last executing test programs: 13m28.077378778s ago: executing program 1 (id=12): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x4e0f, 0x912a, 0x41, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0xa2000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 13m25.179687634s ago: executing program 1 (id=13): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 13m24.609952771s ago: executing program 1 (id=17): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x7fffffff, 0x3000, 0x4}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0x4c08, 0x0) 13m23.423091945s ago: executing program 1 (id=18): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 13m15.039593357s ago: executing program 0 (id=35): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000400ea0018010000756c6c25000000007b1ef8ff00000000bfa100000000000007010000f8ffffffb700000008000000b70000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d2, 0x2, 0x45, 0x227, 0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, &(0x7f0000000500)=""/253, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) io_uring_enter(r5, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 13m14.956175923s ago: executing program 1 (id=36): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13m12.614132577s ago: executing program 1 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$inet6(0xa, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x2c, 0x2c, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x8, 0xffe0}, {0xfff3, 0x5}, {0x3, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 13m11.485856873s ago: executing program 0 (id=43): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xd33638f234726102, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 13m8.733051368s ago: executing program 0 (id=46): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000380)={0x40, 0x12, 0x3, "13943e"}, 0x0, 0x0}) 13m3.683834206s ago: executing program 0 (id=50): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x80000, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x82}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000044}, 0x2c000010) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 13m3.525729023s ago: executing program 0 (id=53): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2018, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 13m0.756959099s ago: executing program 0 (id=55): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) accept4(r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 12m57.089449944s ago: executing program 32 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$inet6(0xa, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x2c, 0x2c, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x8, 0xffe0}, {0xfff3, 0x5}, {0x3, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 12m44.015245159s ago: executing program 33 (id=55): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) accept4(r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 12m13.090804998s ago: executing program 4 (id=129): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa) syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') 12m10.492432759s ago: executing program 4 (id=130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r5, 0x9}}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) 12m8.606288844s ago: executing program 4 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040c8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x1, 0x8, 0xa, 0x202, 0x1}) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f00000001c0), 0x3000443, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {}]}) socket$nl_netfilter(0x10, 0x3, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_usb_ep_read(r4, 0x5, 0x56, &(0x7f0000000040)=""/86) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000440)={&(0x7f0000000400)=[{0x7, 0x6200, 0x0, 0x0}, {0xeabb, 0x4000, 0x0, 0x0}], 0x2}) 12m4.466675883s ago: executing program 4 (id=138): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) 12m3.26037318s ago: executing program 4 (id=140): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) socket(0x10, 0x3, 0x9) r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 12m0.975962653s ago: executing program 4 (id=143): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) 11m45.831911529s ago: executing program 34 (id=143): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca6433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84222000000005335001db43a5c000000000000000024000000000000000000e75a812ded5297d531afbf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cbc30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a3830007462b5543f2c1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f401058690350000000000000000000000000025902e4a196fb169780000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad39e42a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e80b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d575a83f33e75011ed8b48a2f52a03ec09c277b596d5eb491b6b380533be019894e7fc1a414ae38f1f448a7f6423bb12169d6f41665c5edfa3b47acd4d23b826d15361528d7c5a27e1120ca9537c8c8cccbb3ae86a91894372120488b82ecad3538899e53a36844aa515ebdbb1cd69a33b584f8e1c796827703f3894c93dd5a77607cb6c1191b89b303c1381f3e6016bf6c0e710750b43eb9a8fd0d7d71492ac43baec4994396f0fdfe7cecf248b88ba9406c7b8e5ec4882d52a0cd4b9b1c8327e811e6ba2572ff5a59dc8c5c90464aa3942b4a256e8a"], 0x0}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) 10m19.941970649s ago: executing program 3 (id=277): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x100000000000, 0x800000000, 0x1ff, 0x4}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 10m18.337017494s ago: executing program 3 (id=278): socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10m17.062924438s ago: executing program 3 (id=280): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) sync_file_range(0xffffffffffffffff, 0xfffffffffffffff5, 0x3, 0x4) 10m16.96800266s ago: executing program 3 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740), 0x0, 0x401, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x15, 0x39b4, 0x101, 0xfffff000, 0x20800, r0, 0x80000001, '\x00', 0x0, r0, 0x2, 0x5, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1a, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x7, 0xd, 0x8, 0xc7c, 0x4f8}], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r5, 0x0, 0x0) 10m14.831527311s ago: executing program 3 (id=283): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x64, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x7, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x9, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000723000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r3, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}, {&(0x7f00000004c0)="a27996190162232c7e264aac5d3b1c9c1951d3ba4f3cde38ae6acbdf1a6e975b476b6add3d11f1", 0x27}, {&(0x7f00000005c0)="3e3101ba7a9b3c627e7959218e57311b4cf90c93d1bc6426325a6d3672cd65f62eaf86caba6a26c381f95abd0b3c2ca90ab93c4e7313dc5a16f4f8dbfe5ca4d31701960f87df2d7d13519d2d21964d3dd3ecb8673aeb5081905046e9c8b33c11c70e6097a7587384b18d6e60a9656c85ea1add43a91f84b455bb01ca1a81dbebf348c0c2aff7915356f9991aa2def0a71b06131f7e699e6e8918856f", 0x9c}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000500)="191d8ca1dbc1b0f61dce17d879b7b570e64ddaf21d1ed5646e784d21a95ce4ddf86e4895627279239ec6cf4915981fd9c69d295659a65f29e6d0e1757efd37d50b9795e93f30cdeef11f5dd9f6efab415fe9", 0x52}, {&(0x7f0000000680)="3040905fb8440fd2ee0b0ec8cfccd0bdc7448df49e37c5fdd258b00d07f3f271d2bda70c9d49cac29e60f547e2277c506c71", 0x32}], 0x6) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) 10m10.301629651s ago: executing program 3 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740), 0x0, 0x401, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x15, 0x39b4, 0x101, 0xfffff000, 0x20800, r0, 0x80000001, '\x00', 0x0, r0, 0x2, 0x5, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1a, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x7, 0xd, 0x8, 0xc7c, 0x4f8}], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r5, 0x0, 0x0) 9m55.232966584s ago: executing program 35 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740), 0x0, 0x401, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x15, 0x39b4, 0x101, 0xfffff000, 0x20800, r0, 0x80000001, '\x00', 0x0, r0, 0x2, 0x5, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1a, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x7, 0xd, 0x8, 0xc7c, 0x4f8}], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r5, 0x0, 0x0) 1m19.550450082s ago: executing program 7 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) 1m12.654587509s ago: executing program 7 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000240)=0x1, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m7.779668778s ago: executing program 7 (id=942): r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x10) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, &(0x7f0000000080)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r6, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 1m1.933773663s ago: executing program 7 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r1}, 0x18) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 1m0.778291441s ago: executing program 7 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x800, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e1f, 0x10000, 0x1cb, 0x8001, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x4a2f69a2b6e4ecf4, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 58.85871235s ago: executing program 7 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) 50.403094664s ago: executing program 6 (id=972): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x0, 0x16, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x14, 0x28, "ed4e68d64505e5492ee70ff1c5232b71863edec45eeeb7d17083c2924bfe4654875f8a579b3625fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000700)={0x20, 0xf, 0x4, "4dce5ecd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.759809881s ago: executing program 6 (id=980): process_vm_writev(0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/222, 0xde}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_PIT2(r1, 0xc048aec8, 0x0) 45.038546875s ago: executing program 6 (id=983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={0x0, r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 44.012127571s ago: executing program 6 (id=987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = fcntl$getown(r0, 0x9) prlimit64(r1, 0xe, &(0x7f0000000140)={0x3c, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000defbffff02"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @period={0x0, 0x1, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) 41.972188206s ago: executing program 36 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) 40.257841697s ago: executing program 6 (id=992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r2, 0x10, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r4, 0x9}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) 37.372727568s ago: executing program 6 (id=996): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x111, 0x5, 0x800}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x200400) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00), 0x0, 0x20000, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x39, 0x0, @thr={0x0, &(0x7f00000007c0)}}, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 21.923266021s ago: executing program 37 (id=996): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x111, 0x5, 0x800}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x200400) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00), 0x0, 0x20000, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x39, 0x0, @thr={0x0, &(0x7f00000007c0)}}, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 19.174591997s ago: executing program 5 (id=1013): syz_open_procfs(0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x67) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000c00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="00faff0f0001eeff7f6faf9a1e4d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a2ef124708900"}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, 0x0) 17.92484837s ago: executing program 5 (id=1015): prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x6e21, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x3}}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x190) 16.576830446s ago: executing program 5 (id=1018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 15.162317404s ago: executing program 8 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)="00a1", 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "a5c02216a150c0c9"}}}, 0xe) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000280), &(0x7f0000000300)=[r6], &(0x7f0000000340)}) 9.415689513s ago: executing program 5 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x800, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e1f, 0x10000, 0x1cb, 0x8001, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x4a2f69a2b6e4ecf4, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 8.736637973s ago: executing program 2 (id=1024): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000006000000080000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000003a000000000000000000000006000000000000000000"], 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x101200) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0009000000000000000000000000030000000000ff00d31c398ecfc38f68dd6053c4ec9986ca72b1e26203d48f5c40e6a3ebab5af4c0fb8f38d3d1f8276722ab88f419a25f9ca85608a84a18c02ce2f9f58732a6b5d8f2c5fcbbd2c2ab92971917a7f3ccce45832e241bdd0c5f26f14dcf2ab59d826ced27f1f6b63d476b097d8f476991aa91c4f6d66a234002b86e66a9f443db9b73d106e4b1d4b9662896b144e46550bf9c7c44934669f328edfb"], 0x50) syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) quotactl$Q_SYNC(0xffffffff8000011f, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000018110000", @ANYRES32=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 7.913718921s ago: executing program 5 (id=1025): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000380)={0x40, 0x12, 0x3, "13943e"}, 0x0, 0x0}) 7.654715687s ago: executing program 8 (id=1026): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0x14, 0xa, "4d6fbf86d0b01d60b19e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.4236983s ago: executing program 2 (id=1027): prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x6e21, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x3}}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x190) 4.425114576s ago: executing program 2 (id=1028): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x240000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000000040)={0x9f, 0x0, 0x1}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) socket$inet(0xa, 0x801, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 3.278072926s ago: executing program 8 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3.203922843s ago: executing program 2 (id=1030): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x46}, 0x28) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.776643839s ago: executing program 5 (id=1031): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 2.71446081s ago: executing program 8 (id=1032): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = geteuid() quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, r3, &(0x7f0000000300)={0xa, 0xca6, 0x3, 0x2, 0x1, 0x6, 0x6, 0xa7, 0x8}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x141240, 0x1) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0xa0002f5}) 1.594989579s ago: executing program 2 (id=1033): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xb, 0x0, &(0x7f0000000300)="88291242a03c3f98722780", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.409388842s ago: executing program 8 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)="00a1", 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6}) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "a5c02216a150c0c9"}}}, 0xe) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000280), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) 1.199754518s ago: executing program 2 (id=1035): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) 0s ago: executing program 8 (id=1036): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000140)=""/11, 0xb, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000740)=""/185, 0xb9, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000200)=""/191, 0xffffffffffffffb6, 0x0, 0x3, 0x3}}, 0x48) kernel console output (not intermixed with test programs): ntered disabled state [ 491.690711][ T1276] bridge_slave_0: left allmulticast mode [ 491.690744][ T1276] bridge_slave_0: left promiscuous mode [ 491.691003][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.778445][ T1276] bridge_slave_1: left allmulticast mode [ 491.778468][ T1276] bridge_slave_1: left promiscuous mode [ 491.778641][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.830784][ T1276] bridge_slave_0: left allmulticast mode [ 491.830817][ T1276] bridge_slave_0: left promiscuous mode [ 491.831088][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.904009][ T1276] bridge_slave_1: left allmulticast mode [ 491.904042][ T1276] bridge_slave_1: left promiscuous mode [ 491.904295][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.970751][ T1276] bridge_slave_0: left allmulticast mode [ 491.970782][ T1276] bridge_slave_0: left promiscuous mode [ 491.971102][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.611880][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.693123][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.753343][ T1276] bond0 (unregistering): Released all slaves [ 493.040016][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.120953][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.184988][ T1276] bond0 (unregistering): Released all slaves [ 493.429911][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.510295][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.573725][ T1276] bond0 (unregistering): Released all slaves [ 493.985767][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.752709][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.817724][ T1276] bond0 (unregistering): Released all slaves [ 495.124646][ T7617] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 495.233234][ T7617] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 495.749036][ T7617] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 496.190396][ T7617] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 496.434487][ T7759] hsr_slave_0: entered promiscuous mode [ 496.435898][ T7759] hsr_slave_1: entered promiscuous mode [ 496.436806][ T7759] debugfs: 'hsr0' already exists in 'hsr' [ 496.436832][ T7759] Cannot create hsr debugfs directory [ 497.531397][ T7626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.298530][ T1276] hsr_slave_0: left promiscuous mode [ 498.319353][ T1276] hsr_slave_1: left promiscuous mode [ 498.320289][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.387786][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.539398][ T1276] hsr_slave_0: left promiscuous mode [ 498.579175][ T1276] hsr_slave_1: left promiscuous mode [ 498.580112][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.612338][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.838946][ T1276] hsr_slave_0: left promiscuous mode [ 498.868461][ T1276] hsr_slave_1: left promiscuous mode [ 498.870930][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.910076][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.049123][ T1276] hsr_slave_0: left promiscuous mode [ 499.084261][ T1276] hsr_slave_1: left promiscuous mode [ 499.085297][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.161325][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.110138][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 500.249771][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 502.032108][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 502.397131][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 504.630143][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 504.769867][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 505.972121][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 506.099589][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 506.700465][ T7626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 506.716491][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.716596][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.789907][ T7626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 507.097513][ T7626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 509.842846][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.981622][ T7626] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.012831][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.019125][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.068190][ T1849] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.072229][ T1849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.294434][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 510.300099][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 510.302761][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 510.310613][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 510.311982][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 511.798097][ T7736] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 512.151669][ T7736] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 512.215373][ T7736] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 512.389672][ T5132] Bluetooth: hci5: command tx timeout [ 512.424850][ T7736] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 513.056967][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.096167][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.097359][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.227314][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.265062][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.831737][ T7759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 514.183631][ T7759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 514.576900][ T5132] Bluetooth: hci5: command tx timeout [ 514.621237][ T7759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 514.718280][ T7759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 514.756206][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 515.806893][ T5132] Bluetooth: hci0: command tx timeout [ 516.629120][ T5132] Bluetooth: hci5: command tx timeout [ 516.716331][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.716479][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.716669][ T7961] bridge_slave_0: entered allmulticast mode [ 516.718534][ T7961] bridge_slave_0: entered promiscuous mode [ 516.897140][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.897299][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.897555][ T7961] bridge_slave_1: entered allmulticast mode [ 516.926098][ T7961] bridge_slave_1: entered promiscuous mode [ 517.559122][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 517.782423][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.817301][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.831379][ T5132] Bluetooth: hci0: command tx timeout [ 518.161617][ T7961] team0: Port device team_slave_0 added [ 518.223319][ T7961] team0: Port device team_slave_1 added [ 518.717204][ T5132] Bluetooth: hci5: command tx timeout [ 519.118002][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.118021][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.118050][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.316855][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.316874][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.316903][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.909147][ T5132] Bluetooth: hci0: command tx timeout [ 520.145534][ T7977] chnl_net:caif_netlink_parms(): no params data found [ 520.688693][ T7961] hsr_slave_0: entered promiscuous mode [ 520.709112][ T7961] hsr_slave_1: entered promiscuous mode [ 521.505191][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.526994][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.535994][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.537211][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.552980][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.990412][ T5132] Bluetooth: hci0: command tx timeout [ 522.177063][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.177287][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.177491][ T7977] bridge_slave_0: entered allmulticast mode [ 522.188618][ T7977] bridge_slave_0: entered promiscuous mode [ 522.223918][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.224042][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.224198][ T7977] bridge_slave_1: entered allmulticast mode [ 522.226090][ T7977] bridge_slave_1: entered promiscuous mode [ 522.592601][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.815327][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.190204][ T7977] team0: Port device team_slave_0 added [ 523.687141][ T5132] Bluetooth: hci1: command tx timeout [ 524.160856][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.170300][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.171493][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.173233][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.174132][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 524.423633][ T7977] team0: Port device team_slave_1 added [ 525.729803][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.729824][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.729855][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.749076][ T5822] Bluetooth: hci1: command tx timeout [ 526.228947][ T5822] Bluetooth: hci2: command tx timeout [ 526.290212][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.290232][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.290264][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.856324][ T7977] hsr_slave_0: entered promiscuous mode [ 526.857354][ T7977] hsr_slave_1: entered promiscuous mode [ 526.858052][ T7977] debugfs: 'hsr0' already exists in 'hsr' [ 526.858072][ T7977] Cannot create hsr debugfs directory [ 527.558686][ T1276] bridge_slave_1: left allmulticast mode [ 527.558716][ T1276] bridge_slave_1: left promiscuous mode [ 527.559119][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.620693][ T1276] bridge_slave_0: left allmulticast mode [ 527.620724][ T1276] bridge_slave_0: left promiscuous mode [ 527.620999][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.695180][ T1276] bridge_slave_1: left allmulticast mode [ 527.695211][ T1276] bridge_slave_1: left promiscuous mode [ 527.695459][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.760662][ T1276] bridge_slave_0: left allmulticast mode [ 527.760695][ T1276] bridge_slave_0: left promiscuous mode [ 527.760980][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.832309][ T5822] Bluetooth: hci1: command tx timeout [ 528.259392][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.327362][ T5822] Bluetooth: hci2: command tx timeout [ 528.408549][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.571060][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.788382][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.910571][ T5822] Bluetooth: hci1: command tx timeout [ 530.389703][ T5822] Bluetooth: hci2: command tx timeout [ 532.469132][ T5822] Bluetooth: hci2: command tx timeout [ 533.932532][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.310187][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.675947][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.754450][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.772702][ T1276] bond0 (unregistering): Released all slaves [ 535.819815][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.821044][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.538266][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.650094][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.150247][ T1276] bond0 (unregistering): Released all slaves [ 541.034294][ T8026] chnl_net:caif_netlink_parms(): no params data found [ 541.813040][ T8095] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 541.922168][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.255899][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.863977][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.169234][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.391857][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.459126][ T1276] hsr_slave_0: left promiscuous mode [ 544.500615][ T1276] hsr_slave_1: left promiscuous mode [ 544.509421][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.554782][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.110019][ T1276] hsr_slave_0: left promiscuous mode [ 545.150553][ T1276] hsr_slave_1: left promiscuous mode [ 545.169262][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.356265][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.994198][ T8121] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 548.568664][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.872553][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.958389][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.344644][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.368066][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 551.271849][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.352081][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.400574][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 552.426934][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.634913][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.734410][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.009899][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 555.120009][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 555.927595][ T7961] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 556.096031][ T8147] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 556.149373][ T7961] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 556.319776][ T7961] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 556.717493][ T7961] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 557.725587][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.725820][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.726087][ T8026] bridge_slave_0: entered allmulticast mode [ 557.759968][ T8026] bridge_slave_0: entered promiscuous mode [ 557.776379][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.776521][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.776794][ T8026] bridge_slave_1: entered allmulticast mode [ 557.811359][ T8026] bridge_slave_1: entered promiscuous mode [ 557.827586][ T8038] chnl_net:caif_netlink_parms(): no params data found [ 558.649357][ T989] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 558.690395][ T8026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.804648][ T8026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.810798][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.810834][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.810858][ T989] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 558.810904][ T989] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 558.810929][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.874754][ T989] usb 3-1: config 0 descriptor?? [ 559.298182][ T989] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 559.385379][ T989] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 559.434817][ T8026] team0: Port device team_slave_0 added [ 559.742596][ T8026] team0: Port device team_slave_1 added [ 560.101288][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.101508][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.101718][ T8038] bridge_slave_0: entered allmulticast mode [ 560.105019][ T8038] bridge_slave_0: entered promiscuous mode [ 560.229742][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.229883][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.230150][ T8038] bridge_slave_1: entered allmulticast mode [ 560.239883][ T8038] bridge_slave_1: entered promiscuous mode [ 560.246938][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.246959][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.246990][ T8026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.424576][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.424597][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.424685][ T8026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.658695][ T8038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.684160][ T8038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.075877][ T8038] team0: Port device team_slave_0 added [ 561.394117][ T9] usb 3-1: USB disconnect, device number 23 [ 561.471131][ T8026] hsr_slave_0: entered promiscuous mode [ 562.156004][ T8026] hsr_slave_1: entered promiscuous mode [ 562.157313][ T8026] debugfs: 'hsr0' already exists in 'hsr' [ 562.157341][ T8026] Cannot create hsr debugfs directory [ 562.283227][ T8038] team0: Port device team_slave_1 added [ 562.758667][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.758687][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.796389][ T8038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.046416][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.046436][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.046466][ T8038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.097661][ T7977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 563.307034][ T7977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 563.535832][ T7977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 563.884284][ T7977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 565.656684][ T8038] hsr_slave_0: entered promiscuous mode [ 565.666152][ T8038] hsr_slave_1: entered promiscuous mode [ 565.667277][ T8038] debugfs: 'hsr0' already exists in 'hsr' [ 565.667303][ T8038] Cannot create hsr debugfs directory [ 568.159941][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.160015][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.685284][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.869110][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 569.029170][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.029201][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 569.029242][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 569.029268][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.046297][ T10] usb 3-1: config 0 descriptor?? [ 569.297061][ T10] usb 3-1: USB disconnect, device number 24 [ 569.516446][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.545838][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.545997][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.607097][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.617205][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.740955][ T1276] bridge_slave_1: left allmulticast mode [ 569.740988][ T1276] bridge_slave_1: left promiscuous mode [ 569.741285][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.827199][ T1276] bridge_slave_0: left allmulticast mode [ 569.827234][ T1276] bridge_slave_0: left promiscuous mode [ 569.827490][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.165020][ T1276] bridge_slave_1: left allmulticast mode [ 570.165046][ T1276] bridge_slave_1: left promiscuous mode [ 570.165221][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.161296][ T1276] bridge_slave_0: left allmulticast mode [ 571.161329][ T1276] bridge_slave_0: left promiscuous mode [ 571.161598][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.252554][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 571.262659][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 571.264080][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.265893][ T5132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 571.266801][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.604360][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.680008][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.747441][ T1276] bond0 (unregistering): Released all slaves [ 573.217514][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 573.368187][ T5822] Bluetooth: hci3: command tx timeout [ 573.736728][ T5132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 573.748103][ T5132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 573.749858][ T5132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 573.751228][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 573.752579][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 573.854045][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.970263][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.044120][ T1276] bond0 (unregistering): Released all slaves [ 575.429369][ T5132] Bluetooth: hci3: command tx timeout [ 575.829016][ T5132] Bluetooth: hci6: command tx timeout [ 576.172371][ T1276] hsr_slave_0: left promiscuous mode [ 576.188945][ T1276] hsr_slave_1: left promiscuous mode [ 576.189878][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.241280][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.409291][ T1276] hsr_slave_0: left promiscuous mode [ 576.449014][ T1276] hsr_slave_1: left promiscuous mode [ 576.449946][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.489992][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.508980][ T5132] Bluetooth: hci3: command tx timeout [ 577.955263][ T5132] Bluetooth: hci6: command tx timeout [ 578.177426][ T8254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.265069][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 578.711128][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 578.981062][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 579.609308][ T5132] Bluetooth: hci3: command tx timeout [ 579.999002][ T5132] Bluetooth: hci6: command tx timeout [ 581.424910][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 582.079150][ T5132] Bluetooth: hci6: command tx timeout [ 582.230416][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 583.401868][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 583.404817][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 583.406035][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 583.407742][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 583.408687][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 585.286597][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.338494][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.481354][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 585.509094][ T5822] Bluetooth: hci0: command tx timeout [ 585.584104][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.886627][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.954121][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.066035][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 586.090552][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 586.093000][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 586.094895][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 586.095937][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 586.285960][ T8223] chnl_net:caif_netlink_parms(): no params data found [ 586.719162][ T8235] chnl_net:caif_netlink_parms(): no params data found [ 586.803388][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.214718][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.044182][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.207787][ T5822] Bluetooth: hci0: command tx timeout [ 588.214144][ T5822] Bluetooth: hci2: command tx timeout [ 588.300756][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.164722][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.164864][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.165139][ T8223] bridge_slave_0: entered allmulticast mode [ 589.176496][ T8223] bridge_slave_0: entered promiscuous mode [ 589.310137][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.310367][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.310642][ T8223] bridge_slave_1: entered allmulticast mode [ 589.315445][ T8223] bridge_slave_1: entered promiscuous mode [ 590.228880][ T5132] Bluetooth: hci2: command tx timeout [ 590.228918][ T5132] Bluetooth: hci0: command tx timeout [ 590.961956][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.962106][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.962366][ T8235] bridge_slave_0: entered allmulticast mode [ 590.965301][ T8235] bridge_slave_0: entered promiscuous mode [ 591.021834][ T8223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.036706][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.037008][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.037304][ T8235] bridge_slave_1: entered allmulticast mode [ 591.050906][ T8235] bridge_slave_1: entered promiscuous mode [ 591.084225][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 591.119017][ T8223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.485007][ T8320] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 591.485051][ T8320] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 591.485078][ T8320] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 591.600039][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.684624][ T8223] team0: Port device team_slave_0 added [ 591.701772][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.722447][ T8223] team0: Port device team_slave_1 added [ 592.308962][ T5132] Bluetooth: hci0: command tx timeout [ 592.312943][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 592.471970][ T8235] team0: Port device team_slave_0 added [ 592.664556][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.664576][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.664606][ T8223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.708803][ T5132] Bluetooth: hci2: command tx timeout [ 592.792243][ T8235] team0: Port device team_slave_1 added [ 592.959786][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.959805][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.959837][ T8223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.106439][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.106803][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.107019][ T8273] bridge_slave_0: entered allmulticast mode [ 593.131394][ T8273] bridge_slave_0: entered promiscuous mode [ 594.124363][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.258885][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.303178][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.303315][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.303556][ T8273] bridge_slave_1: entered allmulticast mode [ 594.323108][ T8273] bridge_slave_1: entered promiscuous mode [ 594.430155][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.430174][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.430204][ T8235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.559195][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.559216][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.559245][ T8235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.799552][ T5132] Bluetooth: hci2: command tx timeout [ 595.096414][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.283879][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.294542][ T8223] hsr_slave_0: entered promiscuous mode [ 595.316850][ T8223] hsr_slave_1: entered promiscuous mode [ 595.332229][ T8223] debugfs: 'hsr0' already exists in 'hsr' [ 595.332364][ T8223] Cannot create hsr debugfs directory [ 595.335930][ T8290] chnl_net:caif_netlink_parms(): no params data found [ 596.091510][ T8273] team0: Port device team_slave_0 added [ 596.215472][ T8235] hsr_slave_0: entered promiscuous mode [ 596.216860][ T8235] hsr_slave_1: entered promiscuous mode [ 596.218178][ T8235] debugfs: 'hsr0' already exists in 'hsr' [ 596.218204][ T8235] Cannot create hsr debugfs directory [ 596.323031][ T8273] team0: Port device team_slave_1 added [ 596.403972][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.221194][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.657500][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.855941][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.331542][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.724983][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.144859][ T8363] binder: 8362:8363 ioctl c0306201 2000000001c0 returned -22 [ 599.177846][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.177866][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.177897][ T8273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.391887][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.391907][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.391937][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.583877][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.584056][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.584278][ T8290] bridge_slave_0: entered allmulticast mode [ 599.596434][ T8290] bridge_slave_0: entered promiscuous mode [ 599.687414][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.687561][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.687821][ T8290] bridge_slave_1: entered allmulticast mode [ 599.692733][ T8290] bridge_slave_1: entered promiscuous mode [ 599.784024][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.596548][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.362143][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.488142][ T8273] hsr_slave_0: entered promiscuous mode [ 601.499687][ T8273] hsr_slave_1: entered promiscuous mode [ 601.500702][ T8273] debugfs: 'hsr0' already exists in 'hsr' [ 601.500727][ T8273] Cannot create hsr debugfs directory [ 601.531192][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.116558][ T8290] team0: Port device team_slave_0 added [ 602.845521][ T8290] team0: Port device team_slave_1 added [ 603.790927][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.790954][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.790983][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.236285][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.290767][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.290796][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.290827][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.297403][ T8391] netlink: 'syz.2.540': attribute type 8 has an invalid length. [ 604.918418][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.997978][ T8290] hsr_slave_0: entered promiscuous mode [ 604.999646][ T8290] hsr_slave_1: entered promiscuous mode [ 605.000753][ T8290] debugfs: 'hsr0' already exists in 'hsr' [ 605.000783][ T8290] Cannot create hsr debugfs directory [ 605.099801][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.348832][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.919289][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.763905][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.702741][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.289219][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.545741][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.971330][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.754695][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.866633][ T1276] bridge_slave_1: left allmulticast mode [ 612.866665][ T1276] bridge_slave_1: left promiscuous mode [ 612.866937][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.980383][ T1276] bridge_slave_0: left allmulticast mode [ 612.980413][ T1276] bridge_slave_0: left promiscuous mode [ 612.980836][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.086958][ T1276] bridge_slave_1: left allmulticast mode [ 613.086995][ T1276] bridge_slave_1: left promiscuous mode [ 613.087259][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.168524][ T1276] bridge_slave_0: left allmulticast mode [ 613.168556][ T1276] bridge_slave_0: left promiscuous mode [ 613.179703][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.261848][ T1276] bridge_slave_1: left allmulticast mode [ 613.261880][ T1276] bridge_slave_1: left promiscuous mode [ 613.262165][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.341941][ T1276] bridge_slave_0: left allmulticast mode [ 613.341974][ T1276] bridge_slave_0: left promiscuous mode [ 613.342230][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.683728][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.715655][ T1276] bridge_slave_1: left allmulticast mode [ 613.715690][ T1276] bridge_slave_1: left promiscuous mode [ 613.715978][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.890718][ T1276] bridge_slave_0: left allmulticast mode [ 613.890741][ T1276] bridge_slave_0: left promiscuous mode [ 613.890924][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.106148][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.249881][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.152988][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.383988][ T1276] bond0 (unregistering): Released all slaves [ 616.853389][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.083470][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.412142][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.689043][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.786563][ T1276] bond0 (unregistering): Released all slaves [ 618.581568][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.731376][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.546023][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.230772][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.730496][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.077994][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.212090][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.614936][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.176873][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.302330][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.861317][ T1276] bond0 (unregistering): Released all slaves [ 623.742462][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.839779][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.907921][ T1276] bond0 (unregistering): Released all slaves [ 624.179467][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.072979][ T1276] hsr_slave_0: left promiscuous mode [ 625.139542][ T1276] hsr_slave_1: left promiscuous mode [ 625.140539][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.222965][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.557384][ T1276] hsr_slave_0: left promiscuous mode [ 625.799615][ T1276] hsr_slave_1: left promiscuous mode [ 625.800589][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.848130][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.004655][ T1276] hsr_slave_0: left promiscuous mode [ 626.021912][ T1276] hsr_slave_1: left promiscuous mode [ 626.022880][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.101214][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.242222][ T1276] hsr_slave_0: left promiscuous mode [ 626.254762][ T1276] hsr_slave_1: left promiscuous mode [ 626.255854][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.301249][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.171876][ T8540] trusted_key: encrypted_key: insufficient parameters specified [ 629.169864][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 629.359869][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 629.620605][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.620682][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.253261][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 631.391205][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 631.918515][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.936643][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 631.947421][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 631.948979][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.017922][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.469820][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 633.609880][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 634.069022][ T5132] Bluetooth: hci1: command tx timeout [ 634.725948][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 634.762680][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 634.766065][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 634.767719][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 634.803727][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 634.960340][ T8568] tmpfs: Unknown parameter 'hash' [ 636.148893][ T5132] Bluetooth: hci1: command tx timeout [ 636.888144][ T5132] Bluetooth: hci5: command tx timeout [ 637.015646][ T8574] trusted_key: encrypted_key: insufficient parameters specified [ 638.139040][ T8513] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 638.228941][ T5132] Bluetooth: hci1: command tx timeout [ 638.302961][ T8513] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.302993][ T8513] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 638.303054][ T8513] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 638.303080][ T8513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.349510][ T8513] usb 3-1: config 0 descriptor?? [ 638.356495][ T8513] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 638.356549][ T8513] dvb-usb: bulk message failed: -22 (3/0) [ 638.406372][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 638.407144][ T8513] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 638.408187][ T8513] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 638.408242][ T8513] usb 3-1: media controller created [ 638.449692][ T8513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 638.469048][ T8513] dvb-usb: bulk message failed: -22 (6/0) [ 638.469137][ T8513] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 638.498320][ T8513] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 638.539331][ T8513] dvb-usb: schedule remote query interval to 150 msecs. [ 638.539354][ T8513] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 638.574879][ T8513] usb 3-1: USB disconnect, device number 25 [ 638.614491][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 638.742583][ T8513] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 638.960626][ T5132] Bluetooth: hci5: command tx timeout [ 640.309315][ T5132] Bluetooth: hci1: command tx timeout [ 641.059437][ T5132] Bluetooth: hci5: command tx timeout [ 642.376994][ T8565] chnl_net:caif_netlink_parms(): no params data found [ 642.576285][ T8557] chnl_net:caif_netlink_parms(): no params data found [ 643.108812][ T5132] Bluetooth: hci5: command tx timeout [ 643.851131][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.851280][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.851534][ T8565] bridge_slave_0: entered allmulticast mode [ 643.854445][ T8565] bridge_slave_0: entered promiscuous mode [ 644.540618][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.540758][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.541014][ T8565] bridge_slave_1: entered allmulticast mode [ 644.559153][ T8565] bridge_slave_1: entered promiscuous mode [ 644.870347][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.870494][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.870681][ T8557] bridge_slave_0: entered allmulticast mode [ 644.873627][ T8557] bridge_slave_0: entered promiscuous mode [ 644.887050][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.887313][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.887682][ T8557] bridge_slave_1: entered allmulticast mode [ 644.896411][ T8557] bridge_slave_1: entered promiscuous mode [ 645.186874][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.241592][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 645.276968][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 645.292571][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 645.294392][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 645.295643][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 645.752972][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.917708][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.039885][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 646.051690][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 646.053574][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 646.055379][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 646.060033][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 646.179519][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.348895][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 646.533671][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.533706][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.533731][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.533774][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.533799][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.548776][ T8565] team0: Port device team_slave_0 added [ 646.600554][ T10] usb 3-1: config 0 descriptor?? [ 646.872895][ T8565] team0: Port device team_slave_1 added [ 646.883645][ T8557] team0: Port device team_slave_0 added [ 647.030645][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 647.030825][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 647.059564][ T10] usb 3-1: USB disconnect, device number 26 [ 647.349111][ T5132] Bluetooth: hci3: command tx timeout [ 647.385713][ T8557] team0: Port device team_slave_1 added [ 647.665577][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.665597][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.665629][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.080916][ T8686] trusted_key: encrypted_key: insufficient parameters specified [ 648.878886][ T5132] Bluetooth: hci6: command tx timeout [ 648.982290][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.982310][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.982340][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.996372][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.996393][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.996427][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.152965][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.152985][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.153025][ T8557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.178887][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 649.353912][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.353941][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 649.354024][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 649.354049][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.395224][ T9] usb 3-1: config 0 descriptor?? [ 649.428800][ T5132] Bluetooth: hci3: command tx timeout [ 649.470479][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 649.470537][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 649.494123][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 649.502423][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 649.502497][ T9] usb 3-1: media controller created [ 649.515957][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.572426][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 649.572514][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 649.665075][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 649.683340][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 649.683364][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 649.729402][ T9] usb 3-1: USB disconnect, device number 27 [ 649.947753][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 650.124098][ T8565] hsr_slave_0: entered promiscuous mode [ 650.125458][ T8565] hsr_slave_1: entered promiscuous mode [ 650.954324][ T5132] Bluetooth: hci6: command tx timeout [ 651.508863][ T5132] Bluetooth: hci3: command tx timeout [ 651.817769][ T8557] hsr_slave_0: entered promiscuous mode [ 651.822021][ T8557] hsr_slave_1: entered promiscuous mode [ 651.823084][ T8557] debugfs: 'hsr0' already exists in 'hsr' [ 651.823114][ T8557] Cannot create hsr debugfs directory [ 653.225700][ T5132] Bluetooth: hci6: command tx timeout [ 653.589340][ T5132] Bluetooth: hci3: command tx timeout [ 655.138928][ T989] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 655.269176][ T5132] Bluetooth: hci6: command tx timeout [ 655.296473][ T989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 655.296506][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.296528][ T989] usb 3-1: Product: syz [ 655.296544][ T989] usb 3-1: Manufacturer: syz [ 655.296559][ T989] usb 3-1: SerialNumber: syz [ 655.346559][ T989] usb 3-1: config 0 descriptor?? [ 655.566033][ T989] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 656.205763][ T8649] chnl_net:caif_netlink_parms(): no params data found [ 656.514591][ T8661] chnl_net:caif_netlink_parms(): no params data found [ 656.813616][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 656.815070][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 656.819148][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 656.819621][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 656.820104][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 656.820566][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 656.820858][ T989] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 656.928996][ T989] usb 3-1: USB disconnect, device number 28 [ 657.687643][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.687883][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.688089][ T8649] bridge_slave_0: entered allmulticast mode [ 657.692099][ T8649] bridge_slave_0: entered promiscuous mode [ 657.778973][ T10] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 657.830303][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.830459][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.830701][ T8649] bridge_slave_1: entered allmulticast mode [ 657.856053][ T8649] bridge_slave_1: entered promiscuous mode [ 657.876340][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.876478][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.876751][ T8661] bridge_slave_0: entered allmulticast mode [ 657.889895][ T8661] bridge_slave_0: entered promiscuous mode [ 657.892913][ T8565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 657.941650][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.941679][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 657.941734][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 657.941759][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.991840][ T10] usb 3-1: config 0 descriptor?? [ 658.009088][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 658.009142][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 658.031953][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 658.037573][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 658.037641][ T10] usb 3-1: media controller created [ 658.043827][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 658.067347][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.067588][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.067862][ T8661] bridge_slave_1: entered allmulticast mode [ 658.113648][ T8661] bridge_slave_1: entered promiscuous mode [ 658.115226][ T8565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 658.117877][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 658.117963][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 658.145298][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 658.177073][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 658.177103][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 658.219606][ T10] usb 3-1: USB disconnect, device number 29 [ 658.382402][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 658.590970][ T8565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 658.649825][ T8649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.809399][ T8565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 658.883506][ T8649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.893055][ T8661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.994989][ T8661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.069013][ T989] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 659.234110][ T989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 659.234876][ T989] usb 3-1: not running at top speed; connect to a high speed hub [ 659.237888][ T989] usb 3-1: config 6 has an invalid interface number: 228 but max is 0 [ 659.237916][ T989] usb 3-1: config 6 has no interface number 0 [ 659.237950][ T989] usb 3-1: config 6 interface 228 has no altsetting 0 [ 659.287950][ T989] usb 3-1: string descriptor 0 read error: -22 [ 659.288072][ T989] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice= 3.27 [ 659.288090][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.337292][ T989] hub 3-1:6.228: bad descriptor, ignoring hub [ 659.337344][ T989] hub 3-1:6.228: probe with driver hub failed with error -5 [ 659.357774][ T989] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 659.357955][ T989] dvb-usb: bulk message failed: -22 (3/0) [ 659.382384][ T989] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 659.383518][ T8649] team0: Port device team_slave_0 added [ 659.385796][ T989] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 659.385861][ T989] usb 3-1: media controller created [ 659.420914][ T989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.457593][ T989] dvb-usb: bulk message failed: -22 (6/0) [ 659.457676][ T989] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 659.480552][ T989] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 659.502079][ T989] dvb-usb: schedule remote query interval to 150 msecs. [ 659.502138][ T989] dvb-usb: bulk message failed: -22 (3/0) [ 659.518792][ T989] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 659.587369][ T10] usb 3-1: USB disconnect, device number 30 [ 659.725212][ T10] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 659.759673][ T8649] team0: Port device team_slave_1 added [ 659.771686][ T8661] team0: Port device team_slave_0 added [ 660.096357][ T8661] team0: Port device team_slave_1 added [ 661.644019][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.644039][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.644062][ T8649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.852459][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.852480][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.852510][ T8649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.912413][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.912433][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.912464][ T8661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.083364][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.083384][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.083414][ T8661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.186884][ T8649] hsr_slave_0: entered promiscuous mode [ 663.188001][ T8649] hsr_slave_1: entered promiscuous mode [ 663.188649][ T8649] debugfs: 'hsr0' already exists in 'hsr' [ 663.188674][ T8649] Cannot create hsr debugfs directory [ 663.349149][ T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 663.393108][ T8661] hsr_slave_0: entered promiscuous mode [ 663.394700][ T8661] hsr_slave_1: entered promiscuous mode [ 663.395792][ T8661] debugfs: 'hsr0' already exists in 'hsr' [ 663.395819][ T8661] Cannot create hsr debugfs directory [ 663.519606][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 663.519639][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.519660][ T10] usb 3-1: Product: syz [ 663.519677][ T10] usb 3-1: Manufacturer: syz [ 663.519692][ T10] usb 3-1: SerialNumber: syz [ 663.541546][ T10] usb 3-1: config 0 descriptor?? [ 663.665030][ T8557] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 663.775813][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 663.916565][ T8557] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 664.159203][ T8557] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 664.323361][ T8557] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 664.767631][ T1276] bridge_slave_1: left allmulticast mode [ 664.767663][ T1276] bridge_slave_1: left promiscuous mode [ 664.767918][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.831134][ T1276] bridge_slave_0: left allmulticast mode [ 664.831168][ T1276] bridge_slave_0: left promiscuous mode [ 664.831418][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.893180][ T1276] bridge_slave_1: left allmulticast mode [ 664.893210][ T1276] bridge_slave_1: left promiscuous mode [ 664.893503][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.951746][ T1276] bridge_slave_0: left allmulticast mode [ 664.951778][ T1276] bridge_slave_0: left promiscuous mode [ 664.952229][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.001756][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 665.002201][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 665.002624][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 665.005442][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 665.041468][ T10] usb 3-1: USB disconnect, device number 31 [ 665.071562][ T1276] bridge_slave_1: left allmulticast mode [ 665.071593][ T1276] bridge_slave_1: left promiscuous mode [ 665.071853][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.152305][ T1276] bridge_slave_0: left allmulticast mode [ 665.152330][ T1276] bridge_slave_0: left promiscuous mode [ 665.152524][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.227294][ T1276] bridge_slave_1: left allmulticast mode [ 665.227318][ T1276] bridge_slave_1: left promiscuous mode [ 665.227500][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.283087][ T1276] bridge_slave_0: left allmulticast mode [ 665.283120][ T1276] bridge_slave_0: left promiscuous mode [ 665.283378][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.641798][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.730043][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.791327][ T1276] bond0 (unregistering): Released all slaves [ 665.821192][ T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 665.977400][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.977430][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 665.977483][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 665.977509][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.993593][ T10] usb 3-1: config 0 descriptor?? [ 666.013285][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 666.013348][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 666.033880][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 666.040130][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 666.040196][ T10] usb 3-1: media controller created [ 666.053490][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.095309][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 666.095411][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 666.107725][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 666.112528][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 666.112556][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 666.219849][ T10] usb 3-1: USB disconnect, device number 32 [ 666.248233][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.342499][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 666.372038][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.432385][ T1276] bond0 (unregistering): Released all slaves [ 666.722097][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.819720][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.885926][ T1276] bond0 (unregistering): Released all slaves [ 667.152418][ T1276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.234295][ T1276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.314769][ T1276] bond0 (unregistering): Released all slaves [ 669.786560][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.108875][ T1276] hsr_slave_0: left promiscuous mode [ 670.149143][ T1276] hsr_slave_1: left promiscuous mode [ 670.150227][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.191396][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.335760][ T1276] hsr_slave_0: left promiscuous mode [ 670.382180][ T1276] hsr_slave_1: left promiscuous mode [ 670.388549][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.420004][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.574070][ T1276] hsr_slave_0: left promiscuous mode [ 670.610404][ T1276] hsr_slave_1: left promiscuous mode [ 670.615221][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.639960][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.839144][ T1276] hsr_slave_0: left promiscuous mode [ 670.895772][ T1276] hsr_slave_1: left promiscuous mode [ 670.898665][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.925967][ T8853] overlayfs: failed to resolve './file0': -2 [ 671.011195][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.219572][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 672.349938][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 673.461091][ T8804] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 673.611823][ T8804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.611853][ T8804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 673.611909][ T8804] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 673.611935][ T8804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.623898][ T8804] usb 3-1: config 0 descriptor?? [ 673.666483][ T8804] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 673.666536][ T8804] dvb-usb: bulk message failed: -22 (3/0) [ 673.698179][ T8804] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 673.700975][ T8804] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 673.701034][ T8804] usb 3-1: media controller created [ 673.703569][ T8804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 673.733530][ T8804] dvb-usb: bulk message failed: -22 (6/0) [ 673.733634][ T8804] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 673.784607][ T8804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 673.797283][ T8804] dvb-usb: schedule remote query interval to 150 msecs. [ 673.797306][ T8804] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 673.836483][ T8804] usb 3-1: USB disconnect, device number 33 [ 673.945644][ T8804] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 674.179708][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 674.336019][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 675.321027][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.385899][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.638065][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 675.870174][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 676.285543][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.485901][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.232825][ T8876] overlayfs: failed to resolve './file0': -2 [ 677.790219][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.929603][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 677.970319][ C0] vkms_vblank_simulate: vblank timer overrun [ 678.109606][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 678.222576][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.718006][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.191989][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.237965][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.241497][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.301053][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.302334][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.434807][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.865270][ T8557] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.947056][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.949701][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.032491][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.059268][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.455613][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.621214][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.292084][ T8649] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 682.397179][ T8649] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 682.488979][ T8649] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 682.598654][ T8649] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 682.941723][ T8661] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 683.006817][ T8661] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 683.070619][ T8661] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 683.153677][ T8661] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 683.290902][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.507293][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.245146][ T8565] veth0_vlan: entered promiscuous mode [ 684.367367][ T8565] veth1_vlan: entered promiscuous mode [ 684.825570][ T8565] veth0_macvtap: entered promiscuous mode [ 684.852010][ T8649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.893072][ T8565] veth1_macvtap: entered promiscuous mode [ 685.010625][ T8661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.046397][ T8649] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.074774][ T8557] veth0_vlan: entered promiscuous mode [ 685.077879][ T8935] trusted_key: encrypted_key: insufficient parameters specified [ 685.090978][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.141775][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.143180][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.170620][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.231410][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.231564][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.244344][ T8557] veth1_vlan: entered promiscuous mode [ 685.254358][ T8661] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.295440][ T2138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.325086][ T2138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.353106][ T2138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.378483][ T2138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.387220][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.407453][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.493501][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.493656][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.866777][ T8557] veth0_macvtap: entered promiscuous mode [ 685.975799][ T8557] veth1_macvtap: entered promiscuous mode [ 686.048887][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.048909][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.255751][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.282270][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.282294][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.341494][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.372396][ T3587] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.373689][ T3587] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.374408][ T3587] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.374452][ T3587] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.856631][ T8649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.962654][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.962677][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.083864][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.083889][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.296043][ T8661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.809655][ T8969] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 688.959729][ T8960] input: syz1 as /devices/virtual/input/input19 [ 689.435236][ T8649] veth0_vlan: entered promiscuous mode [ 689.554801][ T8649] veth1_vlan: entered promiscuous mode [ 690.666656][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.816533][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.918517][ T8984] netlink: 'syz.5.637': attribute type 1 has an invalid length. [ 690.918553][ T8984] netlink: 128 bytes leftover after parsing attributes in process `syz.5.637'. [ 691.035251][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.035324][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.814316][ T8988] trusted_key: encrypted_key: insufficient parameters specified [ 692.151738][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.170293][ T8649] veth0_macvtap: entered promiscuous mode [ 692.227413][ T8661] veth0_vlan: entered promiscuous mode [ 692.254550][ T8649] veth1_macvtap: entered promiscuous mode [ 692.359379][ T8661] veth1_vlan: entered promiscuous mode [ 692.569459][ T8649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.668641][ T8649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.847896][ T3587] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.872357][ T3587] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.898715][ T3587] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.905761][ T3587] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.937890][ T8661] veth0_macvtap: entered promiscuous mode [ 693.018801][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.108576][ T8661] veth1_macvtap: entered promiscuous mode [ 693.486670][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.663848][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.946143][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.189599][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.113700][ T9005] kernel profiling enabled (shift: 17) [ 696.298813][ T8828] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 696.577553][ T8828] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 696.577585][ T8828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.577605][ T8828] usb 3-1: Product: syz [ 696.577621][ T8828] usb 3-1: Manufacturer: syz [ 696.577637][ T8828] usb 3-1: SerialNumber: syz [ 696.621172][ T8828] usb 3-1: config 0 descriptor?? [ 696.712961][ T2138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.712983][ T2138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.821320][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.860205][ T8828] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 696.977053][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.020245][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.020269][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.061375][ T1393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.098998][ T3557] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.133722][ T3557] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.134679][ T3557] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.916584][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.916608][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.111740][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.111764][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.330959][ T8828] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 698.361119][ T8828] usb 3-1: USB disconnect, device number 34 [ 698.744536][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.278852][ T5830] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 699.279015][ T8829] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 699.408980][ T5830] usb 8-1: device descriptor read/64, error -71 [ 699.450262][ T8829] usb 6-1: config 0 interface 0 has no altsetting 0 [ 699.450309][ T8829] usb 6-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 699.450335][ T8829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.538012][ T8829] usb 6-1: config 0 descriptor?? [ 699.643236][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.890847][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.716872][ T5830] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 700.759596][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.859019][ T5830] usb 8-1: device descriptor read/64, error -71 [ 700.969817][ T5830] usb usb8-port1: attempt power cycle [ 701.029117][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.962259][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.541574][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.320027][ T8829] usbhid 6-1:0.0: can't add hid device: -71 [ 706.320280][ T8829] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 706.363231][ T8829] usb 6-1: USB disconnect, device number 2 [ 706.382315][ T9084] trusted_key: encrypted_key: insufficient parameters specified [ 708.719031][ T8513] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 708.879734][ T8513] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 708.879769][ T8513] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.879790][ T8513] usb 7-1: Product: syz [ 708.879805][ T8513] usb 7-1: Manufacturer: syz [ 708.879820][ T8513] usb 7-1: SerialNumber: syz [ 708.941991][ T8513] usb 7-1: config 0 descriptor?? [ 709.015366][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.453984][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.659373][ T8513] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 709.706944][ T9109] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 709.778374][ T9109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 709.778560][ T9109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 709.957424][ T9109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 710.266768][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.299118][ T9109] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 711.299186][ T9109] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 711.888985][ T5132] Bluetooth: hci1: command 0x0c1a tx timeout [ 713.053255][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.138882][ T5132] Bluetooth: hci4: command 0x0406 tx timeout [ 713.349106][ T5132] Bluetooth: hci5: command 0x0c1a tx timeout [ 713.863138][ T9109] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 713.908833][ T5132] Bluetooth: hci1: command 0x0c1a tx timeout [ 713.909109][ T8513] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 713.935389][ T8513] usb 7-1: USB disconnect, device number 2 [ 713.968985][ T9109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 713.969080][ T9109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 714.115749][ T9109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 714.482498][ T9109] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 714.483843][ T9109] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 715.709870][ T5132] Bluetooth: hci5: command 0x0c1a tx timeout [ 715.820463][ T9109] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 716.141075][ T5132] Bluetooth: hci3: command 0x0c1a tx timeout [ 716.141358][ T5132] Bluetooth: hci1: command 0x0c1a tx timeout [ 716.549165][ T5822] Bluetooth: hci6: command 0x0c1a tx timeout [ 718.077321][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.279180][ T5132] Bluetooth: hci5: command 0x0c1a tx timeout [ 718.279222][ T5132] Bluetooth: hci3: command 0x0c1a tx timeout [ 718.628770][ T5822] Bluetooth: hci6: command 0x0c1a tx timeout [ 718.803902][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.927381][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.989368][ T9181] netlink: 'syz.8.673': attribute type 8 has an invalid length. [ 719.287157][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.536364][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.835351][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.937542][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.007420][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.037357][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.140524][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.247972][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.495996][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.790584][ T5822] Bluetooth: hci6: command 0x0c1a tx timeout [ 720.953802][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.968908][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 721.062091][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.132324][ T989] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 721.972542][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.006471][ T989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 722.006507][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.006530][ T989] usb 3-1: Product: syz [ 722.006546][ T989] usb 3-1: Manufacturer: syz [ 722.006562][ T989] usb 3-1: SerialNumber: syz [ 722.093911][ T989] usb 3-1: config 0 descriptor?? [ 722.320641][ T989] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 722.645845][ T9208] trusted_key: encrypted_key: insufficient parameters specified [ 723.065245][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.641577][ T989] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 726.443258][ T989] usb 3-1: USB disconnect, device number 35 [ 726.935918][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.936823][ T5900] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 727.119870][ T5900] usb 6-1: device descriptor read/64, error -71 [ 727.410765][ T5900] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 727.730951][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.737728][ T5900] usb 6-1: device descriptor read/64, error -71 [ 727.836362][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.868977][ T5900] usb usb6-port1: attempt power cycle [ 728.240520][ T5900] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 729.528139][ T5900] usb 6-1: device descriptor read/8, error -71 [ 729.604201][ T9241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 729.605054][ T9241] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 729.605503][ T9241] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 729.605634][ T9241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 729.605774][ T9241] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 729.868866][ T5900] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 730.044963][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.078779][ T5900] usb 6-1: device not accepting address 6, error -71 [ 730.079165][ T5900] usb usb6-port1: unable to enumerate USB device [ 730.152418][ T9250] netlink: 20 bytes leftover after parsing attributes in process `syz.6.685'. [ 730.168350][ T9250] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 730.192612][ T9250] warning: `syz.6.685' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 730.205846][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.352190][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.817060][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.203680][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.593184][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.787113][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.881951][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 731.888408][ T5822] Bluetooth: hci5: command 0x0c1a tx timeout [ 731.937415][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 731.953334][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 731.975343][ T8291] Bluetooth: hci6: command 0x0c1a tx timeout [ 732.240760][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.021522][ T5900] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 733.206345][ T5900] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 733.206381][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.206403][ T5900] usb 8-1: Product: syz [ 733.206419][ T5900] usb 8-1: Manufacturer: syz [ 733.206435][ T5900] usb 8-1: SerialNumber: syz [ 733.271653][ T5900] usb 8-1: config 0 descriptor?? [ 733.513594][ T5900] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 736.021909][ T5900] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 736.260284][ T5900] usb 8-1: USB disconnect, device number 5 [ 738.474890][ T9297] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 738.475095][ T9297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 738.475223][ T9297] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 738.475347][ T9297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 738.475646][ T9297] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 738.630051][ T5132] Bluetooth: hci4: command 0x0406 tx timeout [ 739.549399][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 740.723457][ T5132] Bluetooth: hci3: command 0x0c1a tx timeout [ 740.723510][ T5132] Bluetooth: hci5: command 0x0c1a tx timeout [ 740.724370][ T5132] Bluetooth: hci1: command 0x0c1a tx timeout [ 741.654212][ T9323] trusted_key: encrypted_key: insufficient parameters specified [ 741.668748][ T8291] Bluetooth: hci6: command 0x0c1a tx timeout [ 746.413396][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.7.710'. [ 746.415728][ T9350] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 749.982237][ T5890] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 750.138915][ T5890] usb 6-1: device descriptor read/64, error -71 [ 750.378897][ T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 750.560991][ T5890] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 752.579593][ T5890] usb 6-1: device descriptor read/64, error -71 [ 752.689283][ T5890] usb usb6-port1: attempt power cycle [ 752.749425][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.032054][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 754.032100][ T9] usb 3-1: can't read configurations, error -71 [ 754.771443][ T9408] ufs: You didn't specify the type of your ufs filesystem [ 754.771443][ T9408] [ 754.771443][ T9408] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 754.771443][ T9408] [ 754.771443][ T9408] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 754.771694][ T9408] ufs: ufstype=old is supported read-only [ 757.087704][ T9423] block nbd7: NBD_DISCONNECT [ 760.463756][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 761.698768][ T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 762.628936][ T10] usb 9-1: device descriptor read/64, error -71 [ 765.119282][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.7.739'. [ 765.120437][ T9482] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 766.525577][ T9493] EXT4-fs (nbd7): unable to read superblock [ 766.879725][ T5900] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 767.508799][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 767.513770][ T5900] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 767.513798][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.513818][ T5900] usb 3-1: config 0 has no interface number 0 [ 767.513874][ T5900] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.516965][ T5900] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 767.516994][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.517017][ T5900] usb 3-1: Product: syz [ 767.517033][ T5900] usb 3-1: Manufacturer: syz [ 767.517049][ T5900] usb 3-1: SerialNumber: syz [ 767.534681][ T5900] usb 3-1: config 0 descriptor?? [ 767.585259][ T5900] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 768.009583][ T5900] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 768.009858][ T5900] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 770.050076][ T8513] usb 3-1: USB disconnect, device number 38 [ 770.090006][ T5900] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 770.294557][ T5900] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 770.294590][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.294611][ T5900] usb 9-1: Product: syz [ 770.294626][ T5900] usb 9-1: Manufacturer: syz [ 770.294640][ T5900] usb 9-1: SerialNumber: syz [ 770.303232][ T5900] usb 9-1: config 0 descriptor?? [ 770.368828][ T1227] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 770.518789][ T1227] usb 8-1: Using ep0 maxpacket: 16 [ 770.519712][ T1227] usb 8-1: no configurations [ 770.519738][ T1227] usb 8-1: can't read configurations, error -22 [ 771.648324][ T1227] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 771.741285][ T5900] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 771.838850][ T1227] usb 8-1: Using ep0 maxpacket: 16 [ 771.846401][ T1227] usb 8-1: no configurations [ 771.846421][ T1227] usb 8-1: can't read configurations, error -22 [ 771.846833][ T1227] usb usb8-port1: attempt power cycle [ 772.375799][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.6.755'. [ 772.397443][ T9540] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 773.874818][ T1227] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 774.231944][ T1227] usb 8-1: Using ep0 maxpacket: 16 [ 774.234087][ T1227] usb 8-1: no configurations [ 774.234104][ T1227] usb 8-1: can't read configurations, error -22 [ 774.342401][ T5900] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 774.358759][ T1227] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 774.359037][ T5900] usb 9-1: USB disconnect, device number 5 [ 774.380838][ T1227] usb 8-1: Using ep0 maxpacket: 16 [ 774.381694][ T1227] usb 8-1: no configurations [ 774.381709][ T1227] usb 8-1: can't read configurations, error -22 [ 774.383473][ T1227] usb usb8-port1: unable to enumerate USB device [ 775.273518][ T9564] binder: 9563:9564 ioctl 4018620d 0 returned -22 [ 776.908899][ T5979] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 779.698341][ T5979] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 779.698376][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.698399][ T5979] usb 7-1: Product: syz [ 779.698413][ T5979] usb 7-1: Manufacturer: syz [ 779.698429][ T5979] usb 7-1: SerialNumber: syz [ 779.705206][ T5979] usb 7-1: config 0 descriptor?? [ 780.019355][ T5979] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -71 [ 780.019462][ T5979] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 780.059636][ T5979] usb 7-1: USB disconnect, device number 3 [ 780.578846][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 780.677282][ T9615] binder: 9613:9615 ioctl 4018620d 0 returned -22 [ 780.730713][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 780.731712][ T9] usb 3-1: no configurations [ 780.731730][ T9] usb 3-1: can't read configurations, error -22 [ 780.873772][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 781.225901][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 781.228395][ T9] usb 3-1: no configurations [ 781.228415][ T9] usb 3-1: can't read configurations, error -22 [ 781.228998][ T9] usb usb3-port1: attempt power cycle [ 782.779277][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 783.510481][ T9] usb 3-1: device descriptor read/8, error -71 [ 784.269409][ T9650] binder: 9649:9650 ioctl 4018620d 0 returned -22 [ 784.390118][ T8513] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 784.547116][ T8513] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 784.547150][ T8513] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.547171][ T8513] usb 8-1: Product: syz [ 784.547186][ T8513] usb 8-1: Manufacturer: syz [ 784.547201][ T8513] usb 8-1: SerialNumber: syz [ 784.594683][ T8513] usb 8-1: config 0 descriptor?? [ 784.616885][ T8513] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 011 [ 785.181135][ T8513] (null): failure reading functionality [ 785.198870][ T8513] i2c i2c-1: failure reading functionality [ 785.204617][ T8513] i2c i2c-1: connected i2c-tiny-usb device [ 785.228868][ T8513] usb 8-1: USB disconnect, device number 11 [ 786.354587][ T9656] netlink: 'syz.6.794': attribute type 8 has an invalid length. [ 786.388932][ T989] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 786.538816][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 786.540015][ T989] usb 6-1: no configurations [ 786.540034][ T989] usb 6-1: can't read configurations, error -22 [ 786.668847][ T989] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 787.122211][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 787.513818][ T989] usb 6-1: no configurations [ 787.513840][ T989] usb 6-1: can't read configurations, error -22 [ 787.518492][ T989] usb usb6-port1: attempt power cycle [ 787.929010][ T989] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 787.949702][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 787.950601][ T989] usb 6-1: no configurations [ 787.950618][ T989] usb 6-1: can't read configurations, error -22 [ 788.073794][ T9691] binder: BINDER_SET_CONTEXT_MGR already set [ 788.073810][ T9691] binder: 9690:9691 ioctl 4018620d 200000004a80 returned -16 [ 788.081305][ T989] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 788.102477][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 788.103466][ T989] usb 6-1: no configurations [ 788.103483][ T989] usb 6-1: can't read configurations, error -22 [ 788.108951][ T989] usb usb6-port1: unable to enumerate USB device [ 790.963292][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 791.117022][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 791.117055][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.117076][ T9] usb 3-1: Product: syz [ 791.117090][ T9] usb 3-1: Manufacturer: syz [ 791.117105][ T9] usb 3-1: SerialNumber: syz [ 791.239623][ T9] usb 3-1: config 0 descriptor?? [ 791.285532][ T9] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 043 [ 791.294468][ T9714] overlayfs: missing 'lowerdir' [ 791.653503][ T9] (null): failure reading functionality [ 791.656251][ T9] i2c i2c-1: failure reading functionality [ 791.680392][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 791.718493][ T9] usb 3-1: USB disconnect, device number 43 [ 793.369718][ T9727] binder: BINDER_SET_CONTEXT_MGR already set [ 793.369730][ T9727] binder: 9726:9727 ioctl 4018620d 200000004a80 returned -16 [ 794.033586][ T9734] netlink: 165 bytes leftover after parsing attributes in process `syz.5.820'. [ 795.044246][ T9740] syzkaller1: entered promiscuous mode [ 795.044274][ T9740] syzkaller1: entered allmulticast mode [ 797.288881][ T1227] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 797.368839][ T8513] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 797.438785][ T1227] usb 8-1: Using ep0 maxpacket: 16 [ 797.441300][ T1227] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.441327][ T1227] usb 8-1: config 0 has no interfaces? [ 797.444765][ T1227] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 797.444806][ T1227] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.444826][ T1227] usb 8-1: Product: syz [ 797.444841][ T1227] usb 8-1: Manufacturer: syz [ 797.444855][ T1227] usb 8-1: SerialNumber: syz [ 797.505743][ T1227] usb 8-1: config 0 descriptor?? [ 797.836798][ T8513] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 797.836832][ T8513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.836852][ T8513] usb 3-1: Product: syz [ 797.836868][ T8513] usb 3-1: Manufacturer: syz [ 797.836884][ T8513] usb 3-1: SerialNumber: syz [ 797.861335][ T8513] usb 3-1: config 0 descriptor?? [ 798.130097][ T8513] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 798.524711][ T9763] binder: BINDER_SET_CONTEXT_MGR already set [ 798.524729][ T9763] binder: 9761:9763 ioctl 4018620d 200000004a80 returned -16 [ 799.386995][ T9] usb 8-1: USB disconnect, device number 12 [ 800.035494][ T9770] netlink: 165 bytes leftover after parsing attributes in process `syz.7.832'. [ 800.609222][ T8513] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 800.678834][ T8513] usb 3-1: USB disconnect, device number 44 [ 801.981034][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 802.831197][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.831227][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 802.831266][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 802.831290][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.905584][ T9] usb 8-1: config 0 descriptor?? [ 804.051286][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.8.842'. [ 804.849740][ T9805] Can't find ip_set type hash:ip,po [ 807.452278][ T989] usb 8-1: USB disconnect, device number 13 [ 807.711820][ T9826] overlayfs: missing 'lowerdir' [ 810.085845][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 813.692477][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.861'. [ 813.940297][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.598055][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.773243][ T9880] overlayfs: missing 'lowerdir' [ 815.948829][ T5830] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 816.094998][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.108796][ T5830] usb 9-1: Using ep0 maxpacket: 16 [ 816.111530][ T5830] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.111555][ T5830] usb 9-1: config 0 has no interfaces? [ 816.270834][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.294976][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.393428][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.783320][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.094131][ T5830] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 817.094165][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.094194][ T5830] usb 9-1: Product: syz [ 817.094209][ T5830] usb 9-1: Manufacturer: syz [ 817.094224][ T5830] usb 9-1: SerialNumber: syz [ 817.108144][ T5830] usb 9-1: config 0 descriptor?? [ 817.194118][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.869'. [ 817.688371][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.908006][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.477844][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.791721][ T9898] Can't find ip_set type hash:ip,por [ 819.474959][ T9] usb 9-1: USB disconnect, device number 6 [ 821.216202][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.875'. [ 823.059669][ T9930] overlayfs: missing 'lowerdir' [ 823.906099][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.979710][ T9936] netlink: 'syz.7.876': attribute type 8 has an invalid length. [ 824.232891][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.985455][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.839290][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.198553][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.397681][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.668739][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.731795][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.884976][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.885'. [ 827.564955][ T9972] overlayfs: failed to resolve './file0': -2 [ 829.111274][ T9980] netlink: 'syz.8.892': attribute type 8 has an invalid length. [ 829.616894][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.358939][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.704778][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.969526][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.027030][T10002] netlink: 165 bytes leftover after parsing attributes in process `syz.5.899'. [ 834.120256][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.901'. [ 834.538842][ T5979] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 834.689713][ T5979] usb 9-1: Using ep0 maxpacket: 16 [ 834.705124][ T5979] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.705153][ T5979] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.708809][ T9] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 834.749336][ T5979] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 834.749371][ T5979] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.749393][ T5979] usb 9-1: Product: syz [ 834.749408][ T5979] usb 9-1: Manufacturer: syz [ 834.749423][ T5979] usb 9-1: SerialNumber: syz [ 834.774362][ T5979] usb 9-1: config 0 descriptor?? [ 834.871231][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 834.871263][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.871282][ T9] usb 8-1: Product: syz [ 834.871297][ T9] usb 8-1: Manufacturer: syz [ 834.871312][ T9] usb 8-1: SerialNumber: syz [ 834.991013][ T9] usb 8-1: config 0 descriptor?? [ 835.216309][T10032] netlink: 'syz.5.907': attribute type 8 has an invalid length. [ 835.511214][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 836.961058][T10046] netlink: 165 bytes leftover after parsing attributes in process `syz.2.911'. [ 837.737041][ T5890] usb 9-1: USB disconnect, device number 7 [ 838.409331][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 838.946722][T10055] trusted_key: encrypted_key: insufficient parameters specified [ 840.518724][ T8513] usb 8-1: USB disconnect, device number 14 [ 840.777131][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.917'. [ 842.733339][T10083] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 843.151228][T10091] netlink: 165 bytes leftover after parsing attributes in process `syz.8.922'. [ 848.278820][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 850.332767][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 850.332801][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.332825][ T9] usb 6-1: Product: syz [ 850.332841][ T9] usb 6-1: Manufacturer: syz [ 850.332864][ T9] usb 6-1: SerialNumber: syz [ 850.389088][ T5830] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 850.501083][ T9] usb 6-1: config 0 descriptor?? [ 850.512479][T10120] trusted_key: encrypted_key: insufficient parameters specified [ 850.571161][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 850.571195][ T5830] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 850.571223][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 850.571246][ T5830] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 850.631815][ T5830] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 850.631847][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.631869][ T5830] usb 7-1: Product: syz [ 850.631884][ T5830] usb 7-1: Manufacturer: syz [ 850.631899][ T5830] usb 7-1: SerialNumber: syz [ 850.714396][ T5830] usb 7-1: config 0 descriptor?? [ 850.753055][ T5830] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 850.819166][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 852.354337][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 852.372038][ T5830] scsi host1: usb-storage 7-1:0.0 [ 852.832344][T10140] netlink: 165 bytes leftover after parsing attributes in process `syz.5.937'. [ 852.943259][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 853.169933][ T9] usb 6-1: USB disconnect, device number 14 [ 853.235690][ T5830] usb 7-1: USB disconnect, device number 4 [ 856.013061][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 856.508861][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 857.422422][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 857.425173][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 857.425203][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.425225][ T9] usb 6-1: Product: syz [ 857.425240][ T9] usb 6-1: Manufacturer: syz [ 857.425256][ T9] usb 6-1: SerialNumber: syz [ 857.487558][ T9] usb 6-1: config 0 descriptor?? [ 858.862787][T10166] trusted_key: encrypted_key: insufficient parameters specified [ 859.753474][ T989] usb 6-1: USB disconnect, device number 15 [ 861.360296][ T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 862.349572][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 862.349598][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.349612][ T9] usb 6-1: Product: syz [ 862.349623][ T9] usb 6-1: Manufacturer: syz [ 862.349633][ T9] usb 6-1: SerialNumber: syz [ 862.392518][ T9] usb 6-1: config 0 descriptor?? [ 862.814443][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 864.726578][T10208] overlayfs: missing 'lowerdir' [ 865.239467][ T8829] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 865.292040][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 865.314451][ T9] usb 6-1: USB disconnect, device number 16 [ 865.438790][ T8829] usb 9-1: Using ep0 maxpacket: 16 [ 865.441279][ T8829] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 865.468798][ T8829] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 865.468830][ T8829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.468853][ T8829] usb 9-1: Product: syz [ 865.468869][ T8829] usb 9-1: Manufacturer: syz [ 865.468886][ T8829] usb 9-1: SerialNumber: syz [ 865.485266][ T8829] usb 9-1: config 0 descriptor?? [ 865.960441][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.958'. [ 868.548807][ T5890] usb 9-1: USB disconnect, device number 8 [ 869.575874][T10238] overlayfs: missing 'lowerdir' [ 872.269354][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.970'. [ 872.908897][ T989] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 873.058812][ T989] usb 7-1: Using ep0 maxpacket: 32 [ 873.061512][ T989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 873.067250][ T989] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 873.067283][ T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.067307][ T989] usb 7-1: Product: syz [ 873.067322][ T989] usb 7-1: Manufacturer: syz [ 873.067345][ T989] usb 7-1: SerialNumber: syz [ 873.150000][ T989] usb 7-1: config 0 descriptor?? [ 873.577837][ T989] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 874.674563][ T989] usb 7-1: USB disconnect, device number 5 [ 875.240133][ T8829] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 875.608553][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.933182][ T8829] usb 9-1: Using ep0 maxpacket: 16 [ 875.948816][ T8829] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 875.954168][ T8829] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 875.954190][ T8829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.954204][ T8829] usb 9-1: Product: syz [ 875.954215][ T8829] usb 9-1: Manufacturer: syz [ 875.954225][ T8829] usb 9-1: SerialNumber: syz [ 876.083006][ T8829] usb 9-1: config 0 descriptor?? [ 877.535820][T10282] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 877.535886][T10282] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 877.828333][ T5830] usb 9-1: USB disconnect, device number 9 [ 879.078815][ T989] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 879.114547][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.985'. [ 880.809663][ T989] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 880.809696][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.809718][ T989] usb 6-1: Product: syz [ 880.809733][ T989] usb 6-1: Manufacturer: syz [ 880.809748][ T989] usb 6-1: SerialNumber: syz [ 880.817978][ T989] usb 6-1: config 0 descriptor?? [ 881.039091][ T989] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 882.155547][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.181026][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.182426][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.224969][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.226502][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.646073][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.719973][ T989] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 882.738046][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.904603][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.679036][ T989] usb 6-1: USB disconnect, device number 17 [ 884.514377][ T9324] Bluetooth: hci0: command tx timeout [ 884.908747][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.477762][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.613020][T10323] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 885.613082][T10323] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 885.929041][ T5830] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 885.936032][T10336] overlayfs: failed to resolve './file1': -2 [ 886.138795][ T5830] usb 9-1: Using ep0 maxpacket: 16 [ 886.144486][ T5830] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 886.144520][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.144542][ T5830] usb 9-1: Product: syz [ 886.144558][ T5830] usb 9-1: Manufacturer: syz [ 886.144574][ T5830] usb 9-1: SerialNumber: syz [ 886.166074][ T5830] usb 9-1: config 0 descriptor?? [ 886.558281][ T9324] Bluetooth: hci0: command tx timeout [ 886.595648][ T5830] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 886.612096][ T5830] usb 9-1: clie_3_5_startup: get config number failed: -32 [ 886.612287][ T5830] visor 9-1:0.0: probe with driver visor failed with error -32 [ 888.394805][T10351] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 888.742084][ T9324] Bluetooth: hci0: command tx timeout [ 889.455155][T10339] syz.6.996 (10339): drop_caches: 2 [ 889.545283][ T8829] usb 9-1: USB disconnect, device number 10 [ 890.788782][ T9324] Bluetooth: hci0: command tx timeout [ 901.110450][T10377] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 901.110518][T10377] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 901.450646][T10381] overlayfs: failed to resolve './file1': -2 [ 901.684102][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.744833][T10384] trusted_key: encrypted_key: insufficient parameters specified [ 901.973453][ T1849] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.448491][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.461159][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 902.474138][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 902.475846][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 902.477125][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 902.507632][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 902.608778][ T989] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 902.806219][ T989] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 902.806252][ T989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.806274][ T989] usb 9-1: Product: syz [ 902.806288][ T989] usb 9-1: Manufacturer: syz [ 902.806304][ T989] usb 9-1: SerialNumber: syz [ 902.872307][ T1849] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.929104][ T989] usb 9-1: config 0 descriptor?? [ 902.962378][ T989] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 011 [ 903.038731][ T8829] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 903.190179][ T8829] usb 3-1: Using ep0 maxpacket: 16 [ 903.367776][ T989] (null): failure reading functionality [ 903.374612][ T989] i2c i2c-1: failure reading functionality [ 903.377036][ T989] i2c i2c-1: connected i2c-tiny-usb device [ 903.399332][ T989] usb 9-1: USB disconnect, device number 11 [ 903.412686][ T8829] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 903.412717][ T8829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.412738][ T8829] usb 3-1: Product: syz [ 903.412754][ T8829] usb 3-1: Manufacturer: syz [ 903.412770][ T8829] usb 3-1: SerialNumber: syz [ 903.520199][ T8829] usb 3-1: config 0 descriptor?? [ 903.556637][ T1849] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.562987][ T8829] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 903.757142][ T8829] usb 3-1: clie_3_5_startup: get config number failed: -32 [ 903.757317][ T8829] visor 3-1:0.0: probe with driver visor failed with error -32 [ 904.005820][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.271178][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.291267][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.563334][ T5822] Bluetooth: hci2: command tx timeout [ 904.767382][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.968716][ T9] usb 3-1: USB disconnect, device number 45 [ 907.230544][ T5822] Bluetooth: hci2: command tx timeout [ 907.329644][T10416] overlayfs: failed to resolve './file1': -2 [ 907.588948][T10417] trusted_key: encrypted_key: insufficient parameters specified [ 907.676239][ T1849] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.733742][T10308] chnl_net:caif_netlink_parms(): no params data found [ 909.268991][ T5822] Bluetooth: hci2: command tx timeout [ 909.419249][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.419483][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.419739][T10308] bridge_slave_0: entered allmulticast mode [ 909.459857][T10308] bridge_slave_0: entered promiscuous mode [ 909.529412][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.529554][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.529807][T10308] bridge_slave_1: entered allmulticast mode [ 909.533263][T10308] bridge_slave_1: entered promiscuous mode [ 911.348722][ T9324] Bluetooth: hci2: command tx timeout [ 913.555188][T10308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.663489][T10308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.146810][T10445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.233501][T10444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.379694][ T1849] bridge_slave_1: left allmulticast mode [ 916.379760][ T1849] bridge_slave_1: left promiscuous mode [ 916.385235][ T1849] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.371118][ T1849] bridge_slave_0: left allmulticast mode [ 917.371147][ T1849] bridge_slave_0: left promiscuous mode [ 917.371401][ T1849] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.679343][ T989] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 917.774360][ T5830] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 917.949925][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 918.030164][ T989] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 918.030198][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.030219][ T989] usb 6-1: Product: syz [ 918.030233][ T989] usb 6-1: Manufacturer: syz [ 918.030248][ T989] usb 6-1: SerialNumber: syz [ 918.048908][ T5830] usb 9-1: Using ep0 maxpacket: 32 [ 918.052092][ T5830] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 918.052131][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 918.052163][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 918.052191][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 918.052222][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 918.138882][ T989] usb 6-1: config 0 descriptor?? [ 918.160241][ T5830] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 918.160273][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.160295][ T5830] usb 9-1: Product: syz [ 918.160309][ T5830] usb 9-1: Manufacturer: syz [ 918.160325][ T5830] usb 9-1: SerialNumber: syz [ 918.223260][ T989] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 918.247589][ T5830] usb 9-1: config 0 descriptor?? [ 918.478695][ T989] usb 6-1: clie_3_5_startup: get config number failed: -32 [ 918.478852][ T989] visor 6-1:0.0: probe with driver visor failed with error -32 [ 918.916987][ T5830] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 918.917060][ T5830] input input25: Device does not respond to id packet P [ 918.917564][ T5830] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 918.917613][ T5830] input input25: Device does not respond to id packet B [ 918.918471][ T5830] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 918.918522][ T5830] input input25: Device does not respond to id packet N [ 918.959760][ T5830] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 919.114494][ T5830] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 919.198728][ T5830] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 919.419529][ T5830] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 919.508349][ T5830] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input25 [ 919.525183][ T5830] usb 9-1: USB disconnect, device number 12 [ 919.806044][T10462] overlayfs: failed to resolve './file0': -2 [ 920.081617][ T8513] usb 6-1: USB disconnect, device number 18 [ 920.096051][T10464] trusted_key: encrypted_key: insufficient parameters specified [ 922.808724][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.106470][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.126682][T10481] ------------[ cut here ]------------ [ 923.126699][T10481] WARNING: CPU: 1 PID: 10481 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 923.126748][T10481] Modules linked in: [ 923.126776][T10481] CPU: 1 UID: 0 PID: 10481 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 923.126795][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 923.126808][T10481] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 923.126830][T10481] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 923.126845][T10481] RSP: 0018:ffffc900041bf8e0 EFLAGS: 00010287 [ 923.126858][T10481] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 923.126869][T10481] RDX: ffffc9000db09000 RSI: 00000000000000ab RDI: 00000000000000ac [ 923.126879][T10481] RBP: ffffc900041bfa70 R08: 0000000000000000 R09: 0000000000000000 [ 923.126889][T10481] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 923.126901][T10481] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88804c86e791 [ 923.126912][T10481] FS: 00007f644a8566c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 923.126926][T10481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 923.126936][T10481] CR2: 0000000000000000 CR3: 000000004cf50000 CR4: 00000000003526f0 [ 923.126949][T10481] Call Trace: [ 923.126959][T10481] [ 923.126970][T10481] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 923.127000][T10481] ? __pfx_cgroup_freeze+0x10/0x10 [ 923.127020][T10481] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 923.127045][T10481] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 923.127070][T10481] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 923.127098][T10481] ? mutex_lock_nested+0x154/0x1d0 [ 923.127117][T10481] ? cgroup_kn_lock_live+0x13c/0x230 [ 923.127149][T10481] cgroup_freeze_write+0x156/0x1c0 [ 923.127177][T10481] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 923.127192][T10481] ? kernfs_root+0x1c/0x230 [ 923.127206][T10481] ? kernfs_root+0x1c/0x230 [ 923.127223][T10481] ? kernfs_root+0x1ea/0x230 [ 923.127237][T10481] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 923.127254][T10481] cgroup_file_write+0x39b/0x740 [ 923.127282][T10481] ? __pfx_cgroup_file_write+0x10/0x10 [ 923.127320][T10481] ? __pfx_cgroup_file_write+0x10/0x10 [ 923.127341][T10481] kernfs_fop_write_iter+0x3b0/0x540 [ 923.127368][T10481] vfs_write+0x5d5/0xb40 [ 923.127391][T10481] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 923.127413][T10481] ? __pfx_vfs_write+0x10/0x10 [ 923.127429][T10481] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 923.127457][T10481] ? mutex_lock_nested+0x154/0x1d0 [ 923.127476][T10481] ? fdget_pos+0x253/0x320 [ 923.127505][T10481] ksys_write+0x14b/0x260 [ 923.127526][T10481] ? __pfx_ksys_write+0x10/0x10 [ 923.127549][T10481] ? do_syscall_64+0xbe/0x3b0 [ 923.127567][T10481] do_syscall_64+0xfa/0x3b0 [ 923.127582][T10481] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.127606][T10481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.127622][T10481] ? clear_bhb_loop+0x60/0xb0 [ 923.127641][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.127656][T10481] RIP: 0033:0x7f644c5eeec9 [ 923.127674][T10481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.127688][T10481] RSP: 002b:00007f644a856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.127703][T10481] RAX: ffffffffffffffda RBX: 00007f644c845fa0 RCX: 00007f644c5eeec9 [ 923.127714][T10481] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 923.127724][T10481] RBP: 00007f644c671f91 R08: 0000000000000000 R09: 0000000000000000 [ 923.127739][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.127748][T10481] R13: 00007f644c846038 R14: 00007f644c845fa0 R15: 00007fff2e19e508 [ 923.127773][T10481] [ 923.127784][T10481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 923.127794][T10481] CPU: 1 UID: 0 PID: 10481 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 923.127812][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 923.127821][T10481] Call Trace: [ 923.127827][T10481] [ 923.127833][T10481] dump_stack_lvl+0x99/0x250 [ 923.127849][T10481] ? __asan_memcpy+0x40/0x70 [ 923.127865][T10481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.127881][T10481] ? __pfx__printk+0x10/0x10 [ 923.127912][T10481] vpanic+0x281/0x750 [ 923.127927][T10481] ? __pfx__printk+0x10/0x10 [ 923.127946][T10481] ? __pfx_vpanic+0x10/0x10 [ 923.127962][T10481] ? is_bpf_text_address+0x26/0x2b0 [ 923.127988][T10481] panic+0xb9/0xc0 [ 923.128003][T10481] ? __pfx_panic+0x10/0x10 [ 923.128031][T10481] __warn+0x31b/0x4b0 [ 923.128045][T10481] ? cgroup_freeze+0x80a/0xf90 [ 923.128068][T10481] ? cgroup_freeze+0x80a/0xf90 [ 923.128089][T10481] report_bug+0x2be/0x4f0 [ 923.128113][T10481] ? cgroup_freeze+0x80a/0xf90 [ 923.128134][T10481] ? cgroup_freeze+0x80a/0xf90 [ 923.128155][T10481] ? cgroup_freeze+0x80c/0xf90 [ 923.128176][T10481] handle_bug+0x84/0x160 [ 923.128194][T10481] exc_invalid_op+0x1a/0x50 [ 923.128211][T10481] asm_exc_invalid_op+0x1a/0x20 [ 923.128225][T10481] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 923.128246][T10481] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 923.128260][T10481] RSP: 0018:ffffc900041bf8e0 EFLAGS: 00010287 [ 923.128272][T10481] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 923.128283][T10481] RDX: ffffc9000db09000 RSI: 00000000000000ab RDI: 00000000000000ac [ 923.128293][T10481] RBP: ffffc900041bfa70 R08: 0000000000000000 R09: 0000000000000000 [ 923.128303][T10481] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 923.128315][T10481] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88804c86e791 [ 923.128332][T10481] ? cgroup_freeze+0x809/0xf90 [ 923.128363][T10481] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 923.128397][T10481] ? __pfx_cgroup_freeze+0x10/0x10 [ 923.128428][T10481] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 923.128465][T10481] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 923.128508][T10481] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 923.128535][T10481] ? mutex_lock_nested+0x154/0x1d0 [ 923.128554][T10481] ? cgroup_kn_lock_live+0x13c/0x230 [ 923.128603][T10481] cgroup_freeze_write+0x156/0x1c0 [ 923.128627][T10481] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 923.128649][T10481] ? kernfs_root+0x1c/0x230 [ 923.128669][T10481] ? kernfs_root+0x1c/0x230 [ 923.128692][T10481] ? kernfs_root+0x1ea/0x230 [ 923.128712][T10481] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 923.128741][T10481] cgroup_file_write+0x39b/0x740 [ 923.128770][T10481] ? __pfx_cgroup_file_write+0x10/0x10 [ 923.128805][T10481] ? __pfx_cgroup_file_write+0x10/0x10 [ 923.128827][T10481] kernfs_fop_write_iter+0x3b0/0x540 [ 923.128853][T10481] vfs_write+0x5d5/0xb40 [ 923.128876][T10481] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 923.128898][T10481] ? __pfx_vfs_write+0x10/0x10 [ 923.128915][T10481] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 923.128942][T10481] ? mutex_lock_nested+0x154/0x1d0 [ 923.128961][T10481] ? fdget_pos+0x253/0x320 [ 923.128990][T10481] ksys_write+0x14b/0x260 [ 923.129011][T10481] ? __pfx_ksys_write+0x10/0x10 [ 923.129034][T10481] ? do_syscall_64+0xbe/0x3b0 [ 923.129053][T10481] do_syscall_64+0xfa/0x3b0 [ 923.129067][T10481] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.129091][T10481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.129107][T10481] ? clear_bhb_loop+0x60/0xb0 [ 923.129126][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.129142][T10481] RIP: 0033:0x7f644c5eeec9 [ 923.129154][T10481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.129168][T10481] RSP: 002b:00007f644a856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.129184][T10481] RAX: ffffffffffffffda RBX: 00007f644c845fa0 RCX: 00007f644c5eeec9 [ 923.129195][T10481] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 923.129205][T10481] RBP: 00007f644c671f91 R08: 0000000000000000 R09: 0000000000000000 [ 923.129215][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.129225][T10481] R13: 00007f644c846038 R14: 00007f644c845fa0 R15: 00007fff2e19e508 [ 923.129249][T10481] [ 923.129566][T10481] Kernel Offset: disabled