last executing test programs: 952.959034ms ago: executing program 1 (id=2): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000180)={&(0x7f0000003000)={[{0x0}]}, 0x1}, 0x1) syz_io_uring_setup(0x4334, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, r0}, &(0x7f0000ff5000), &(0x7f0000ff4000)) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x40004, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x4, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f00000000c0)={0x3, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000200)=@x86={0x51, 0x4, 0xe, 0x0, 0x8003, 0xa, 0xf, 0x4, 0x80, 0x4, 0x20, 0x2, 0x0, 0x12000003, 0x7, 0x6, 0x1, 0x5, 0x5, '\x00', 0x4, 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @remote}, 0x14) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c044) 217.770495ms ago: executing program 1 (id=6): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x49, 0x8000, 0x2000004}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=7): syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000afb94692d8626c92ab99f59d0523f18cb713038e22300000000000f5017f568091d33ed964e76e010904010001faf40d00090582239fb838f5af84c16ffad643fa1736b599ae4acc0b65747e9567f4283201c57b81"], 0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000afb94692d8626c92ab99f59d0523f18cb713038e22300000000000f5017f568091d33ed964e76e010904010001faf40d00090582239fb838f5af84c16ffad643fa1736b599ae4acc0b65747e9567f4283201c57b81"], 0x0) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) syz_usb_connect$printer(0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/profiling', 0x40042, 0x101) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) syz_usb_connect$uac1(0x6, 0x108, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x3, 0x1, 0xff, 0xa0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xff}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x3, 0x6, 0x9}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x3], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x40, "1f6098"}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x3, 0x7, 'q +'}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x3, 0xda, "36c7"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0x9, "c28e30"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x83, 0x3}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x2, 0xeb, 0x80, "4fb4ac7238"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x2718, 0x8, "064f8b387bb51f"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x1000}, @as_header={0x7, 0x24, 0x1, 0x6, 0x62, 0x1}, @as_header={0x7, 0x24, 0x1, 0x65, 0xa, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x29, 0x3, 0x3, {0x7, 0x25, 0x1, 0x2, 0x2, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x7, "a4"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x86, 0x8, "b374b1"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf, 0x40, "df", "8ceb36"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x7, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x91, 0x8, {0x7, 0x25, 0x1, 0x0, 0xb, 0x1}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x6, 0x7, 0xff, 0x3}, 0x8f, &(0x7f0000000300)={0x5, 0xf, 0x8f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a5bf52a69806911d182ec4eebec9db33"}, @generic={0x46, 0x10, 0x3, "215648bfb1360fb5bd05c212c80067dc63f527deb16ad233283d0937407848f56f2f9e6b76a1ba33c44342e600706a42f9c34c6675ee52fdb18be1d30fa2accc69556a"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x8, 0x0, 0x40, [0x3f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x50, 0xff, 0x6, 0xc, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x70, 0x7}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x816}}]}) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 84.155762][ T5815] cgroup: Unknown subsys name 'net' [ 84.323256][ T5815] cgroup: Unknown subsys name 'cpuset' [ 84.332420][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.979912][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.037433][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.050950][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.061036][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.068692][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.076346][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.089039][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.110321][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.125596][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.129445][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.139760][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.153528][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.161547][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.170905][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.178695][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.189244][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.208527][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.217119][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.226424][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.238835][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.253121][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.330114][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.338406][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.348526][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.356801][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.365266][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.884867][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.996027][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.117970][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 91.135801][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.300441][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.307827][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.316840][ T5840] bridge_slave_0: entered allmulticast mode [ 91.325261][ T5840] bridge_slave_0: entered promiscuous mode [ 91.375863][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.383310][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.390816][ T5843] bridge_slave_0: entered allmulticast mode [ 91.398031][ T5843] bridge_slave_0: entered promiscuous mode [ 91.406794][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.415654][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.422964][ T5843] bridge_slave_1: entered allmulticast mode [ 91.430851][ T5843] bridge_slave_1: entered promiscuous mode [ 91.438354][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.445735][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.453230][ T5840] bridge_slave_1: entered allmulticast mode [ 91.461250][ T5840] bridge_slave_1: entered promiscuous mode [ 91.600650][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.612370][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 91.626039][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.635420][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.642915][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.650517][ T5846] bridge_slave_0: entered allmulticast mode [ 91.657765][ T5846] bridge_slave_0: entered promiscuous mode [ 91.674199][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.706074][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.715551][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.723237][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.730686][ T5846] bridge_slave_1: entered allmulticast mode [ 91.737908][ T5846] bridge_slave_1: entered promiscuous mode [ 91.822631][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.830345][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.837557][ T5842] bridge_slave_0: entered allmulticast mode [ 91.845266][ T5842] bridge_slave_0: entered promiscuous mode [ 91.856233][ T5843] team0: Port device team_slave_0 added [ 91.915017][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.922691][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.930163][ T5842] bridge_slave_1: entered allmulticast mode [ 91.937410][ T5842] bridge_slave_1: entered promiscuous mode [ 91.946313][ T5843] team0: Port device team_slave_1 added [ 91.963000][ T5840] team0: Port device team_slave_0 added [ 91.972589][ T5840] team0: Port device team_slave_1 added [ 91.981782][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.032376][ T976] cfg80211: failed to load regulatory.db [ 92.052054][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.103344][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.115089][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.142455][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.197081][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.210310][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.220800][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.227755][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.254182][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.269357][ T55] Bluetooth: hci0: command tx timeout [ 92.269676][ T5839] Bluetooth: hci2: command tx timeout [ 92.280826][ T5829] Bluetooth: hci3: command tx timeout [ 92.295489][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.304959][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.331276][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.345454][ T5846] team0: Port device team_slave_0 added [ 92.351253][ T5829] Bluetooth: hci1: command tx timeout [ 92.355382][ T5846] team0: Port device team_slave_1 added [ 92.382226][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.389721][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.396918][ T5845] bridge_slave_0: entered allmulticast mode [ 92.405079][ T5845] bridge_slave_0: entered promiscuous mode [ 92.414314][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.421631][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.448319][ T5829] Bluetooth: hci4: command tx timeout [ 92.453810][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.493935][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.501372][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.509294][ T5845] bridge_slave_1: entered allmulticast mode [ 92.516766][ T5845] bridge_slave_1: entered promiscuous mode [ 92.548169][ T5842] team0: Port device team_slave_0 added [ 92.611185][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.618186][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.644604][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.659780][ T5842] team0: Port device team_slave_1 added [ 92.682988][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.706527][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.713847][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.740824][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.776397][ T5843] hsr_slave_0: entered promiscuous mode [ 92.783673][ T5843] hsr_slave_1: entered promiscuous mode [ 92.793686][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.822618][ T5840] hsr_slave_0: entered promiscuous mode [ 92.829440][ T5840] hsr_slave_1: entered promiscuous mode [ 92.836525][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.844989][ T5840] Cannot create hsr debugfs directory [ 92.866101][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.873439][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.900045][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.929825][ T5845] team0: Port device team_slave_0 added [ 92.939233][ T5845] team0: Port device team_slave_1 added [ 92.956328][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.963372][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.990245][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.145501][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.152693][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.178836][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.209156][ T5846] hsr_slave_0: entered promiscuous mode [ 93.215765][ T5846] hsr_slave_1: entered promiscuous mode [ 93.223218][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.231816][ T5846] Cannot create hsr debugfs directory [ 93.257603][ T5842] hsr_slave_0: entered promiscuous mode [ 93.264469][ T5842] hsr_slave_1: entered promiscuous mode [ 93.271240][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.279095][ T5842] Cannot create hsr debugfs directory [ 93.291774][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.299042][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.325253][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.537877][ T5845] hsr_slave_0: entered promiscuous mode [ 93.544443][ T5845] hsr_slave_1: entered promiscuous mode [ 93.551100][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.559000][ T5845] Cannot create hsr debugfs directory [ 93.920432][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.941321][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.954153][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.989067][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.054342][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.064655][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.077932][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.099726][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.186826][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.203218][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.224357][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.266863][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.351563][ T5829] Bluetooth: hci3: command tx timeout [ 94.357072][ T5829] Bluetooth: hci0: command tx timeout [ 94.363165][ T5839] Bluetooth: hci2: command tx timeout [ 94.373047][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.384724][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.396575][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.410404][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.429322][ T5829] Bluetooth: hci1: command tx timeout [ 94.445552][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.509237][ T5829] Bluetooth: hci4: command tx timeout [ 94.584348][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.605855][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.625400][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.637670][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.667295][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.674834][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.685607][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.699417][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.734481][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.741763][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.767736][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.805401][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.812719][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.832493][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.878157][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.885369][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.908036][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.972313][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.979687][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.033243][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.040480][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.066401][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.136596][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.153371][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.168193][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.189373][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.196596][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.218573][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.225740][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.256099][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.275690][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.282984][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.313484][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.320698][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.422987][ T5840] veth0_vlan: entered promiscuous mode [ 95.439978][ T5840] veth1_vlan: entered promiscuous mode [ 95.457082][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.548465][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.594606][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.637416][ T5840] veth0_macvtap: entered promiscuous mode [ 95.677327][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.696292][ T5840] veth1_macvtap: entered promiscuous mode [ 95.722187][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.732452][ T5843] veth0_vlan: entered promiscuous mode [ 95.755526][ T5843] veth1_vlan: entered promiscuous mode [ 95.781316][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.817759][ T5845] veth0_vlan: entered promiscuous mode [ 95.833072][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.842163][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.852039][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.862688][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.885849][ T5842] veth0_vlan: entered promiscuous mode [ 95.909362][ T5842] veth1_vlan: entered promiscuous mode [ 95.934610][ T5845] veth1_vlan: entered promiscuous mode [ 95.972256][ T5846] veth0_vlan: entered promiscuous mode [ 96.016176][ T5846] veth1_vlan: entered promiscuous mode [ 96.091493][ T5843] veth0_macvtap: entered promiscuous mode [ 96.118143][ T5843] veth1_macvtap: entered promiscuous mode [ 96.131856][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.143974][ T5842] veth0_macvtap: entered promiscuous mode [ 96.150512][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.187816][ T5845] veth0_macvtap: entered promiscuous mode [ 96.221877][ T5845] veth1_macvtap: entered promiscuous mode [ 96.232024][ T5842] veth1_macvtap: entered promiscuous mode [ 96.246875][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.269820][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.317599][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.329499][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.341479][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.352909][ T5846] veth0_macvtap: entered promiscuous mode [ 96.372342][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.383712][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.394680][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.405456][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.418180][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.423451][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.427999][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.448669][ T5829] Bluetooth: hci3: command tx timeout [ 96.452483][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.456481][ T5829] Bluetooth: hci0: command tx timeout [ 96.468134][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.472348][ T5839] Bluetooth: hci2: command tx timeout [ 96.489527][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.500099][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.511175][ T55] Bluetooth: hci1: command tx timeout [ 96.515590][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.527794][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.546895][ T5846] veth1_macvtap: entered promiscuous mode [ 96.557338][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.568281][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.580084][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.590850][ T55] Bluetooth: hci4: command tx timeout [ 96.597896][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.614226][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.624232][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.638314][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.657016][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.696842][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.713493][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.724943][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.736113][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.746502][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.757377][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.770661][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.780314][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.791854][ T5885] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.802263][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.835818][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.855322][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.903394][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.917400][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.928845][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.941909][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.958964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.963505][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.982666][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.993382][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.002798][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.043262][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.054120][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.065271][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.077114][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.089747][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.101731][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.112307][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.123222][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.134524][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.158355][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.187226][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.197367][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.207976][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.218003][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.229159][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.239541][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.250139][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.261585][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.329889][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.358133][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.368308][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.378044][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.482190][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.498822][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.550945][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.562716][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.644985][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.655076][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.704479][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.714499][ T5890] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 97.724747][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: syz.1.7 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 97.724774][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 97.724788][ T5890] Call Trace: [ 97.724798][ T5890] [ 97.724806][ T5890] dump_stack_lvl+0x189/0x250 [ 97.724852][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.724875][ T5890] ? __pfx__printk+0x10/0x10 [ 97.724892][ T5890] ? kernfs_path_from_node+0x2b/0x260 [ 97.724917][ T5890] ? kernfs_path_from_node+0x2b/0x260 [ 97.724937][ T5890] ? kernfs_path_from_node+0x2b/0x260 [ 97.724959][ T5890] ? kernfs_path_from_node+0x216/0x260 [ 97.724984][ T5890] sysfs_create_dir_ns+0x259/0x280 [ 97.725008][ T5890] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 97.725032][ T5890] ? do_raw_spin_unlock+0x122/0x240 [ 97.725057][ T5890] kobject_add_internal+0x59f/0xb40 [ 97.725091][ T5890] kobject_init_and_add+0x125/0x190 [ 97.725117][ T5890] ? __pfx_kobject_init_and_add+0x10/0x10 [ 97.725140][ T5890] ? __kasan_kmalloc+0x93/0xb0 [ 97.725161][ T5890] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 97.725185][ T5890] ? lookup_or_create_module_kobject+0x75/0x170 [ 97.725208][ T5890] lookup_or_create_module_kobject+0xe3/0x170 [ 97.725241][ T5890] module_add_driver+0xb9/0x310 [ 97.725268][ T5890] bus_add_driver+0x391/0x640 [ 97.725293][ T5890] driver_register+0x23a/0x320 [ 97.725322][ T5890] usb_gadget_register_driver_owner+0xf9/0x270 [ 97.725355][ T5890] raw_ioctl+0x149a/0x3c90 [ 97.725386][ T5890] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 97.725416][ T5890] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 97.725446][ T5890] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 97.725472][ T5890] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 97.725514][ T5890] ? __pfx_raw_ioctl+0x10/0x10 [ 97.725546][ T5890] ? count_memcg_event_mm+0x92/0x3b0 [ 97.725575][ T5890] ? __lock_acquire+0xaac/0xd20 [ 97.725616][ T5890] ? __fget_files+0x2a/0x420 [ 97.725643][ T5890] ? __fget_files+0x3a0/0x420 [ 97.725663][ T5890] ? __fget_files+0x2a/0x420 [ 97.725688][ T5890] ? bpf_lsm_file_ioctl+0x9/0x20 [ 97.725711][ T5890] ? __pfx_raw_ioctl+0x10/0x10 [ 97.725737][ T5890] __se_sys_ioctl+0xf9/0x170 [ 97.725758][ T5890] do_syscall_64+0xf6/0x210 [ 97.725780][ T5890] ? clear_bhb_loop+0x45/0xa0 [ 97.725800][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.725817][ T5890] RIP: 0033:0x7ffa5198e56b [ 97.725845][ T5890] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 97.725861][ T5890] RSP: 002b:00007ffa5288ff10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.725887][ T5890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ffa5198e56b [ 97.725900][ T5890] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 97.725911][ T5890] RBP: 00007ffa52890fe0 R08: 0000000000000000 R09: 00312e6364755f79 [ 97.725921][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.725932][ T5890] R13: 00007ffa5288ffb0 R14: 0000200000000080 R15: 00007ffa51ce0320 [ 97.725961][ T5890] [ 97.726606][ T5890] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 97.729284][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.049002][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.057867][ T5890] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 98.069816][ T5890] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 98.078266][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: syz.1.7 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 98.090029][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 98.100128][ T5890] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 98.106055][ T5890] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 98.125670][ T5890] RSP: 0018:ffffc9000488f840 EFLAGS: 00010002 [ 98.131748][ T5890] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 73b1140506e9bb00 [ 98.139725][ T5890] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004 [ 98.148067][ T5890] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 98.156108][ T5890] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 98.164135][ T5890] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 98.172116][ T5890] FS: 00007ffa528926c0(0000) GS:ffff8881261cb000(0000) knlGS:0000000000000000 [ 98.181058][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.187644][ T5890] CR2: 00007ffa5286ffe0 CR3: 000000007ee10000 CR4: 00000000003526f0 [ 98.195622][ T5890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.203601][ T5890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.211581][ T5890] Call Trace: [ 98.214869][ T5890] [ 98.217804][ T5890] __kasan_check_byte+0x12/0x40 [ 98.222676][ T5890] lock_acquire+0x8d/0x360 [ 98.227104][ T5890] ? kobj_kset_leave+0x163/0x190 [ 98.232066][ T5890] _raw_spin_lock_irqsave+0xa7/0xf0 [ 98.237276][ T5890] ? complete+0x28/0x1b0 [ 98.241522][ T5890] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 98.247418][ T5890] ? kobject_init_and_add+0x125/0x190 [ 98.252801][ T5890] complete+0x28/0x1b0 [ 98.256878][ T5890] kobject_put+0x228/0x480 [ 98.261336][ T5890] lookup_or_create_module_kobject+0x150/0x170 [ 98.267498][ T5890] module_add_driver+0xb9/0x310 [ 98.272448][ T5890] bus_add_driver+0x391/0x640 [ 98.277138][ T5890] driver_register+0x23a/0x320 [ 98.281914][ T5890] usb_gadget_register_driver_owner+0xf9/0x270 [ 98.288080][ T5890] raw_ioctl+0x149a/0x3c90 [ 98.292529][ T5890] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 98.298184][ T5890] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 98.303831][ T5890] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 98.309478][ T5890] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 98.315132][ T5890] ? __pfx_raw_ioctl+0x10/0x10 [ 98.319996][ T5890] ? count_memcg_event_mm+0x92/0x3b0 [ 98.325291][ T5890] ? __lock_acquire+0xaac/0xd20 [ 98.330170][ T5890] ? __fget_files+0x2a/0x420 [ 98.334805][ T5890] ? __fget_files+0x3a0/0x420 [ 98.339506][ T5890] ? __fget_files+0x2a/0x420 [ 98.344124][ T5890] ? bpf_lsm_file_ioctl+0x9/0x20 [ 98.349094][ T5890] ? __pfx_raw_ioctl+0x10/0x10 [ 98.353895][ T5890] __se_sys_ioctl+0xf9/0x170 [ 98.358497][ T5890] do_syscall_64+0xf6/0x210 [ 98.363016][ T5890] ? clear_bhb_loop+0x45/0xa0 [ 98.367733][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.373651][ T5890] RIP: 0033:0x7ffa5198e56b [ 98.378074][ T5890] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 98.397733][ T5890] RSP: 002b:00007ffa5288ff10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.406160][ T5890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ffa5198e56b [ 98.414146][ T5890] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 98.422125][ T5890] RBP: 00007ffa52890fe0 R08: 0000000000000000 R09: 00312e6364755f79 [ 98.430318][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.438381][ T5890] R13: 00007ffa5288ffb0 R14: 0000200000000080 R15: 00007ffa51ce0320 [ 98.446539][ T5890] [ 98.449565][ T5890] Modules linked in: [ 98.453476][ T5890] ---[ end trace 0000000000000000 ]--- [ 98.459046][ T5890] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 98.464970][ T5890] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 98.484673][ T5890] RSP: 0018:ffffc9000488f840 EFLAGS: 00010002 [ 98.490756][ T5890] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 73b1140506e9bb00 [ 98.498736][ T5890] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004 [ 98.506711][ T5890] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 98.514731][ T5890] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 98.522707][ T5890] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 98.530686][ T5890] FS: 00007ffa528926c0(0000) GS:ffff8881261cb000(0000) knlGS:0000000000000000 [ 98.539704][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.546294][ T5890] CR2: 00007ffa5286ffe0 CR3: 000000007ee10000 CR4: 00000000003526f0 [ 98.554271][ T5890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.562251][ T5890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.570228][ T5890] Kernel panic - not syncing: Fatal exception [ 98.576554][ T5890] Kernel Offset: disabled [ 98.580879][ T5890] Rebooting in 86400 seconds..