last executing test programs: 10m23.176085222s ago: executing program 4 (id=32): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001000030500"/20, @ANYBLOB="b123"], 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 10m22.412602023s ago: executing program 4 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000540)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40880) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x2, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x10001, 0x200}, {0xc061, 0x5}, {0xfffffff8, 0x7}, {0x1}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}}) 10m15.21213344s ago: executing program 4 (id=47): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r1 = dup(r0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x1, 0x1, 0x7, 0xf, 0x2, 0xb5, 0x4}, 0x20) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 10m14.77316212s ago: executing program 4 (id=50): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 10m13.459830153s ago: executing program 4 (id=55): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r3, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="85", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x1, 0x40000121, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) syz_open_dev$vim2m(0x0, 0x1, 0x2) r6 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x5) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_aout(r5, 0x0, 0xffffffdb) io_uring_enter(r1, 0x241d, 0x2dab, 0x1, &(0x7f0000000000)={[0xb381]}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10m10.044082904s ago: executing program 4 (id=62): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x9}}, 0x18) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lremovexattr(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0xa000000, 0x80000002, 0x80000001, 0x0, 0x2, 0x3, 0x61f4, 0x20000, 0xfffffffc}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\xb7\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca>\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce\b\x00\x00\x00$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\"K\f\x03i\xba', 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) close_range(r5, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fallocate(r0, 0x0, 0x0, 0x1000f4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0xe, 0x0, 0x3, 0x41, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe5b}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)="a0f0eaa6fe5cd0f84e098a3e7c5818fee98c5f1d049dffbc6bafed6860b2e1dce93d31a28a77bff079bfc2bc9b12f6feab2c4a8ccb984f68cdba1ff5286fcbc56b199044c31c15ff0c8317a0be6d", &(0x7f0000000040), 0x1007}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r8, &(0x7f0000000300), 0x0}, 0x20) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x4) 9m54.135094391s ago: executing program 32 (id=62): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x9}}, 0x18) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lremovexattr(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0xa000000, 0x80000002, 0x80000001, 0x0, 0x2, 0x3, 0x61f4, 0x20000, 0xfffffffc}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\xb7\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca>\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce\b\x00\x00\x00$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\"K\f\x03i\xba', 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) close_range(r5, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fallocate(r0, 0x0, 0x0, 0x1000f4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0xe, 0x0, 0x3, 0x41, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe5b}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)="a0f0eaa6fe5cd0f84e098a3e7c5818fee98c5f1d049dffbc6bafed6860b2e1dce93d31a28a77bff079bfc2bc9b12f6feab2c4a8ccb984f68cdba1ff5286fcbc56b199044c31c15ff0c8317a0be6d", &(0x7f0000000040), 0x1007}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r8, &(0x7f0000000300), 0x0}, 0x20) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x4) 8m50.689521276s ago: executing program 5 (id=300): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x1, 0x1, 0x7, 0xf, 0x2, 0xb5, 0x4}, 0x20) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 8m49.921220101s ago: executing program 5 (id=304): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) 8m48.806323105s ago: executing program 5 (id=305): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x49, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56e, 0xfffffffffffffffc}) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0505405, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$xdp(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff28, &(0x7f0000000180)=[{&(0x7f0000000080)='C', 0x1}, {&(0x7f0000000140)="98", 0x1}], 0x2, 0x0, 0x0, 0x20004000}, 0x5880) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m47.125913847s ago: executing program 5 (id=310): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0xfff}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}], {0x14}}, 0x9c}}, 0xc800) 8m45.448233474s ago: executing program 5 (id=312): socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x1, 0x501, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x1f, "06c4ce00000000006eb5e52829e7cc839300000400"}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) 8m44.572228715s ago: executing program 5 (id=316): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x108) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x68) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0x190}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x81}, {0x6, 0x0, 0xfd, 0x7a1f}]}) r4 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240), &(0x7f0000001340)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 8m28.877322598s ago: executing program 33 (id=316): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x108) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x68) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0x190}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x81}, {0x6, 0x0, 0xfd, 0x7a1f}]}) r4 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240), &(0x7f0000001340)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 1m52.9418174s ago: executing program 1 (id=1187): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m48.044695627s ago: executing program 1 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) 1m45.776095327s ago: executing program 1 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m43.702027012s ago: executing program 1 (id=1202): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x0, 0x0}) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20140, 0x20) getdents(r1, &(0x7f0000000300)=""/179, 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00", 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) fchownat(r7, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) 1m40.766145142s ago: executing program 1 (id=1207): syz_open_dev$dri(0x0, 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) 1m39.600740665s ago: executing program 1 (id=1208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b68", 0x2}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) write(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) timer_create(0xfffffffffffffffc, 0x0, 0x0) unshare(0x42000000) 1m24.021874655s ago: executing program 34 (id=1208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b68", 0x2}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) write(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) timer_create(0xfffffffffffffffc, 0x0, 0x0) unshare(0x42000000) 9.38786676s ago: executing program 2 (id=1405): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0xc810) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffef034}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$packet(r5, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be0", 0x48, 0x0, 0x0, 0x0) 7.916124697s ago: executing program 2 (id=1411): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) 7.746852684s ago: executing program 2 (id=1412): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500"], 0x50}, 0x1, 0xba01}, 0x20) 6.745421313s ago: executing program 0 (id=1414): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x49, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56e, 0xfffffffffffffffc}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0505405, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$xdp(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff28, &(0x7f0000000180)=[{&(0x7f0000000080)='C', 0x1}, {&(0x7f0000000140)="98", 0x1}], 0x2, 0x0, 0x0, 0x20004000}, 0x5880) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) unshare(0x20000400) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.508430895s ago: executing program 0 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) close(0xffffffffffffffff) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 6.17861128s ago: executing program 2 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f00000002c0)) 5.41344757s ago: executing program 0 (id=1419): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 3.428240049s ago: executing program 3 (id=1420): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3.276054996s ago: executing program 3 (id=1421): openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x400) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000200)=0x208001, 0x4) sendto$inet(r0, &(0x7f0000000000)="f461a9bbc95c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 3.020353067s ago: executing program 0 (id=1422): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000300)={0x1, 0x2, 0x400009, 0x1800000, 0x31, 0x8000000000004, 0x2, 0x6, 0xfffffffffffffff8, 0x200009, 0xfffffffb, 0x1}) 2.969983914s ago: executing program 3 (id=1423): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x49, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56e, 0xfffffffffffffffc}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0505405, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$xdp(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff28, &(0x7f0000000180)=[{&(0x7f0000000080)='C', 0x1}, {&(0x7f0000000140)="98", 0x1}], 0x2, 0x0, 0x0, 0x20004000}, 0x5880) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) unshare(0x20000400) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.739912823s ago: executing program 2 (id=1424): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500"], 0x50}, 0x1, 0xba01}, 0x20) 2.444476958s ago: executing program 3 (id=1425): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r1, 0x241d, 0x2dab, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000080), 0x10) listen(r6, 0x0) accept4$llc(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.35887062s ago: executing program 2 (id=1426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 1.358058624s ago: executing program 0 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) close(0xffffffffffffffff) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1.298891709s ago: executing program 3 (id=1428): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r0) 65.182588ms ago: executing program 0 (id=1429): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1430): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): T5841] veth0_vlan: entered promiscuous mode [ 97.217666][ T1104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.248857][ T1104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.256678][ T1104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.345368][ T5841] veth1_vlan: entered promiscuous mode [ 97.354528][ T5846] veth0_vlan: entered promiscuous mode [ 97.406184][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.533541][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.550868][ T5846] veth1_vlan: entered promiscuous mode [ 97.595384][ T149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.611755][ T149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.614727][ T5838] veth0_vlan: entered promiscuous mode [ 97.647428][ T149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.673377][ T149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.697248][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.697273][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.776308][ T5838] veth1_vlan: entered promiscuous mode [ 97.792908][ T5841] veth0_macvtap: entered promiscuous mode [ 97.906279][ T5841] veth1_macvtap: entered promiscuous mode [ 97.921554][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.921573][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.062528][ T5846] veth0_macvtap: entered promiscuous mode [ 98.141620][ T5846] veth1_macvtap: entered promiscuous mode [ 98.152679][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.152976][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.152991][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.186997][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.248168][ T5838] veth0_macvtap: entered promiscuous mode [ 98.271012][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.305974][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.358595][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.361528][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.368909][ T5838] veth1_macvtap: entered promiscuous mode [ 98.394398][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.416113][ T3628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.416132][ T3628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.467682][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.644100][ T1104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.652987][ T1104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.670697][ T1104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.674374][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.695165][ T1104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801994][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.994343][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.024192][ T1104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.044233][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.044252][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.066527][ T1104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.092464][ T1104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.427054][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.427074][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.313969][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.313988][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.627644][ T1488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.627670][ T1488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.715277][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.715297][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.821381][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.821412][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.346992][ T5980] process 'syz.1.2' launched '/dev/fd/6' with NULL argv: empty string added [ 101.628424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.628484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.628563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.628727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.628787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.628991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.629065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.629114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.629169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.629241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.116171][ T5996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.683239][ T6016] mmap: syz.4.17 (6016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.609079][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.916091][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.012737][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.283878][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.531802][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.572422][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.598163][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.222837][ T6062] tmpfs: Bad value for 'nr_blocks' [ 116.258831][ T6067] warning: `syz.4.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.045622][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 124.368824][ T5930] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 125.112719][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 125.115346][ T5930] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 125.115371][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.149410][ T5930] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.149441][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.149460][ T5930] usb 4-1: Product: syz [ 125.149474][ T5930] usb 4-1: Manufacturer: syz [ 125.149488][ T5930] usb 4-1: SerialNumber: syz [ 125.515079][ T5930] usb 4-1: 0:2 : does not exist [ 125.526658][ T5930] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 125.607894][ T5930] usb 4-1: USB disconnect, device number 2 [ 125.918700][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.373658][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.488525][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.219981][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.352047][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.072030][ T37] audit: type=1326 audit(1758369447.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.072065][ T37] audit: type=1326 audit(1758369447.340:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.072087][ T37] audit: type=1326 audit(1758369447.340:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.072109][ T37] audit: type=1326 audit(1758369447.340:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.072130][ T37] audit: type=1326 audit(1758369447.340:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.072150][ T37] audit: type=1326 audit(1758369447.340:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f264d12d590 code=0x7ffc0000 [ 129.072172][ T37] audit: type=1326 audit(1758369447.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.072192][ T37] audit: type=1326 audit(1758369447.340:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.072214][ T37] audit: type=1326 audit(1758369447.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.072234][ T37] audit: type=1326 audit(1758369447.340:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264d12ec29 code=0x7ffc0000 [ 129.090016][ T6175] Zero length message leads to an empty skb [ 129.493015][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 130.638626][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 131.065041][ T6185] vlan2: entered allmulticast mode [ 131.065067][ T6185] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 131.358954][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.641242][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.150454][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.775210][ T6205] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.812386][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812483][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.114500][ T6225] input: syz1 as /devices/virtual/input/input5 [ 134.198539][ T979] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.416273][ T979] usb 3-1: config 0 has no interfaces? [ 134.476672][ T979] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 134.476714][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.476735][ T979] usb 3-1: Product: syz [ 134.476748][ T979] usb 3-1: Manufacturer: syz [ 134.476761][ T979] usb 3-1: SerialNumber: syz [ 134.906733][ T979] usb 3-1: config 0 descriptor?? [ 135.263274][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 135.263291][ T37] audit: type=1326 audit(1758369453.540:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6214 comm="syz.2.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94502cec29 code=0x0 [ 135.516378][ T5930] usb 3-1: USB disconnect, device number 2 [ 135.826441][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.958269][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.715154][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.213349][ T37] audit: type=1326 audit(1758369457.490:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6256 comm="syz.1.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f946571ec29 code=0x0 [ 142.505803][ T6278] syz.2.93 (6278) used greatest stack depth: 14904 bytes left [ 143.435267][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.513488][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.668362][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.939719][ T6289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.279128][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.694078][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.207139][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.561826][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 146.561847][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 146.675093][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 146.675115][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 146.694645][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.699085][ T149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.701533][ T1104] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.703913][ T1104] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.204103][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.241755][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.243494][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.248706][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.300144][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.129059][ T6305] virtio-fs: tag not found [ 148.506151][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.126226][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.358736][ T5852] Bluetooth: hci5: command tx timeout [ 149.452976][ T6302] chnl_net:caif_netlink_parms(): no params data found [ 149.692746][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.602704][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.659750][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.033639][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.201398][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.440467][ T5852] Bluetooth: hci5: command tx timeout [ 151.728830][ T6341] ======================================================= [ 151.728830][ T6341] WARNING: The mand mount option has been deprecated and [ 151.728830][ T6341] and is ignored by this kernel. Remove the mand [ 151.728830][ T6341] option from the mount to silence this warning. [ 151.728830][ T6341] ======================================================= [ 151.746168][ T6341] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 151.746193][ T6341] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 151.970801][ T6342] input: syz1 as /devices/virtual/input/input6 [ 152.114154][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.115504][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.115732][ T6302] bridge_slave_0: entered allmulticast mode [ 152.183166][ T6302] bridge_slave_0: entered promiscuous mode [ 152.195623][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.195733][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.195919][ T6302] bridge_slave_1: entered allmulticast mode [ 152.209354][ T6302] bridge_slave_1: entered promiscuous mode [ 152.565078][ T6302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.614728][ T6302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.184591][ T6302] team0: Port device team_slave_0 added [ 153.208723][ T6302] team0: Port device team_slave_1 added [ 153.549305][ T5852] Bluetooth: hci5: command tx timeout [ 154.158563][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 154.175067][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.175082][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.175105][ T6302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.177405][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.177416][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.177439][ T6302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.314814][ T10] usb 2-1: config 0 has no interfaces? [ 154.335602][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 154.335636][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.335654][ T10] usb 2-1: Product: syz [ 154.335666][ T10] usb 2-1: Manufacturer: syz [ 154.335679][ T10] usb 2-1: SerialNumber: syz [ 154.380476][ T10] usb 2-1: config 0 descriptor?? [ 154.407405][ T6376] input: syz1 as /devices/virtual/input/input7 [ 154.614544][ T5929] usb 2-1: USB disconnect, device number 2 [ 154.658276][ T6302] hsr_slave_0: entered promiscuous mode [ 154.668091][ T6302] hsr_slave_1: entered promiscuous mode [ 154.683736][ T6302] debugfs: 'hsr0' already exists in 'hsr' [ 154.683762][ T6302] Cannot create hsr debugfs directory [ 155.599896][ T5852] Bluetooth: hci5: command tx timeout [ 155.977116][ T6302] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.709434][ T6302] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.820833][ T6302] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.911159][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 156.911562][ T6302] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.562869][ T6302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.627784][ T6302] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.690495][ T6302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.690517][ T6302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.801891][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.809748][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.814469][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.814632][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.172271][ T6448] fuse: Bad value for 'fd' [ 162.992367][ T6302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.513188][ T6302] veth0_vlan: entered promiscuous mode [ 165.586276][ T6302] veth1_vlan: entered promiscuous mode [ 165.801558][ T6302] veth0_macvtap: entered promiscuous mode [ 165.840270][ T6302] veth1_macvtap: entered promiscuous mode [ 166.912625][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.145392][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.167878][ T6516] fuse: Bad value for 'fd' [ 167.664868][ T5992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.664942][ T5992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.664962][ T5992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.664982][ T5992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.920865][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.920884][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.216886][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.216905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.960089][ T6549] fuse: Bad value for 'fd' [ 175.180320][ T6589] virtio-fs: tag not found [ 177.210086][ T6604] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 183.929856][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.770960][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.017607][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.045577][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.479306][ T6687] use of bytesused == 0 is deprecated and will be removed in the future, [ 185.479321][ T6687] use the actual size instead. [ 194.386069][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386145][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.804846][ T6778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.319518][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.040868][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.709645][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.557595][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.179492][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.208018][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.998247][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.198550][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.910473][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.672657][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.002441][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.585505][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.023809][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 212.023936][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 212.025251][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 212.026546][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 212.027857][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 212.062345][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.112926][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.003673][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.216418][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.425384][ T37] audit: type=1326 audit(1758369532.700:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.5.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f4fe1ec29 code=0x0 [ 214.548580][ T6947] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 216.095370][ T6947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.095396][ T6947] usb 2-1: config 0 has no interfaces? [ 216.095426][ T6947] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.095447][ T6947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.112096][ T6947] usb 2-1: config 0 descriptor?? [ 217.699064][ T6978] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 217.699089][ T6978] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 217.794798][ T5929] usb 2-1: USB disconnect, device number 3 [ 224.930585][ T6998] virtio-fs: tag not found [ 230.654605][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.470670][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.480887][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.488839][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.498772][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.500698][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.142147][ T5856] Bluetooth: hci5: command tx timeout [ 234.684168][ T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.339119][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.503874][ T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.120135][ T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.158920][ T5856] Bluetooth: hci5: command tx timeout [ 237.262016][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.922713][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.334351][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.448991][ T5856] Bluetooth: hci5: command tx timeout [ 238.479567][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.677731][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.367959][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.905345][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.923126][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.404585][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.478917][ T5856] Bluetooth: hci5: command tx timeout [ 240.547243][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.777732][ T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.538625][ T7044] chnl_net:caif_netlink_parms(): no params data found [ 242.958508][ T5844] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 243.091913][ T67] bridge_slave_1: left allmulticast mode [ 243.092100][ T67] bridge_slave_1: left promiscuous mode [ 243.094795][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.134464][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 243.137899][ T5844] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 243.143503][ T5844] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 243.143529][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 243.143548][ T5844] usb 3-1: Product: syz [ 243.143561][ T5844] usb 3-1: Manufacturer: syz [ 243.143574][ T5844] usb 3-1: SerialNumber: syz [ 243.163746][ T5844] usb 3-1: config 0 descriptor?? [ 243.164784][ T7135] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 243.177155][ T5844] hub 3-1:0.0: bad descriptor, ignoring hub [ 243.177214][ T5844] hub 3-1:0.0: probe with driver hub failed with error -5 [ 243.308903][ T67] bridge_slave_0: left allmulticast mode [ 243.308935][ T67] bridge_slave_0: left promiscuous mode [ 243.309184][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.244041][ T5930] usb 3-1: USB disconnect, device number 3 [ 253.310086][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.520301][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.581169][ T67] bond0 (unregistering): Released all slaves [ 255.444824][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.445174][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.445422][ T7044] bridge_slave_0: entered allmulticast mode [ 255.502907][ T7044] bridge_slave_0: entered promiscuous mode [ 255.518687][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.518824][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.519060][ T7044] bridge_slave_1: entered allmulticast mode [ 255.521451][ T7044] bridge_slave_1: entered promiscuous mode [ 255.636355][ T7179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.636435][ T7179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 255.687308][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.687380][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.084219][ T7179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 256.084381][ T7179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 256.115219][ T7245] virtio-fs: tag not found [ 256.162599][ T7179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.162665][ T7179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 256.244794][ T7179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.244861][ T7179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 256.350943][ T7179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 256.353544][ T7179] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 256.483617][ T7179] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 256.483989][ T7179] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 256.618114][ T7179] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 256.781123][ T7044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.869106][ T7044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.731065][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 258.208213][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 258.238488][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 258.318492][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 258.398503][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 258.478909][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout [ 259.759586][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 260.238434][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 260.297341][ T7044] team0: Port device team_slave_0 added [ 260.322272][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 260.325452][ T7044] team0: Port device team_slave_1 added [ 260.398693][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 260.401345][ T7269] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.478637][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 260.559032][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout [ 260.688587][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 260.803205][ T67] hsr_slave_0: left promiscuous mode [ 260.868780][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 260.886204][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 260.886232][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.925525][ T67] hsr_slave_1: left promiscuous mode [ 260.928097][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.928203][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.001764][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.001794][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.006803][ T5922] pvrusb2: Hardware description: Terratec Grabster AV400 [ 261.006822][ T5922] pvrusb2: ********** [ 261.006829][ T5922] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 261.006841][ T5922] pvrusb2: Important functionality might not be entirely working. [ 261.006850][ T5922] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 261.006859][ T5922] pvrusb2: ********** [ 261.655264][ T2366] pvrusb2: Invalid write control endpoint [ 261.668744][ T5922] usb 2-1: USB disconnect, device number 4 [ 262.648611][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout [ 262.937805][ T67] veth1_macvtap: left promiscuous mode [ 262.938065][ T67] veth0_macvtap: left promiscuous mode [ 264.122440][ T2366] pvrusb2: Invalid write control endpoint [ 264.124954][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 264.124968][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 264.124975][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 264.124984][ T2366] pvrusb2: Device being rendered inoperable [ 264.200169][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 264.200231][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 264.203427][ T2366] pvrusb2: Attached sub-driver cx25840 [ 264.203440][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 264.203450][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 264.396892][ T67] veth1_vlan: left promiscuous mode [ 264.398159][ T67] veth0_vlan: left promiscuous mode [ 266.039789][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.563410][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.759719][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.855118][ T1073] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 267.617599][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.787067][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.788394][ T1073] usb 4-1: Using ep0 maxpacket: 8 [ 267.794620][ T1073] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 267.794648][ T1073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.898753][ T1073] pvrusb2: Hardware description: Terratec Grabster AV400 [ 267.898770][ T1073] pvrusb2: ********** [ 267.898776][ T1073] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 267.898787][ T1073] pvrusb2: Important functionality might not be entirely working. [ 267.898796][ T1073] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 267.898806][ T1073] pvrusb2: ********** [ 267.916980][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.089047][ T2366] pvrusb2: Invalid write control endpoint [ 268.147576][ T1073] usb 4-1: USB disconnect, device number 3 [ 268.359594][ T7327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.495881][ T2366] pvrusb2: Invalid write control endpoint [ 268.495896][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 268.495904][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 268.495912][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 268.495920][ T2366] pvrusb2: Device being rendered inoperable [ 268.497791][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 268.497841][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 268.572075][ T2366] pvrusb2: Attached sub-driver cx25840 [ 268.572090][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 268.572100][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 268.697693][ T7334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.905974][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.039651][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.585436][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.731912][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.865336][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.194524][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.389889][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.360639][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.563653][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.673661][ T67] team0 (unregistering): Port device team_slave_1 removed [ 272.695680][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.896545][ T1073] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 272.941624][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.312971][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.607093][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.856057][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.869398][ T1073] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.063562][ T67] team0 (unregistering): Port device team_slave_0 removed [ 274.448489][ T1073] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 274.556163][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.825816][ T1073] usb 2-1: Using ep0 maxpacket: 8 [ 274.979645][ T1073] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 274.979756][ T1073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.331479][ T1073] pvrusb2: Hardware description: Terratec Grabster AV400 [ 275.331497][ T1073] pvrusb2: ********** [ 275.331503][ T1073] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 275.331515][ T1073] pvrusb2: Important functionality might not be entirely working. [ 275.331529][ T1073] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 275.331540][ T1073] pvrusb2: ********** [ 275.519135][ T2366] pvrusb2: Invalid write control endpoint [ 275.582169][ T1073] usb 2-1: USB disconnect, device number 5 [ 275.663861][ T2366] pvrusb2: Invalid write control endpoint [ 275.663875][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 275.663883][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 275.663891][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 275.663899][ T2366] pvrusb2: Device being rendered inoperable [ 275.663965][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 275.664011][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 275.665096][ T2366] pvrusb2: Attached sub-driver cx25840 [ 275.665106][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 275.665115][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 276.666468][ T7391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.102804][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.536091][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.953701][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.953713][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.953726][ T7044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.968651][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.968666][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.968689][ T7044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.811724][ T7044] hsr_slave_0: entered promiscuous mode [ 279.812508][ T7044] hsr_slave_1: entered promiscuous mode [ 279.813065][ T7044] debugfs: 'hsr0' already exists in 'hsr' [ 279.813080][ T7044] Cannot create hsr debugfs directory [ 279.860962][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.464660][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.819082][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.036938][ T7449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.388240][ T7044] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 284.470789][ T7044] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.612322][ T7044] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 284.722977][ T7044] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 285.610350][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.760925][ T7044] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.807162][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.808551][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.904217][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.904380][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.936575][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.856947][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.823214][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.920702][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.208249][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.667669][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.696223][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.721347][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.722540][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.723790][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.724545][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.603350][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.632482][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.785397][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.188460][ T5902] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 295.338416][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 295.340857][ T5902] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 295.340884][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.448168][ T5902] pvrusb2: Hardware description: Terratec Grabster AV400 [ 295.448184][ T5902] pvrusb2: ********** [ 295.448190][ T5902] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 295.448200][ T5902] pvrusb2: Important functionality might not be entirely working. [ 295.448208][ T5902] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 295.448218][ T5902] pvrusb2: ********** [ 295.586980][ T2366] pvrusb2: Invalid write control endpoint [ 295.800892][ T2366] pvrusb2: Invalid write control endpoint [ 295.800907][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 295.800915][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 295.800922][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 295.800931][ T2366] pvrusb2: Device being rendered inoperable [ 295.800966][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 295.801012][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 295.832434][ T2366] pvrusb2: Attached sub-driver cx25840 [ 295.832447][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 295.832456][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 295.880413][ T5922] usb 2-1: USB disconnect, device number 6 [ 297.081534][ T5856] Bluetooth: hci5: command tx timeout [ 297.444070][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.213853][ T5856] Bluetooth: hci5: command tx timeout [ 301.102147][ T7629] netlink: 165 bytes leftover after parsing attributes in process `syz.3.504'. [ 301.316011][ T5843] Bluetooth: hci5: command tx timeout [ 301.318383][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 301.489287][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 301.491824][ T5922] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 301.491851][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.541490][ T5922] pvrusb2: Hardware description: Terratec Grabster AV400 [ 301.541506][ T5922] pvrusb2: ********** [ 301.541512][ T5922] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 301.541523][ T5922] pvrusb2: Important functionality might not be entirely working. [ 301.541532][ T5922] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 301.541542][ T5922] pvrusb2: ********** [ 301.723702][ T2366] pvrusb2: Invalid write control endpoint [ 302.101652][ T31] usb 3-1: USB disconnect, device number 4 [ 302.209043][ T2366] pvrusb2: Invalid write control endpoint [ 302.209058][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 302.209066][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 302.209073][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 302.209081][ T2366] pvrusb2: Device being rendered inoperable [ 302.209107][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 302.209154][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 302.464478][ T2366] pvrusb2: Attached sub-driver cx25840 [ 302.464519][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 302.464553][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 303.368531][ T5843] Bluetooth: hci5: command tx timeout [ 303.651001][ T7565] chnl_net:caif_netlink_parms(): no params data found [ 305.778425][ T5984] bridge_slave_1: left allmulticast mode [ 305.778460][ T5984] bridge_slave_1: left promiscuous mode [ 305.781901][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.904667][ T5984] bridge_slave_0: left allmulticast mode [ 305.904689][ T5984] bridge_slave_0: left promiscuous mode [ 305.904974][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.643844][ T7696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.710882][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.975518][ T7727] input: syz1 as /devices/virtual/input/input8 [ 310.755619][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.855114][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.069771][ T5984] bond0 (unregistering): Released all slaves [ 311.885816][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.215345][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.215519][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.215784][ T7565] bridge_slave_0: entered allmulticast mode [ 312.235930][ T7565] bridge_slave_0: entered promiscuous mode [ 313.107008][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.107166][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.107367][ T7565] bridge_slave_1: entered allmulticast mode [ 313.109676][ T7565] bridge_slave_1: entered promiscuous mode [ 314.792765][ T5984] hsr_slave_0: left promiscuous mode [ 315.044346][ T5984] hsr_slave_1: left promiscuous mode [ 315.048748][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.589326][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.448658][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.448744][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.868199][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 319.699248][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 320.029183][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 324.142410][ T7766] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 324.142452][ T7766] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 324.142470][ T7766] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 324.175739][ T7565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.441345][ T7565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.257771][ T7565] team0: Port device team_slave_0 added [ 326.293571][ T7565] team0: Port device team_slave_1 added [ 326.841505][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.841521][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.841544][ T7565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.843965][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.843978][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.844001][ T7565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.571595][ T7565] hsr_slave_0: entered promiscuous mode [ 329.572907][ T7565] hsr_slave_1: entered promiscuous mode [ 329.573767][ T7565] debugfs: 'hsr0' already exists in 'hsr' [ 329.573789][ T7565] Cannot create hsr debugfs directory [ 329.735603][ T7884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.454745][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 340.866293][ T7960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.594'. [ 340.964668][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.484949][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.590705][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.976913][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.651757][ T7565] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.419462][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.445014][ T7565] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.036931][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.557133][ T7565] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.657563][ T7565] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.353405][ T7565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.289536][ T7565] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.345026][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.348530][ T6465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.645895][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.646127][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.630330][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 349.758566][ T9] usb 2-1: device descriptor read/64, error -71 [ 350.444965][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 350.658481][ T9] usb 2-1: device descriptor read/64, error -71 [ 350.828475][ T9] usb usb2-port1: attempt power cycle [ 351.137901][ T7565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.198429][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 351.219255][ T9] usb 2-1: device descriptor read/8, error -71 [ 351.458481][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 351.501522][ T9] usb 2-1: device descriptor read/8, error -71 [ 351.936104][ T9] usb usb2-port1: unable to enumerate USB device [ 353.602302][ T5998] IPVS: starting estimator thread 0... [ 353.698861][ T8094] IPVS: using max 8 ests per chain, 19200 per kthread [ 355.290149][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.299532][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.300833][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.324269][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.327548][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.288784][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 357.418600][ T7294] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 357.548437][ T7294] usb 3-1: device descriptor read/64, error -71 [ 357.758716][ T5843] Bluetooth: hci6: command tx timeout [ 357.788693][ T7294] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 357.922042][ T7294] usb 3-1: device descriptor read/64, error -71 [ 358.038061][ T7294] usb usb3-port1: attempt power cycle [ 358.418888][ T7294] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 358.455733][ T7294] usb 3-1: device descriptor read/8, error -71 [ 358.799067][ T7294] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 358.819306][ T7294] usb 3-1: device descriptor read/8, error -71 [ 358.983573][ T7294] usb usb3-port1: unable to enumerate USB device [ 359.878259][ T5843] Bluetooth: hci6: command tx timeout [ 361.920458][ T5843] Bluetooth: hci6: command tx timeout [ 363.998517][ T5843] Bluetooth: hci6: command tx timeout [ 367.489088][ T8187] smc: net device bond0 applied user defined pnetid SYZ0 [ 368.828543][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 369.028771][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 369.029854][ T9] usb 3-1: no configurations [ 369.029869][ T9] usb 3-1: can't read configurations, error -22 [ 369.467387][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 370.710827][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 370.858490][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 370.859520][ T9] usb 3-1: no configurations [ 370.859534][ T9] usb 3-1: can't read configurations, error -22 [ 370.865320][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'. [ 370.901454][ T9] usb usb3-port1: attempt power cycle [ 371.193233][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.193293][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.195193][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.195247][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.195292][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.195337][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.195386][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.195437][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.195483][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 371.362785][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 371.615007][ T9] usb 3-1: device descriptor read/8, error -71 [ 372.438489][ T67] bridge_slave_1: left allmulticast mode [ 372.438520][ T67] bridge_slave_1: left promiscuous mode [ 372.441238][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.691226][ T67] bridge_slave_0: left allmulticast mode [ 373.691258][ T67] bridge_slave_0: left promiscuous mode [ 373.691573][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.571280][ T5930] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 374.718931][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 374.720698][ T5930] usb 2-1: no configurations [ 374.720714][ T5930] usb 2-1: can't read configurations, error -22 [ 374.857882][ T5930] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 375.030243][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 375.031293][ T5930] usb 2-1: no configurations [ 375.031309][ T5930] usb 2-1: can't read configurations, error -22 [ 375.031857][ T5930] usb usb2-port1: attempt power cycle [ 375.384875][ T5930] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 375.399313][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 375.400328][ T5930] usb 2-1: no configurations [ 375.400342][ T5930] usb 2-1: can't read configurations, error -22 [ 375.502504][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.528534][ T5930] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 375.562699][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 375.563624][ T5930] usb 2-1: no configurations [ 375.563638][ T5930] usb 2-1: can't read configurations, error -22 [ 375.564033][ T5930] usb usb2-port1: unable to enumerate USB device [ 375.599603][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.643748][ T67] bond0 (unregistering): Released all slaves [ 377.459415][ T67] hsr_slave_0: left promiscuous mode [ 377.512491][ T67] hsr_slave_1: left promiscuous mode [ 377.513500][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.817003][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.716073][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.718637][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.399315][ T67] team0 (unregistering): Port device team_slave_1 removed [ 381.639566][ T67] team0 (unregistering): Port device team_slave_0 removed [ 383.850394][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.850530][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.850775][ T8111] bridge_slave_0: entered allmulticast mode [ 383.855333][ T8111] bridge_slave_0: entered promiscuous mode [ 383.983352][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.983511][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.983743][ T8111] bridge_slave_1: entered allmulticast mode [ 383.999414][ T8111] bridge_slave_1: entered promiscuous mode [ 384.102907][ T8353] __nla_validate_parse: 45 callbacks suppressed [ 384.102925][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 384.537803][ T8348] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 384.546571][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.571327][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.660409][ T8348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 385.752789][ T8111] team0: Port device team_slave_0 added [ 385.768094][ T8111] team0: Port device team_slave_1 added [ 386.405934][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.405950][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.405974][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.539491][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.539533][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.539585][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.833277][ T8111] hsr_slave_0: entered promiscuous mode [ 387.850901][ T8111] hsr_slave_1: entered promiscuous mode [ 387.856669][ T8111] debugfs: 'hsr0' already exists in 'hsr' [ 387.856702][ T8111] Cannot create hsr debugfs directory [ 390.340827][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 390.708670][ T8396] bond_slave_0: entered promiscuous mode [ 390.708750][ T8396] bond_slave_1: entered promiscuous mode [ 390.717082][ T8396] macvtap1: entered promiscuous mode [ 390.717102][ T8396] bond0: entered promiscuous mode [ 390.738744][ T8396] macvtap1: entered allmulticast mode [ 390.738764][ T8396] bond0: entered allmulticast mode [ 390.738776][ T8396] bond_slave_0: entered allmulticast mode [ 390.738796][ T8396] bond_slave_1: entered allmulticast mode [ 390.760068][ T8396] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 390.842737][ T8401] bond0: left allmulticast mode [ 390.842759][ T8401] bond_slave_0: left allmulticast mode [ 390.842781][ T8401] bond_slave_1: left allmulticast mode [ 390.842827][ T8401] bond0: left promiscuous mode [ 390.843545][ T8401] bond_slave_0: left promiscuous mode [ 390.843613][ T8401] bond_slave_1: left promiscuous mode [ 395.910340][ T5998] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 396.588537][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.588571][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.588594][ T5998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 396.588647][ T5998] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.588670][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.743126][ T5998] usb 3-1: config 0 descriptor?? [ 396.883861][ T8469] virtio-fs: tag not found [ 397.306161][ T5206] udevd[5206]: worker [8346] terminated by signal 33 (Unknown signal 33) [ 397.306203][ T5206] udevd[5206]: worker [8346] failed while handling '/devices/virtual/block/loop1' [ 397.339150][ T5206] udevd[5206]: worker [8350] terminated by signal 33 (Unknown signal 33) [ 397.339200][ T5206] udevd[5206]: worker [8350] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 397.340653][ T5206] udevd[5206]: worker [8397] terminated by signal 33 (Unknown signal 33) [ 397.340694][ T5206] udevd[5206]: worker [8397] failed while handling '/devices/platform/dummy_udc.0/udc/dummy_udc.0' [ 397.913218][ T5998] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 399.232571][ T8111] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 399.288981][ T1073] usb 3-1: USB disconnect, device number 13 [ 399.394621][ T8111] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.012161][ T8111] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.114666][ T8111] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.176085][ T8499] fido_id[8499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 400.909067][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.972180][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.004461][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.008532][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.022399][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.022537][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.185335][ T8526] virtio-fs: tag not found [ 402.695101][ T8548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.729'. [ 403.513582][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.114541][ T8573] virtio-fs: tag not found [ 405.859407][ T8111] veth0_vlan: entered promiscuous mode [ 406.047493][ T8111] veth1_vlan: entered promiscuous mode [ 407.209237][ T8111] veth0_macvtap: entered promiscuous mode [ 407.221150][ T8111] veth1_macvtap: entered promiscuous mode [ 407.294333][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.374716][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.443571][ T149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.669232][ T149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.358683][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.501033][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.651769][ T8608] fuse: Bad value for 'fd' [ 412.103116][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.103138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.918563][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.527170][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.720836][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.650148][ T8642] fuse: Bad value for 'fd' [ 416.079184][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.284931][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.463952][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.495139][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.505874][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.525424][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.528022][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.901368][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.084770][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.430544][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.742005][ T5856] Bluetooth: hci5: command tx timeout [ 422.583094][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.755596][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.798505][ T5856] Bluetooth: hci5: command tx timeout [ 422.907322][ T8687] fuse: Bad value for 'fd' [ 423.290583][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.365437][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.746644][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 423.897417][ T8693] bridge_slave_1: left allmulticast mode [ 423.897439][ T8693] bridge_slave_1: left promiscuous mode [ 423.901309][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.979511][ T8693] bridge_slave_0: left allmulticast mode [ 423.979534][ T8693] bridge_slave_0: left promiscuous mode [ 423.980258][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.878580][ T5856] Bluetooth: hci5: command tx timeout [ 424.955842][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.672325][ T1168] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.148430][ T5856] Bluetooth: hci5: command tx timeout [ 427.308466][ T6022] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 427.349952][ T8712] tipc: Started in network mode [ 427.349985][ T8712] tipc: Node identity 964776471f72, cluster identity 4711 [ 427.380818][ T8712] tipc: Enabled bearer , priority 0 [ 427.461131][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.461165][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.461186][ T6022] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.461227][ T6022] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.461249][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.510040][ T6022] usb 2-1: config 0 descriptor?? [ 427.609289][ T8708] tipc: Disabling bearer [ 427.842934][ T8733] fuse: Bad value for 'fd' [ 428.016910][ T6022] usbhid 2-1:0.0: can't add hid device: -71 [ 428.017044][ T6022] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 428.708461][ T6022] usb 2-1: USB disconnect, device number 15 [ 429.231702][ T1168] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.064254][ T1168] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.551673][ T8757] Process accounting resumed [ 433.162903][ T1168] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.638451][ T5902] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 434.232600][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.232633][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.232655][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.232698][ T5902] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.232727][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.477750][ T5902] usb 2-1: config 0 descriptor?? [ 435.028773][ T8656] chnl_net:caif_netlink_parms(): no params data found [ 435.048822][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 435.144899][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 435.145041][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 435.165438][ T5902] usb 2-1: USB disconnect, device number 16 [ 435.235960][ T5929] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 435.235991][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.236010][ T5929] usb 4-1: Product: syz [ 435.236024][ T5929] usb 4-1: Manufacturer: syz [ 435.236039][ T5929] usb 4-1: SerialNumber: syz [ 435.300043][ T5929] usb 4-1: config 0 descriptor?? [ 435.564826][ T5929] usb 4-1: USB disconnect, device number 4 [ 436.278985][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.279308][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.279554][ T8656] bridge_slave_0: entered allmulticast mode [ 436.289438][ T8656] bridge_slave_0: entered promiscuous mode [ 436.309032][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'. [ 436.901022][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.901167][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.901410][ T8656] bridge_slave_1: entered allmulticast mode [ 436.948551][ T8656] bridge_slave_1: entered promiscuous mode [ 438.190913][ T8818] fuse: Bad value for 'fd' [ 438.500605][ T1168] bridge_slave_1: left allmulticast mode [ 438.500640][ T1168] bridge_slave_1: left promiscuous mode [ 438.505236][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.618023][ T1168] bridge_slave_0: left allmulticast mode [ 438.618058][ T1168] bridge_slave_0: left promiscuous mode [ 438.618456][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.126760][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.146344][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.146422][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.598658][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'. [ 443.075378][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.392301][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.489212][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.608416][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.765179][ T1168] bond0 (unregistering): Released all slaves [ 443.940912][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.064400][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.093449][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.490881][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.511700][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.667572][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.939425][ T8858] virtio-fs: tag not found [ 444.940185][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 445.006726][ T8656] team0: Port device team_slave_0 added [ 445.018434][ T6022] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 445.057409][ T8656] team0: Port device team_slave_1 added [ 445.168517][ T6022] usb 4-1: Using ep0 maxpacket: 8 [ 445.171611][ T6022] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 445.171655][ T6022] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 445.171679][ T6022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.693746][ T8864] Set syz1 is full, maxelem 6117 reached [ 446.593077][ T8876] fuse: Bad value for 'fd' [ 446.677312][ T8877] fuse: Bad value for 'group_id' [ 446.677333][ T8877] fuse: Bad value for 'group_id' [ 447.218150][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.218167][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.218191][ T8656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.224958][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.224974][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.224998][ T8656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.802074][ T5222] usb 4-1: USB disconnect, device number 5 [ 450.277966][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 450.690429][ T8656] hsr_slave_0: entered promiscuous mode [ 450.691784][ T8656] hsr_slave_1: entered promiscuous mode [ 450.692669][ T8656] debugfs: 'hsr0' already exists in 'hsr' [ 450.692692][ T8656] Cannot create hsr debugfs directory [ 452.353397][ T8914] Set syz1 is full, maxelem 6117 reached [ 452.499793][ T1168] hsr_slave_0: left promiscuous mode [ 452.859034][ T1168] hsr_slave_1: left promiscuous mode [ 452.860001][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.860053][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.914679][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.914708][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.082664][ T1168] veth1_macvtap: left promiscuous mode [ 453.082788][ T1168] veth0_macvtap: left promiscuous mode [ 453.083081][ T1168] veth1_vlan: left promiscuous mode [ 453.083290][ T1168] veth0_vlan: left promiscuous mode [ 456.076860][ T8961] fuse: Bad value for 'fd' [ 457.629278][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 457.869339][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 458.028560][ T7817] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 458.178555][ T7817] usb 3-1: Using ep0 maxpacket: 8 [ 458.185627][ T7817] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 458.185671][ T7817] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 458.185693][ T7817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.592882][ T44] usb 3-1: USB disconnect, device number 14 [ 465.760946][ T5998] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 465.913998][ T5998] usb 4-1: Using ep0 maxpacket: 8 [ 465.916748][ T5998] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 465.916775][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.988723][ T5998] pvrusb2: Hardware description: Terratec Grabster AV400 [ 465.988740][ T5998] pvrusb2: ********** [ 465.988747][ T5998] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 465.988757][ T5998] pvrusb2: Important functionality might not be entirely working. [ 465.988765][ T5998] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 465.988774][ T5998] pvrusb2: ********** [ 466.878550][ T2366] pvrusb2: Invalid write control endpoint [ 467.287173][ T7294] usb 4-1: USB disconnect, device number 6 [ 467.954368][ T2366] pvrusb2: Invalid write control endpoint [ 467.954383][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 467.954392][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 467.954399][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 467.954408][ T2366] pvrusb2: Device being rendered inoperable [ 467.955850][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 467.955901][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 467.957044][ T2366] pvrusb2: Attached sub-driver cx25840 [ 467.957054][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 467.957063][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 473.732139][ T8656] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.811832][ T8656] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 474.107468][ T8656] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.221741][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.230107][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.235104][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.240642][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.241405][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 479.559119][ T5856] Bluetooth: hci6: command tx timeout [ 481.638535][ T5856] Bluetooth: hci6: command tx timeout [ 482.428541][ T6022] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 482.508460][ T9164] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 482.852183][ T9164] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 482.852207][ T9164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.852217][ T9164] usb 2-1: Product: syz [ 482.852224][ T9164] usb 2-1: Manufacturer: syz [ 482.852231][ T9164] usb 2-1: SerialNumber: syz [ 483.680805][ T5856] Bluetooth: hci6: command tx timeout [ 485.102795][ T9164] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 485.102899][ T9164] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 485.107070][ T9164] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 485.801415][ T5856] Bluetooth: hci6: command tx timeout [ 485.998720][ T6022] usb 3-1: unable to get BOS descriptor or descriptor too short [ 485.999582][ T6022] usb 3-1: no configurations [ 485.999605][ T6022] usb 3-1: can't read configurations, error -22 [ 486.050644][ T9164] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 486.116416][ T9132] chnl_net:caif_netlink_parms(): no params data found [ 486.198561][ T9164] usb 2-1: USB disconnect, device number 17 [ 488.295025][ T9225] virtio-fs: tag not found [ 493.698040][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.712568][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.712819][ T9132] bridge_slave_0: entered allmulticast mode [ 493.754196][ T9132] bridge_slave_0: entered promiscuous mode [ 493.779876][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.798738][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.798987][ T9132] bridge_slave_1: entered allmulticast mode [ 493.801760][ T9132] bridge_slave_1: entered promiscuous mode [ 495.826332][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.994267][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.420563][ T9132] team0: Port device team_slave_0 added [ 498.481203][ T9132] team0: Port device team_slave_1 added [ 501.153477][ T9327] syz_tun: entered allmulticast mode [ 501.157866][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.157880][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.157904][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.270417][ T39] bridge_slave_1: left allmulticast mode [ 501.270520][ T39] bridge_slave_1: left promiscuous mode [ 501.270806][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.519843][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.525343][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.886384][ T39] bridge_slave_0: left allmulticast mode [ 501.886417][ T39] bridge_slave_0: left promiscuous mode [ 501.886687][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.135401][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.362926][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.134709][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.310064][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.952067][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.182349][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.944722][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.377184][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbc00006129 [ 505.377249][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xbc00002129 [ 505.377793][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5c00008f08 [ 505.377838][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x5c0000cf08 [ 505.377934][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x270000f654 [ 505.377978][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x270000b654 [ 505.378073][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1700008f08 [ 505.378118][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x170000cf08 [ 505.378213][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x140000b038 [ 505.378256][ T9360] kvm: kvm [9357]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x140000f038 [ 505.704070][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.851246][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.439700][ T39] bond0 (unregistering): Released all slaves [ 506.535856][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.535871][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.535895][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.214023][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 507.214044][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 507.443758][ T9132] hsr_slave_0: entered promiscuous mode [ 507.470397][ T9132] hsr_slave_1: entered promiscuous mode [ 507.471552][ T9132] debugfs: 'hsr0' already exists in 'hsr' [ 507.471576][ T9132] Cannot create hsr debugfs directory [ 507.598492][ T5843] Bluetooth: hci6: command 0x0405 tx timeout [ 507.944072][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.972840][ T39] hsr_slave_0: left promiscuous mode [ 508.730821][ T39] hsr_slave_1: left promiscuous mode [ 508.731829][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.789489][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.049866][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.129464][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.251787][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.579286][ T39] team0 (unregistering): Port device team_slave_1 removed [ 509.819251][ T39] team0 (unregistering): Port device team_slave_0 removed [ 510.499834][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.519886][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.592401][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.057547][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.156085][ T9386] dvmrp0: entered allmulticast mode [ 514.840256][ T37] audit: type=1326 audit(1758369833.110:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.2.962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94502cec29 code=0x0 [ 518.748504][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 519.028418][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 519.033122][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 519.033151][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.008419][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 520.008436][ T9] pvrusb2: ********** [ 520.008442][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 520.008453][ T9] pvrusb2: Important functionality might not be entirely working. [ 520.008461][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 520.008470][ T9] pvrusb2: ********** [ 520.669715][ T2366] pvrusb2: Invalid write control endpoint [ 520.980808][ T5929] usb 2-1: USB disconnect, device number 18 [ 521.066842][ T2366] pvrusb2: Invalid write control endpoint [ 521.066855][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 521.066864][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 521.066871][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 521.066880][ T2366] pvrusb2: Device being rendered inoperable [ 521.086497][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 521.086557][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 521.122227][ T2366] pvrusb2: Attached sub-driver cx25840 [ 521.122242][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 521.122250][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 524.213022][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 524.290088][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.976'. [ 525.611454][ T9132] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 525.979238][ T7294] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 526.898464][ T7294] usb 3-1: Using ep0 maxpacket: 8 [ 526.900829][ T7294] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 526.900846][ T7294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.941926][ T9132] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 527.004409][ T7294] pvrusb2: Hardware description: Terratec Grabster AV400 [ 527.004422][ T7294] pvrusb2: ********** [ 527.004425][ T7294] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 527.004431][ T7294] pvrusb2: Important functionality might not be entirely working. [ 527.004436][ T7294] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 527.004441][ T7294] pvrusb2: ********** [ 527.157152][ T2366] pvrusb2: Invalid write control endpoint [ 527.198519][ T9132] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 527.352546][ T9132] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 527.371342][ T7294] usb 3-1: USB disconnect, device number 17 [ 527.433552][ T2366] pvrusb2: Invalid write control endpoint [ 527.433566][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 527.433574][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 527.433581][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 527.433588][ T2366] pvrusb2: Device being rendered inoperable [ 527.440246][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 527.440300][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 527.441432][ T2366] pvrusb2: Attached sub-driver cx25840 [ 527.441441][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 527.441450][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 529.127846][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.241433][ T9132] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.276939][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.277459][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.371779][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.372441][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.731359][ T5922] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 529.881759][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.881791][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.881827][ T5922] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 529.881849][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.859529][ T5922] usb 2-1: config 0 descriptor?? [ 531.521449][ T5922] itetech 0003:258A:6A88.0003: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 531.583536][ T5922] usb 2-1: USB disconnect, device number 19 [ 532.969441][ T9605] fido_id[9605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 533.228948][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.191637][ T5930] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 534.365171][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 535.220850][ T5930] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 535.220879][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.409657][ T5930] pvrusb2: Hardware description: Terratec Grabster AV400 [ 535.409674][ T5930] pvrusb2: ********** [ 535.409680][ T5930] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 535.409691][ T5930] pvrusb2: Important functionality might not be entirely working. [ 535.409699][ T5930] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 535.409709][ T5930] pvrusb2: ********** [ 535.709063][ T2366] pvrusb2: Invalid write control endpoint [ 535.898804][ T2366] pvrusb2: Invalid write control endpoint [ 535.898819][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 535.898828][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 535.898835][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 535.898844][ T2366] pvrusb2: Device being rendered inoperable [ 535.899738][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 535.899792][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 535.958032][ T5930] usb 3-1: USB disconnect, device number 18 [ 536.025282][ T2366] pvrusb2: Attached sub-driver cx25840 [ 536.025298][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 536.025307][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 538.488402][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.647633][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.669154][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 538.677927][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 538.693714][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 538.698031][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 539.004951][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 539.944314][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.093776][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.122411][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.423129][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 540.732283][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.860967][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.030712][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 541.034674][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 541.034702][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.120990][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 541.121002][ T9] pvrusb2: ********** [ 541.121006][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 541.121011][ T9] pvrusb2: Important functionality might not be entirely working. [ 541.121016][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 541.121021][ T9] pvrusb2: ********** [ 541.276451][ T5856] Bluetooth: hci5: command tx timeout [ 541.332340][ T2366] pvrusb2: Invalid write control endpoint [ 541.647067][ T9] usb 3-1: USB disconnect, device number 19 [ 542.117854][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.257580][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.257620][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.258267][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.258370][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.258894][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.258922][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.259388][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.259415][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.259836][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.259867][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 542.277641][ T9693] macvtap1: left promiscuous mode [ 542.538500][ T2366] pvrusb2: Invalid write control endpoint [ 542.538514][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 542.538523][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 542.538530][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 542.538539][ T2366] pvrusb2: Device being rendered inoperable [ 542.538579][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 542.538626][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 542.543908][ T2366] pvrusb2: Attached sub-driver cx25840 [ 542.543921][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 542.543936][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 542.729286][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.827850][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.957560][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.168311][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.190176][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.660100][ T5856] Bluetooth: hci5: command tx timeout [ 543.979624][ T9702] 9pnet_fd: Insufficient options for proto=fd [ 544.057212][ T5856] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 547.791641][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.892654][ T5856] Bluetooth: hci5: command tx timeout [ 548.057508][ T1073] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 548.233898][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.576071][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.588488][ T1073] usb 3-1: Using ep0 maxpacket: 8 [ 548.654162][ T1073] usb 3-1: device descriptor read/all, error -71 [ 548.941722][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.187099][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.337369][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 549.338523][ T5922] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 549.488412][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 549.510480][ T5922] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 549.510506][ T5922] usb 4-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 549.510524][ T5922] usb 4-1: config 0 has no interface number 0 [ 549.510574][ T5922] usb 4-1: New USB device found, idVendor=2304, idProduct=0243, bcdDevice=21.07 [ 549.510596][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.724117][ T5922] usb 4-1: config 0 descriptor?? [ 549.761306][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.340909][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.628578][ T5856] Bluetooth: hci5: command tx timeout [ 550.749710][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.852874][ T5922] dvb-usb: found a 'Pinnacle PCTV 73A' in cold state, will try to load a firmware [ 550.969705][ T5922] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 550.969766][ T5922] dib0700: firmware download failed at 7 with -22 [ 551.058839][ T5922] usb 4-1: USB disconnect, device number 7 [ 552.645723][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.669099][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.669175][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.669353][ T9669] bridge_slave_0: entered allmulticast mode [ 552.670872][ T9669] bridge_slave_0: entered promiscuous mode [ 552.673148][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.673220][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.673337][ T9669] bridge_slave_1: entered allmulticast mode [ 552.674796][ T9669] bridge_slave_1: entered promiscuous mode [ 552.708982][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.661228][ T3628] bridge_slave_1: left allmulticast mode [ 553.661253][ T3628] bridge_slave_1: left promiscuous mode [ 553.661518][ T3628] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.699793][ T9794] __nla_validate_parse: 140 callbacks suppressed [ 553.699805][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 553.760491][ T3628] bridge_slave_0: left allmulticast mode [ 553.760524][ T3628] bridge_slave_0: left promiscuous mode [ 553.760810][ T3628] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.808570][ T1073] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 554.401399][ T1073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.401493][ T1073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.401831][ T1073] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 554.401878][ T1073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.974394][ T1073] usb 2-1: config 0 descriptor?? [ 555.462267][ T1073] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 555.462303][ T1073] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 555.462330][ T1073] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 555.462356][ T1073] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 555.462383][ T1073] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 555.543389][ T1073] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 555.666198][ T1073] playstation 0003:054C:0DF2.0004: Invalid byte count transferred, expected 20 got 0 [ 555.666227][ T1073] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22 [ 555.666254][ T1073] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 555.666266][ T1073] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 555.668014][ T1073] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -22 [ 555.900790][ T1073] usb 2-1: USB disconnect, device number 20 [ 556.099647][ T9809] fido_id[9809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 558.879150][ T3628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.939177][ T3628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.960967][ T3628] bond0 (unregistering): Released all slaves [ 559.097774][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.587274][ T9836] overlayfs: failed to resolve './file1': -2 [ 561.241968][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.247719][ T9831] @: renamed from vlan0 (while UP) [ 561.990093][ T3628] hsr_slave_0: left promiscuous mode [ 562.032290][ T3628] hsr_slave_1: left promiscuous mode [ 562.033294][ T3628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.278853][ T3628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.044834][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.044918][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.629216][ T3628] team0 (unregistering): Port device team_slave_1 removed [ 566.829310][ T3628] team0 (unregistering): Port device team_slave_0 removed [ 568.705979][ T9669] team0: Port device team_slave_0 added [ 568.866812][ T9669] team0: Port device team_slave_1 added [ 569.238857][ T9884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.573116][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.573134][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.573158][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.629699][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.678454][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.678473][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.678498][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.250809][ T9669] hsr_slave_0: entered promiscuous mode [ 571.255470][ T9669] hsr_slave_1: entered promiscuous mode [ 571.256408][ T9669] debugfs: 'hsr0' already exists in 'hsr' [ 571.256431][ T9669] Cannot create hsr debugfs directory [ 572.504235][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.774497][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.299605][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.944081][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.085318][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.268384][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.678721][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.882012][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.085931][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 579.394463][ T9964] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 580.131441][ T9968] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 580.147123][ T9968] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 580.332561][ T9971] gretap1: entered promiscuous mode [ 580.385540][ T9971] bond1: (slave gretap1): making interface the new active one [ 580.386821][ T9971] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 584.698501][ T5902] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 584.857487][ T5902] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 584.857514][ T5902] usb 4-1: config 0 has no interface number 0 [ 584.857561][ T5902] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 584.857582][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.860089][ T9669] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 584.914936][ T5902] usb 4-1: config 0 descriptor?? [ 585.138093][ T9669] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 585.177730][ T5856] Bluetooth: hci1: adv larger than maximum supported [ 585.177752][ T5856] Bluetooth: hci1: Malformed LE Event: 0x0d [ 585.192615][ T5902] usb 4-1: string descriptor 0 read error: -71 [ 585.231290][ T5902] usb-storage 4-1:0.168: USB Mass Storage device detected [ 585.247253][ T9669] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 585.287901][ T9669] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 585.315746][ T5902] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 587.027091][ T5902] usb 4-1: USB disconnect, device number 8 [ 589.139379][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.947405][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.284090][T10069] Set syz1 is full, maxelem 6117 reached [ 590.292466][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.323756][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.323892][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.392485][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.392704][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.887269][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.333195][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.691708][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.787966][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.440538][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.829454][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.162058][ T37] audit: type=1326 audit(1758369912.430:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10112 comm="syz.1.1116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f946571ec29 code=0x0 [ 596.690658][ T9669] veth0_vlan: entered promiscuous mode [ 597.767361][ T37] audit: type=1326 audit(1758369916.040:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10153 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946571ec29 code=0x7ffc0000 [ 597.768179][ T37] audit: type=1326 audit(1758369916.040:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10153 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946571ec29 code=0x7ffc0000 [ 597.827142][ T37] audit: type=1326 audit(1758369916.100:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10153 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f946571ec29 code=0x7ffc0000 [ 597.827191][ T37] audit: type=1326 audit(1758369916.100:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10153 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946571ec29 code=0x7ffc0000 [ 599.529839][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 599.558785][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 599.567376][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 599.579141][ T9670] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 599.585839][ T9670] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 601.758751][ T5843] Bluetooth: hci6: command tx timeout [ 603.214111][T10187] bridge0: port 3(syz_tun) entered blocking state [ 603.214256][T10187] bridge0: port 3(syz_tun) entered disabled state [ 603.228028][T10187] syz_tun: entered promiscuous mode [ 603.236542][T10187] bridge0: port 3(syz_tun) entered blocking state [ 603.237082][T10187] bridge0: port 3(syz_tun) entered forwarding state [ 604.608988][ T5843] Bluetooth: hci6: command tx timeout [ 606.638692][ T5843] Bluetooth: hci6: command tx timeout [ 609.048376][ T5843] Bluetooth: hci6: command tx timeout [ 612.235364][T10167] chnl_net:caif_netlink_parms(): no params data found [ 616.327669][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.327872][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.328111][T10167] bridge_slave_0: entered allmulticast mode [ 616.711662][T10167] bridge_slave_0: entered promiscuous mode [ 616.862138][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.862297][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.862547][T10167] bridge_slave_1: entered allmulticast mode [ 616.900155][T10167] bridge_slave_1: entered promiscuous mode [ 617.769933][T10167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.802761][T10167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.327959][ T6037] bridge_slave_1: left allmulticast mode [ 619.328096][ T6037] bridge_slave_1: left promiscuous mode [ 619.330507][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.078067][T10349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.244586][ T6037] bridge_slave_0: left allmulticast mode [ 621.244620][ T6037] bridge_slave_0: left promiscuous mode [ 621.244928][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.565461][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.267667][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.329181][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.907763][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.037902][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.284889][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.668835][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.977046][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.074465][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.196950][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.283530][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.319341][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.599289][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.623295][ T6037] bond0 (unregistering): Released all slaves [ 630.312534][T10374] tipc: Started in network mode [ 630.312565][T10374] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 630.315684][T10374] tipc: Enabled bearer , priority 10 [ 630.483017][T10167] team0: Port device team_slave_0 added [ 630.527356][T10167] team0: Port device team_slave_1 added [ 632.749093][ T5902] tipc: Node number set to 4269801488 [ 633.031704][T10427] fuse: Bad value for 'fd' [ 634.731875][T10433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.800422][T10167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.800440][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.800465][T10167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.841926][T10167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.841941][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.841966][T10167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.004409][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.125748][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.398399][ T6037] hsr_slave_0: left promiscuous mode [ 636.471209][ T6037] hsr_slave_1: left promiscuous mode [ 636.472154][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.535517][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.824772][ T6037] veth0_vlan: left promiscuous mode [ 638.349974][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.254099][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.498591][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 640.980876][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 651.630045][T10522] sctp: [Deprecated]: syz.3.1226 (pid 10522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 651.630045][T10522] Use struct sctp_sack_info instead [ 653.817554][T10167] hsr_slave_0: entered promiscuous mode [ 654.124270][T10167] hsr_slave_1: entered promiscuous mode [ 654.125169][T10167] debugfs: 'hsr0' already exists in 'hsr' [ 654.125192][T10167] Cannot create hsr debugfs directory [ 656.863418][ T9670] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 656.884843][ T9670] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 656.887016][ T9670] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 656.895536][ T9670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 656.905329][ T9670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 656.936006][T10569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.940853][T10573] sctp: [Deprecated]: syz.0.1239 (pid 10573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 656.940853][T10573] Use struct sctp_sack_info instead [ 659.042598][ T5843] Bluetooth: hci5: command tx timeout [ 661.179916][ T9670] Bluetooth: hci5: command tx timeout [ 661.183693][ T9670] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 661.258517][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 661.277069][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 661.303398][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 661.304928][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.228445][ T5843] Bluetooth: hci5: command tx timeout [ 663.359240][ T5843] Bluetooth: hci3: command tx timeout [ 665.406378][ T5856] Bluetooth: hci5: command tx timeout [ 665.454507][ T5843] Bluetooth: hci3: command tx timeout [ 666.883408][T10667] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 666.883441][T10667] overlayfs: failed to set xattr on upper [ 666.883449][T10667] overlayfs: ...falling back to redirect_dir=nofollow. [ 666.883456][T10667] overlayfs: ...falling back to index=off. [ 666.883463][T10667] overlayfs: ...falling back to uuid=null. [ 666.883803][T10667] overlayfs: conflicting lowerdir path [ 667.527387][ T5843] Bluetooth: hci3: command tx timeout [ 668.520918][ T6037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.523641][T10679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.939569][ T5843] Bluetooth: hci3: command tx timeout [ 671.603826][ T6037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.042930][ T6037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.793641][ T6037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.868996][T10565] chnl_net:caif_netlink_parms(): no params data found [ 678.120233][T10565] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.120374][T10565] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.120627][T10565] bridge_slave_0: entered allmulticast mode [ 678.123557][T10565] bridge_slave_0: entered promiscuous mode [ 678.268507][T10565] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.268636][T10565] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.269147][T10565] bridge_slave_1: entered allmulticast mode [ 678.276295][T10565] bridge_slave_1: entered promiscuous mode [ 678.488008][T10607] chnl_net:caif_netlink_parms(): no params data found [ 679.213999][T10778] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 679.228517][T10778] macsec1: entered promiscuous mode [ 679.236468][T10778] macsec1: entered allmulticast mode [ 679.236544][T10778] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 679.293463][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.573509][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.574249][ T6037] bridge_slave_1: left allmulticast mode [ 679.574278][ T6037] bridge_slave_1: left promiscuous mode [ 679.574564][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.812646][ T6037] bridge_slave_0: left allmulticast mode [ 679.812669][ T6037] bridge_slave_0: left promiscuous mode [ 679.813934][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.019327][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.089248][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.138365][ T6037] bond0 (unregistering): Released all slaves [ 684.194492][T10790] tipc: Enabled bearer , priority 10 [ 685.332552][ T10] tipc: Node number set to 2301982279 [ 685.468974][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 686.171955][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.141807][T10843] tipc: Enabling of bearer rejected, already enabled [ 691.775634][T10565] team0: Port device team_slave_0 added [ 692.199180][T10565] team0: Port device team_slave_1 added [ 693.155056][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.155198][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.155444][T10607] bridge_slave_0: entered allmulticast mode [ 693.158214][T10607] bridge_slave_0: entered promiscuous mode [ 693.474541][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.474698][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.474916][T10607] bridge_slave_1: entered allmulticast mode [ 693.477701][T10607] bridge_slave_1: entered promiscuous mode [ 693.651652][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.651669][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.651695][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.270384][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.270396][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.270411][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.674920][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.435130][T10887] tipc: Enabling of bearer rejected, already enabled [ 695.820882][ T6037] hsr_slave_0: left promiscuous mode [ 695.868659][ T6037] hsr_slave_1: left promiscuous mode [ 695.869585][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.869611][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.929548][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.929578][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.145750][ T6037] veth1_macvtap: left promiscuous mode [ 696.145875][ T6037] veth0_macvtap: left promiscuous mode [ 696.146167][ T6037] veth1_vlan: left promiscuous mode [ 696.146376][ T6037] veth0_vlan: left promiscuous mode [ 698.927670][T10923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.892503][T10930] syz.2.1334 uses obsolete (PF_INET,SOCK_PACKET) [ 701.719692][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 702.003077][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 704.546945][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.454638][T10944] sctp: [Deprecated]: syz.0.1338 (pid 10944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 705.454638][T10944] Use struct sctp_sack_info instead [ 706.073814][T10607] team0: Port device team_slave_0 added [ 706.082917][T10565] hsr_slave_0: entered promiscuous mode [ 706.091761][T10565] hsr_slave_1: entered promiscuous mode [ 706.102160][T10565] debugfs: 'hsr0' already exists in 'hsr' [ 706.102191][T10565] Cannot create hsr debugfs directory [ 706.119481][T10607] team0: Port device team_slave_1 added [ 706.981530][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.981546][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.981572][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.081287][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.081303][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.081329][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.250497][T10971] : renamed from bridge_slave_0 (while UP) [ 710.084674][T10607] hsr_slave_0: entered promiscuous mode [ 710.094991][T10607] hsr_slave_1: entered promiscuous mode [ 710.101692][T10607] debugfs: 'hsr0' already exists in 'hsr' [ 710.101720][T10607] Cannot create hsr debugfs directory [ 713.091811][ T6037] bridge_slave_1: left allmulticast mode [ 713.091847][ T6037] bridge_slave_1: left promiscuous mode [ 713.092132][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.259554][ T6037] bridge_slave_0: left allmulticast mode [ 714.259587][ T6037] bridge_slave_0: left promiscuous mode [ 714.259846][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.579848][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.141244][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.287969][ T6037] bond0 (unregistering): Released all slaves [ 716.623056][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 716.658309][T11084] overlayfs: missing 'lowerdir' [ 716.671867][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 716.677364][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 716.681926][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 716.684249][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 718.319705][ T6037] hsr_slave_0: left promiscuous mode [ 718.370952][ T6037] hsr_slave_1: left promiscuous mode [ 718.371633][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.420449][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.920241][ T5843] Bluetooth: hci6: command tx timeout [ 719.904058][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.004800][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.293123][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 720.429299][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 720.539360][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.625106][T11117] overlayfs: missing 'lowerdir' [ 720.852076][T11121] sctp: [Deprecated]: syz.2.1383 (pid 11121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 720.852076][T11121] Use struct sctp_sack_info instead [ 721.166893][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.174798][ T5843] Bluetooth: hci6: command tx timeout [ 721.341318][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.172759][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.312667][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 722.317221][ T5856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 722.328568][ T5856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 722.329864][ T5856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 722.330681][ T5856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 722.497293][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.741418][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.643135][ T5856] Bluetooth: hci6: command tx timeout [ 723.643932][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.480286][ T5856] Bluetooth: hci7: command tx timeout [ 725.681764][ T5856] Bluetooth: hci6: command tx timeout [ 726.568653][ T5856] Bluetooth: hci7: command tx timeout [ 728.640482][ T5856] Bluetooth: hci7: command tx timeout [ 729.328747][T11198] wg2: entered promiscuous mode [ 729.328776][T11198] wg2: entered allmulticast mode [ 729.369591][T11082] chnl_net:caif_netlink_parms(): no params data found [ 730.718396][ T5856] Bluetooth: hci7: command tx timeout [ 734.420603][T11125] chnl_net:caif_netlink_parms(): no params data found [ 735.734329][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.734410][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.734585][T11082] bridge_slave_0: entered allmulticast mode [ 735.740000][T11082] bridge_slave_0: entered promiscuous mode [ 735.826053][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.826209][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.826467][T11082] bridge_slave_1: entered allmulticast mode [ 735.837121][T11082] bridge_slave_1: entered promiscuous mode [ 737.883426][T11318] overlay: Unknown parameter '//file0' [ 738.847436][T11082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.872672][T11333] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 738.872693][T11333] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11333, name: syz.3.1430 [ 738.872711][T11333] preempt_count: 1, expected: 0 [ 738.872720][T11333] RCU nest depth: 1, expected: 1 [ 738.872738][T11333] 3 locks held by syz.3.1430/11333: [ 738.872750][T11333] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 [ 738.872820][T11333] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 738.872873][T11333] #2: ffff8880217caa98 (&stab->lock){+...}-{3:3}, at: sock_map_delete_elem+0xb7/0x170 [ 738.872930][T11333] Preemption disabled at: [ 738.872936][T11333] [] bpf_test_timer_enter+0xf8/0x140 [ 738.872989][T11333] CPU: 0 UID: 0 PID: 11333 Comm: syz.3.1430 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 738.873012][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 738.873032][T11333] Call Trace: [ 738.873039][T11333] [ 738.873048][T11333] dump_stack_lvl+0x189/0x250 [ 738.873082][T11333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.873116][T11333] ? __pfx__printk+0x10/0x10 [ 738.873143][T11333] ? print_lock_name+0xde/0x100 [ 738.873162][T11333] ? bpf_test_timer_enter+0xf8/0x140 [ 738.873194][T11333] __might_resched+0x44b/0x5d0 [ 738.873221][T11333] ? bpf_test_timer_enter+0xf8/0x140 [ 738.873248][T11333] ? __pfx___might_resched+0x10/0x10 [ 738.873271][T11333] ? sock_map_delete_elem+0xb7/0x170 [ 738.873316][T11333] rt_spin_lock+0xc7/0x2c0 [ 738.873344][T11333] ? __pfx_rt_spin_lock+0x10/0x10 [ 738.873368][T11333] ? ktime_get+0x3e/0x1f0 [ 738.873386][T11333] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 738.873408][T11333] ? __pfx___cant_migrate+0x10/0x10 [ 738.873434][T11333] ? sock_map_delete_elem+0xa2/0x170 [ 738.873462][T11333] sock_map_delete_elem+0xb7/0x170 [ 738.873496][T11333] bpf_prog_2c29ac5cdc6b1842+0x43/0x4b [ 738.873520][T11333] bpf_flow_dissect+0x132/0x400 [ 738.873548][T11333] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 738.873592][T11333] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 738.873624][T11333] ? __fget_files+0x2a/0x420 [ 738.873659][T11333] ? __fget_files+0x2a/0x420 [ 738.873694][T11333] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 738.873724][T11333] bpf_prog_test_run+0x2ca/0x340 [ 738.873755][T11333] __sys_bpf+0x581/0x870 [ 738.873781][T11333] ? __pfx___sys_bpf+0x10/0x10 [ 738.873827][T11333] ? rcu_is_watching+0x15/0xb0 [ 738.873863][T11333] __x64_sys_bpf+0x7c/0x90 [ 738.873886][T11333] do_syscall_64+0xfa/0x3b0 [ 738.873905][T11333] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.873932][T11333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.873952][T11333] ? clear_bhb_loop+0x60/0xb0 [ 738.873977][T11333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.873999][T11333] RIP: 0033:0x7f76ec25ec29 [ 738.874016][T11333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.874033][T11333] RSP: 002b:00007f76ea4c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 738.874053][T11333] RAX: ffffffffffffffda RBX: 00007f76ec4a5fa0 RCX: 00007f76ec25ec29 [ 738.874068][T11333] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 738.874081][T11333] RBP: 00007f76ec2e1e41 R08: 0000000000000000 R09: 0000000000000000 [ 738.874094][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.874106][T11333] R13: 00007f76ec4a6038 R14: 00007f76ec4a5fa0 R15: 00007fffa4d67928 [ 738.874144][T11333] [ 738.961767][T11082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.247644][ T5840] bridge0: port 3(syz_tun) entered disabled state [ 740.534143][ T5840] syz_tun (unregistering): left allmulticast mode [ 740.534172][ T5840] syz_tun (unregistering): left promiscuous mode [ 740.534288][ T5840] bridge0: port 3(syz_tun) entered disabled state [ 741.752250][ T9] infiniband syz1: ib_query_port failed (-19) [ 742.297602][ T6037] bridge_slave_1: left allmulticast mode [ 742.297636][ T6037] bridge_slave_1: left promiscuous mode [ 742.297957][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.379990][ T6037] bridge_slave_0: left allmulticast mode [ 742.380022][ T6037] bridge_slave_0: left promiscuous mode [ 742.380301][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.442732][ T6037] bridge_slave_1: left allmulticast mode [ 742.442764][ T6037] bridge_slave_1: left promiscuous mode [ 742.443040][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.540072][ T6037] bridge_slave_0: left allmulticast mode [ 742.540104][ T6037] bridge_slave_0: left promiscuous mode [ 742.540357][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.109307][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.209465][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.274026][ T6037] bond0 (unregistering): Released all slaves [ 743.586990][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.659393][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.722851][ T6037] bond0 (unregistering): Released all slaves [ 744.368592][ T6037] hsr_slave_0: left promiscuous mode [ 744.428373][ T6037] hsr_slave_1: left promiscuous mode [ 744.429316][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.489548][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.648725][ T6037] hsr_slave_0: left promiscuous mode [ 744.688639][ T6037] hsr_slave_1: left promiscuous mode [ 744.689571][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.723809][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.510534][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 745.660956][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 746.964728][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 747.116150][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 747.212325][ T1322] ieee802154 phy1 wpan1: encryption failed: -22