last executing test programs: 23m7.797587165s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 23m7.659180031s ago: executing program 2 (id=10): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4404c880) 23m7.532245733s ago: executing program 2 (id=11): r0 = mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff7f0000000000000d00080095"], &(0x7f00000000c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) mq_timedreceive(r0, 0x0, 0x0, 0x9fb, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 23m6.426424668s ago: executing program 2 (id=13): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 23m4.972117157s ago: executing program 2 (id=15): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f000040c000/0x2000)=nil, 0xc, 0x0, 0x0, 0xc2ff, 0xa22383e66e8ea5f2, 0x0, 0x24, 0x76}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x6c4840, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0003}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0003, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_collapse_huge_page_isolate\x00', r4}, 0x18) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 23m3.426558219s ago: executing program 2 (id=18): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8010002b) 22m48.201979317s ago: executing program 32 (id=18): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8010002b) 17m25.878634652s ago: executing program 1 (id=625): sched_setscheduler(0x0, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, 0x0) 17m25.690864239s ago: executing program 1 (id=628): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getdents64(r0, &(0x7f0000000480)=""/243, 0xf3) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d9, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) connect$unix(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, &(0x7f00000001c0)=0x5, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 17m24.207715513s ago: executing program 1 (id=632): socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000084"], 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendto(r2, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r1, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r3], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c9180200090504"], 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040020}, 0x80010) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 17m12.2411169s ago: executing program 1 (id=643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0xf92}, 0x18) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 17m11.159489671s ago: executing program 1 (id=646): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 17m9.380883093s ago: executing program 1 (id=654): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) 16m52.801312663s ago: executing program 33 (id=654): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) 16m12.554798363s ago: executing program 3 (id=745): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x240) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000004540)=""/4120) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="126797b9d2010040de284211000000000001090224000112000000f6dd00000003000080092c000000000005000905810300eeffffff"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000100)={&(0x7f0000000000)="04f3c1c9212b1d62ecab6b3897b44d4a8155bf1f1ff17fff4fab", &(0x7f0000000640)=""/4096, &(0x7f0000000040), &(0x7f0000001bc0)="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", 0x2}, 0x38) syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854e"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 16m8.413205595s ago: executing program 3 (id=757): rseq(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(&(0x7f0000000280), 0x7f, 0x68c02) syz_io_uring_setup(0x462, &(0x7f0000000200)={0x0, 0x86fb, 0x10000, 0x0, 0x4c}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x0, 0xc8) syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x440) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m6.534764976s ago: executing program 3 (id=760): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m6.234147128s ago: executing program 3 (id=763): fsopen(&(0x7f0000000000)='omfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16m4.869980812s ago: executing program 3 (id=765): syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 16m0.016957182s ago: executing program 3 (id=769): socket$inet6(0xa, 0x3, 0x5) syz_io_uring_setup(0x149a, &(0x7f0000000400)={0x0, 0x79af, 0x2000, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r5, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 15m42.983511196s ago: executing program 34 (id=769): socket$inet6(0xa, 0x3, 0x5) syz_io_uring_setup(0x149a, &(0x7f0000000400)={0x0, 0x79af, 0x2000, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r5, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 7m42.616304489s ago: executing program 5 (id=1434): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000280)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0xff, @private2, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xf8, 0x0, @void}}}}}}}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80800) 7m41.256416467s ago: executing program 5 (id=1436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x48, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)=0x400) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000580)=""/190, 0xbe) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000240)=0x7fffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0x10000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x13, 0xffffffffffffff09, @local}, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x4}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 7m39.410271215s ago: executing program 5 (id=1437): getpid() socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000022"], 0x50) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) listen(r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 7m36.375419783s ago: executing program 5 (id=1440): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 7m33.447777489s ago: executing program 5 (id=1444): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffff9c, 0x0, 0x100, 0x4, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xef7, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @empty, 0xbff}, @ib={0x1b, 0xf, 0xffa, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x8008, 0x0) 7m31.688265744s ago: executing program 5 (id=1447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x3, 0x17e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000440], 0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x1f6) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdc5, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a, 0x1, {0x10000, 0x6, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0xcc, 0x0, 0xfffd}}}]]}, {0x4, 0x6, "f750c3e5774b6c1e8344b810753a09b0da145f8ac1a340fe8f61cd497d4abf590998660bba0dcbf5723e686b5d52b58979c31a0d03010fa7aac3524c0866340e2e00"/81}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x2}}}}]}]}, 0xcc}}, 0x0) 7m16.35406858s ago: executing program 35 (id=1447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x3, 0x17e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000440], 0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x1f6) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdc5, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a, 0x1, {0x10000, 0x6, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0xcc, 0x0, 0xfffd}}}]]}, {0x4, 0x6, "f750c3e5774b6c1e8344b810753a09b0da145f8ac1a340fe8f61cd497d4abf590998660bba0dcbf5723e686b5d52b58979c31a0d03010fa7aac3524c0866340e2e00"/81}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x2}}}}]}]}, 0xcc}}, 0x0) 6m7.709344638s ago: executing program 4 (id=1544): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0x8}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 6m5.733378055s ago: executing program 4 (id=1547): r0 = msgget$private(0x0, 0x1c0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x19, @empty, 0x9}}, 0x0, 0x0, 0x24, 0x0, "fbb3af84d9d7165048514205defffff97f905c1990c91e0323ba5897af26ebf89b6b0412c139cf0b3436d27c8101f3fd8f9ac440ec5a21cbf66c9f22cdf158f9fb3d9f6bbaaea59d8cb4516e1cf9ec21"}, 0xd8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x62, 0x0, 0x7, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x27}}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x22, 0x3, 0x0, &(0x7f0000000180)) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 6m5.24664466s ago: executing program 4 (id=1549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 6m3.844413989s ago: executing program 4 (id=1551): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050", @ANYRES8=r0], 0x3c}}, 0x10) 6m2.494609087s ago: executing program 4 (id=1553): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001"], 0x0}) 5m58.478576129s ago: executing program 4 (id=1557): socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendto(r2, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r1, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r3], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c9180200090504"], 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040020}, 0x80010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 5m43.173852553s ago: executing program 36 (id=1557): socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendto(r2, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r1, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r3], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c9180200090504"], 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040020}, 0x80010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 3.956116944s ago: executing program 7 (id=2246): r0 = open(&(0x7f0000000040)='.\x00', 0x8000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 3.634589117s ago: executing program 7 (id=2248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 3.579814341s ago: executing program 7 (id=2249): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x100, 0xfff, 0x7, 0xfa11, 0xffffffff}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil}, 0x68) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4]) r6 = openat$audio1(0xffffffffffffff9c, 0x0, 0x88200, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f0000000040)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x3, 0x18}, 0xc) socket$netlink(0x10, 0x3, 0x0) 1.434623987s ago: executing program 0 (id=2253): unshare(0x2c020400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000080)=0x9) 1.355762858s ago: executing program 7 (id=2254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000012400)={0x2020}, 0x2020) 1.340180986s ago: executing program 0 (id=2255): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x14) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) openat$kvm(0xffffffffffffff9c, 0x0, 0x321a00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff00", 0x44}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) read(r3, &(0x7f0000000380)=""/122, 0x7a) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x1000000}, {@multicast2}, {@broadcast}, {@dev}, {@private}, {@empty}, {@empty}]}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 1.225260241s ago: executing program 7 (id=2256): recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x8000005, 0x6}) unshare(0x24020400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) syz_open_dev$sndctrl(0x0, 0x80000001, 0x600080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xda8d) accept4$inet(r2, 0x0, 0x0, 0x800) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0xf44f, 0x0, 0x0, 0x34d}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.224694233s ago: executing program 0 (id=2257): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r1, &(0x7f0000001180)=@known='trusted.overlay.redirect\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/25, 0x19, 0x4000000040000) 862.270897ms ago: executing program 0 (id=2258): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r3, r6, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @empty}, 0x10000004, 0x1, 0x1, 0xc9b}}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24048050}, 0x0) 354.349534ms ago: executing program 0 (id=2259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 760.84µs ago: executing program 7 (id=2260): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x4, 0x24b, &(0x7f00000028c0)=ANY=[], 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 0s ago: executing program 0 (id=2261): r0 = memfd_create(&(0x7f00000005c0)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N?\xf3\x95\xd3\xd5\n$\xd11\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\xbe>\x97\x93w\xf4,@R93\xd7D\x17\x1b\xa0\xb5 \x1bkN\x81\x84\xb5\xc4/8&\x98\xed\xe3\x91\xaf\xa1~\x9d\x91\xe1\xab\xf0\xcd\xd5N\x96Ek;\xf1hXq\x1a\xb5\xbf\xf3\xb7\x97\x82j\b\x04\x92`Z\xfc\xa6\xc3\xa7\x1fp\x90\xf6\x8f&rS\x16*Q\xebs\xc1\xbd\xe7\xa2\xd9\x9a\xc61\x10sQ\xf7\xb3;\x05*\xcc+\xeb\xf1\\\xbc\xfe\n\nR\x1d\xe0\xd3\xf4Ax\x94\xdcm\x84\\\xbf\xe6\xce\xca\xe63\xc5s\x97FL \x92R\xa6w\xbc\x93U)P89O\xfb\xdb8\xf29\xbb\x9d\xdb;\xaf\xac2\xd7\xf4\x9c\x16\xb5\xbev\xc6fI\x12\xa2H<\xc6\x8f\"?\xcd`\x03\xaa\xb8\x99\xaa\r\x86\xe92\xe8B\xc2\x93H}\x94\x8d\x8f\xdd\x8e*`\xd8\xb14,9{C\xfb\f\xdd&\x8b\xf8\xe7\x8b\x1e\x97{K|\x83\xe0f?jK\x80j\xa8\x9d', 0x4) ftruncate(r0, 0x80000000ffff) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x800) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x1, 0x5) kernel console output (not intermixed with test programs): [ 1206.868890][ T5876] usb 1-1: device descriptor read/8, error -71 [ 1207.061447][T12480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.106350][ T5876] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1207.138093][ T5876] usb 1-1: device descriptor read/8, error -71 [ 1207.268433][ T5876] usb usb1-port1: unable to enumerate USB device [ 1207.306954][ T1109] hsr_slave_0: left promiscuous mode [ 1207.325788][ T1109] hsr_slave_1: left promiscuous mode [ 1207.326820][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.349336][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.425884][ T1109] hsr_slave_0: left promiscuous mode [ 1207.447499][ T1109] hsr_slave_1: left promiscuous mode [ 1207.449519][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.499718][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.166282][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 1211.976444][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 1212.405925][ T5962] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1212.585624][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 1212.593308][ T5962] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1212.593339][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.593360][ T5962] usb 1-1: Product: syz [ 1212.593375][ T5962] usb 1-1: Manufacturer: syz [ 1212.593390][ T5962] usb 1-1: SerialNumber: syz [ 1212.620755][ T5962] usb 1-1: config 0 descriptor?? [ 1212.644189][ T5962] gspca_main: se401-2.14.0 probing 047d:5003 [ 1212.817197][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 1213.016796][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 1213.040148][ T5962] gspca_se401: Wrong descriptor type [ 1213.242685][ T5962] usb 1-1: USB disconnect, device number 93 [ 1213.773781][T12480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.887961][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.890651][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.962746][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.962919][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.071943][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.186686][ T5884] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1214.348756][ T5884] usb 1-1: device descriptor read/64, error -71 [ 1214.603383][ T5884] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1214.633705][T12599] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1214.745864][ T5884] usb 1-1: device descriptor read/64, error -71 [ 1214.776131][T12599] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1214.857168][T12599] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1214.889502][ T5884] usb usb1-port1: attempt power cycle [ 1214.934062][T12599] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1215.275788][ T5884] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1215.296526][ T5884] usb 1-1: device descriptor read/8, error -71 [ 1215.535673][ T5884] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1215.554126][T12385] veth0_vlan: entered promiscuous mode [ 1215.556636][ T5884] usb 1-1: device descriptor read/8, error -71 [ 1215.613911][T12385] veth1_vlan: entered promiscuous mode [ 1215.703179][ T5884] usb usb1-port1: unable to enumerate USB device [ 1215.905197][T12385] veth0_macvtap: entered promiscuous mode [ 1215.947329][T12480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.127069][T12385] veth1_macvtap: entered promiscuous mode [ 1216.149902][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.252501][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.276494][T12385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.483568][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.484029][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.813468][T12385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.448666][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.448822][ T9408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.725037][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.903603][ T3483] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.908415][ T3483] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.924294][ T3563] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.280938][ T8315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1223.306344][ T8315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1223.308498][ T8315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1223.310361][ T8315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1223.311339][ T8315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1223.492202][T12480] veth0_vlan: entered promiscuous mode [ 1223.547982][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.593344][T12480] veth1_vlan: entered promiscuous mode [ 1223.970263][T12480] veth0_macvtap: entered promiscuous mode [ 1224.069122][T12480] veth1_macvtap: entered promiscuous mode [ 1224.305690][ T5876] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1224.535695][ T5876] usb 8-1: Using ep0 maxpacket: 8 [ 1224.542955][ T5876] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1224.542997][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.543018][ T5876] usb 8-1: Product: syz [ 1224.543032][ T5876] usb 8-1: Manufacturer: syz [ 1224.543046][ T5876] usb 8-1: SerialNumber: syz [ 1224.571823][ T5876] usb 8-1: config 0 descriptor?? [ 1224.604398][ T5876] gspca_main: se401-2.14.0 probing 047d:5003 [ 1224.985409][ T5876] gspca_se401: Wrong descriptor type [ 1225.183477][ T68] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.199613][ T5876] usb 8-1: USB disconnect, device number 18 [ 1225.269258][T12480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.314117][T12480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.437041][ T8315] Bluetooth: hci2: command tx timeout [ 1225.458152][ T68] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.485738][T12797] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1225.542550][ T1425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.558396][ T1425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.580674][ T1425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.603264][ T1425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.635709][T12797] usb 1-1: Using ep0 maxpacket: 32 [ 1225.637780][T12797] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1225.637808][T12797] usb 1-1: config 0 has no interface number 0 [ 1225.641074][T12797] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1225.641105][T12797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.641127][T12797] usb 1-1: Product: syz [ 1225.641137][T12797] usb 1-1: Manufacturer: syz [ 1225.641147][T12797] usb 1-1: SerialNumber: syz [ 1225.645070][T12797] usb 1-1: config 0 descriptor?? [ 1225.707202][T12797] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1225.800097][ T68] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.288213][T12797] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1226.288508][T12797] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1226.321249][T12797] usb 1-1: USB disconnect, device number 98 [ 1226.379656][ T68] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.562057][T12599] veth0_vlan: entered promiscuous mode [ 1226.600065][T12922] chnl_net:caif_netlink_parms(): no params data found [ 1226.803363][T12599] veth1_vlan: entered promiscuous mode [ 1227.415674][ T9455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1227.426303][ T9455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1227.427640][ T9455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1227.428913][ T9455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1227.429772][ T9455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1227.465270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.517073][ T9455] Bluetooth: hci2: command tx timeout [ 1229.024306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.178200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.259702][T12922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.259929][T12922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.260161][T12922] bridge_slave_0: entered allmulticast mode [ 1229.263107][T12922] bridge_slave_0: entered promiscuous mode [ 1229.353540][T12922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.353912][T12922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.354116][T12922] bridge_slave_1: entered allmulticast mode [ 1229.411787][T12922] bridge_slave_1: entered promiscuous mode [ 1229.445805][ T9455] Bluetooth: hci0: command tx timeout [ 1229.523406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.635791][ T9455] Bluetooth: hci2: command tx timeout [ 1229.727227][ T68] bridge_slave_1: left allmulticast mode [ 1229.727258][ T68] bridge_slave_1: left promiscuous mode [ 1229.727531][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.826885][ T68] bridge_slave_0: left allmulticast mode [ 1229.826908][ T68] bridge_slave_0: left promiscuous mode [ 1229.827085][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.045647][T12200] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1230.206947][T12200] usb 1-1: Using ep0 maxpacket: 8 [ 1230.232687][T12200] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1230.232726][T12200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.232747][T12200] usb 1-1: Product: syz [ 1230.232762][T12200] usb 1-1: Manufacturer: syz [ 1230.232777][T12200] usb 1-1: SerialNumber: syz [ 1230.278299][T12200] usb 1-1: config 0 descriptor?? [ 1230.299185][T12200] gspca_main: se401-2.14.0 probing 047d:5003 [ 1230.474977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1230.707406][T12200] gspca_se401: Wrong descriptor type [ 1230.905715][ T5884] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1230.916367][ T5876] usb 1-1: USB disconnect, device number 99 [ 1230.985801][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.075708][ T5884] usb 8-1: Using ep0 maxpacket: 32 [ 1231.078145][ T5884] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1231.078174][ T5884] usb 8-1: config 0 has no interface number 0 [ 1231.081210][ T5884] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1231.081235][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.081249][ T5884] usb 8-1: Product: syz [ 1231.081260][ T5884] usb 8-1: Manufacturer: syz [ 1231.081271][ T5884] usb 8-1: SerialNumber: syz [ 1231.087934][ T5884] usb 8-1: config 0 descriptor?? [ 1231.152906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.158980][ T5884] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1231.219720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.518193][ T9455] Bluetooth: hci0: command tx timeout [ 1231.572472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.639078][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.696585][ T9455] Bluetooth: hci2: command tx timeout [ 1231.730945][ T5884] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1231.784541][ T5884] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1231.924200][ T5898] usb 8-1: USB disconnect, device number 19 [ 1231.930266][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 1231.930339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1231.937881][ T5898] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1232.003764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.027065][ T5898] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1232.028104][ T5898] quatech2 8-1:0.51: device disconnected [ 1232.421199][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.475407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.617620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.116182][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.233808][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.269093][T13032] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1729'. [ 1233.320047][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.467410][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.526851][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.595614][ T9455] Bluetooth: hci0: command tx timeout [ 1233.672743][ T68] bond0 (unregistering): Released all slaves [ 1233.884093][T12922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.940920][T12922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.336567][ C0] vkms_vblank_simulate: vblank timer overrun [ 1234.385452][T13046] fuse: Bad value for 'user_id' [ 1234.385466][T13046] fuse: Bad value for 'user_id' [ 1234.446677][T12922] team0: Port device team_slave_0 added [ 1234.928516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.675724][ T9455] Bluetooth: hci0: command tx timeout [ 1236.518129][ T68] hsr_slave_0: left promiscuous mode [ 1238.025648][ T68] hsr_slave_1: left promiscuous mode [ 1238.031419][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.031442][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.056717][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.056746][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.184794][ T68] veth1_macvtap: left promiscuous mode [ 1238.184920][ T68] veth0_macvtap: left promiscuous mode [ 1238.185212][ T68] veth1_vlan: left promiscuous mode [ 1238.191488][ T68] veth0_vlan: left promiscuous mode [ 1238.277672][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1739'. [ 1240.196399][T13071] fuse: Bad value for 'user_id' [ 1240.196421][T13071] fuse: Bad value for 'user_id' [ 1241.038114][T13080] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1744'. [ 1241.038145][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1744'. [ 1241.905781][T12200] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1242.082592][T12200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.082638][T12200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.082664][T12200] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1242.082704][T12200] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1242.082721][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.107244][T12200] usb 1-1: config 0 descriptor?? [ 1242.321202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.438349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.517175][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.543728][T12200] usbhid 1-1:0.0: can't add hid device: -71 [ 1242.543871][T12200] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1242.585465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.590207][T12200] usb 1-1: USB disconnect, device number 100 [ 1242.661375][ T5884] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1242.769106][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.818673][ T5884] usb 8-1: Using ep0 maxpacket: 8 [ 1242.851223][ T5884] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1242.851248][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.851261][ T5884] usb 8-1: Product: syz [ 1242.851271][ T5884] usb 8-1: Manufacturer: syz [ 1242.851281][ T5884] usb 8-1: SerialNumber: syz [ 1242.858922][ T5884] usb 8-1: config 0 descriptor?? [ 1242.899553][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 1243.289765][ T5884] gspca_se401: Wrong descriptor type [ 1243.452881][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.523024][ T5898] usb 8-1: USB disconnect, device number 20 [ 1243.587322][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.692749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.722222][T13096] fuse: Bad value for 'fd' [ 1243.826402][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1243.868849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.088627][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.370571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.409469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.507127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.325019][ T8315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1245.343727][T13116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1245.345020][T13116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1245.352110][T13116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1245.355491][T13116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1245.397916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.706498][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1245.810617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.856031][T13127] fuse: Bad value for 'fd' [ 1246.429625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.637961][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.704071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.715653][ T5884] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1246.776848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.867405][ T5884] usb 8-1: Using ep0 maxpacket: 32 [ 1246.873481][ T5884] usb 8-1: config index 0 descriptor too short (expected 255, got 27) [ 1246.873511][ T5884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.873530][ T5884] usb 8-1: config 0 has no interfaces? [ 1246.919219][ T5884] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1246.919250][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.919280][ T5884] usb 8-1: Product: syz [ 1246.919295][ T5884] usb 8-1: Manufacturer: syz [ 1246.919309][ T5884] usb 8-1: SerialNumber: syz [ 1246.957233][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.962890][ T5884] usb 8-1: config 0 descriptor?? [ 1247.074511][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.141291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.207466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.232463][T13147] fuse: Bad value for 'fd' [ 1247.298732][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.352284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.416629][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.435748][T13116] Bluetooth: hci3: command tx timeout [ 1247.470885][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.649685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.924197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.978747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.129426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.393905][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.454386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.676216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.842953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.959572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.057848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.224460][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.322476][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.428879][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.485698][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.515649][T13116] Bluetooth: hci3: command tx timeout [ 1249.516377][ T5898] usb 8-1: USB disconnect, device number 21 [ 1249.662868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.900487][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.255241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.737737][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.978916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.083658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.244925][T12922] team0: Port device team_slave_1 added [ 1251.305695][ T5876] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1251.485327][ T5876] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1251.485358][ T5876] usb 1-1: config 0 has no interface number 0 [ 1251.485411][ T5876] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1251.509797][ T5876] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1251.509829][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.509851][ T5876] usb 1-1: Product: syz [ 1251.509866][ T5876] usb 1-1: Manufacturer: syz [ 1251.509881][ T5876] usb 1-1: SerialNumber: syz [ 1251.577647][ T5876] usb 1-1: config 0 descriptor?? [ 1251.787314][T13116] Bluetooth: hci3: command tx timeout [ 1251.836965][T12922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.836993][T12922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.837019][T12922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.844956][T12922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.844985][T12922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.845010][T12922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.837350][ T5876] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1252.837628][ T5876] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1252.912859][ T5876] usb 1-1: USB disconnect, device number 101 [ 1253.875897][ T9455] Bluetooth: hci3: command tx timeout [ 1254.067359][T12922] hsr_slave_0: entered promiscuous mode [ 1254.068911][T12922] hsr_slave_1: entered promiscuous mode [ 1254.069992][T12922] debugfs: 'hsr0' already exists in 'hsr' [ 1254.070019][T12922] Cannot create hsr debugfs directory [ 1254.405647][ T5962] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1254.705640][ T5962] usb 8-1: Using ep0 maxpacket: 16 [ 1254.708429][ T5962] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1254.708461][ T5962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.714294][ T5962] usb 8-1: config 0 descriptor?? [ 1254.749711][ T5962] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1254.990829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.024023][T12975] chnl_net:caif_netlink_parms(): no params data found [ 1255.089891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.516266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.618643][ T5962] gspca_sonixj: reg_r err -32 [ 1255.618740][ T5962] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 1255.906578][ C0] vkms_vblank_simulate: vblank timer overrun [ 1256.316296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1256.680726][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.681029][T12975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.681282][T12975] bridge_slave_0: entered allmulticast mode [ 1256.684198][T12975] bridge_slave_0: entered promiscuous mode [ 1256.742699][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.742880][T12975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.743130][T12975] bridge_slave_1: entered allmulticast mode [ 1256.768324][T12975] bridge_slave_1: entered promiscuous mode [ 1256.969340][ T5898] usb 8-1: USB disconnect, device number 22 [ 1256.978964][ C0] vkms_vblank_simulate: vblank timer overrun [ 1257.595868][ T5898] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1257.654993][ C0] vkms_vblank_simulate: vblank timer overrun [ 1257.758197][ T5898] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.758226][ T5898] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1257.758263][ T5898] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1257.758288][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.804506][ T5898] usb 8-1: config 0 descriptor?? [ 1257.975740][ T5884] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1258.112040][T12975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.125693][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 1258.134143][ T5884] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1258.134173][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.134193][ T5884] usb 1-1: config 0 has no interface number 0 [ 1258.134227][ T5884] usb 1-1: config 0 interface 172 has no altsetting 0 [ 1258.163254][T12975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.202311][ T5884] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1258.202342][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.202365][ T5884] usb 1-1: Product: syz [ 1258.202380][ T5884] usb 1-1: Manufacturer: syz [ 1258.202395][ T5884] usb 1-1: SerialNumber: syz [ 1258.219010][ T5884] usb 1-1: config 0 descriptor?? [ 1258.262189][ T5884] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1259.044382][T12975] team0: Port device team_slave_0 added [ 1259.060045][T13114] chnl_net:caif_netlink_parms(): no params data found [ 1259.076520][ T5884] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 1259.101764][T12975] team0: Port device team_slave_1 added [ 1259.270800][ T5898] usb 1-1: USB disconnect, device number 102 [ 1259.282280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.985165][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.047829][T12975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.047844][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.047864][T12975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.074807][T12975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.074830][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.074864][T12975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.169474][ T5897] usb 8-1: USB disconnect, device number 23 [ 1261.314142][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.535899][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.620531][T13114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.620766][T13114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.621019][T13114] bridge_slave_0: entered allmulticast mode [ 1262.641773][T13114] bridge_slave_0: entered promiscuous mode [ 1262.943151][T13114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.943867][T13114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.944122][T13114] bridge_slave_1: entered allmulticast mode [ 1262.974924][T13114] bridge_slave_1: entered promiscuous mode [ 1262.995651][ T5898] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1263.007608][T12975] hsr_slave_0: entered promiscuous mode [ 1263.009493][T12975] hsr_slave_1: entered promiscuous mode [ 1263.010651][T12975] debugfs: 'hsr0' already exists in 'hsr' [ 1263.010682][T12975] Cannot create hsr debugfs directory [ 1263.325765][ T5898] usb 8-1: Using ep0 maxpacket: 16 [ 1263.328231][ T5898] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1263.328261][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.337625][ T5898] usb 8-1: config 0 descriptor?? [ 1263.355311][ T5898] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1263.879291][T13114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.020886][T13114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.195692][ T5884] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1264.230226][ T5898] gspca_sonixj: reg_r err -32 [ 1264.230320][ T5898] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 1264.345983][T13114] team0: Port device team_slave_0 added [ 1264.352121][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.352150][ T5884] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1264.352190][ T5884] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1264.352216][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.363126][ T5884] usb 1-1: config 0 descriptor?? [ 1264.428214][T12922] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1264.463887][T13114] team0: Port device team_slave_1 added [ 1264.479204][T12922] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1264.624889][T12922] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1264.917576][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.955865][ T5884] usb 1-1: USB disconnect, device number 103 [ 1265.011989][T12922] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1265.047378][T13114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.047399][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.047436][T13114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.193470][T13114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.193485][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.193509][T13114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.569585][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.697711][ T5884] usb 8-1: USB disconnect, device number 24 [ 1267.544195][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.815779][ T5898] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1268.892670][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.892699][ T5898] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1268.892735][ T5898] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1268.892759][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.947811][ T5898] usb 1-1: config 0 descriptor?? [ 1269.942919][ T5876] usb 1-1: USB disconnect, device number 104 [ 1270.056530][T13114] hsr_slave_0: entered promiscuous mode [ 1270.058880][T13114] hsr_slave_1: entered promiscuous mode [ 1270.059971][T13114] debugfs: 'hsr0' already exists in 'hsr' [ 1270.059997][T13114] Cannot create hsr debugfs directory [ 1270.422393][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.645760][ T5898] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1270.828971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1270.845638][ T5898] usb 8-1: Using ep0 maxpacket: 16 [ 1270.848401][ T5898] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1270.848432][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.854340][ T5898] usb 8-1: config 0 descriptor?? [ 1270.888162][ T5898] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1271.717855][ T68] bridge_slave_1: left allmulticast mode [ 1271.717887][ T68] bridge_slave_1: left promiscuous mode [ 1271.718156][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.810672][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.029578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.289814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.304549][ T68] bridge_slave_0: left allmulticast mode [ 1272.304578][ T68] bridge_slave_0: left promiscuous mode [ 1272.304832][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.489312][ T68] bridge_slave_1: left allmulticast mode [ 1272.489336][ T68] bridge_slave_1: left promiscuous mode [ 1272.489525][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.767912][ T68] bridge_slave_0: left allmulticast mode [ 1272.767946][ T68] bridge_slave_0: left promiscuous mode [ 1272.768205][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.364698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.433548][ T5884] usb 8-1: USB disconnect, device number 25 [ 1274.312856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.586183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.873295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.017950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.093479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.384708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.582227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.842433][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.987089][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.938008][T12200] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1279.949820][T13116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1279.963640][T13116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1279.965092][T13116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1279.973552][T13116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1279.974551][T13116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1280.145734][T12200] usb 8-1: Using ep0 maxpacket: 16 [ 1280.148419][T12200] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1280.148448][T12200] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.154440][T12200] usb 8-1: config 0 descriptor?? [ 1280.161954][T12200] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1282.001959][ T9455] Bluetooth: hci4: command tx timeout [ 1282.656433][ T5897] usb 8-1: USB disconnect, device number 26 [ 1282.757413][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.196786][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.242398][ T68] bond0 (unregistering): Released all slaves [ 1284.019967][T13450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1852'. [ 1284.082119][ T9455] Bluetooth: hci4: command tx timeout [ 1286.158345][ T9455] Bluetooth: hci4: command tx timeout [ 1288.239737][ T9455] Bluetooth: hci4: command tx timeout [ 1289.608549][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1289.668234][T13116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1289.675440][T13116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1289.701565][T13116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1289.714435][T13116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1289.715448][T13116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1289.756772][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.995925][ T68] bond0 (unregistering): Released all slaves [ 1291.051451][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.176394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.364497][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.457159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.755825][T13116] Bluetooth: hci5: command tx timeout [ 1292.346463][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1858'. [ 1293.654693][ T68] hsr_slave_0: left promiscuous mode [ 1293.835793][T13116] Bluetooth: hci5: command tx timeout [ 1294.094667][ T68] hsr_slave_1: left promiscuous mode [ 1294.095437][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.153135][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.183113][T13477] fuse: Invalid rootmode [ 1295.638416][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.885786][ T68] hsr_slave_0: left promiscuous mode [ 1295.915596][T13116] Bluetooth: hci5: command tx timeout [ 1295.915779][ T68] hsr_slave_1: left promiscuous mode [ 1295.916575][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.916595][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.841629][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.841659][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.858635][T13493] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1864'. [ 1297.022570][ T68] veth1_vlan: left promiscuous mode [ 1297.022704][ T68] veth0_vlan: left promiscuous mode [ 1297.047032][ T68] veth1_macvtap: left promiscuous mode [ 1297.047109][ T68] veth0_macvtap: left promiscuous mode [ 1297.047292][ T68] veth1_vlan: left promiscuous mode [ 1297.047415][ T68] veth0_vlan: left promiscuous mode [ 1297.175679][ T5884] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1297.325668][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 1297.331420][ T5884] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1297.331448][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.331468][ T5884] usb 1-1: config 0 has no interface number 0 [ 1297.331516][ T5884] usb 1-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1297.335301][ T5884] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1297.335331][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.335353][ T5884] usb 1-1: Product: syz [ 1297.335368][ T5884] usb 1-1: Manufacturer: syz [ 1297.335383][ T5884] usb 1-1: SerialNumber: syz [ 1297.413987][ T5884] usb 1-1: config 0 descriptor?? [ 1297.650082][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1297.663938][ T5884] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1297.664461][ T5884] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1297.664554][ T5884] gspca_pac7302 1-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 1297.745670][ T5884] usb 1-1: USB disconnect, device number 105 [ 1298.001061][T13116] Bluetooth: hci5: command tx timeout [ 1299.516718][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1299.776369][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1304.646569][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1304.896421][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1305.522143][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.540720][ T9455] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1305.544370][ T9455] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1305.569582][ T9455] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1305.639459][ T9455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1305.640206][ T9455] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1307.675743][T13116] Bluetooth: hci2: command tx timeout [ 1307.961913][T13511] fuse: Unknown parameter '00000000000000000000' [ 1309.779548][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.782605][T13116] Bluetooth: hci2: command tx timeout [ 1309.871029][T13405] chnl_net:caif_netlink_parms(): no params data found [ 1310.020901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.150819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.384295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.449551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.569555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.842206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1311.835712][T13116] Bluetooth: hci2: command tx timeout [ 1313.915673][T13116] Bluetooth: hci2: command tx timeout [ 1314.425192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.498082][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.822800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1314.975288][ T5898] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1315.361393][ T5898] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1315.361438][ T5898] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1315.361482][ T5898] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1315.361507][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.408124][T13573] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1315.414705][ T5898] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1315.488122][ C0] vkms_vblank_simulate: vblank timer overrun [ 1315.739090][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.757574][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.789414][ C0] vkms_vblank_simulate: vblank timer overrun [ 1315.863045][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.060561][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.109498][T13458] chnl_net:caif_netlink_parms(): no params data found [ 1316.263215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.398871][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.502653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.506597][ T5897] usb 8-1: USB disconnect, device number 27 [ 1317.806310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.885831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.003592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.024023][T13504] chnl_net:caif_netlink_parms(): no params data found [ 1318.047546][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.047697][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.048010][T13405] bridge_slave_0: entered allmulticast mode [ 1318.051206][T13405] bridge_slave_0: entered promiscuous mode [ 1318.171493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.211055][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.211218][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.211475][T13405] bridge_slave_1: entered allmulticast mode [ 1318.214564][T13405] bridge_slave_1: entered promiscuous mode [ 1319.130011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.204661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.257578][T13458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.257858][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.258133][T13458] bridge_slave_0: entered allmulticast mode [ 1319.264993][T13458] bridge_slave_0: entered promiscuous mode [ 1319.905928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.976235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.362398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.672584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1320.723960][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.375942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.384804][T13458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.384965][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.385221][T13458] bridge_slave_1: entered allmulticast mode [ 1321.388534][T13458] bridge_slave_1: entered promiscuous mode [ 1321.430025][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.616489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.787878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.939035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.086258][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.564349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.075789][ T9456] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1323.145913][ T5897] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1323.180498][T13458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.184340][T13405] team0: Port device team_slave_0 added [ 1323.185836][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.186499][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.186752][T13504] bridge_slave_0: entered allmulticast mode [ 1323.190008][T13504] bridge_slave_0: entered promiscuous mode [ 1323.199483][T13458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.210534][T13405] team0: Port device team_slave_1 added [ 1323.211602][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.211780][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.212006][T13504] bridge_slave_1: entered allmulticast mode [ 1323.215179][T13504] bridge_slave_1: entered promiscuous mode [ 1323.233964][ T9456] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1323.234007][ T9456] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1323.234053][ T9456] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1323.234081][ T9456] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.251239][T13636] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1323.289461][ T9456] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1323.339209][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 1323.347180][ T5897] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1323.347207][ T5897] usb 1-1: config 0 has no interface number 0 [ 1323.347256][ T5897] usb 1-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1323.367915][ T5897] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1323.367945][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.367966][ T5897] usb 1-1: Product: syz [ 1323.367981][ T5897] usb 1-1: Manufacturer: syz [ 1323.367995][ T5897] usb 1-1: SerialNumber: syz [ 1323.427874][ T5897] usb 1-1: config 0 descriptor?? [ 1323.447931][ T5897] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1323.523501][T13636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.527755][T13636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.130457][T13458] team0: Port device team_slave_0 added [ 1324.132818][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.132837][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.132868][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.191998][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.253911][ T5897] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 1324.429516][T13458] team0: Port device team_slave_1 added [ 1324.458425][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.461093][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.461131][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.501307][ T5884] usb 1-1: USB disconnect, device number 106 [ 1324.531325][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.588983][T13458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.589003][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.589030][T13458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.607887][T13504] team0: Port device team_slave_0 added [ 1326.101320][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.261001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.358014][ T5884] usb 8-1: USB disconnect, device number 28 [ 1326.648314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.703222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1326.703849][T13458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.703876][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.703908][T13458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.778610][T13504] team0: Port device team_slave_1 added [ 1327.076290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.460308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.597209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.764337][T13405] hsr_slave_0: entered promiscuous mode [ 1327.776206][T13405] hsr_slave_1: entered promiscuous mode [ 1327.777292][T13405] debugfs: 'hsr0' already exists in 'hsr' [ 1327.777318][T13405] Cannot create hsr debugfs directory [ 1328.253573][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.253592][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.253619][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.546865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.968294][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.968314][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.968345][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.839243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.964934][T13458] hsr_slave_0: entered promiscuous mode [ 1331.047906][T13458] hsr_slave_1: entered promiscuous mode [ 1331.048937][T13458] debugfs: 'hsr0' already exists in 'hsr' [ 1331.048963][T13458] Cannot create hsr debugfs directory [ 1333.131741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.465991][T13716] fuse: Unknown parameter 'user00000000000000000000' [ 1334.563578][T13504] hsr_slave_0: entered promiscuous mode [ 1334.568515][T13504] hsr_slave_1: entered promiscuous mode [ 1334.573394][T13504] debugfs: 'hsr0' already exists in 'hsr' [ 1334.573424][T13504] Cannot create hsr debugfs directory [ 1335.755701][ T5897] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1336.108572][ T5897] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1336.108610][ T5897] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1336.108652][ T5897] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1336.108676][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.132226][T13724] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1336.187276][ T5897] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1336.599811][T13724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.600809][T13724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.868723][ T68] bridge_slave_1: left allmulticast mode [ 1336.868757][ T68] bridge_slave_1: left promiscuous mode [ 1336.869036][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.948262][ T68] bridge_slave_0: left allmulticast mode [ 1336.948295][ T68] bridge_slave_0: left promiscuous mode [ 1336.955679][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.997505][ T5897] usb 8-1: USB disconnect, device number 29 [ 1337.063245][ T68] bridge_slave_1: left allmulticast mode [ 1337.063276][ T68] bridge_slave_1: left promiscuous mode [ 1337.076497][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.127586][T13744] fuse: Unknown parameter 'user00000000000000000000' [ 1337.149857][ T68] bridge_slave_0: left allmulticast mode [ 1337.149891][ T68] bridge_slave_0: left promiscuous mode [ 1337.150147][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.213914][ T68] bridge_slave_1: left allmulticast mode [ 1337.213943][ T68] bridge_slave_1: left promiscuous mode [ 1337.214204][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.577379][ T68] bridge_slave_0: left allmulticast mode [ 1337.577411][ T68] bridge_slave_0: left promiscuous mode [ 1337.577652][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.645701][T12797] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1339.706478][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.715618][ T5898] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1339.797041][ T9455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1339.800371][ T9455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1339.804117][ T9455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1339.805330][ T9455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1339.810111][T12797] usb 1-1: Using ep0 maxpacket: 16 [ 1339.817504][ T9455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1339.837123][T12797] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1339.837154][T12797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.865658][ T5898] usb 8-1: Using ep0 maxpacket: 16 [ 1339.868422][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.868476][ T5898] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1339.868504][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.879072][ T5898] usb 8-1: config 0 descriptor?? [ 1339.913341][T12797] usb 1-1: config 0 descriptor?? [ 1339.930028][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.934482][T12797] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1340.019367][ T68] bond0 (unregistering): Released all slaves [ 1340.344555][ T5898] mcp2200 0003:04D8:00DF.0008: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.7-1/input0 [ 1340.421305][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.539951][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.623842][ T68] bond0 (unregistering): Released all slaves [ 1340.772540][ T5898] usb 8-1: USB disconnect, device number 30 [ 1341.301334][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.326616][ T5898] usb 1-1: USB disconnect, device number 107 [ 1342.034147][ T9455] Bluetooth: hci0: command tx timeout [ 1342.758751][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.798977][T13771] fuse: Unknown parameter 'user00000000000000000000' [ 1343.068754][ T68] bond0 (unregistering): Released all slaves [ 1344.316625][T13116] Bluetooth: hci0: command tx timeout [ 1345.457117][T13796] fuse: Unknown parameter 'user_i00000000000000000000' [ 1345.468463][ T5897] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1345.605603][ T5897] usb 8-1: device descriptor read/64, error -71 [ 1346.083997][ T5897] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1346.215629][ T5897] usb 8-1: device descriptor read/64, error -71 [ 1346.326238][ T5897] usb usb8-port1: attempt power cycle [ 1346.399718][T13116] Bluetooth: hci0: command tx timeout [ 1346.485339][ T68] hsr_slave_0: left promiscuous mode [ 1346.665616][ T5897] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1346.686338][ T5897] usb 8-1: device descriptor read/8, error -71 [ 1346.799360][ T68] hsr_slave_1: left promiscuous mode [ 1346.800364][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.868518][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.925604][ T5897] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1346.946343][ T5897] usb 8-1: device descriptor read/8, error -71 [ 1347.056141][ T5897] usb usb8-port1: unable to enumerate USB device [ 1347.336801][ T68] hsr_slave_0: left promiscuous mode [ 1347.586070][ T68] hsr_slave_1: left promiscuous mode [ 1347.587052][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.650139][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.898438][T13845] fuse: Unknown parameter 'user_i00000000000000000000' [ 1348.845022][T13116] Bluetooth: hci0: command tx timeout [ 1348.980057][ T68] hsr_slave_0: left promiscuous mode [ 1349.107272][ T68] hsr_slave_1: left promiscuous mode [ 1349.108710][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.146460][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.911623][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1350.116562][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1351.854569][ T9455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1351.877430][ T9455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1351.880248][ T9455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1351.932165][ T9455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1351.934583][ T9455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1352.847649][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1353.288008][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1354.145634][ T9455] Bluetooth: hci3: command tx timeout [ 1354.509315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.575370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.651710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.711404][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.808364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.869541][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.917505][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1354.967315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.025026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.066451][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1355.115723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.169816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.235220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.280213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.359251][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.411324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.485945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.686382][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.738086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.943021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.204665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.204740][ T9455] Bluetooth: hci3: command tx timeout [ 1357.447554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.018227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.140643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.249548][ T9455] Bluetooth: hci3: command tx timeout [ 1358.436816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.745085][T13504] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1359.057445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.209491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.400640][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1979'. [ 1359.429608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.463137][T13504] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1360.226260][T13504] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1360.319890][ T9455] Bluetooth: hci3: command tx timeout [ 1360.398160][T13504] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1360.836125][T13760] chnl_net:caif_netlink_parms(): no params data found [ 1361.887872][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1982'. [ 1364.835853][ T5962] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1365.008164][ T5962] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1365.008203][ T5962] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1365.008245][ T5962] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1365.008269][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.019377][T13954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1365.044931][ T5962] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1366.954943][T12797] usb 1-1: USB disconnect, device number 108 [ 1366.966324][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.854636][T13116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1367.868829][T13116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1367.870559][T13116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1367.875040][T13116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1367.878479][T13116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1368.338972][T13760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.345723][T13760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.345990][T13760] bridge_slave_0: entered allmulticast mode [ 1368.349730][T13760] bridge_slave_0: entered promiscuous mode [ 1369.935630][ T9455] Bluetooth: hci4: command tx timeout [ 1371.409623][T13760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.409764][T13760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.410020][T13760] bridge_slave_1: entered allmulticast mode [ 1371.442213][T13760] bridge_slave_1: entered promiscuous mode [ 1372.410774][ T9455] Bluetooth: hci4: command tx timeout [ 1372.875589][ T5897] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1372.944932][T13856] chnl_net:caif_netlink_parms(): no params data found [ 1373.002117][T13760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.029448][T13760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.065567][ T5897] usb 8-1: device descriptor read/64, error -71 [ 1373.335631][ T5897] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1373.465601][ T5897] usb 8-1: device descriptor read/64, error -71 [ 1373.480530][T13760] team0: Port device team_slave_0 added [ 1373.499467][T13760] team0: Port device team_slave_1 added [ 1373.575918][ T5897] usb usb8-port1: attempt power cycle [ 1374.045656][ T5897] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1374.066571][ T5897] usb 8-1: device descriptor read/8, error -71 [ 1374.189321][T13760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.189341][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.189373][T13760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.475786][ T9455] Bluetooth: hci4: command tx timeout [ 1374.753258][ T5897] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1374.925981][ T5897] usb 8-1: device descriptor read/8, error -71 [ 1375.233616][ T5897] usb usb8-port1: unable to enumerate USB device [ 1375.418948][T13760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.418966][T13760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.418999][T13760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.420982][T13856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.421134][T13856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.421359][T13856] bridge_slave_0: entered allmulticast mode [ 1375.427065][T13856] bridge_slave_0: entered promiscuous mode [ 1375.473446][T13856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.473685][T13856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.473989][T13856] bridge_slave_1: entered allmulticast mode [ 1375.491488][T13856] bridge_slave_1: entered promiscuous mode [ 1376.479245][T13856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.565852][ T9455] Bluetooth: hci4: command tx timeout [ 1377.061106][T13856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1377.071024][T13760] hsr_slave_0: entered promiscuous mode [ 1377.072515][T13760] hsr_slave_1: entered promiscuous mode [ 1377.073560][T13760] debugfs: 'hsr0' already exists in 'hsr' [ 1377.073585][T13760] Cannot create hsr debugfs directory [ 1378.898700][T13856] team0: Port device team_slave_0 added [ 1380.959635][T13856] team0: Port device team_slave_1 added [ 1383.305551][T14101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 1383.390791][ T5856] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1383.805623][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 1383.808019][ T5856] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1383.808052][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.812649][ T5856] usb 1-1: config 0 descriptor?? [ 1383.847694][ T5856] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1384.616758][T13856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.616773][T13856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.616794][T13856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.802583][T13856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.802601][T13856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.802633][T13856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.319120][T13976] chnl_net:caif_netlink_parms(): no params data found [ 1385.391125][T12797] usb 1-1: USB disconnect, device number 109 [ 1386.716632][T13856] hsr_slave_0: entered promiscuous mode [ 1386.719296][T13856] hsr_slave_1: entered promiscuous mode [ 1386.720366][T13856] debugfs: 'hsr0' already exists in 'hsr' [ 1386.720394][T13856] Cannot create hsr debugfs directory [ 1388.170973][T14139] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 1388.675670][ T5897] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1388.828079][ T5897] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1388.828117][ T5897] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1388.828157][ T5897] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1388.828181][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.835086][T14138] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1388.859562][ T5897] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1389.054147][T14138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.054782][T14138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.267075][ T5897] usb 1-1: USB disconnect, device number 110 [ 1390.803219][T13976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.810719][T13976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.819909][T13976] bridge_slave_0: entered allmulticast mode [ 1391.401104][T13976] bridge_slave_0: entered promiscuous mode [ 1391.543252][T13976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.543391][T13976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.543973][T13976] bridge_slave_1: entered allmulticast mode [ 1391.576346][T13976] bridge_slave_1: entered promiscuous mode [ 1392.685590][T13976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.749621][T13976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.280789][T13760] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1393.327759][T13976] team0: Port device team_slave_0 added [ 1393.329431][ T68] bridge_slave_1: left allmulticast mode [ 1393.329457][ T68] bridge_slave_1: left promiscuous mode [ 1393.329661][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.413587][ T68] bridge_slave_0: left allmulticast mode [ 1393.413621][ T68] bridge_slave_0: left promiscuous mode [ 1393.425772][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.482657][ T68] bridge_slave_1: left allmulticast mode [ 1393.482690][ T68] bridge_slave_1: left promiscuous mode [ 1393.482941][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.587229][ T68] bridge_slave_0: left allmulticast mode [ 1393.587261][ T68] bridge_slave_0: left promiscuous mode [ 1393.587526][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.699802][ T68] bridge_slave_1: left allmulticast mode [ 1393.699833][ T68] bridge_slave_1: left promiscuous mode [ 1393.700077][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.187203][ T68] bridge_slave_0: left allmulticast mode [ 1394.187236][ T68] bridge_slave_0: left promiscuous mode [ 1394.187507][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.986367][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.074649][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.474625][ T68] bond0 (unregistering): Released all slaves [ 1395.936653][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.056395][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.120776][ T68] bond0 (unregistering): Released all slaves [ 1396.696480][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.803920][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.159054][ T68] bond0 (unregistering): Released all slaves [ 1397.216605][T13760] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1397.260789][T13976] team0: Port device team_slave_1 added [ 1397.434898][T13760] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1397.772187][T13760] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1398.959132][T13976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.959151][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.959189][T13976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.030662][T14215] fuse: Bad value for 'fd' [ 1399.272817][T13976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.272836][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.272868][T13976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.525201][ T68] hsr_slave_0: left promiscuous mode [ 1399.556171][ T68] hsr_slave_1: left promiscuous mode [ 1399.557213][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.618999][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.670990][ T68] hsr_slave_0: left promiscuous mode [ 1400.715869][ T68] hsr_slave_1: left promiscuous mode [ 1400.717000][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.757922][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.935853][ T68] hsr_slave_0: left promiscuous mode [ 1400.985653][ T68] hsr_slave_1: left promiscuous mode [ 1400.986819][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.037814][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.089122][T13116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1401.112124][T13116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1401.114504][T13116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1401.133872][T13116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1401.134870][T13116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1401.992424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.333715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.735509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.851308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1402.997043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.171123][T14254] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.2060'. [ 1403.254759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.254980][T13116] Bluetooth: hci2: command tx timeout [ 1403.291213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.366345][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1403.414733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.544393][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1403.604262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.811934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1404.063228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1404.115061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1404.187435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1404.215853][ T9456] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1404.249658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1404.388185][ T9456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.388222][ T9456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.388246][ T9456] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1404.388292][ T9456] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1404.388316][ T9456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.415928][ T9456] usb 1-1: config 0 descriptor?? [ 1404.843826][ T9456] nintendo 0003:057E:2019.0009: unknown main item tag 0x2 [ 1404.868224][ T9456] nintendo 0003:057E:2019.0009: hidraw0: USB HID v80.00 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 1404.945126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1404.963863][ T9456] nintendo 0003:057E:2019.0009: Failed to get joycon info; ret=-38 [ 1404.963900][ T9456] nintendo 0003:057E:2019.0009: Failed to retrieve controller info; ret=-38 [ 1404.963921][ T9456] nintendo 0003:057E:2019.0009: Failed to initialize controller; ret=-38 [ 1405.033962][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.056676][ T9456] nintendo 0003:057E:2019.0009: probe - fail = -38 [ 1405.056880][ T9456] nintendo 0003:057E:2019.0009: probe with driver nintendo failed with error -38 [ 1405.061842][ T9456] usb 1-1: USB disconnect, device number 111 [ 1405.235168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.275743][T13116] Bluetooth: hci2: command tx timeout [ 1405.465993][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1405.508186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1405.892041][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1405.951851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.249296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.338449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.374954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.423020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.578561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1406.667511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.281062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.352571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.356013][T13116] Bluetooth: hci2: command tx timeout [ 1407.456712][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.524573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.674247][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.719962][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.796635][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1407.946350][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1408.015703][T12200] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1408.047159][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.126641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.221030][T12200] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1408.221053][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.252320][T12200] usb 1-1: config 0 descriptor?? [ 1408.262107][T12200] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1408.294460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.363447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.485287][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.689056][T12200] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1408.947354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1409.048655][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2073'. [ 1409.294654][ C1] vkms_vblank_simulate: vblank timer overrun [ 1409.435569][T13116] Bluetooth: hci2: command tx timeout [ 1410.926553][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.537409][T12200] gspca_cpia1: usb_control_msg 02, error -110 [ 1413.548792][T12200] gspca_cpia1: usb_control_msg 05, error -32 [ 1413.571848][T12200] gspca_cpia1: usb_control_msg 05, error -32 [ 1413.578437][T12200] gspca_cpia1: usb_control_msg 05, error -32 [ 1413.590474][T12200] gspca_cpia1: usb_control_msg 05, error -32 [ 1413.590539][T12200] cpia1 1-1:0.0: unexpected systemstate: 00 [ 1413.885634][T12200] usb 1-1: USB disconnect, device number 112 [ 1414.123664][T13976] hsr_slave_0: entered promiscuous mode [ 1414.124676][T13976] hsr_slave_1: entered promiscuous mode [ 1414.125378][T13976] debugfs: 'hsr0' already exists in 'hsr' [ 1414.125396][T13976] Cannot create hsr debugfs directory [ 1416.562815][ T9455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1416.591797][ T9455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1416.595188][ T9455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1416.611828][ T9455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1416.613510][ T9455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1416.982355][T14235] chnl_net:caif_netlink_parms(): no params data found [ 1418.396138][T14235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.396247][T14235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.396494][T14235] bridge_slave_0: entered allmulticast mode [ 1418.398881][T14235] bridge_slave_0: entered promiscuous mode [ 1418.429777][T14235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.429963][T14235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.430318][T14235] bridge_slave_1: entered allmulticast mode [ 1418.434008][T14235] bridge_slave_1: entered promiscuous mode [ 1418.575671][ T9456] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1418.715705][ T9455] Bluetooth: hci0: command tx timeout [ 1418.733850][ T9456] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1418.733888][ T9456] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1418.733931][ T9456] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1418.733957][ T9456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.796740][T14336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1418.814245][ T9456] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1419.659571][T14235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.886845][T14235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.181137][ T5897] usb 1-1: USB disconnect, device number 113 [ 1420.309053][T14235] team0: Port device team_slave_0 added [ 1420.318822][T14235] team0: Port device team_slave_1 added [ 1420.801812][ T9455] Bluetooth: hci0: command tx timeout [ 1421.605384][T13976] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1421.809958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1421.990729][T14235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.990748][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.990781][T14235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.125314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1422.220258][T13976] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1422.472217][T14235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.472236][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.472265][T14235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.527923][T13976] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1422.613489][T13976] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1422.876930][ T9455] Bluetooth: hci0: command tx timeout [ 1423.601519][T14312] chnl_net:caif_netlink_parms(): no params data found [ 1423.741670][T14390] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 1423.786930][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.137258][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.364552][T14235] hsr_slave_0: entered promiscuous mode [ 1424.372573][T14235] hsr_slave_1: entered promiscuous mode [ 1424.373772][T14235] debugfs: 'hsr0' already exists in 'hsr' [ 1424.373801][T14235] Cannot create hsr debugfs directory [ 1424.965555][ T9455] Bluetooth: hci0: command tx timeout [ 1425.143202][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2101'. [ 1425.188810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.259368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.602115][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.548500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.863193][T14312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.863342][T14312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.863591][T14312] bridge_slave_0: entered allmulticast mode [ 1426.893110][T14312] bridge_slave_0: entered promiscuous mode [ 1426.933692][T14312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.933933][T14312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.934205][T14312] bridge_slave_1: entered allmulticast mode [ 1426.961456][T14312] bridge_slave_1: entered promiscuous mode [ 1427.543157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.136361][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.161248][T13116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1428.190221][T13116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1428.194073][T13116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1428.214714][T13116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1428.216294][T13116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1428.353368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.356507][T14312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.401251][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.443857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.672704][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.783820][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.916148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.946058][ T5898] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1429.345793][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.709448][T14312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.754097][T14440] fuse: Unknown parameter '0x0000000000000003' [ 1429.839816][ T5898] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1429.839857][ T5898] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1429.839899][ T5898] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1429.839927][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.861481][T14435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1429.902912][ T5898] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1430.115108][T14435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.131606][T14435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.235685][T13116] Bluetooth: hci3: command tx timeout [ 1430.260273][T14312] team0: Port device team_slave_0 added [ 1430.502204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.604060][ T5898] usb 1-1: USB disconnect, device number 114 [ 1430.674888][T14312] team0: Port device team_slave_1 added [ 1431.158155][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2114'. [ 1431.211665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.276787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.883402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.992378][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2118'. [ 1432.167152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.284885][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.323732][T13116] Bluetooth: hci3: command tx timeout [ 1432.331847][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.460572][T14312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.460591][T14312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.460621][T14312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.674349][T14312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.674366][T14312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.674397][T14312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.871741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.987607][T14470] fuse: Unknown parameter '0x0000000000000003' [ 1433.291000][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.249947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.362882][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.395733][T13116] Bluetooth: hci3: command tx timeout [ 1434.685689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.968265][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.235450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.341853][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.439762][T14492] fuse: Unknown parameter '0x0000000000000003' [ 1435.489540][T14312] hsr_slave_0: entered promiscuous mode [ 1435.501027][T14312] hsr_slave_1: entered promiscuous mode [ 1435.507931][T14312] debugfs: 'hsr0' already exists in 'hsr' [ 1435.507961][T14312] Cannot create hsr debugfs directory [ 1436.130951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1436.676670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1436.678588][T13116] Bluetooth: hci3: command tx timeout [ 1436.788713][T14507] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 1437.244631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1437.863392][ C0] vkms_vblank_simulate: vblank timer overrun [ 1438.302423][ C0] vkms_vblank_simulate: vblank timer overrun [ 1438.673764][ T68] bridge_slave_1: left allmulticast mode [ 1438.673796][ T68] bridge_slave_1: left promiscuous mode [ 1438.674051][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.847304][ T68] bridge_slave_0: left allmulticast mode [ 1438.847335][ T68] bridge_slave_0: left promiscuous mode [ 1438.847614][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.951174][ T68] bridge_slave_1: left allmulticast mode [ 1438.951203][ T68] bridge_slave_1: left promiscuous mode [ 1438.951471][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.019149][ T68] bridge_slave_0: left allmulticast mode [ 1439.019174][ T68] bridge_slave_0: left promiscuous mode [ 1439.019366][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.115918][ T9456] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1439.277824][ T9456] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1439.277853][ T9456] usb 8-1: config 0 has no interface number 0 [ 1439.277905][ T9456] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.277925][ T9456] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.277955][ T9456] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1439.277971][ T9456] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.284339][ T9456] usb 8-1: config 0 descriptor?? [ 1439.407771][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.516472][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.562408][ T68] bond0 (unregistering): Released all slaves [ 1439.695634][ T5876] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1439.720276][ T9456] usbhid 8-1:0.1: can't add hid device: -71 [ 1439.720416][ T9456] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 1439.759317][ T9456] usb 8-1: USB disconnect, device number 39 [ 1439.848150][ T5876] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1439.848187][ T5876] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1439.848233][ T5876] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1439.848256][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.855023][T14535] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1439.869779][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1439.996358][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1440.070422][T14535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.071323][T14535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.117982][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1440.181682][ T68] bond0 (unregistering): Released all slaves [ 1440.753362][T14423] chnl_net:caif_netlink_parms(): no params data found [ 1442.125864][ T68] hsr_slave_0: left promiscuous mode [ 1442.148408][ T68] hsr_slave_1: left promiscuous mode [ 1442.150848][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.187197][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.325810][ T68] hsr_slave_0: left promiscuous mode [ 1442.345810][ T68] hsr_slave_1: left promiscuous mode [ 1442.347174][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.386878][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.698807][T12200] usb 1-1: USB disconnect, device number 115 [ 1446.386393][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1446.860811][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1447.425601][ T5876] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1447.651515][ T5876] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1447.651552][ T5876] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1447.651592][ T5876] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1447.651614][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.706424][T14575] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1447.713786][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1447.951084][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.978529][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.117329][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1448.266282][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1448.409632][ T5876] usb 1-1: USB disconnect, device number 116 [ 1449.185558][ T5876] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1449.726427][ T5876] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1449.726465][ T5876] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1449.726506][ T5876] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1449.726539][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.733770][T14586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1449.968010][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1450.226901][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.227495][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.597413][ T5897] usb 1-1: USB disconnect, device number 117 [ 1451.678412][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.681127][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.681402][T14423] bridge_slave_0: entered allmulticast mode [ 1451.717078][T14423] bridge_slave_0: entered promiscuous mode [ 1451.721345][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.721500][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.721704][T14423] bridge_slave_1: entered allmulticast mode [ 1451.729715][T14423] bridge_slave_1: entered promiscuous mode [ 1452.832427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1452.922624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.195608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.350269][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.890305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.159472][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.201080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.460144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.498901][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.768386][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.891516][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.155828][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.494241][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.532547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.760075][T14423] team0: Port device team_slave_0 added [ 1455.931798][T14423] team0: Port device team_slave_1 added [ 1456.118669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1456.169703][ C1] vkms_vblank_simulate: vblank timer overrun [ 1456.217779][ C1] vkms_vblank_simulate: vblank timer overrun [ 1456.320408][T12200] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1457.924112][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.924132][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.924161][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.325563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.661688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.711482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.718759][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.718778][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.718812][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.729398][T12200] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1458.729440][T12200] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1458.729486][T12200] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1458.729513][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.746327][T14633] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1458.791179][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.844359][T12200] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.918710][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.008910][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.058876][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.242211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.247815][T14423] hsr_slave_0: entered promiscuous mode [ 1459.265566][T14423] hsr_slave_1: entered promiscuous mode [ 1459.269842][T14423] debugfs: 'hsr0' already exists in 'hsr' [ 1459.269934][T14423] Cannot create hsr debugfs directory [ 1459.328857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.408856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.441202][ T5898] usb 1-1: USB disconnect, device number 118 [ 1459.493130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.920732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1460.384472][ C1] vkms_vblank_simulate: vblank timer overrun [ 1460.487624][ T5898] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1461.217592][ T5898] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1461.217631][ T5898] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1461.217659][ T5898] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1461.217675][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.223546][T14648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1461.277313][ T5898] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1461.466271][T14648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.466866][T14648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.525754][ T5898] usb 1-1: USB disconnect, device number 119 [ 1463.853915][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.858755][ T9455] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1463.876868][ T9455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1463.888745][ T9455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1463.892708][ T9455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1463.893570][ T9455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1464.600510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.736822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.595648][T12797] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1465.757822][T12797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.757858][T12797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.757882][T12797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1465.757927][T12797] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1465.757951][T12797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.763770][T12797] usb 1-1: config 0 descriptor?? [ 1465.995568][T13116] Bluetooth: hci4: command tx timeout [ 1466.240568][T12797] usbhid 1-1:0.0: can't add hid device: -71 [ 1466.240714][T12797] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1466.287518][T12797] usb 1-1: USB disconnect, device number 120 [ 1466.614467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1466.893737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.169954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.647182][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.928982][T12797] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1468.075709][T13116] Bluetooth: hci4: command tx timeout [ 1468.118837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1468.160069][T12797] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1468.160107][T12797] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1468.160149][T12797] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1468.160173][T12797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.195923][T14683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1468.301662][ T38] kauditd_printk_skb: 12 callbacks suppressed [ 1468.301723][ T38] audit: type=1326 audit(1761018123.296:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.302024][ T38] audit: type=1326 audit(1761018123.296:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.302355][ T38] audit: type=1326 audit(1761018123.296:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.302691][ T38] audit: type=1326 audit(1761018123.306:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.302961][ T38] audit: type=1326 audit(1761018123.306:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.303229][ T38] audit: type=1326 audit(1761018123.306:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.303510][ T38] audit: type=1326 audit(1761018123.306:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.303787][ T38] audit: type=1326 audit(1761018123.306:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.304013][ T38] audit: type=1326 audit(1761018123.316:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.304238][ T38] audit: type=1326 audit(1761018123.316:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.7.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f171523efc9 code=0x7ffc0000 [ 1468.329053][ C1] vkms_vblank_simulate: vblank timer overrun [ 1468.544366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.113806][T12797] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1469.206090][T14683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.219127][T14683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.400442][T12797] usb 1-1: USB disconnect, device number 121 [ 1469.663701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.822791][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2186'. [ 1470.155606][T13116] Bluetooth: hci4: command tx timeout [ 1471.628018][T14312] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1471.828172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.108486][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.554551][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.754115][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.051867][T13116] Bluetooth: hci4: command tx timeout [ 1473.065054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.082738][T14312] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1473.287050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.553935][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.556176][T14312] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1473.850603][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.109130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.536056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.565576][T14312] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1475.565988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.935186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.098639][ C0] vkms_vblank_simulate: vblank timer overrun [ 1476.525091][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.011026][ T68] bridge_slave_1: left allmulticast mode [ 1477.011059][ T68] bridge_slave_1: left promiscuous mode [ 1477.011364][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.087581][ T68] bridge_slave_0: left allmulticast mode [ 1477.087606][ T68] bridge_slave_0: left promiscuous mode [ 1477.087804][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.350471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.391183][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.522164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.724529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.887888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.366914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.405443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.473131][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.729795][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.873204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1479.120226][ T9455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1479.128455][ T9455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1479.129880][ T9455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1479.131012][ T9455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1479.131807][ T9455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1479.137166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1479.323036][ T5876] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1480.236327][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.287753][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.287789][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.287812][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1480.287850][ T5876] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1480.287867][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.291665][ T5876] usb 1-1: config 0 descriptor?? [ 1480.376539][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.415587][ T5953] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1480.446686][ T68] bond0 (unregistering): Released all slaves [ 1480.498094][T14661] chnl_net:caif_netlink_parms(): no params data found [ 1480.550595][ T5953] usb 8-1: device descriptor read/64, error -71 [ 1480.721411][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 1480.721550][ T5876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1480.744251][ T5876] usb 1-1: USB disconnect, device number 122 [ 1480.798063][ T5953] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1480.925565][ T5953] usb 8-1: device descriptor read/64, error -71 [ 1481.035863][ T5953] usb usb8-port1: attempt power cycle [ 1481.195794][ T9455] Bluetooth: hci0: command tx timeout [ 1481.238335][ T68] hsr_slave_0: left promiscuous mode [ 1481.304239][ T68] hsr_slave_1: left promiscuous mode [ 1481.305259][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.351029][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.385613][ T5953] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1481.406420][ T5953] usb 8-1: device descriptor read/8, error -71 [ 1481.655635][ T5953] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1481.677943][ T5953] usb 8-1: device descriptor read/8, error -71 [ 1481.787747][ T5953] usb usb8-port1: unable to enumerate USB device [ 1481.983902][ C0] vkms_vblank_simulate: vblank timer overrun [ 1482.188751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.275634][ T9455] Bluetooth: hci0: command tx timeout [ 1483.388738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.608619][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.985781][ T9456] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1484.036344][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1484.095996][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.155599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.155718][ T9456] usb 8-1: Using ep0 maxpacket: 8 [ 1484.159693][ T9456] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1484.162662][ T9456] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1484.196375][ T9456] usb 8-1: string descriptor 0 read error: -22 [ 1484.196487][ T9456] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1484.196503][ T9456] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.256380][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1484.262529][ T9456] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1484.396319][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.426735][ T9456] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1484.427237][ T9456] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1484.427302][ T9456] usb 8-1: media controller created [ 1484.543159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.561786][ T9456] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1484.638824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.767138][ T9456] zl10353_read_register: readreg error (reg=127, ret==0) [ 1484.865091][ T9456] usb 8-1: USB disconnect, device number 44 [ 1485.017346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.173817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.364843][ T9455] Bluetooth: hci0: command tx timeout [ 1485.706692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.871744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.019220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.170744][T14661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.170888][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.171189][T14661] bridge_slave_0: entered allmulticast mode [ 1486.231778][T14661] bridge_slave_0: entered promiscuous mode [ 1486.304434][T14661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.304572][T14661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.304799][T14661] bridge_slave_1: entered allmulticast mode [ 1486.315748][T14661] bridge_slave_1: entered promiscuous mode [ 1486.924962][T14661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.088811][T14661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.435702][ T9455] Bluetooth: hci0: command tx timeout [ 1487.480090][T14661] team0: Port device team_slave_0 added [ 1487.522651][T14661] team0: Port device team_slave_1 added [ 1488.230680][T14661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.230699][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.230730][T14661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.335971][T14661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.335990][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.336021][T14661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.113997][T13116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1489.130303][T13116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1489.138312][T13116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1489.140486][T13116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1489.141602][T13116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1489.842540][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.880343][T14661] hsr_slave_0: entered promiscuous mode [ 1489.883343][T14661] hsr_slave_1: entered promiscuous mode [ 1489.892367][T14661] debugfs: 'hsr0' already exists in 'hsr' [ 1489.892406][T14661] Cannot create hsr debugfs directory [ 1489.937336][T14764] chnl_net:caif_netlink_parms(): no params data found [ 1490.034770][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 1490.034827][T14886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2236'. [ 1491.195605][ T9455] Bluetooth: hci2: command tx timeout [ 1491.305630][ T9] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1491.575554][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1491.628261][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.628296][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.628320][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1491.639818][ T9] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1491.639854][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.660334][ T9] usb 8-1: config 0 descriptor?? [ 1492.686838][T14764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.687672][T14764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.688517][T14764] bridge_slave_0: entered allmulticast mode [ 1492.732551][T14764] bridge_slave_0: entered promiscuous mode [ 1492.993789][T14764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.994088][T14764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.994471][T14764] bridge_slave_1: entered allmulticast mode [ 1493.020518][T14764] bridge_slave_1: entered promiscuous mode [ 1493.275563][ T9455] Bluetooth: hci2: command tx timeout [ 1493.521689][T12200] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1493.643535][T14764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.678125][T12200] usb 1-1: Using ep0 maxpacket: 32 [ 1493.684647][T12200] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1493.684676][T12200] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1493.684698][T12200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1493.684753][T12200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1493.684776][T12200] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1493.684797][T12200] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1493.684863][T12200] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1493.684886][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.783405][T12200] usb 1-1: config 0 descriptor?? [ 1493.889078][T14764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.196217][T12200] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1494.265785][T12200] usb 1-1: USB disconnect, device number 123 [ 1494.283818][T12200] usblp0: removed [ 1494.753974][T14764] team0: Port device team_slave_0 added [ 1494.912342][T14764] team0: Port device team_slave_1 added [ 1495.143443][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 1495.143540][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1495.175093][ T9] usb 8-1: USB disconnect, device number 45 [ 1495.355592][ T9455] Bluetooth: hci2: command tx timeout [ 1495.747700][T14764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.747717][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.747748][T14764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1495.847292][T14764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1495.847311][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.847340][T14764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1496.145714][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1496.309807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1496.319264][ T68] bridge_slave_1: left allmulticast mode [ 1496.319297][ T68] bridge_slave_1: left promiscuous mode [ 1496.319618][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.327325][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1496.352569][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1496.358052][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1496.382677][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1496.382836][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1496.382862][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.420361][ T68] bridge_slave_0: left allmulticast mode [ 1496.420392][ T68] bridge_slave_0: left promiscuous mode [ 1496.420660][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.428556][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1496.533888][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1496.534170][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1496.534204][ T9] usb 1-1: media controller created [ 1496.564982][ T68] bridge_slave_1: left allmulticast mode [ 1496.565006][ T68] bridge_slave_1: left promiscuous mode [ 1496.565181][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.606853][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1496.702793][ T68] bridge_slave_0: left allmulticast mode [ 1496.702825][ T68] bridge_slave_0: left promiscuous mode [ 1496.703056][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.038344][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.435742][ T9455] Bluetooth: hci2: command tx timeout [ 1497.513960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.585579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.679108][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1497.894651][ T9] usb 1-1: USB disconnect, device number 124 [ 1497.997353][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.096225][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.167740][ T68] bond0 (unregistering): Released all slaves [ 1498.590770][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.709065][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.788895][ T68] bond0 (unregistering): Released all slaves [ 1499.054789][T14764] hsr_slave_0: entered promiscuous mode [ 1499.070008][T14764] hsr_slave_1: entered promiscuous mode [ 1499.072922][T14764] debugfs: 'hsr0' already exists in 'hsr' [ 1499.072945][T14764] Cannot create hsr debugfs directory [ 1499.099251][T14871] chnl_net:caif_netlink_parms(): no params data found [ 1499.490945][ C0] vkms_vblank_simulate: vblank timer overrun [ 1499.750115][ C0] vkms_vblank_simulate: vblank timer overrun [ 1499.874083][T14963] ------------[ cut here ]------------ [ 1499.874108][T14963] WARNING: CPU: 1 PID: 14963 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1499.874300][T14963] Modules linked in: [ 1499.874348][T14963] CPU: 1 UID: 0 PID: 14963 Comm: syz.0.2261 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1499.874416][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1499.874435][T14963] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1499.874456][T14963] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1499.874475][T14963] RSP: 0018:ffffc90004a878e0 EFLAGS: 00010287 [ 1499.874495][T14963] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1499.874511][T14963] RDX: ffffc90005a99000 RSI: 00000000000000b0 RDI: 00000000000000b1 [ 1499.874527][T14963] RBP: ffffc90004a87a70 R08: 0000000000000000 R09: 0000000000000000 [ 1499.874542][T14963] R10: dffffc0000000000 R11: fffffbfff1deed6f R12: dffffc0000000000 [ 1499.874557][T14963] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888049196791 [ 1499.874572][T14963] FS: 00007fb12d2066c0(0000) GS:ffff888126cc2000(0000) knlGS:0000000000000000 [ 1499.874590][T14963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1499.874605][T14963] CR2: 0000001b31b16ff8 CR3: 00000000488f6000 CR4: 00000000003526f0 [ 1499.874623][T14963] Call Trace: [ 1499.874637][T14963] [ 1499.874653][T14963] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1499.874794][T14963] ? __pfx_cgroup_freeze+0x10/0x10 [ 1499.874812][T14963] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1499.874844][T14963] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1499.874872][T14963] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1499.874906][T14963] ? mutex_lock_nested+0x154/0x1d0 [ 1499.874928][T14963] ? cgroup_kn_lock_live+0x13c/0x230 [ 1499.874963][T14963] cgroup_freeze_write+0x156/0x1c0 [ 1499.874992][T14963] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1499.875017][T14963] ? kernfs_root+0x1c/0x230 [ 1499.875083][T14963] ? kernfs_root+0x1c/0x230 [ 1499.875113][T14963] ? kernfs_root+0x1ea/0x230 [ 1499.875141][T14963] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1499.875169][T14963] cgroup_file_write+0x39e/0x740 [ 1499.875198][T14963] ? __pfx_cgroup_file_write+0x10/0x10 [ 1499.875255][T14963] ? __pfx_cgroup_file_write+0x10/0x10 [ 1499.875277][T14963] kernfs_fop_write_iter+0x3b0/0x540 [ 1499.875309][T14963] vfs_write+0x5d5/0xb40 [ 1499.875358][T14963] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1499.875460][T14963] ? __pfx_vfs_write+0x10/0x10 [ 1499.875479][T14963] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1499.875513][T14963] ? mutex_lock_nested+0x154/0x1d0 [ 1499.875534][T14963] ? fdget_pos+0x253/0x320 [ 1499.875569][T14963] ksys_write+0x14b/0x260 [ 1499.875605][T14963] ? __pfx_ksys_write+0x10/0x10 [ 1499.875629][T14963] ? do_syscall_64+0xbe/0xfa0 [ 1499.875701][T14963] do_syscall_64+0xfa/0xfa0 [ 1499.875730][T14963] ? lockdep_hardirqs_on+0x9c/0x150 [ 1499.875785][T14963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.875833][T14963] ? clear_bhb_loop+0x60/0xb0 [ 1499.875862][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.875884][T14963] RIP: 0033:0x7fb12ef9efc9 [ 1499.875909][T14963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.875929][T14963] RSP: 002b:00007fb12d206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1499.875952][T14963] RAX: ffffffffffffffda RBX: 00007fb12f1f5fa0 RCX: 00007fb12ef9efc9 [ 1499.875969][T14963] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 1499.875983][T14963] RBP: 00007fb12f021f91 R08: 0000000000000000 R09: 0000000000000000 [ 1499.875997][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.876010][T14963] R13: 00007fb12f1f6038 R14: 00007fb12f1f5fa0 R15: 00007ffec940dba8 [ 1499.876048][T14963] [ 1499.876069][T14963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1499.876086][T14963] CPU: 1 UID: 0 PID: 14963 Comm: syz.0.2261 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1499.876109][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1499.876122][T14963] Call Trace: [ 1499.876131][T14963] [ 1499.876140][T14963] dump_stack_lvl+0x99/0x250 [ 1499.876184][T14963] ? __asan_memcpy+0x40/0x70 [ 1499.876222][T14963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1499.876250][T14963] ? __pfx__printk+0x10/0x10 [ 1499.876298][T14963] vpanic+0x237/0x6d0 [ 1499.876327][T14963] ? __pfx_vpanic+0x10/0x10 [ 1499.876361][T14963] panic+0xb9/0xc0 [ 1499.876382][T14963] ? __pfx_panic+0x10/0x10 [ 1499.876431][T14963] __warn+0x31b/0x4b0 [ 1499.876450][T14963] ? cgroup_freeze+0x80a/0xf90 [ 1499.876475][T14963] ? cgroup_freeze+0x80a/0xf90 [ 1499.876495][T14963] report_bug+0x2be/0x4f0 [ 1499.876600][T14963] ? cgroup_freeze+0x80a/0xf90 [ 1499.876621][T14963] ? cgroup_freeze+0x80a/0xf90 [ 1499.876642][T14963] ? cgroup_freeze+0x80c/0xf90 [ 1499.876663][T14963] handle_bug+0x84/0x160 [ 1499.876696][T14963] exc_invalid_op+0x1a/0x50 [ 1499.876728][T14963] asm_exc_invalid_op+0x1a/0x20 [ 1499.876749][T14963] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1499.876769][T14963] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1499.876788][T14963] RSP: 0018:ffffc90004a878e0 EFLAGS: 00010287 [ 1499.876807][T14963] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1499.876823][T14963] RDX: ffffc90005a99000 RSI: 00000000000000b0 RDI: 00000000000000b1 [ 1499.876838][T14963] RBP: ffffc90004a87a70 R08: 0000000000000000 R09: 0000000000000000 [ 1499.876851][T14963] R10: dffffc0000000000 R11: fffffbfff1deed6f R12: dffffc0000000000 [ 1499.876867][T14963] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888049196791 [ 1499.876891][T14963] ? cgroup_freeze+0x809/0xf90 [ 1499.876925][T14963] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1499.876960][T14963] ? __pfx_cgroup_freeze+0x10/0x10 [ 1499.876977][T14963] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1499.877008][T14963] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1499.877038][T14963] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1499.877072][T14963] ? mutex_lock_nested+0x154/0x1d0 [ 1499.877093][T14963] ? cgroup_kn_lock_live+0x13c/0x230 [ 1499.877128][T14963] cgroup_freeze_write+0x156/0x1c0 [ 1499.877159][T14963] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1499.877186][T14963] ? kernfs_root+0x1c/0x230 [ 1499.877213][T14963] ? kernfs_root+0x1c/0x230 [ 1499.877245][T14963] ? kernfs_root+0x1ea/0x230 [ 1499.877274][T14963] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1499.877304][T14963] cgroup_file_write+0x39e/0x740 [ 1499.877335][T14963] ? __pfx_cgroup_file_write+0x10/0x10 [ 1499.877373][T14963] ? __pfx_cgroup_file_write+0x10/0x10 [ 1499.877401][T14963] kernfs_fop_write_iter+0x3b0/0x540 [ 1499.877435][T14963] vfs_write+0x5d5/0xb40 [ 1499.877461][T14963] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1499.877489][T14963] ? __pfx_vfs_write+0x10/0x10 [ 1499.877507][T14963] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1499.877541][T14963] ? mutex_lock_nested+0x154/0x1d0 [ 1499.877563][T14963] ? fdget_pos+0x253/0x320 [ 1499.877599][T14963] ksys_write+0x14b/0x260 [ 1499.877623][T14963] ? __pfx_ksys_write+0x10/0x10 [ 1499.877649][T14963] ? do_syscall_64+0xbe/0xfa0 [ 1499.877684][T14963] do_syscall_64+0xfa/0xfa0 [ 1499.877712][T14963] ? lockdep_hardirqs_on+0x9c/0x150 [ 1499.877741][T14963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.877762][T14963] ? clear_bhb_loop+0x60/0xb0 [ 1499.877791][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.877813][T14963] RIP: 0033:0x7fb12ef9efc9 [ 1499.877831][T14963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.877851][T14963] RSP: 002b:00007fb12d206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1499.877873][T14963] RAX: ffffffffffffffda RBX: 00007fb12f1f5fa0 RCX: 00007fb12ef9efc9 [ 1499.877890][T14963] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 1499.877905][T14963] RBP: 00007fb12f021f91 R08: 0000000000000000 R09: 0000000000000000 [ 1499.877920][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.877934][T14963] R13: 00007fb12f1f6038 R14: 00007fb12f1f5fa0 R15: 00007ffec940dba8 [ 1499.877972][T14963] [ 1499.878360][T14963] Kernel Offset: disabled