bridge_slave_1: left promiscuous mode [ 661.472428][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.562569][ T1537] bridge_slave_0: left allmulticast mode [ 661.562598][ T1537] bridge_slave_0: left promiscuous mode [ 661.562813][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.624239][ T1537] bridge_slave_1: left allmulticast mode [ 661.624261][ T1537] bridge_slave_1: left promiscuous mode [ 661.624481][ T1537] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.682067][ T1537] bridge_slave_0: left allmulticast mode [ 661.682097][ T1537] bridge_slave_0: left promiscuous mode [ 661.682404][ T1537] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.297197][ T8691] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 662.311625][ T8691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 662.312908][ T8691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 662.316580][ T8691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 662.336769][ T8691] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 662.348715][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.898298][ T5953] usbhid 5-1:0.0: can't add hid device: -71 [ 662.898428][ T5953] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 662.928253][ T5953] usb 5-1: USB disconnect, device number 11 [ 663.078433][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.170173][ T1537] bond0 (unregistering): Released all slaves [ 663.353165][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.428390][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.491176][ T1537] bond0 (unregistering): Released all slaves [ 663.628481][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.011246][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.035700][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 664.161665][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 664.174187][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 664.852917][ T61] Bluetooth: hci3: command tx timeout [ 664.891581][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 664.893333][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 664.894854][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 664.895634][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 665.246402][ T1537] bond0 (unregistering): Released all slaves [ 666.804998][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.877763][ T8691] Bluetooth: hci3: command tx timeout [ 666.878797][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.950102][ T1537] bond0 (unregistering): Released all slaves [ 666.957732][ T8691] Bluetooth: hci4: command tx timeout [ 667.148671][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.248415][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.331937][ T1537] bond0 (unregistering): Released all slaves [ 668.525713][ T1537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.759357][ T1537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.600364][ T5118] Bluetooth: hci4: command tx timeout [ 669.600460][ T8691] Bluetooth: hci3: command tx timeout [ 669.671207][ T1537] bond0 (unregistering): Released all slaves [ 669.833797][ T8867] bridge0: port 3(gretap0) entered blocking state [ 669.833909][ T8867] bridge0: port 3(gretap0) entered disabled state [ 669.834122][ T8867] gretap0: entered allmulticast mode [ 669.836547][ T8867] gretap0: entered promiscuous mode [ 669.838887][ T8867] bridge0: port 3(gretap0) entered blocking state [ 669.839013][ T8867] bridge0: port 3(gretap0) entered forwarding state [ 671.785355][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.294755][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.304036][ T8691] Bluetooth: hci3: command tx timeout [ 672.304070][ T8691] Bluetooth: hci4: command tx timeout [ 672.338434][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.810883][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.066024][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.290097][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.349277][ T5118] Bluetooth: hci4: command tx timeout [ 675.168239][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.444240][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.863778][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.286487][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.760575][ T5804] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 676.921618][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.921671][ T5804] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 676.921696][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.966694][ T5804] usb 4-1: config 0 descriptor?? [ 677.229696][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.229839][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.230054][ T8689] bridge_slave_0: entered allmulticast mode [ 677.233115][ T8689] bridge_slave_0: entered promiscuous mode [ 677.705050][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.705198][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.705457][ T8689] bridge_slave_1: entered allmulticast mode [ 677.735080][ T8689] bridge_slave_1: entered promiscuous mode [ 678.254908][ T5804] usbhid 4-1:0.0: can't add hid device: -71 [ 678.255034][ T5804] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 678.291781][ T5804] usb 4-1: USB disconnect, device number 23 [ 678.361100][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.440499][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.932265][ T8689] team0: Port device team_slave_0 added [ 679.016561][ T8689] team0: Port device team_slave_1 added [ 679.659331][ T1537] hsr_slave_0: left promiscuous mode [ 679.709228][ T1537] hsr_slave_1: left promiscuous mode [ 679.710205][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.750633][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.863827][ T8944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 680.066891][ T1537] hsr_slave_0: left promiscuous mode [ 680.097734][ T1537] hsr_slave_1: left promiscuous mode [ 680.102042][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.978546][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.127825][ T1537] hsr_slave_0: left promiscuous mode [ 681.147872][ T1537] hsr_slave_1: left promiscuous mode [ 681.148652][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.188718][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.209928][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.248588][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.848491][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 682.370904][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 682.859628][ T8961] tty tty29: ldisc open failed (-12), clearing slot 28 [ 682.894610][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 683.440438][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 683.582616][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 684.008354][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 684.158429][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 684.828478][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 684.952601][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 685.849689][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 685.978467][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 686.548347][ T1537] team0 (unregistering): Port device team_slave_1 removed [ 686.688664][ T1537] team0 (unregistering): Port device team_slave_0 removed [ 687.232833][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.232850][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.232874][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.290707][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.290723][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.290743][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.152751][ T8689] hsr_slave_0: entered promiscuous mode [ 688.154083][ T8689] hsr_slave_1: entered promiscuous mode [ 688.155031][ T8689] debugfs: 'hsr0' already exists in 'hsr' [ 688.155054][ T8689] Cannot create hsr debugfs directory [ 688.544956][ T8994] mmap: syz.4.683 (8994): VmData 45834240 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 689.411066][ T8843] chnl_net:caif_netlink_parms(): no params data found [ 690.769398][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 694.019867][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 694.700497][ T9046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 696.110617][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.110791][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.111017][ T8843] bridge_slave_0: entered allmulticast mode [ 696.114049][ T8843] bridge_slave_0: entered promiscuous mode [ 696.169174][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.169245][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.340462][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.340633][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.340851][ T8843] bridge_slave_1: entered allmulticast mode [ 696.343475][ T8843] bridge_slave_1: entered promiscuous mode [ 696.384770][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.384892][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.385082][ T8855] bridge_slave_0: entered allmulticast mode [ 696.388689][ T8855] bridge_slave_0: entered promiscuous mode [ 697.602136][ T5945] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 697.864666][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.864772][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.864940][ T8855] bridge_slave_1: entered allmulticast mode [ 697.867367][ T8855] bridge_slave_1: entered promiscuous mode [ 697.887676][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 697.903503][ T5945] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 697.903530][ T5945] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 697.903550][ T5945] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 697.903571][ T5945] usb 4-1: config 250 has no interface number 0 [ 697.903618][ T5945] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 697.903645][ T5945] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 697.903669][ T5945] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 697.903691][ T5945] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 697.903715][ T5945] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 697.903738][ T5945] usb 4-1: config 250 interface 228 has no altsetting 0 [ 698.308797][ T9098] Zero length message leads to an empty skb [ 698.515128][ T5945] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 698.515229][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 698.515275][ T5945] usb 4-1: Product: syz [ 698.515319][ T5945] usb 4-1: SerialNumber: syz [ 698.813180][ T5945] hub 4-1:250.228: bad descriptor, ignoring hub [ 698.813219][ T5945] hub 4-1:250.228: probe with driver hub failed with error -5 [ 699.056687][ T5945] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 699.262262][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.312525][ T5945] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 699.387504][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.415687][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.597366][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.969378][ T8843] team0: Port device team_slave_0 added [ 700.234430][ T8843] team0: Port device team_slave_1 added [ 700.376903][ T8691] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 700.387457][ T8691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 700.389185][ T8691] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 700.392028][ T8691] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 700.392865][ T8691] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 700.463014][ T8855] team0: Port device team_slave_0 added [ 700.554096][ T8855] team0: Port device team_slave_1 added [ 700.770830][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.770847][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.770879][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.002213][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.002230][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.002256][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.035176][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.035193][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.035219][ T8855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.110057][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.110073][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.110098][ T8855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.616071][ T8843] hsr_slave_0: entered promiscuous mode [ 701.629816][ T8843] hsr_slave_1: entered promiscuous mode [ 701.630856][ T8843] debugfs: 'hsr0' already exists in 'hsr' [ 701.630880][ T8843] Cannot create hsr debugfs directory [ 701.654389][ T5788] usb 4-1: USB disconnect, device number 24 [ 701.662679][ T5788] usblp0: removed [ 702.028623][ T8855] hsr_slave_0: entered promiscuous mode [ 702.036401][ T8855] hsr_slave_1: entered promiscuous mode [ 702.051840][ T8855] debugfs: 'hsr0' already exists in 'hsr' [ 702.051968][ T8855] Cannot create hsr debugfs directory [ 702.477757][ T5118] Bluetooth: hci5: command tx timeout [ 703.838180][ T5788] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 704.217081][ T9176] ------------[ cut here ]------------ [ 704.217103][ T9176] WARNING: CPU: 1 PID: 9176 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 704.217143][ T9176] Modules linked in: [ 704.217183][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 704.217207][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 704.217223][ T9176] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 704.217247][ T9176] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 0b 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 704.217266][ T9176] RSP: 0018:ffffc90003bcf8e0 EFLAGS: 00010287 [ 704.217283][ T9176] RAX: ffffffff81b7e509 RBX: 0000000000000000 RCX: 0000000000080000 [ 704.217299][ T9176] RDX: ffffc9000e745000 RSI: 00000000000000ef RDI: 00000000000000f0 [ 704.217313][ T9176] RBP: ffffc90003bcfa70 R08: 0000000000000000 R09: 0000000000000000 [ 704.217327][ T9176] R10: dffffc0000000000 R11: fffffbfff1deecaf R12: dffffc0000000000 [ 704.217342][ T9176] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880389e8791 [ 704.217356][ T9176] FS: 00007ff78816e6c0(0000) GS:ffff888126ccb000(0000) knlGS:0000000000000000 [ 704.217372][ T9176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.217383][ T9176] CR2: 000000110c2fef4e CR3: 0000000035098000 CR4: 00000000003526f0 [ 704.217401][ T9176] Call Trace: [ 704.217412][ T9176] [ 704.217427][ T9176] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 704.217458][ T9176] ? __pfx_cgroup_freeze+0x10/0x10 [ 704.217477][ T9176] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 704.217500][ T9176] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 704.217518][ T9176] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 704.217637][ T9176] ? mutex_lock_nested+0x154/0x1d0 [ 704.217666][ T9176] ? cgroup_kn_lock_live+0x13c/0x230 [ 704.217703][ T9176] cgroup_freeze_write+0x156/0x1c0 [ 704.217735][ T9176] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 704.217762][ T9176] ? kernfs_root+0x1c/0x230 [ 704.217785][ T9176] ? kernfs_root+0x1c/0x230 [ 704.217804][ T9176] ? kernfs_root+0x1ea/0x230 [ 704.217822][ T9176] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 704.217851][ T9176] cgroup_file_write+0x39e/0x740 [ 704.217881][ T9176] ? __pfx_cgroup_file_write+0x10/0x10 [ 704.217919][ T9176] ? __pfx_cgroup_file_write+0x10/0x10 [ 704.217954][ T9176] kernfs_fop_write_iter+0x3b0/0x540 [ 704.217990][ T9176] vfs_write+0x5d5/0xb40 [ 704.218021][ T9176] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 704.218048][ T9176] ? __pfx_vfs_write+0x10/0x10 [ 704.218068][ T9176] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 704.218106][ T9176] ? mutex_lock_nested+0x154/0x1d0 [ 704.218131][ T9176] ? fdget_pos+0x253/0x320 [ 704.218167][ T9176] ksys_write+0x14b/0x260 [ 704.218195][ T9176] ? __pfx_ksys_write+0x10/0x10 [ 704.218223][ T9176] ? do_syscall_64+0xbe/0xfa0 [ 704.218250][ T9176] do_syscall_64+0xfa/0xfa0 [ 704.218271][ T9176] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.218292][ T9176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.218312][ T9176] ? clear_bhb_loop+0x60/0xb0 [ 704.218337][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.218356][ T9176] RIP: 0033:0x7ff789f0eec9 [ 704.218380][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.218398][ T9176] RSP: 002b:00007ff78816e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.218419][ T9176] RAX: ffffffffffffffda RBX: 00007ff78a165fa0 RCX: 00007ff789f0eec9 [ 704.218433][ T9176] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 704.218445][ T9176] RBP: 00007ff789f91f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.218457][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.218469][ T9176] R13: 00007ff78a166038 R14: 00007ff78a165fa0 R15: 00007ffed8bf5e18 [ 704.218503][ T9176] [ 704.218521][ T9176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 704.218537][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 704.218568][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 704.218579][ T9176] Call Trace: [ 704.218588][ T9176] [ 704.218596][ T9176] dump_stack_lvl+0x99/0x250 [ 704.218623][ T9176] ? __asan_memcpy+0x40/0x70 [ 704.218645][ T9176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.218668][ T9176] ? __pfx__printk+0x10/0x10 [ 704.218705][ T9176] vpanic+0x237/0x6d0 [ 704.218725][ T9176] ? __pfx_vpanic+0x10/0x10 [ 704.218755][ T9176] panic+0xb9/0xc0 [ 704.218773][ T9176] ? __pfx_panic+0x10/0x10 [ 704.218807][ T9176] __warn+0x31b/0x4b0 [ 704.218824][ T9176] ? cgroup_freeze+0x80a/0xf90 [ 704.218851][ T9176] ? cgroup_freeze+0x80a/0xf90 [ 704.218872][ T9176] report_bug+0x2be/0x4f0 [ 704.218892][ T9176] ? cgroup_freeze+0x80a/0xf90 [ 704.218916][ T9176] ? cgroup_freeze+0x80a/0xf90 [ 704.218939][ T9176] ? cgroup_freeze+0x80c/0xf90 [ 704.218963][ T9176] handle_bug+0x84/0x160 [ 704.218989][ T9176] exc_invalid_op+0x1a/0x50 [ 704.219015][ T9176] asm_exc_invalid_op+0x1a/0x20 [ 704.219032][ T9176] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 704.219056][ T9176] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 0b 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 704.219073][ T9176] RSP: 0018:ffffc90003bcf8e0 EFLAGS: 00010287 [ 704.219091][ T9176] RAX: ffffffff81b7e509 RBX: 0000000000000000 RCX: 0000000000080000 [ 704.219105][ T9176] RDX: ffffc9000e745000 RSI: 00000000000000ef RDI: 00000000000000f0 [ 704.219119][ T9176] RBP: ffffc90003bcfa70 R08: 0000000000000000 R09: 0000000000000000 [ 704.219132][ T9176] R10: dffffc0000000000 R11: fffffbfff1deecaf R12: dffffc0000000000 [ 704.219148][ T9176] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880389e8791 [ 704.219169][ T9176] ? cgroup_freeze+0x809/0xf90 [ 704.219206][ T9176] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 704.219232][ T9176] ? __pfx_cgroup_freeze+0x10/0x10 [ 704.219253][ T9176] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 704.219276][ T9176] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 704.219297][ T9176] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 704.219336][ T9176] ? mutex_lock_nested+0x154/0x1d0 [ 704.219362][ T9176] ? cgroup_kn_lock_live+0x13c/0x230 [ 704.219399][ T9176] cgroup_freeze_write+0x156/0x1c0 [ 704.219431][ T9176] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 704.219460][ T9176] ? kernfs_root+0x1c/0x230 [ 704.219478][ T9176] ? kernfs_root+0x1c/0x230 [ 704.219497][ T9176] ? kernfs_root+0x1ea/0x230 [ 704.219512][ T9176] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 704.219535][ T9176] cgroup_file_write+0x39e/0x740 [ 704.219568][ T9176] ? __pfx_cgroup_file_write+0x10/0x10 [ 704.219610][ T9176] ? __pfx_cgroup_file_write+0x10/0x10 [ 704.219631][ T9176] kernfs_fop_write_iter+0x3b0/0x540 [ 704.219665][ T9176] vfs_write+0x5d5/0xb40 [ 704.219693][ T9176] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 704.219721][ T9176] ? __pfx_vfs_write+0x10/0x10 [ 704.219741][ T9176] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 704.219780][ T9176] ? mutex_lock_nested+0x154/0x1d0 [ 704.219805][ T9176] ? fdget_pos+0x253/0x320 [ 704.219842][ T9176] ksys_write+0x14b/0x260 [ 704.219865][ T9176] ? __pfx_ksys_write+0x10/0x10 [ 704.219890][ T9176] ? do_syscall_64+0xbe/0xfa0 [ 704.219913][ T9176] do_syscall_64+0xfa/0xfa0 [ 704.219929][ T9176] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.219947][ T9176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.219967][ T9176] ? clear_bhb_loop+0x60/0xb0 [ 704.219993][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.220012][ T9176] RIP: 0033:0x7ff789f0eec9 [ 704.220028][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.220045][ T9176] RSP: 002b:00007ff78816e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.220065][ T9176] RAX: ffffffffffffffda RBX: 00007ff78a165fa0 RCX: 00007ff789f0eec9 [ 704.220079][ T9176] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 704.220092][ T9176] RBP: 00007ff789f91f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.220105][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.220118][ T9176] R13: 00007ff78a166038 R14: 00007ff78a165fa0 R15: 00007ffed8bf5e18 [ 704.220154][ T9176] [ 704.220487][ T9176] Kernel Offset: disabled