last executing test programs: 6m54.048088581s ago: executing program 1 (id=754): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x27d}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0xfff, 0x0}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 6m52.503085606s ago: executing program 1 (id=761): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x1b, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x8dff, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x6bc001, 0x80) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000001c0)) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8cc, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6m39.79041987s ago: executing program 1 (id=783): socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 6m35.055619149s ago: executing program 1 (id=788): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 6m26.12709468s ago: executing program 1 (id=809): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) syz_clone3(0x0, 0xffffffffffffff0b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x6, &(0x7f00000001c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) 6m24.881297565s ago: executing program 1 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0xd9, @loopback, 0x1ff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40f6000050004b040000000000c800007a000000", @ANYRES32=0x0, @ANYBLOB="4018000000000000140012800b0001006272696467650000adfc02800c001a8000000a8000000700ff0100000000000000000000000000010000080007000000000008000400000000000700ff02000000000000000000000000000100000700fe8000000000000000000000000000bb0000080004000000000007000000000000000000000000000000000100001c000000070000000700"], 0x40}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 6m9.165489319s ago: executing program 32 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0xd9, @loopback, 0x1ff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40f6000050004b040000000000c800007a000000", @ANYRES32=0x0, @ANYBLOB="4018000000000000140012800b0001006272696467650000adfc02800c001a8000000a8000000700ff0100000000000000000000000000010000080007000000000008000400000000000700ff02000000000000000000000000000100000700fe8000000000000000000000000000bb0000080004000000000007000000000000000000000000000000000100001c000000070000000700"], 0x40}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 3m38.453008887s ago: executing program 2 (id=1242): openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000000), 0x1ad100) 3m37.296645816s ago: executing program 2 (id=1246): socket$inet6(0xa, 0x3, 0x3c) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 3m37.034217285s ago: executing program 2 (id=1248): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7fff]}, 0x8, 0x80800) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000100)={0x58c2, 0x1a, [{0x8, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x0, 0x1}, {0x3}, {0xe, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0xd, 0x1}, {}, {0xe}, {0xd}, {0x5}, {0xa}, {0x2, 0x1}, {0xd}, {0xc, 0x1}, {0xd}, {0x9}, {0x7, 0x1}, {0x5}, {}, {0x4, 0x1}, {}, {0x9}]}) r3 = syz_open_pts(r1, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f00000002c0)="9003a24b17051d1032f44fa497", 0xd}], 0x2, 0x7ff, 0x4) ioctl$TCFLSH(r1, 0x540b, 0x1) 3m36.539362724s ago: executing program 2 (id=1249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x4044057) 3m36.338229225s ago: executing program 2 (id=1252): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42000, 0x0) syz_fuse_handle_req(r6, &(0x7f00000042c0), 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m34.976983907s ago: executing program 2 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m17.731804311s ago: executing program 33 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m32.027497766s ago: executing program 5 (id=1487): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7fff]}, 0x8, 0x80800) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000100)={0x58c2, 0x1a, [{0x8, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x0, 0x1}, {0x3}, {0xe, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0xd, 0x1}, {}, {0xe}, {0xd}, {0xa}, {0x2, 0x1}, {0xd}, {0xc, 0x1}, {0xd}, {0x9}, {0x7, 0x1}, {0x5}, {}, {}, {0x4, 0x1}, {}, {0x9}]}) r3 = syz_open_pts(r1, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f00000002c0)="9003a24b17051d1032f44fa497", 0xd}], 0x2, 0x7ff, 0x4) ioctl$TCFLSH(r1, 0x540b, 0x1) 1m31.761902947s ago: executing program 5 (id=1489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x1, {0x1, 0x1f1}, {0x2}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 1m30.806599856s ago: executing program 5 (id=1491): getpid() r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x39, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f00000085000000500000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@noextend}]}}) 1m28.807715714s ago: executing program 5 (id=1495): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1m26.973211416s ago: executing program 5 (id=1497): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0xfffb, 0xc00}], 0x1, 0x0) 1m25.517892534s ago: executing program 5 (id=1501): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) chroot(0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) 1m12.057008492s ago: executing program 0 (id=1530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 1m9.762056629s ago: executing program 34 (id=1501): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) chroot(0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) 1m9.70299904s ago: executing program 0 (id=1536): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x5, '\x00', r9, r0, 0x3, 0x2, 0x2}, 0x50) syz_usb_connect(0x5, 0x34, 0x0, 0x0) 1m5.902283313s ago: executing program 0 (id=1542): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7fff]}, 0x8, 0x80800) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000100)={0x58c2, 0x1a, [{0x8, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x0, 0x1}, {0x3}, {0xe, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0xd, 0x1}, {}, {0xe}, {0x5}, {0xa}, {0x2, 0x1}, {0xd}, {0xc, 0x1}, {0xd}, {0x9}, {0x7, 0x1}, {0x5}, {}, {}, {0x4, 0x1}, {}, {0x9}]}) r3 = syz_open_pts(r1, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f00000002c0)="9003a24b17051d1032f44fa497", 0xd}], 0x2, 0x7ff, 0x4) ioctl$TCFLSH(r1, 0x540b, 0x1) 1m5.484933856s ago: executing program 0 (id=1544): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000300)={[{0x8, 0x3, 0x2, 0x9, 0xc, 0x9, 0xd, 0xd, 0x81, 0xe, 0x1, 0x7f, 0x2}, {0x100, 0x3, 0x64, 0x8, 0xed, 0x3, 0x4, 0x9, 0x3, 0x1, 0x69, 0x30, 0x9}, {0x9, 0x9, 0x6, 0xec, 0x2, 0x2b, 0x8, 0x8, 0x1, 0x1, 0xd, 0x5, 0x8}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x1ad72f7) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) 1m1.062169307s ago: executing program 0 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 57.739256977s ago: executing program 0 (id=1558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, 0x0, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x1, {0x1, 0x1f1}, {0x2}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 42.663507381s ago: executing program 35 (id=1558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, 0x0, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x1, {0x1, 0x1f1}, {0x2}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 5.352870531s ago: executing program 4 (id=1685): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0', [{0x20, 'GPL\xf3'}, {0x20, 'GPL\x00'}]}, 0x15) close(r0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.11153461s ago: executing program 4 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r4, r5}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) 3.990603175s ago: executing program 3 (id=1688): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42000, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0), 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.845049902s ago: executing program 4 (id=1689): pipe(0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) socket$tipc(0x1e, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xa1) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dde5bf3eba23db"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 2.4525658s ago: executing program 4 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) set_mempolicy(0x8006, 0x0, 0x5) 2.280607422s ago: executing program 3 (id=1691): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r3 = open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r5, 0x80) socket$netlink(0x10, 0x3, 0x8000000004) mmap$IORING_OFF_SQ_RING(&(0x7f0000723000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r2, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) 2.280278712s ago: executing program 4 (id=1692): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x223, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB=' \r'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.639947683s ago: executing program 3 (id=1693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.525162721s ago: executing program 3 (id=1694): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0', [{0x20, 'GPL\xf3'}]}, 0x10) close(r0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 624.904036ms ago: executing program 3 (id=1695): socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) mkdir(0x0, 0x49) bind$alg(r2, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) 409.159825ms ago: executing program 4 (id=1696): socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) pipe2(&(0x7f0000001040), 0x0) pipe2(&(0x7f0000000240), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 0s ago: executing program 3 (id=1697): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) kernel console output (not intermixed with test programs): 175.078008][ T6530] team0: No ports can be present during mode change [ 175.222722][ T192] usb 1-1: USB disconnect, device number 4 [ 175.980781][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 180.232190][ T5889] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -110 [ 180.237364][ T5889] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -110 [ 180.608282][ T6566] ubi31: attaching mtd0 [ 180.735256][ T6566] ubi31: scanning is finished [ 180.735296][ T6566] ubi31: empty MTD device detected [ 180.913883][ T6554] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 181.861551][ T5117] Bluetooth: hci0: command 0x0401 tx timeout [ 181.936798][ T6566] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 182.418532][ T5787] usb 5-1: USB disconnect, device number 2 [ 182.793656][ T192] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 183.990913][ T192] usb 4-1: Using ep0 maxpacket: 8 [ 183.992821][ T192] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 183.992836][ T192] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.992845][ T192] usb 4-1: config 0 has no interface number 0 [ 183.992871][ T192] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.992893][ T192] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 183.992905][ T192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.085156][ T192] usb 4-1: config 0 descriptor?? [ 184.089915][ T192] ldusb 4-1:0.55: Interrupt in endpoint not found [ 184.372989][ T5787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 185.362997][ T192] usb 4-1: USB disconnect, device number 2 [ 191.059794][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.285300][ T5787] usb 5-1: Using ep0 maxpacket: 32 [ 191.288492][ T5787] usb 5-1: device descriptor read/all, error -71 [ 191.539833][ T6624] ubi31: attaching mtd0 [ 191.564727][ T6624] ubi31: scanning is finished [ 193.514427][ T5117] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 193.591811][ T6624] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 193.935463][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.349918][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.867806][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.870160][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.870227][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.149972][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.841233][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 196.860520][ T6673] syz.2.218 uses obsolete (PF_INET,SOCK_PACKET) [ 196.947985][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.944222][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.070711][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.108289][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.550950][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 202.726364][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.726395][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.726439][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 202.726459][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.752370][ T10] usb 3-1: config 0 descriptor?? [ 202.825067][ T5787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 202.990950][ T5787] usb 1-1: Using ep0 maxpacket: 8 [ 203.288866][ T5787] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 203.288894][ T5787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.288913][ T5787] usb 1-1: config 0 has no interface number 0 [ 203.656101][ T5787] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.656148][ T5787] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 203.656169][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.677342][ T5787] usb 1-1: config 0 descriptor?? [ 203.682294][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 203.682334][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 203.682359][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 203.682383][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 203.682406][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 203.682430][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 203.682455][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 203.693275][ T5787] ldusb 1-1:0.55: Interrupt in endpoint not found [ 203.731899][ T10] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 204.082397][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.105074][ T31] usb 1-1: USB disconnect, device number 5 [ 204.154544][ T10] cp2112 0003:10C4:EA90.0001: error requesting version [ 204.197057][ T10] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 204.800918][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.880967][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 204.953227][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.953260][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 204.953280][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 204.953318][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.953339][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.994060][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.086365][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.274254][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.300430][ T31] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 205.300454][ T31] usb 1-1: config 0 has no interface number 0 [ 205.300513][ T31] usb 1-1: config 0 interface 41 has no altsetting 0 [ 205.331920][ T31] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 205.331948][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.331966][ T31] usb 1-1: Product: syz [ 205.331980][ T31] usb 1-1: Manufacturer: syz [ 205.331993][ T31] usb 1-1: SerialNumber: syz [ 205.375271][ T31] usb 1-1: config 0 descriptor?? [ 206.377813][ T31] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 206.377972][ T31] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 206.471081][ T31] usb 1-1: USB disconnect, device number 6 [ 206.600556][ T5874] usb 3-1: USB disconnect, device number 4 [ 208.079308][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.168845][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.492757][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.557250][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 209.931235][ T10] usb 2-1: USB disconnect, device number 3 [ 210.441594][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.590423][ T6790] team0: No ports can be present during mode change [ 210.830913][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.964108][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.999547][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.999588][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.999628][ T5889] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 210.999649][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.093529][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.295152][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.672822][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.828961][ T6803] tty tty3: ldisc open failed (-12), clearing slot 2 [ 211.941302][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.967170][ T5819] Bluetooth: hci0: command 0x0401 tx timeout [ 211.967251][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 211.967274][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 211.967296][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 211.967320][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 211.970026][ T5889] usb 5-1: config 0 descriptor?? [ 212.688250][ T5889] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 212.688286][ T5889] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 212.688312][ T5889] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 212.688336][ T5889] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 212.688361][ T5889] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 212.688386][ T5889] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 212.688410][ T5889] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 212.752250][ T5889] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 212.813088][ T5889] cp2112 0003:10C4:EA90.0002: error requesting version [ 212.814974][ T5889] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -32 [ 213.220102][ T6819] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 213.220113][ T6819] overlayfs: missing 'lowerdir' [ 215.534987][ T5980] usb 5-1: USB disconnect, device number 5 [ 216.520731][ T6859] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 216.520749][ T6859] overlayfs: missing 'lowerdir' [ 218.452744][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.730344][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.048033][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.802063][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 220.196624][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.396121][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.660827][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.681521][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.781093][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.217166][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.511228][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.084865][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.121146][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.687878][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.781166][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.844996][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.968252][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.978184][ T1238] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 224.045178][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.306976][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.356906][ T1238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.356931][ T1238] usb 5-1: config 0 has no interfaces? [ 224.356956][ T1238] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.356967][ T1238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.397457][ T1238] usb 5-1: config 0 descriptor?? [ 224.956040][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.577422][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.596453][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.675436][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.967051][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.253261][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.918984][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.216986][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.594954][ T6970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.595093][ T6970] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 227.664474][ T5980] usb 5-1: USB disconnect, device number 6 [ 227.735769][ T6970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.735883][ T6970] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 227.877216][ T6970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.877294][ T6970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 227.985253][ T6970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.985356][ T6970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 228.056843][ T6970] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.056938][ T6970] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 229.437180][ T5874] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 230.140994][ T5816] Bluetooth: hci0: command 0x0401 tx timeout [ 230.141060][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 230.141308][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 230.141389][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 230.141400][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 230.146033][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.146057][ T5874] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.146092][ T5874] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 230.146112][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.227808][ T5874] usb 2-1: config 0 descriptor?? [ 231.029598][ T7003] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 231.029610][ T7003] overlayfs: missing 'lowerdir' [ 231.184796][ T7008] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 231.184921][ T7008] netlink: 224 bytes leftover after parsing attributes in process `syz.4.328'. [ 233.343906][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 233.344041][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 233.345842][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 233.345937][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 233.345971][ T5812] Bluetooth: hci0: command 0x0401 tx timeout [ 233.356444][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 233.568997][ T31] usb 2-1: USB disconnect, device number 4 [ 235.300964][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 235.460951][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 235.473201][ T31] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 235.473229][ T31] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 235.473247][ T31] usb 3-1: Product: syz [ 235.473257][ T31] usb 3-1: Manufacturer: syz [ 235.473264][ T31] usb 3-1: SerialNumber: syz [ 235.518414][ T31] usb 3-1: config 0 descriptor?? [ 235.943844][ T31] usb 3-1: USB disconnect, device number 5 [ 236.176727][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.403704][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.480900][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.913909][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.745747][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.830950][ T1238] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.997440][ T1238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.997465][ T1238] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.997502][ T1238] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 238.997522][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.089031][ T1238] usb 4-1: config 0 descriptor?? [ 239.730395][ T7083] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 239.730765][ T7083] overlayfs: missing 'lowerdir' [ 240.354636][ T5889] usb 4-1: USB disconnect, device number 3 [ 248.972804][ T7166] evm: overlay not supported [ 249.525442][ T7167] sp0: Synchronizing with TNC [ 249.885636][ T7162] [U] è [ 251.013788][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 251.065888][ T7191] overlayfs: missing 'lowerdir' [ 251.183032][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.183061][ T31] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 251.183072][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.189585][ T31] usb 5-1: config 0 descriptor?? [ 251.662937][ T31] holtek 0003:1241:5015.0003: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 251.662968][ T31] holtek 0003:1241:5015.0003: no inputs found [ 251.839150][ T7198] delete_channel: no stack [ 251.857577][ T31] usb 5-1: USB disconnect, device number 7 [ 254.704384][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.100964][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 255.265636][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 255.265661][ T10] usb 4-1: config 0 has no interface number 0 [ 255.265713][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 255.293806][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 255.293833][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.293851][ T10] usb 4-1: Product: syz [ 255.293863][ T10] usb 4-1: Manufacturer: syz [ 255.293876][ T10] usb 4-1: SerialNumber: syz [ 255.320387][ T10] usb 4-1: config 0 descriptor?? [ 255.967475][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.889428][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.967325][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 256.967575][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 257.211837][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.027829][ T10] usb 4-1: USB disconnect, device number 4 [ 258.053133][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.160920][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 260.316238][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 260.316254][ T10] usb 3-1: config 0 has no interface number 0 [ 260.316282][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 260.319056][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 260.319071][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.319081][ T10] usb 3-1: Product: syz [ 260.319088][ T10] usb 3-1: Manufacturer: syz [ 260.319095][ T10] usb 3-1: SerialNumber: syz [ 260.511072][ T10] usb 3-1: config 0 descriptor?? [ 261.530729][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.102376][ T7311] sp0: Synchronizing with TNC [ 262.177990][ T7310] [U] è [ 263.105061][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.305272][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.343633][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.911636][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.805748][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -110 [ 265.805915][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -110 [ 268.449314][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.531740][ T31] usb 3-1: USB disconnect, device number 6 [ 268.681881][ T7350] sp0: Synchronizing with TNC [ 268.709483][ T7349] [U] è [ 269.865423][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.016877][ T7354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.017040][ T7354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.017688][ T7354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.017796][ T7354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 270.641950][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.331967][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.336245][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.622020][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 272.622062][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 272.622091][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 272.622118][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 274.120952][ T5787] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 274.275175][ T5787] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 274.275205][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.302303][ T5787] usb 5-1: config 0 descriptor?? [ 274.722819][ T5787] ath6kl: Failed to read usb control message: -71 [ 274.722872][ T5787] ath6kl: Unable to read the bmi data from the device: -71 [ 274.722886][ T5787] ath6kl: Unable to recv target info: -71 [ 274.758526][ T5787] ath6kl: Failed to init ath6kl core: -71 [ 274.759729][ T5787] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 274.800572][ T5787] usb 5-1: USB disconnect, device number 8 [ 275.534029][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.725093][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.365419][ T7428] ucma_write: process 306 (syz.3.466) changed security contexts after opening file descriptor, this is not allowed. [ 276.580343][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.452205][ T7445] siw: device registration error -23 [ 277.508412][ T7449] 8021q: VLANs not supported on tunl0 [ 281.575779][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 283.833852][ T7526] overlayfs: failed to clone upperpath [ 284.696250][ T7516] siw: device registration error -23 [ 285.080412][ T7537] Zero length message leads to an empty skb [ 285.080686][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 288.662066][ T5980] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 289.025826][ T5980] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.025854][ T5980] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 289.025873][ T5980] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.025931][ T5980] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.025955][ T5980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 289.025979][ T5980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 289.085369][ T5980] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.085386][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.085398][ T5980] usb 2-1: Product: syz [ 289.085406][ T5980] usb 2-1: Manufacturer: syz [ 289.126219][ T7563] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.139440][ T5980] cdc_wdm 2-1:1.0: skipping garbage [ 289.139451][ T5980] cdc_wdm 2-1:1.0: skipping garbage [ 289.338169][ T5980] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 289.338194][ T5980] cdc_wdm 2-1:1.0: Unknown control protocol [ 289.366341][ T5980] usb 2-1: USB disconnect, device number 5 [ 291.995038][ T7606] trusted_key: syz.3.522 sent an empty control message without MSG_MORE. [ 292.714063][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.749319][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.791910][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.998228][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.098391][ T7614] lo speed is unknown, defaulting to 1000 [ 295.410812][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.564988][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.752899][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.333700][ T7674] overlayfs: failed to resolve './file0': -2 [ 306.141298][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 306.435700][ T192] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 306.618826][ T7707] overlayfs: failed to resolve './file0': -2 [ 307.180873][ T192] usb 5-1: Using ep0 maxpacket: 32 [ 307.184540][ T192] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 307.184573][ T192] usb 5-1: config 0 has no interface number 0 [ 307.191002][ T192] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 307.191030][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.191048][ T192] usb 5-1: Product: syz [ 307.191223][ T192] usb 5-1: Manufacturer: syz [ 307.191238][ T192] usb 5-1: SerialNumber: syz [ 307.196879][ T192] usb 5-1: config 0 descriptor?? [ 307.303780][ T192] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 307.715774][ T192] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 307.836486][ T7716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.836696][ T7716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.836873][ T7716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.837033][ T7716] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.885883][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.009053][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.022076][ T192] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 308.030646][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.036087][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.105689][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.107083][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.455005][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 308.456036][ T5874] usb 5-1: USB disconnect, device number 9 [ 308.463336][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 308.498082][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 308.533439][ T5874] quatech2 5-1:0.51: device disconnected [ 309.881763][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 309.881800][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 309.881817][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 309.881859][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 309.955201][ T7739] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 309.955214][ T7739] netlink: 224 bytes leftover after parsing attributes in process `syz.1.563'. [ 310.345149][ T7745] overlayfs: failed to resolve './file1': -2 [ 310.473440][ T5874] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 311.463430][ T5874] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 311.463460][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.478915][ T5874] usb 3-1: config 0 descriptor?? [ 311.726451][ T7751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.726662][ T7751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.726862][ T7751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.727051][ T7751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 311.924662][ T5874] ath6kl: Failed to read usb control message: -32 [ 311.924712][ T5874] ath6kl: Unable to read the bmi data from the device: -32 [ 311.924727][ T5874] ath6kl: Unable to recv target info: -32 [ 311.952375][ T5874] ath6kl: Failed to init ath6kl core: -32 [ 311.952942][ T5874] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 311.958828][ T5874] usb 3-1: USB disconnect, device number 7 [ 314.605099][ T7790] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 314.830796][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 314.830836][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 314.830864][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 314.830891][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 315.008040][ T7795] overlayfs: failed to resolve './file1': -2 [ 316.302756][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.472109][ T7797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.472247][ T7797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.472353][ T7797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.472454][ T7797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 316.800889][ T5787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 316.941069][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.311225][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.322536][ T5787] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 317.322559][ T5787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.333518][ T5787] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.333546][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.333564][ T5787] usb 2-1: SerialNumber: syz [ 317.419031][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.604690][ T5787] usb 2-1: 0:2 : does not exist [ 318.699770][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 318.699814][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 318.699840][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 318.699866][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 318.700092][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.737728][ T5787] usb 2-1: USB disconnect, device number 6 [ 318.845542][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.525279][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.629982][ T6369] udevd[6369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.970893][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.525587][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.745256][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.794694][ T7847] binder: 7834:7847 ioctl c0306201 0 returned -14 [ 320.839894][ T7844] mmap: syz.1.598 (7844) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 320.946005][ T7853] ubi31: attaching mtd0 [ 320.972864][ T7853] ubi31: scanning is finished [ 321.323654][ T7854] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 321.612311][ T7853] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 321.612335][ T7853] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 321.612350][ T7853] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 321.612364][ T7853] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 321.612379][ T7853] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 321.612393][ T7853] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 321.612408][ T7853] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 357201966 [ 321.612424][ T7853] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 321.616169][ T7863] ubi31: background thread "ubi_bgt31d" started, PID 7863 [ 323.467252][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.740371][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.779376][ T7882] block nbd1: shutting down sockets [ 323.929844][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.674932][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.451060][ T7957] netlink: 52 bytes leftover after parsing attributes in process `syz.0.633'. [ 334.827941][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.706377][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.632179][ T8003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.647'. [ 340.002701][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.175471][ T8026] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 341.840969][ T5874] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 342.013314][ T5874] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 342.013341][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.067257][ T5874] usb 2-1: config 0 descriptor?? [ 342.088647][ T5874] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 342.202978][ T5805] Bluetooth: hci0: command tx timeout [ 342.481874][ T5874] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 343.485816][ T5874] gspca_cpia1: usb_control_msg 02, error -71 [ 343.485830][ T5874] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 343.541267][ T5874] usb 2-1: USB disconnect, device number 7 [ 345.059650][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.243328][ T8083] IPv6: Can't replace route, no match found [ 345.913877][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.734689][ T8099] /dev/nullb0: Can't open blockdev [ 349.350845][ T5874] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 349.518545][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.565100][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.565120][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.565141][ T5874] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 349.565152][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.689321][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.512284][ T5874] usb 5-1: config 0 descriptor?? [ 351.380285][ T5874] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 351.380315][ T5874] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 351.380330][ T5874] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 351.380345][ T5874] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 351.380359][ T5874] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 351.380374][ T5874] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 351.380388][ T5874] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 351.434756][ T5874] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 351.517174][ T5874] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 351.825158][ T5874] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 351.844798][ T5874] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32 [ 352.009243][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.802693][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.966703][ T10] usb 5-1: USB disconnect, device number 10 [ 353.132110][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 358.650852][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 359.304845][ T8201] sp0: Synchronizing with TNC [ 359.812239][ T8198] [U] è [ 361.530886][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 361.702737][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.702756][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 361.702779][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 361.702791][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.705976][ T10] usb 3-1: config 0 descriptor?? [ 362.937295][ T10] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 362.937323][ T10] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 362.937339][ T10] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 362.937353][ T10] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 362.937367][ T10] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 364.429470][ T10] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 368.188051][ T10] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 368.188169][ T10] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 368.273695][ T10] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 368.330890][ T10] usb 3-1: USB disconnect, device number 8 [ 368.661579][ T8243] fido_id[8243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 372.634840][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.682867][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.181692][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.076998][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.427950][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.118668][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.391437][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.690905][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.908673][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.849064][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.952113][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.136158][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.521549][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.371900][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.550903][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.790228][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.287672][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.718897][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.747152][ T8534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.058671][ T8561] 9pnet_fd: Insufficient options for proto=fd [ 426.870925][ T37] audit: type=1800 audit(1760839996.457:2): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.838" name="nullb0" dev="tmpfs" ino=949 res=0 errno=0 [ 428.134944][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 428.145912][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 428.147199][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 428.148867][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 428.151675][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 429.832955][ T993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.276784][ T993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.280753][ T5117] Bluetooth: hci1: command tx timeout [ 430.464076][ T8626] lo speed is unknown, defaulting to 1000 [ 431.390090][ T993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.638384][ T5117] Bluetooth: hci1: command tx timeout [ 432.703413][ T993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.049945][ T8695] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 434.465932][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 434.655744][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.655771][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.655812][ T5874] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 434.655830][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.663206][ T5874] usb 4-1: config 0 descriptor?? [ 434.680765][ T5117] Bluetooth: hci1: command tx timeout [ 434.834521][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 434.910352][ T993] bridge_slave_1: left allmulticast mode [ 434.910491][ T993] bridge_slave_1: left promiscuous mode [ 434.933068][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.069580][ T993] bridge_slave_0: left allmulticast mode [ 435.069611][ T993] bridge_slave_0: left promiscuous mode [ 435.087211][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.230229][ T5874] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 435.230266][ T5874] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 435.230290][ T5874] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 435.230315][ T5874] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 435.230338][ T5874] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 435.230363][ T5874] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 435.230386][ T5874] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 435.468214][ T5874] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 436.121276][ T5117] Bluetooth: hci0: command tx timeout [ 436.185249][ T5874] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 436.741852][ T5874] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 436.760725][ T5117] Bluetooth: hci1: command tx timeout [ 436.763224][ T5874] usb 4-1: USB disconnect, device number 5 [ 437.114558][ T8731] overlayfs: failed to resolve './file0': -2 [ 438.568248][ T8745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.294665][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.869129][ T5117] Bluetooth: hci4: unexpected cc 0x0809 length: 68 > 4 [ 441.869165][ T5117] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 442.360797][ T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 442.496627][ T8773] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 442.496665][ T8773] overlayfs: missing 'lowerdir' [ 442.651971][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.652002][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.652039][ T44] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 442.652060][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.711157][ T44] usb 5-1: config 0 descriptor?? [ 443.147988][ T44] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 443.148015][ T44] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 443.148030][ T44] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 443.148045][ T44] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 443.148059][ T44] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 443.148073][ T44] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 443.148087][ T44] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 443.172956][ T44] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 443.329316][ T44] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 443.526246][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.083925][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.114499][ T993] bond0 (unregistering): Released all slaves [ 444.289214][ T44] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 444.333718][ T44] usb 5-1: USB disconnect, device number 11 [ 445.151635][ T8797] overlayfs: failed to resolve './file0': -2 [ 447.493061][ T8822] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 447.493101][ T8822] overlayfs: missing 'lowerdir' [ 448.665878][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.665960][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.666293][ T8626] bridge_slave_0: entered allmulticast mode [ 448.696329][ T8626] bridge_slave_0: entered promiscuous mode [ 448.712975][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.730076][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.730312][ T8626] bridge_slave_1: entered allmulticast mode [ 448.755998][ T8626] bridge_slave_1: entered promiscuous mode [ 451.084748][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.136156][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.494044][ T993] hsr_slave_0: left promiscuous mode [ 451.548378][ T993] hsr_slave_1: left promiscuous mode [ 451.549729][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.549857][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.606610][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.606631][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.033844][ T993] veth1_macvtap: left promiscuous mode [ 452.034184][ T993] veth0_macvtap: left promiscuous mode [ 452.034507][ T993] veth1_vlan: left promiscuous mode [ 452.034890][ T993] veth0_vlan: left promiscuous mode [ 457.131027][ T993] team0 (unregistering): Port device team_slave_1 removed [ 457.831439][ T993] team0 (unregistering): Port device team_slave_0 removed [ 464.652114][ T8977] fuse: Bad value for 'group_id' [ 464.652126][ T8977] fuse: Bad value for 'group_id' [ 465.352381][ T8626] team0: Port device team_slave_0 added [ 465.372538][ T8626] team0: Port device team_slave_1 added [ 465.945310][ T8979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.945605][ T8979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.945822][ T8979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 465.946401][ T8979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.946782][ T8979] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 467.219239][ T8993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 467.438935][ T8979] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 468.358557][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.365053][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 468.365095][ T5117] Bluetooth: hci1: command 0x0c1a tx timeout [ 468.365380][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 468.365411][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 468.581307][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.581323][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.581347][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.606033][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.610908][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.610924][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.610947][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.579510][ T8626] hsr_slave_0: entered promiscuous mode [ 469.615107][ T8626] hsr_slave_1: entered promiscuous mode [ 469.616171][ T8626] debugfs: 'hsr0' already exists in 'hsr' [ 469.616214][ T8626] Cannot create hsr debugfs directory [ 469.654745][ T9019] fuse: Bad value for 'group_id' [ 469.654758][ T9019] fuse: Bad value for 'group_id' [ 471.033702][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 471.240686][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.587053][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.949182][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.510254][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.259988][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.420784][ T5889] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 474.517391][ T8626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 474.546138][ T8626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 474.589189][ T8626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 474.597487][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 474.599457][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 474.599478][ T5889] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.599491][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 474.599503][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 474.599514][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 474.603099][ T5889] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 474.603124][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.603142][ T5889] usb 5-1: Product: syz [ 474.603154][ T5889] usb 5-1: Manufacturer: syz [ 474.603167][ T5889] usb 5-1: SerialNumber: syz [ 474.714982][ T5889] usb 5-1: config 0 descriptor?? [ 474.875599][ T8626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 474.973320][ T5889] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 475.013702][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 475.129543][ T9067] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 475.184466][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 475.278120][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 475.281394][ T44] usb 5-1: USB disconnect, device number 12 [ 476.816986][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.862556][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.880410][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.890968][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.910493][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.918393][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.169168][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.894703][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.970501][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.621312][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.753966][ T9173] sd 0:0:1:0: device reset [ 484.327489][ T8626] veth0_vlan: entered promiscuous mode [ 484.397832][ T8626] veth1_vlan: entered promiscuous mode [ 484.494687][ T8626] veth0_macvtap: entered promiscuous mode [ 484.517727][ T8626] veth1_macvtap: entered promiscuous mode [ 484.544670][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.566351][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.597071][ T1451] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.637846][ T1451] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.641663][ T1451] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.641901][ T1451] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.113310][ T6599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.113325][ T6599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.259225][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.259245][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.401409][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.083867][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.238571][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.250056][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.263058][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.267271][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.268112][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.618009][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.839516][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.554816][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.350691][ T5117] Bluetooth: hci1: command tx timeout [ 489.571254][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.716645][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.592303][ T9236] siw: device registration error -23 [ 490.806136][ T993] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.009931][ T9210] lo speed is unknown, defaulting to 1000 [ 491.250712][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.343885][ T993] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.400784][ T5117] Bluetooth: hci1: command tx timeout [ 491.500797][ T6023] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 491.663241][ T6023] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 491.663267][ T6023] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.663284][ T6023] usb 5-1: config 0 has no interface number 0 [ 491.663329][ T6023] usb 5-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 491.663348][ T6023] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.663373][ T6023] usb 5-1: config 0 interface 41 has no altsetting 0 [ 491.666387][ T6023] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 491.666413][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.666431][ T6023] usb 5-1: Product: syz [ 491.666443][ T6023] usb 5-1: Manufacturer: syz [ 491.666456][ T6023] usb 5-1: SerialNumber: syz [ 491.764529][ T6023] usb 5-1: config 0 descriptor?? [ 491.781764][ T6023] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 492.043700][ T993] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.388374][ T993] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.501260][ T5117] Bluetooth: hci1: command tx timeout [ 496.070714][ T5117] Bluetooth: hci1: command tx timeout [ 496.570990][ T993] bridge_slave_1: left allmulticast mode [ 496.571019][ T993] bridge_slave_1: left promiscuous mode [ 496.571340][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.034455][ T993] bridge_slave_0: left allmulticast mode [ 497.034474][ T993] bridge_slave_0: left promiscuous mode [ 497.034620][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.226010][ T9304] siw: device registration error -23 [ 497.619441][ T192] usb 5-1: USB disconnect, device number 13 [ 501.280848][ T1238] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 501.489248][ T1238] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 501.489274][ T1238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.489292][ T1238] usb 4-1: config 0 has no interface number 0 [ 501.489332][ T1238] usb 4-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 501.489343][ T1238] usb 4-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.489356][ T1238] usb 4-1: config 0 interface 41 has no altsetting 0 [ 501.502438][ T1238] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 501.502455][ T1238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.502465][ T1238] usb 4-1: Product: syz [ 501.502472][ T1238] usb 4-1: Manufacturer: syz [ 501.502479][ T1238] usb 4-1: SerialNumber: syz [ 501.540464][ T1238] usb 4-1: config 0 descriptor?? [ 501.593434][ T1238] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 501.726474][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.268376][ T9] usb 4-1: USB disconnect, device number 6 [ 502.821493][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.901302][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.946271][ T993] bond0 (unregistering): Released all slaves [ 505.774146][ T9210] chnl_net:caif_netlink_parms(): no params data found [ 508.040796][ T993] hsr_slave_0: left promiscuous mode [ 508.080904][ T993] hsr_slave_1: left promiscuous mode [ 508.085088][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.085118][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.114909][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.114929][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.198886][ T993] veth1_macvtap: left promiscuous mode [ 508.198953][ T993] veth0_macvtap: left promiscuous mode [ 508.200412][ T993] veth1_vlan: left promiscuous mode [ 508.200525][ T993] veth0_vlan: left promiscuous mode [ 510.093310][ T37] audit: type=1800 audit(1760840079.717:3): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1050" name="nullb0" dev="tmpfs" ino=949 res=0 errno=0 [ 510.412502][ T993] team0 (unregistering): Port device team_slave_1 removed [ 510.741577][ T993] team0 (unregistering): Port device team_slave_0 removed [ 513.192691][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.192826][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.193047][ T9210] bridge_slave_0: entered allmulticast mode [ 513.195703][ T9210] bridge_slave_0: entered promiscuous mode [ 513.270457][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.270728][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.270941][ T9210] bridge_slave_1: entered allmulticast mode [ 513.299159][ T9210] bridge_slave_1: entered promiscuous mode [ 513.403334][ T9466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.287833][ T9210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.710832][ T9210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.078986][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 515.633259][ T9210] team0: Port device team_slave_0 added [ 515.683188][ T9210] team0: Port device team_slave_1 added [ 516.250438][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.250455][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.250479][ T9210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.263150][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.263166][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.263189][ T9210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.434844][ T9510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.843212][ T9210] hsr_slave_0: entered promiscuous mode [ 516.844544][ T9210] hsr_slave_1: entered promiscuous mode [ 516.845545][ T9210] debugfs: 'hsr0' already exists in 'hsr' [ 516.845568][ T9210] Cannot create hsr debugfs directory [ 520.156411][ T9585] netlink: 'syz.0.1088': attribute type 4 has an invalid length. [ 520.156479][ T9585] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1088'. [ 520.553973][ T9587] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1088'. [ 525.108112][ T9210] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 525.163887][ T9210] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 525.224898][ T9210] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 525.278504][ T9210] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 525.946852][ T9210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.537863][ T9210] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.567086][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.567288][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.603297][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.603452][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.362041][ T9676] overlayfs: failed to clone upperpath [ 530.448457][ T9210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.706286][ T9210] veth0_vlan: entered promiscuous mode [ 531.742357][ T9210] veth1_vlan: entered promiscuous mode [ 531.951069][ T9210] veth0_macvtap: entered promiscuous mode [ 531.958691][ T9210] veth1_macvtap: entered promiscuous mode [ 531.999101][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.023662][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.045233][ T993] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.045511][ T993] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.045550][ T993] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.045584][ T993] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.290160][ T9751] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1118'. [ 534.733570][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.733591][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.058788][ T6599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.058807][ T6599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.004285][ T9844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.339985][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.605451][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.330939][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.334121][ T5874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 543.480996][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 543.483523][ T5874] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 543.483549][ T5874] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.483573][ T5874] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.483597][ T5874] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 543.483617][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.487777][ T5874] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 543.487804][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.487822][ T5874] usb 5-1: Product: syz [ 543.487834][ T5874] usb 5-1: Manufacturer: syz [ 543.487846][ T5874] usb 5-1: SerialNumber: syz [ 543.602961][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.625894][ T5874] usb 5-1: config 0 descriptor?? [ 543.981408][ T5874] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 543.984198][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 544.043859][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 544.088048][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 544.121227][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 544.184010][ T9850] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 544.307607][ T192] usb 5-1: USB disconnect, device number 14 [ 544.661756][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.079023][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.198949][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.648238][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.063539][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.417563][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.567891][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.868534][ T5117] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 548.392543][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.136292][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.378893][ T9992] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 554.378904][ T9992] overlayfs: missing 'lowerdir' [ 556.618150][T10030] lo speed is unknown, defaulting to 1000 [ 557.897401][T10053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1188'. [ 560.520055][T10092] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1201'. [ 562.790722][T10123] lo speed is unknown, defaulting to 1000 [ 564.231001][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.786487][T10148] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 565.786518][T10148] overlayfs: missing 'lowerdir' [ 575.423181][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.788574][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.271176][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.522572][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.185274][T10241] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 577.185303][T10241] overlayfs: missing 'lowerdir' [ 578.549810][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.874421][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.990129][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.455658][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.828432][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.034049][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.639160][ T37] audit: type=1326 audit(1760840152.257:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.0.1263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89e368efc9 code=0x0 [ 582.745541][T10306] lo speed is unknown, defaulting to 1000 [ 582.748391][T10306] lo speed is unknown, defaulting to 1000 [ 582.750436][T10306] lo speed is unknown, defaulting to 1000 [ 583.046529][T10306] infiniband sz1: set active [ 583.046549][T10306] infiniband sz1: added lo [ 583.241463][ T5787] lo speed is unknown, defaulting to 1000 [ 583.749563][T10306] RDS/IB: sz1: added [ 583.750764][T10306] smc: adding ib device sz1 with port count 1 [ 583.751122][T10306] smc: ib device sz1 port 1 has no pnetid [ 583.755035][T10306] lo speed is unknown, defaulting to 1000 [ 584.010878][T10306] lo speed is unknown, defaulting to 1000 [ 584.193129][T10306] lo speed is unknown, defaulting to 1000 [ 584.368401][T10306] lo speed is unknown, defaulting to 1000 [ 584.541906][T10306] lo speed is unknown, defaulting to 1000 [ 584.681446][ T192] lo speed is unknown, defaulting to 1000 [ 590.800639][ T5787] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 590.961125][ T5787] usb 5-1: Using ep0 maxpacket: 16 [ 590.963908][ T5787] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 590.963936][ T5787] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 590.963960][ T5787] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 590.963984][ T5787] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 590.964005][ T5787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 590.969932][ T5787] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 590.969960][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.969979][ T5787] usb 5-1: Product: syz [ 590.969993][ T5787] usb 5-1: Manufacturer: syz [ 590.970007][ T5787] usb 5-1: SerialNumber: syz [ 591.083969][ T5787] usb 5-1: config 0 descriptor?? [ 592.395516][ T5787] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 592.413977][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 592.500914][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 592.700715][T10357] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 592.972528][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 593.613483][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 593.655563][ T44] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.655597][ T44] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 593.655636][ T44] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.655657][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.698673][T10355] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 593.723158][T10353] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 593.749224][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 593.771128][ T44] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.626052][T10369] tmpfs: Unsupported parameter 'huge' [ 596.697564][ T9] usb 5-1: USB disconnect, device number 15 [ 596.716645][ T5153] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 598.626612][ T44] usb 6-1: USB disconnect, device number 2 [ 598.972859][T10399] tmpfs: Unsupported parameter 'huge' [ 601.304927][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.330300][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.350794][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.397305][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.405241][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 602.003532][T10411] lo speed is unknown, defaulting to 1000 [ 602.016386][T10411] lo speed is unknown, defaulting to 1000 [ 602.191594][T10419] fuse: Bad value for 'rootmode' [ 603.490986][ T5117] Bluetooth: hci5: command tx timeout [ 603.662758][T10429] binder: BINDER_SET_CONTEXT_MGR already set [ 603.662772][T10429] binder: 10428:10429 ioctl 4018620d 2000000002c0 returned -16 [ 604.782915][T10439] tmpfs: Unsupported parameter 'huge' [ 605.895804][ T5117] Bluetooth: hci5: command tx timeout [ 605.979487][ T993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.970919][ T5117] Bluetooth: hci5: command tx timeout [ 611.601537][ T5812] Bluetooth: hci5: command tx timeout [ 613.089708][ T993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.120620][ T5889] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 613.270654][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 613.276587][ T5889] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 613.276612][ T5889] usb 4-1: config 0 has no interface number 0 [ 613.307599][ T5889] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 613.307628][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.307646][ T5889] usb 4-1: Product: syz [ 613.307660][ T5889] usb 4-1: Manufacturer: syz [ 613.307673][ T5889] usb 4-1: SerialNumber: syz [ 613.419001][ T5889] usb 4-1: config 0 descriptor?? [ 613.437929][ T5889] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 613.641252][ T5117] Bluetooth: hci1: command tx timeout [ 613.816773][ T5889] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 613.834782][ T5889] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 614.575285][ T5117] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 614.639389][ T5881] usb 4-1: USB disconnect, device number 7 [ 615.002123][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 615.077929][ T5881] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 615.141369][ T5881] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 615.144897][ T5881] quatech2 4-1:0.51: device disconnected [ 615.252607][ T993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.349791][T10411] chnl_net:caif_netlink_parms(): no params data found [ 615.711286][ T993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.209965][T10411] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.210096][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.210343][T10411] bridge_slave_0: entered allmulticast mode [ 617.214090][T10411] bridge_slave_0: entered promiscuous mode [ 617.325946][T10411] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.326079][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.326270][T10411] bridge_slave_1: entered allmulticast mode [ 617.357202][T10411] bridge_slave_1: entered promiscuous mode [ 618.095221][T10411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.213592][T10411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.250363][T10524] lo speed is unknown, defaulting to 1000 [ 618.251985][T10524] lo speed is unknown, defaulting to 1000 [ 618.604384][ T5117] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 618.604583][ T5117] Bluetooth: hci3: Injecting HCI hardware error event [ 618.606763][ T5117] Bluetooth: hci3: hardware error 0x00 [ 618.717865][ T993] bridge_slave_1: left allmulticast mode [ 618.717892][ T993] bridge_slave_1: left promiscuous mode [ 618.718139][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.804802][ T993] bridge_slave_0: left allmulticast mode [ 618.804830][ T993] bridge_slave_0: left promiscuous mode [ 618.805103][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.681444][ T5117] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 623.391449][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.458403][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.496114][ T993] bond0 (unregistering): Released all slaves [ 623.763016][T10562] binder: BINDER_SET_CONTEXT_MGR already set [ 623.763047][T10562] binder: 10560:10562 ioctl 4018620d 2000000002c0 returned -16 [ 623.877629][T10411] team0: Port device team_slave_0 added [ 624.093967][T10411] team0: Port device team_slave_1 added [ 624.719163][T10574] overlayfs: failed to clone upperpath [ 624.725376][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.952876][T10411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.952886][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.952900][T10411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.038940][T10411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.038957][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.038982][T10411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.662042][T10599] fuse: Unknown parameter 'use00000000000000000000' [ 629.323938][T10411] hsr_slave_0: entered promiscuous mode [ 629.329299][T10411] hsr_slave_1: entered promiscuous mode [ 629.347103][T10411] debugfs: 'hsr0' already exists in 'hsr' [ 629.347123][T10411] Cannot create hsr debugfs directory [ 629.554911][ T993] hsr_slave_0: left promiscuous mode [ 629.605888][ T993] hsr_slave_1: left promiscuous mode [ 629.606616][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.606632][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.663269][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.663288][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.840903][ T993] veth1_macvtap: left promiscuous mode [ 629.841013][ T993] veth0_macvtap: left promiscuous mode [ 629.844630][ T993] veth1_vlan: left promiscuous mode [ 629.845779][ T993] veth0_vlan: left promiscuous mode [ 632.080592][ T5881] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 632.310679][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 632.313171][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.313188][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.313209][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.00 [ 632.313219][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.319058][ T5881] usb 4-1: config 0 descriptor?? [ 633.661843][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 633.661965][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 633.706349][ T5881] usb 4-1: USB disconnect, device number 8 [ 633.963732][T10651] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 633.963832][T10651] overlayfs: missing 'lowerdir' [ 636.624419][T10672] futex_wake_op: syz.0.1362 tries to shift op by -1; fix this program [ 639.007617][T10684] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 639.007726][T10684] overlayfs: missing 'lowerdir' [ 641.300570][ T5889] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 641.482615][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 641.485341][ T5889] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 641.485357][ T5889] usb 6-1: config 0 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 641.485367][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 641.487474][ T5889] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 641.487489][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.487499][ T5889] usb 6-1: Product: syz [ 641.487506][ T5889] usb 6-1: Manufacturer: syz [ 641.487514][ T5889] usb 6-1: SerialNumber: syz [ 641.493231][ T5889] usb 6-1: config 0 descriptor?? [ 642.174151][ T5889] usb 6-1: USB disconnect, device number 3 [ 642.209812][ T993] team0 (unregistering): Port device team_slave_1 removed [ 642.791469][ T993] team0 (unregistering): Port device team_slave_0 removed [ 643.240519][ T5889] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 643.350771][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.454199][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.466832][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 643.469410][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 643.469428][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 643.469451][ T5889] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 643.469462][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.498584][ T5889] usb 6-1: config 0 descriptor?? [ 643.504022][T10710] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 643.536334][ T5889] hub 6-1:0.0: USB hub found [ 643.724624][ T5889] hub 6-1:0.0: 1 port detected [ 643.881928][T10713] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 644.453853][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.549360][ T5889] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 644.667138][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.787446][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.988333][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.138234][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.486827][T10724] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 645.486998][T10724] overlayfs: missing 'lowerdir' [ 645.830932][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.139708][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.649851][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.687977][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.872267][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 647.648702][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.873453][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.056742][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.112159][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.186896][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.733242][ T5889] usb 6-1: device descriptor read/64, error -110 [ 651.034663][T10759] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 651.034674][T10759] overlayfs: missing 'lowerdir' [ 651.243654][ T6023] usb 6-1: USB disconnect, device number 4 [ 654.430283][T10411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 654.522574][T10411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 654.855964][T10411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 654.955305][T10411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 655.023243][ T6023] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 655.170528][ T6023] usb 4-1: Using ep0 maxpacket: 16 [ 655.172989][ T6023] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 655.173015][ T6023] usb 4-1: config 0 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 655.173035][ T6023] usb 4-1: config 0 interface 0 has no altsetting 0 [ 655.175984][ T6023] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 655.176010][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.176029][ T6023] usb 4-1: Product: syz [ 655.176042][ T6023] usb 4-1: Manufacturer: syz [ 655.176055][ T6023] usb 4-1: SerialNumber: syz [ 655.245421][ T6023] usb 4-1: config 0 descriptor?? [ 656.036204][T10814] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 656.036308][T10814] overlayfs: missing 'lowerdir' [ 656.449170][ T9] usb 4-1: USB disconnect, device number 9 [ 657.098502][T10411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.675051][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.698715][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.708299][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.738902][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.742453][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.276007][T10848] lo speed is unknown, defaulting to 1000 [ 661.302458][T10848] lo speed is unknown, defaulting to 1000 [ 661.801319][ T5805] Bluetooth: hci0: command tx timeout [ 662.072322][T10868] netlink: 'syz.0.1408': attribute type 5 has an invalid length. [ 663.371645][ T6023] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 663.500588][ T6023] usb 5-1: device descriptor read/64, error -71 [ 663.933755][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.934262][ T5805] Bluetooth: hci0: command tx timeout [ 664.020693][ T6023] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 664.166591][ T6023] usb 5-1: device descriptor read/64, error -71 [ 664.273992][ T6023] usb usb5-port1: attempt power cycle [ 664.632460][ T993] bridge_slave_1: left allmulticast mode [ 664.632489][ T993] bridge_slave_1: left promiscuous mode [ 664.632760][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.640562][ T6023] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 664.661571][ T6023] usb 5-1: device descriptor read/8, error -71 [ 664.913086][ T6023] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 664.931566][ T6023] usb 5-1: device descriptor read/8, error -71 [ 664.969875][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.994638][T10904] syz.3.1416 (10904) used greatest stack depth: 16776 bytes left [ 665.069695][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.104627][ T6023] usb usb5-port1: unable to enumerate USB device [ 665.174385][ T993] bridge_slave_0: left allmulticast mode [ 665.174413][ T993] bridge_slave_0: left promiscuous mode [ 665.174674][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.485888][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.826435][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.095701][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.098368][ T5805] Bluetooth: hci0: command tx timeout [ 666.542804][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.728088][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.078132][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.652266][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.123483][ T5805] Bluetooth: hci0: command tx timeout [ 668.994008][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.553501][T10944] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 669.553524][T10944] CIFS mount error: No usable UNC path provided in device string! [ 669.553524][T10944] [ 669.553788][T10944] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 670.297809][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.726869][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.998444][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.663107][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.807240][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.846696][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.895267][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.009839][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.010829][ T5874] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 672.146343][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.640374][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.647517][ T5874] usb 5-1: device descriptor read/64, error -71 [ 672.890692][ T5874] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 673.020635][ T5874] usb 5-1: device descriptor read/64, error -71 [ 673.131916][ T5874] usb usb5-port1: attempt power cycle [ 673.471193][ T5874] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 673.491311][ T5874] usb 5-1: device descriptor read/8, error -71 [ 674.080607][ T5874] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 674.100913][ T5874] usb 5-1: device descriptor read/8, error -71 [ 674.191109][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.250613][ T5874] usb usb5-port1: unable to enumerate USB device [ 674.560297][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.667785][ T993] bond0 (unregistering): Released all slaves [ 674.968014][T10848] chnl_net:caif_netlink_parms(): no params data found [ 679.268859][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.574287][T11017] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 680.821613][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.350264][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.397369][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.570597][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.087301][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.119104][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.276520][ T993] hsr_slave_0: left promiscuous mode [ 682.587827][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.242082][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.265213][ T993] hsr_slave_1: left promiscuous mode [ 683.269058][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.331455][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.507944][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.711015][ T5874] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 683.872845][ T5874] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 683.872873][ T5874] usb 5-1: config 0 has no interface number 0 [ 683.875861][ T5874] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 683.875887][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.875905][ T5874] usb 5-1: Product: syz [ 683.875919][ T5874] usb 5-1: Manufacturer: syz [ 683.875933][ T5874] usb 5-1: SerialNumber: syz [ 684.129508][ T5874] usb 5-1: config 0 descriptor?? [ 684.149066][ T5874] hub 5-1:0.217: bad descriptor, ignoring hub [ 684.149105][ T5874] hub 5-1:0.217: probe with driver hub failed with error -5 [ 684.236557][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.403649][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.409840][ T5874] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 684.799548][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 684.800996][ T5874] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 684.801109][ T5874] usb 5-1: media controller created [ 684.864515][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.044811][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.205851][ T5874] DVB: Unable to find symbol dib7000p_attach() [ 685.205872][ T5874] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 685.410544][ T5874] rc_core: IR keymap rc-dib0700-rc5 not found [ 685.410564][ T5874] Registered IR keymap rc-empty [ 685.411188][ T5874] dvb-usb: could not initialize remote control. [ 685.411198][ T5874] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 685.723518][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.860099][ T5874] usb 5-1: USB disconnect, device number 24 [ 685.918702][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.536458][ T5874] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 686.569386][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.639213][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.669804][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.761599][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.934330][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.017381][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.065788][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.131134][ T993] team0 (unregistering): Port device team_slave_1 removed [ 687.613246][ T993] team0 (unregistering): Port device team_slave_0 removed [ 690.296083][T10848] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.296291][T10848] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.296518][T10848] bridge_slave_0: entered allmulticast mode [ 690.312082][T10848] bridge_slave_0: entered promiscuous mode [ 690.388532][T10848] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.388691][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.388938][T10848] bridge_slave_1: entered allmulticast mode [ 690.426089][T10848] bridge_slave_1: entered promiscuous mode [ 691.383838][ T5881] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 691.533055][ T5881] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 691.533082][ T5881] usb 5-1: config 0 has no interface number 0 [ 691.536496][ T5881] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 691.536523][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.536542][ T5881] usb 5-1: Product: syz [ 691.536556][ T5881] usb 5-1: Manufacturer: syz [ 691.536570][ T5881] usb 5-1: SerialNumber: syz [ 691.563468][ T5881] usb 5-1: config 0 descriptor?? [ 691.578227][ T5881] hub 5-1:0.217: bad descriptor, ignoring hub [ 691.578266][ T5881] hub 5-1:0.217: probe with driver hub failed with error -5 [ 691.824849][T10848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.844734][T10848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.875113][ T5881] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 691.950691][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.957531][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 691.978396][ T5881] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 691.978459][ T5881] usb 5-1: media controller created [ 692.147869][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 692.298975][T10848] team0: Port device team_slave_0 added [ 692.309776][T10848] team0: Port device team_slave_1 added [ 692.748526][ T5881] DVB: Unable to find symbol dib7000p_attach() [ 692.748542][ T5881] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 692.800898][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.930628][ T5881] rc_core: IR keymap rc-dib0700-rc5 not found [ 692.930650][ T5881] Registered IR keymap rc-empty [ 692.930948][ T5881] dvb-usb: could not initialize remote control. [ 692.930957][ T5881] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 692.960889][ T5881] usb 5-1: USB disconnect, device number 25 [ 693.124524][ T5881] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 693.132744][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.409799][T11128] input: syz1 as /devices/virtual/input/input12 [ 693.570883][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.771773][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.918595][T10848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.918612][T10848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.918638][T10848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.939555][T10848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.939582][T10848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.939609][T10848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.114232][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.599752][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.206062][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.459223][T10848] hsr_slave_0: entered promiscuous mode [ 696.904436][T10848] hsr_slave_1: entered promiscuous mode [ 697.340573][ T5881] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 697.506812][ T5881] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 697.506840][ T5881] usb 4-1: config 0 has no interface number 0 [ 697.511256][ T5881] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 697.511293][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.511313][ T5881] usb 4-1: Product: syz [ 697.511327][ T5881] usb 4-1: Manufacturer: syz [ 697.511341][ T5881] usb 4-1: SerialNumber: syz [ 697.592991][ T5881] usb 4-1: config 0 descriptor?? [ 697.630806][ T5881] hub 4-1:0.217: bad descriptor, ignoring hub [ 697.630847][ T5881] hub 4-1:0.217: probe with driver hub failed with error -5 [ 697.990615][ T5881] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 698.002483][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 698.004908][ T5881] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 698.004972][ T5881] usb 4-1: media controller created [ 698.893583][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 699.040520][ T6023] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 699.083053][ T5881] DVB: Unable to find symbol dib7000p_attach() [ 699.083069][ T5881] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 699.170591][ T6023] usb 6-1: device descriptor read/64, error -71 [ 699.280535][ T5881] rc_core: IR keymap rc-dib0700-rc5 not found [ 699.280556][ T5881] Registered IR keymap rc-empty [ 699.280842][ T5881] dvb-usb: could not initialize remote control. [ 699.280851][ T5881] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 699.286796][ T5881] usb 4-1: USB disconnect, device number 10 [ 699.430696][ T5881] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 699.450671][ T6023] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 699.622013][ T6023] usb 6-1: device descriptor read/64, error -71 [ 699.743529][ T6023] usb usb6-port1: attempt power cycle [ 700.090614][ T6023] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 700.111267][ T6023] usb 6-1: device descriptor read/8, error -71 [ 700.350575][ T6023] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 700.405986][ T6023] usb 6-1: device descriptor read/8, error -71 [ 700.510846][ T6023] usb usb6-port1: unable to enumerate USB device [ 700.846091][T11204] program syz.5.1483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.262560][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1489'. [ 703.916987][T11237] overlayfs: failed to clone upperpath [ 703.980846][ T5881] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 704.385710][ T5881] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 704.386917][ T5881] usb 6-1: config 0 has no interface number 0 [ 704.404922][ T5881] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 704.404951][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.404968][ T5881] usb 6-1: Product: syz [ 704.404980][ T5881] usb 6-1: Manufacturer: syz [ 704.404994][ T5881] usb 6-1: SerialNumber: syz [ 704.409270][ T5881] usb 6-1: config 0 descriptor?? [ 704.411960][ T5881] hub 6-1:0.217: bad descriptor, ignoring hub [ 704.411983][ T5881] hub 6-1:0.217: probe with driver hub failed with error -5 [ 704.618192][ T5881] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 704.653578][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 704.662256][ T5881] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 704.662313][ T5881] usb 6-1: media controller created [ 704.886920][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.143982][T10848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 705.261175][T10848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 705.391251][T10848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 705.394613][ T5881] DVB: Unable to find symbol dib7000p_attach() [ 705.394633][ T5881] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 705.449977][T10848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 705.630531][ T5881] rc_core: IR keymap rc-dib0700-rc5 not found [ 705.630544][ T5881] Registered IR keymap rc-empty [ 705.630717][ T5881] dvb-usb: could not initialize remote control. [ 705.630722][ T5881] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 705.637194][ T5881] usb 6-1: USB disconnect, device number 9 [ 705.970904][ T5881] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 707.554601][T10848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.682162][T10848] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.728873][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.741340][ T9793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.600671][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.600826][ T9793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.327187][T11292] netlink: 'syz.0.1503': attribute type 3 has an invalid length. [ 713.371983][T10848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.402763][T11329] overlayfs: failed to clone upperpath [ 716.740634][T10848] veth0_vlan: entered promiscuous mode [ 716.766826][T10848] veth1_vlan: entered promiscuous mode [ 717.607747][T10848] veth0_macvtap: entered promiscuous mode [ 717.795404][T10848] veth1_macvtap: entered promiscuous mode [ 719.542662][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 719.567474][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 719.603308][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 719.605325][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 719.606124][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.148055][T11405] lo speed is unknown, defaulting to 1000 [ 721.183132][T11405] lo speed is unknown, defaulting to 1000 [ 721.761420][ T5117] Bluetooth: hci0: command tx timeout [ 723.811780][ T5117] Bluetooth: hci0: command tx timeout [ 725.984458][ T5117] Bluetooth: hci0: command tx timeout [ 726.481963][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 726.508008][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 726.516477][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.518264][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.532184][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 727.442150][T11475] lo speed is unknown, defaulting to 1000 [ 727.476297][T11475] lo speed is unknown, defaulting to 1000 [ 728.052332][ T5805] Bluetooth: hci0: command tx timeout [ 728.516413][T11405] chnl_net:caif_netlink_parms(): no params data found [ 728.680533][ T5805] Bluetooth: hci5: command tx timeout [ 728.709617][ T12] bridge_slave_1: left allmulticast mode [ 728.709636][ T12] bridge_slave_1: left promiscuous mode [ 728.709784][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.007105][ T12] bridge_slave_0: left allmulticast mode [ 729.007135][ T12] bridge_slave_0: left promiscuous mode [ 729.029481][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.152756][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 730.764301][ T5805] Bluetooth: hci5: command tx timeout [ 732.874711][ T5805] Bluetooth: hci5: command tx timeout [ 733.121472][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.161641][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.184786][ T12] bond0 (unregistering): Released all slaves [ 733.673384][T11509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.673415][T11509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.789882][T11509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.794361][T11509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.932554][ T5805] Bluetooth: hci5: command tx timeout [ 735.776885][T11557] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1555'. [ 736.280924][ T12] hsr_slave_0: left promiscuous mode [ 736.750547][ T12] hsr_slave_1: left promiscuous mode [ 736.751597][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.908287][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 736.971413][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.155388][ T12] veth1_macvtap: left promiscuous mode [ 737.155503][ T12] veth0_macvtap: left promiscuous mode [ 737.155777][ T12] veth1_vlan: left promiscuous mode [ 737.155965][ T12] veth0_vlan: left promiscuous mode [ 738.005676][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.210704][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.594342][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.649437][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.724992][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.838532][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.050713][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.275427][ T37] audit: type=1326 audit(1760840308.897:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11584 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 739.275630][ T37] audit: type=1326 audit(1760840308.897:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11584 comm="syz.4.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 739.411038][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.476421][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.760212][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.810436][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.558156][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.806743][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.881181][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.954165][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.021783][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.092976][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.258879][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.559190][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.420608][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.533126][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.672361][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.779019][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.870990][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.945816][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.139290][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.361979][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.488291][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.285686][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.355508][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.521125][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.558262][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.724934][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.873523][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.013820][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.578053][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.720210][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.319831][ T12] team0 (unregistering): Port device team_slave_1 removed [ 746.363508][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.081287][ T12] team0 (unregistering): Port device team_slave_0 removed [ 747.571541][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.701395][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.143772][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 753.149435][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 753.152383][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 753.156452][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 753.158674][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 754.696532][T11405] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.696670][T11405] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.696891][T11405] bridge_slave_0: entered allmulticast mode [ 754.699121][T11405] bridge_slave_0: entered promiscuous mode [ 754.869989][T11405] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.870168][T11405] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.872138][T11405] bridge_slave_1: entered allmulticast mode [ 754.874737][T11405] bridge_slave_1: entered promiscuous mode [ 755.231547][T11405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.238996][T11405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.250501][ T5805] Bluetooth: hci1: command tx timeout [ 755.873180][T11405] team0: Port device team_slave_0 added [ 755.878503][T11717] lo speed is unknown, defaulting to 1000 [ 755.883479][T11405] team0: Port device team_slave_1 added [ 756.953571][T11717] lo speed is unknown, defaulting to 1000 [ 757.114204][T11405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.114220][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.114248][T11405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.264776][T11405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.264793][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.264818][T11405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.320669][ T5805] Bluetooth: hci1: command tx timeout [ 757.919901][T11405] hsr_slave_0: entered promiscuous mode [ 757.942196][T11405] hsr_slave_1: entered promiscuous mode [ 757.962726][T11475] chnl_net:caif_netlink_parms(): no params data found [ 758.369753][T11771] program syz.4.1615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 759.400739][ T5805] Bluetooth: hci1: command tx timeout [ 759.962514][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.626459][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.481268][ T5805] Bluetooth: hci1: command tx timeout [ 761.983798][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.083293][T11475] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.083406][T11475] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.083626][T11475] bridge_slave_0: entered allmulticast mode [ 762.086005][T11475] bridge_slave_0: entered promiscuous mode [ 762.681928][T11475] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.682149][T11475] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.682408][T11475] bridge_slave_1: entered allmulticast mode [ 762.685446][T11475] bridge_slave_1: entered promiscuous mode [ 762.742320][T11809] fuse: Bad value for 'fd' [ 764.944543][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.015468][T11475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.215625][T11475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.807825][T11475] team0: Port device team_slave_0 added [ 765.842261][ T6023] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 765.995655][ T6023] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 765.995680][ T6023] usb 4-1: config 0 has no interface number 0 [ 765.998670][ T6023] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 765.998698][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.998717][ T6023] usb 4-1: Product: syz [ 765.998731][ T6023] usb 4-1: Manufacturer: syz [ 765.998744][ T6023] usb 4-1: SerialNumber: syz [ 766.050048][T11475] team0: Port device team_slave_1 added [ 766.058595][ T6023] usb 4-1: config 0 descriptor?? [ 766.089722][ T6023] hub 4-1:0.217: bad descriptor, ignoring hub [ 766.089762][ T6023] hub 4-1:0.217: probe with driver hub failed with error -5 [ 766.275890][ T6023] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 766.407495][ T6023] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 766.407572][ T6023] dib0700: firmware download failed at 7 with -22 [ 766.455931][ T6023] usb 4-1: USB disconnect, device number 11 [ 766.820775][T11475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.820794][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.820819][T11475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.915637][T11717] chnl_net:caif_netlink_parms(): no params data found [ 766.934502][T11475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.934586][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.934620][T11475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.978886][T11475] hsr_slave_0: entered promiscuous mode [ 769.980276][T11475] hsr_slave_1: entered promiscuous mode [ 769.992222][T11475] debugfs: 'hsr0' already exists in 'hsr' [ 769.992248][T11475] Cannot create hsr debugfs directory [ 770.136504][ T5881] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 770.137807][ T12] bridge_slave_1: left allmulticast mode [ 770.137833][ T12] bridge_slave_1: left promiscuous mode [ 770.138612][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.232317][ T12] bridge_slave_0: left allmulticast mode [ 770.232346][ T12] bridge_slave_0: left promiscuous mode [ 770.232616][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.300488][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 770.305966][ T5881] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 770.305992][ T5881] usb 5-1: config 0 has no interface number 0 [ 770.306040][ T5881] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.308674][ T5881] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 770.308699][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.308719][ T5881] usb 5-1: Product: syz [ 770.308733][ T5881] usb 5-1: Manufacturer: syz [ 770.308747][ T5881] usb 5-1: SerialNumber: syz [ 770.421577][ T5881] usb 5-1: config 0 descriptor?? [ 770.444637][ T5881] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 770.629794][ T5881] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 770.630113][ T5881] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 771.009385][ T5881] usb 5-1: USB disconnect, device number 26 [ 773.323544][T11925] ======================================================= [ 773.323544][T11925] WARNING: The mand mount option has been deprecated and [ 773.323544][T11925] and is ignored by this kernel. Remove the mand [ 773.323544][T11925] option from the mount to silence this warning. [ 773.323544][T11925] ======================================================= [ 774.769853][ T37] audit: type=1326 audit(1760840344.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.770124][ T37] audit: type=1326 audit(1760840344.387:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.771045][ T37] audit: type=1326 audit(1760840344.387:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.771524][ T37] audit: type=1326 audit(1760840344.397:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.771786][ T37] audit: type=1326 audit(1760840344.397:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.778221][ T37] audit: type=1326 audit(1760840344.397:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.778590][ T37] audit: type=1326 audit(1760840344.397:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.779089][ T37] audit: type=1326 audit(1760840344.397:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.798318][ T37] audit: type=1326 audit(1760840344.417:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 774.799277][ T37] audit: type=1326 audit(1760840344.417:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f89c566efc9 code=0x7ffc0000 [ 776.193405][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.312072][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.354480][ T12] bond0 (unregistering): Released all slaves [ 776.952631][T11717] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.952847][T11717] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.953057][T11717] bridge_slave_0: entered allmulticast mode [ 776.956081][T11717] bridge_slave_0: entered promiscuous mode [ 777.226129][T11717] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.226280][T11717] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.226493][T11717] bridge_slave_1: entered allmulticast mode [ 777.243696][T11717] bridge_slave_1: entered promiscuous mode [ 778.787554][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 779.223287][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 779.227824][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 779.239188][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.265605][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.268215][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 779.507401][T11717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.554190][T11717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.071241][T11717] team0: Port device team_slave_0 added [ 781.358342][ T5805] Bluetooth: hci3: command tx timeout [ 781.433783][ T12] hsr_slave_0: left promiscuous mode [ 781.470589][ T12] hsr_slave_1: left promiscuous mode [ 781.471569][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.471594][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.534201][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.534229][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.683768][ T12] veth1_macvtap: left promiscuous mode [ 781.683878][ T12] veth0_macvtap: left promiscuous mode [ 781.684294][ T12] veth1_vlan: left promiscuous mode [ 781.684480][ T12] veth0_vlan: left promiscuous mode [ 783.400622][ T5805] Bluetooth: hci3: command tx timeout [ 783.699246][T12050] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 783.699260][T12050] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1674'. [ 785.480527][ T5805] Bluetooth: hci3: command tx timeout [ 785.547352][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 785.570681][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 785.572641][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 785.573752][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 785.575032][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 786.810548][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 786.969805][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 786.978400][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.978431][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.978468][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.00 [ 786.978488][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.020481][ T9] usb 4-1: config 0 descriptor?? [ 787.360256][T12076] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 787.360415][T12076] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1682'. [ 787.560644][ T5805] Bluetooth: hci3: command tx timeout [ 787.643600][ T5805] Bluetooth: hci0: command tx timeout [ 788.176537][ T37] audit: type=1326 audit(1760840357.797:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.176862][ T37] audit: type=1326 audit(1760840357.797:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.177540][ T37] audit: type=1326 audit(1760840357.797:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.177840][ T37] audit: type=1326 audit(1760840357.797:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.178010][ T37] audit: type=1326 audit(1760840357.797:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.178239][ T37] audit: type=1326 audit(1760840357.797:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.178491][ T37] audit: type=1326 audit(1760840357.797:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.178678][ T37] audit: type=1326 audit(1760840357.797:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.179147][ T37] audit: type=1326 audit(1760840357.797:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.179372][ T37] audit: type=1326 audit(1760840357.797:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1c6915efc9 code=0x7ffc0000 [ 788.333308][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 788.333433][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 788.346937][ T9] usb 4-1: USB disconnect, device number 12 [ 788.550947][ T12] team0 (unregistering): Port device team_slave_1 removed [ 788.811982][ T12] team0 (unregistering): Port device team_slave_0 removed [ 789.811118][ T5805] Bluetooth: hci0: command tx timeout [ 791.917895][ T5805] Bluetooth: hci0: command tx timeout [ 792.420460][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 792.604381][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 792.608004][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.608036][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.608074][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.00 [ 792.608097][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.613543][ T9] usb 5-1: config 0 descriptor?? [ 793.560882][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 793.561017][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 793.565761][ T9] usb 5-1: USB disconnect, device number 27 [ 793.975591][ T5805] Bluetooth: hci0: command tx timeout [ 794.340602][ T5881] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 794.474715][T12126] ------------[ cut here ]------------ [ 794.474730][T12126] WARNING: CPU: 0 PID: 12126 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 794.474759][T12126] Modules linked in: [ 794.474783][T12126] CPU: 0 UID: 0 PID: 12126 Comm: syz.3.1697 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 794.474796][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 794.474805][T12126] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 794.474821][T12126] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 1a 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 794.474832][T12126] RSP: 0018:ffffc90003e3f8e0 EFLAGS: 00010287 [ 794.474841][T12126] RAX: ffffffff81b894f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 794.474849][T12126] RDX: ffffc9000e87b000 RSI: 00000000000000a2 RDI: 00000000000000a3 [ 794.474856][T12126] RBP: ffffc90003e3fa70 R08: 0000000000000000 R09: 0000000000000000 [ 794.474862][T12126] R10: dffffc0000000000 R11: fffffbfff1deee6f R12: dffffc0000000000 [ 794.474869][T12126] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88803cb3c791 [ 794.474876][T12126] FS: 00007f89c38d66c0(0000) GS:ffff888126bc6000(0000) knlGS:0000000000000000 [ 794.474885][T12126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.474892][T12126] CR2: 000055556bf7f808 CR3: 0000000058340000 CR4: 00000000003526f0 [ 794.474902][T12126] Call Trace: [ 794.474910][T12126] [ 794.474918][T12126] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 794.474938][T12126] ? __pfx_cgroup_freeze+0x10/0x10 [ 794.474953][T12126] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 794.474969][T12126] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 794.474984][T12126] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 794.475003][T12126] ? mutex_lock_nested+0x154/0x1d0 [ 794.475015][T12126] ? cgroup_kn_lock_live+0x13c/0x230 [ 794.475033][T12126] cgroup_freeze_write+0x156/0x1c0 [ 794.475047][T12126] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 794.475059][T12126] ? kernfs_root+0x1c/0x230 [ 794.475072][T12126] ? kernfs_root+0x1c/0x230 [ 794.475086][T12126] ? kernfs_root+0x1ea/0x230 [ 794.475098][T12126] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 794.475111][T12126] cgroup_file_write+0x39e/0x740 [ 794.475125][T12126] ? __pfx_cgroup_file_write+0x10/0x10 [ 794.475143][T12126] ? __pfx_cgroup_file_write+0x10/0x10 [ 794.475153][T12126] kernfs_fop_write_iter+0x3b0/0x540 [ 794.475169][T12126] vfs_write+0x5d5/0xb40 [ 794.475188][T12126] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 794.475199][T12126] ? __pfx_vfs_write+0x10/0x10 [ 794.475219][T12126] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 794.475238][T12126] ? mutex_lock_nested+0x154/0x1d0 [ 794.475250][T12126] ? fdget_pos+0x253/0x320 [ 794.475268][T12126] ksys_write+0x14b/0x260 [ 794.475285][T12126] ? __pfx_ksys_write+0x10/0x10 [ 794.475303][T12126] ? do_syscall_64+0xbe/0xfa0 [ 794.475322][T12126] do_syscall_64+0xfa/0xfa0 [ 794.475336][T12126] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.475352][T12126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.475362][T12126] ? clear_bhb_loop+0x60/0xb0 [ 794.475375][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.475385][T12126] RIP: 0033:0x7f89c566efc9 [ 794.475397][T12126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.475406][T12126] RSP: 002b:00007f89c38d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.475416][T12126] RAX: ffffffffffffffda RBX: 00007f89c58c5fa0 RCX: 00007f89c566efc9 [ 794.475423][T12126] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 794.475430][T12126] RBP: 00007f89c56f1f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.475436][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.475443][T12126] R13: 00007f89c58c6038 R14: 00007f89c58c5fa0 R15: 00007ffc21719f28 [ 794.475464][T12126] [ 794.475475][T12126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 794.475483][T12126] CPU: 0 UID: 0 PID: 12126 Comm: syz.3.1697 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 794.475494][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 794.475500][T12126] Call Trace: [ 794.475504][T12126] [ 794.475508][T12126] dump_stack_lvl+0x99/0x250 [ 794.475522][T12126] ? __asan_memcpy+0x40/0x70 [ 794.475537][T12126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.475549][T12126] ? __pfx__printk+0x10/0x10 [ 794.475569][T12126] vpanic+0x237/0x6d0 [ 794.475580][T12126] ? __pfx_vpanic+0x10/0x10 [ 794.475596][T12126] panic+0xb9/0xc0 [ 794.475606][T12126] ? __pfx_panic+0x10/0x10 [ 794.475624][T12126] __warn+0x31b/0x4b0 [ 794.475633][T12126] ? cgroup_freeze+0x80a/0xf90 [ 794.475650][T12126] ? cgroup_freeze+0x80a/0xf90 [ 794.475665][T12126] report_bug+0x2be/0x4f0 [ 794.475681][T12126] ? cgroup_freeze+0x80a/0xf90 [ 794.475696][T12126] ? cgroup_freeze+0x80a/0xf90 [ 794.475711][T12126] ? cgroup_freeze+0x80c/0xf90 [ 794.475725][T12126] handle_bug+0x84/0x160 [ 794.475737][T12126] exc_invalid_op+0x1a/0x50 [ 794.475747][T12126] asm_exc_invalid_op+0x1a/0x20 [ 794.475757][T12126] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 794.475772][T12126] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 1a 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 794.475780][T12126] RSP: 0018:ffffc90003e3f8e0 EFLAGS: 00010287 [ 794.475788][T12126] RAX: ffffffff81b894f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 794.475795][T12126] RDX: ffffc9000e87b000 RSI: 00000000000000a2 RDI: 00000000000000a3 [ 794.475802][T12126] RBP: ffffc90003e3fa70 R08: 0000000000000000 R09: 0000000000000000 [ 794.475808][T12126] R10: dffffc0000000000 R11: fffffbfff1deee6f R12: dffffc0000000000 [ 794.475816][T12126] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88803cb3c791 [ 794.475827][T12126] ? cgroup_freeze+0x809/0xf90 [ 794.475849][T12126] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 794.475866][T12126] ? __pfx_cgroup_freeze+0x10/0x10 [ 794.475880][T12126] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 794.475896][T12126] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 794.475910][T12126] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 794.475928][T12126] ? mutex_lock_nested+0x154/0x1d0 [ 794.475939][T12126] ? cgroup_kn_lock_live+0x13c/0x230 [ 794.475955][T12126] cgroup_freeze_write+0x156/0x1c0 [ 794.475969][T12126] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 794.475981][T12126] ? kernfs_root+0x1c/0x230 [ 794.475993][T12126] ? kernfs_root+0x1c/0x230 [ 794.476007][T12126] ? kernfs_root+0x1ea/0x230 [ 794.476019][T12126] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 794.476032][T12126] cgroup_file_write+0x39e/0x740 [ 794.476046][T12126] ? __pfx_cgroup_file_write+0x10/0x10 [ 794.476063][T12126] ? __pfx_cgroup_file_write+0x10/0x10 [ 794.476072][T12126] kernfs_fop_write_iter+0x3b0/0x540 [ 794.476087][T12126] vfs_write+0x5d5/0xb40 [ 794.476105][T12126] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 794.476116][T12126] ? __pfx_vfs_write+0x10/0x10 [ 794.476130][T12126] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 794.476147][T12126] ? mutex_lock_nested+0x154/0x1d0 [ 794.476159][T12126] ? fdget_pos+0x253/0x320 [ 794.476175][T12126] ksys_write+0x14b/0x260 [ 794.476192][T12126] ? __pfx_ksys_write+0x10/0x10 [ 794.476215][T12126] ? do_syscall_64+0xbe/0xfa0 [ 794.476233][T12126] do_syscall_64+0xfa/0xfa0 [ 794.476248][T12126] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.476264][T12126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.476274][T12126] ? clear_bhb_loop+0x60/0xb0 [ 794.476288][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.476297][T12126] RIP: 0033:0x7f89c566efc9 [ 794.476306][T12126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.476314][T12126] RSP: 002b:00007f89c38d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.476324][T12126] RAX: ffffffffffffffda RBX: 00007f89c58c5fa0 RCX: 00007f89c566efc9 [ 794.476331][T12126] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 794.476338][T12126] RBP: 00007f89c56f1f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.476344][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.476350][T12126] R13: 00007f89c58c6038 R14: 00007f89c58c5fa0 R15: 00007ffc21719f28 [ 794.476368][T12126] [ 794.476528][T12126] Kernel Offset: disabled