last executing test programs: 6m37.772896095s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 6m34.538850349s ago: executing program 4 (id=22): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 6m18.990994564s ago: executing program 32 (id=22): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 5m39.566396423s ago: executing program 1 (id=79): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x0, {0x2, 0xff, 0x4}, 0xff}, 0x18) 5m38.483308043s ago: executing program 1 (id=80): rename(0x0, 0x0) creat(0x0, 0xbb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000034000)=""/102392, 0x18ff8) 5m34.901058792s ago: executing program 1 (id=88): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x122) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000000)={0x8000004, 0x6, "e22e845e3ede57135adc514d00000000001af2bb6b1543835f00", 0x0, 0x4, 0x8000, 0x9, 0x10}) 5m32.299371323s ago: executing program 1 (id=89): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000004c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000400)={r5, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f000000a300)={{r6, r9, 0x0, [0x1, 0x6]}, {r8, 0x0, 0x0, [0xc1d]}, 0x0, [0x82, 0x8]}) 5m27.64501506s ago: executing program 1 (id=96): syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r4, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 5m24.879478904s ago: executing program 1 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x400, 0x7fff, 0x9, 0x4, 0x8002, 0x0, 0x70d0db32, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010) socket$packet(0x11, 0x3, 0x300) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x2900, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x24000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m8.837726755s ago: executing program 33 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x400, 0x7fff, 0x9, 0x4, 0x8002, 0x0, 0x70d0db32, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010) socket$packet(0x11, 0x3, 0x300) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x2900, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x24000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m16.339718748s ago: executing program 0 (id=174): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) shutdown(0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 4m15.284720487s ago: executing program 0 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x0, 0x8, 0x1c, r0, 0x2, ']\x00'}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m12.816182195s ago: executing program 0 (id=178): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x2045080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 4m11.024936185s ago: executing program 0 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r5, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x822b01) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m8.47066993s ago: executing program 0 (id=183): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) userfaultfd(0x801) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x120000000000, 0xfffffffffffffffd, 0x0, 0x2000000000000000, 0x10, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4m6.650236211s ago: executing program 0 (id=185): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xc) socket$inet(0x2, 0x3, 0x7f) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e30000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x9, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 3m51.310944591s ago: executing program 34 (id=185): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xc) socket$inet(0x2, 0x3, 0x7f) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e30000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x9, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 13.219429995s ago: executing program 5 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) userfaultfd(0x80801) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffc30000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 11.878417732s ago: executing program 5 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x1c4}]}) 9.71694308s ago: executing program 5 (id=544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001fc0), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000003680)=ANY=[@ANYBLOB="0e0000"], 0x41) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x80) pipe(&(0x7f0000000440)) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000380)={{0xfe, 0x10}, 'port1\x00', 0x3b, 0x80029, 0x6, 0x4, 0xc0, 0x0, 0x31d, 0x0, 0x6, 0x9}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r6, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x6, 0x0, 0x7f, 0x9, 0x2, "42341f9b1000007e4f00"}) r7 = syz_open_pts(r6, 0x40000) dup3(r7, r6, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) dup(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x7, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000040)={{0x18}, {0x18}, 0x0, 0x7}) 9.319038725s ago: executing program 5 (id=548): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1, &(0x7f0000001740)=ANY=[@ANYBLOB="300000000000000084000000010000000200000041"], 0x30}, 0x0) 8.081112517s ago: executing program 6 (id=549): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'batadv0\x00', 0x3}, 0x18) 7.936087449s ago: executing program 3 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 7.675157358s ago: executing program 5 (id=551): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) shutdown(0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 7.667440894s ago: executing program 6 (id=552): unshare(0x2a020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) flistxattr(r1, 0x0, 0x0) 7.542861063s ago: executing program 3 (id=553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000001000000000000000000000000000002000100000000000000070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 6.570956504s ago: executing program 5 (id=555): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) 6.476034411s ago: executing program 6 (id=556): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) 6.407430264s ago: executing program 2 (id=557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0xd, 0x0, 0x0) write(r0, &(0x7f0000000140)="0aaf", 0x2) 5.114206161s ago: executing program 7 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) userfaultfd(0x80801) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffc30000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4.955483263s ago: executing program 6 (id=560): r0 = socket(0x6, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYRESOCT=r0]) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="40010000", @ANYRESOCT=r2, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f000a000000080026000816"], 0x40}}, 0x200040b4) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001007f00000108000200ac141400080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020109040000000000000000021f"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x48080) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000180)="dd9d480e", 0x4) 4.872322496s ago: executing program 3 (id=561): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.666888398s ago: executing program 2 (id=562): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.932956616s ago: executing program 7 (id=563): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e22, 0x8001, @empty, 0x7ff}}, 0x6, 0xddc}, 0x90) 3.135211438s ago: executing program 7 (id=564): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001fc0), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000003680)=ANY=[@ANYBLOB="0e0000"], 0x41) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x80) pipe(&(0x7f0000000440)) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000380)={{0xfe, 0x10}, 'port1\x00', 0x3b, 0x80029, 0x6, 0x4, 0xc0, 0x0, 0x31d, 0x0, 0x6, 0x9}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r5, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x6, 0x0, 0x7f, 0x9, 0x2, "42341f9b1000007e4f00"}) r6 = syz_open_pts(r5, 0x40000) dup3(r6, r5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) dup(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x7, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000040)={{0x18}, {0x18}, 0x0, 0x7}) 3.125042212s ago: executing program 3 (id=565): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) shutdown(0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 2.949253279s ago: executing program 2 (id=566): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff8]}, 0x8, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 2.881621952s ago: executing program 6 (id=567): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x0, 0x3}, &(0x7f00000001c0)=0x8) 1.966861001s ago: executing program 7 (id=568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000800007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 1.935997925s ago: executing program 3 (id=569): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) shutdown(0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 1.751559669s ago: executing program 6 (id=570): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x8, 0x5, &(0x7f00000002c0)={0x6, "b5c1f7b51030ab51a06296086dd49af64bce475000"}}) 1.751370986s ago: executing program 2 (id=571): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 759.217948ms ago: executing program 7 (id=572): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 757.690988ms ago: executing program 3 (id=573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) 503.339382ms ago: executing program 2 (id=574): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 331.631361ms ago: executing program 7 (id=575): setresuid(0xee01, 0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x5, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') renameat(r0, &(0x7f0000000200)='./cgroup\x00', r0, &(0x7f0000000240)='./cgroup\x00') 0s ago: executing program 2 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.673544][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.824414][ T31] cfg80211: failed to load regulatory.db [ 86.985770][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.985786][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.985809][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.991626][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.991641][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.991663][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.215481][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.215495][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.215508][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.219134][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.219149][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.219171][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.239081][ T5853] team0: Port device team_slave_0 added [ 87.258320][ T5856] team0: Port device team_slave_0 added [ 87.441068][ T5853] team0: Port device team_slave_1 added [ 87.444255][ T5856] team0: Port device team_slave_1 added [ 87.781550][ T5849] hsr_slave_0: entered promiscuous mode [ 87.782622][ T5849] hsr_slave_1: entered promiscuous mode [ 88.092720][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.092731][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.092744][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.093992][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.094006][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.094028][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.180309][ T5847] Bluetooth: hci2: command tx timeout [ 88.180340][ T5847] Bluetooth: hci1: command tx timeout [ 88.180543][ T5843] Bluetooth: hci0: command tx timeout [ 88.325167][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.325184][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.325208][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.402828][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.402843][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.402857][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.408141][ T5844] hsr_slave_0: entered promiscuous mode [ 88.408908][ T5844] hsr_slave_1: entered promiscuous mode [ 88.409733][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 88.409814][ T5844] Cannot create hsr debugfs directory [ 88.427023][ T5843] Bluetooth: hci3: command tx timeout [ 88.429922][ T5840] hsr_slave_0: entered promiscuous mode [ 88.443639][ T5840] hsr_slave_1: entered promiscuous mode [ 88.444514][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 88.444535][ T5840] Cannot create hsr debugfs directory [ 88.500341][ T5843] Bluetooth: hci4: command tx timeout [ 89.500767][ T5853] hsr_slave_0: entered promiscuous mode [ 89.502210][ T5853] hsr_slave_1: entered promiscuous mode [ 89.503098][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 89.503120][ T5853] Cannot create hsr debugfs directory [ 89.545585][ T5856] hsr_slave_0: entered promiscuous mode [ 89.547021][ T5856] hsr_slave_1: entered promiscuous mode [ 89.547906][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 89.547928][ T5856] Cannot create hsr debugfs directory [ 90.260275][ T5843] Bluetooth: hci0: command tx timeout [ 90.260308][ T5843] Bluetooth: hci1: command tx timeout [ 90.260327][ T5843] Bluetooth: hci2: command tx timeout [ 90.500228][ T5846] Bluetooth: hci3: command tx timeout [ 90.580318][ T5846] Bluetooth: hci4: command tx timeout [ 90.817233][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.849445][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.896136][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.956685][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.096201][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.127551][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.174151][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.230698][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.371560][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.410340][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.465642][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.524502][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.679867][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.742597][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.776572][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.843250][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.981544][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.048982][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.079602][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.118165][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.171480][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.216165][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.259345][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.260218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.316942][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.317313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.346596][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.457885][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.463836][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.518255][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.518394][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.575853][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.576356][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.621619][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.669523][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.669732][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.703137][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.767243][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.770425][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.908044][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.977552][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.980783][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.980917][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.044519][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.044621][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.184628][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.259195][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.261049][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.278612][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.320879][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.321120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.635426][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.704373][ T5849] veth0_vlan: entered promiscuous mode [ 93.792743][ T5849] veth1_vlan: entered promiscuous mode [ 93.835488][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.093616][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.101408][ T5849] veth0_macvtap: entered promiscuous mode [ 94.148529][ T5849] veth1_macvtap: entered promiscuous mode [ 94.286874][ T5840] veth0_vlan: entered promiscuous mode [ 94.317135][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.359042][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.383325][ T5840] veth1_vlan: entered promiscuous mode [ 94.418347][ T3512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.443916][ T3512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.466514][ T3512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.480280][ T3512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.497035][ T5853] veth0_vlan: entered promiscuous mode [ 94.575682][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.657116][ T5853] veth1_vlan: entered promiscuous mode [ 94.746847][ T5844] veth0_vlan: entered promiscuous mode [ 94.839197][ T5840] veth0_macvtap: entered promiscuous mode [ 94.860843][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.860866][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.887681][ T5844] veth1_vlan: entered promiscuous mode [ 94.898439][ T5840] veth1_macvtap: entered promiscuous mode [ 95.017712][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.017732][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.059499][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.098334][ T5853] veth0_macvtap: entered promiscuous mode [ 95.127380][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.129260][ T5856] veth0_vlan: entered promiscuous mode [ 95.148505][ T5853] veth1_macvtap: entered promiscuous mode [ 95.178644][ T159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.207695][ T159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.217236][ T159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.227787][ T159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.228421][ T5844] veth0_macvtap: entered promiscuous mode [ 95.236965][ T5856] veth1_vlan: entered promiscuous mode [ 95.263075][ T5844] veth1_macvtap: entered promiscuous mode [ 95.322411][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.432411][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.459391][ T5961] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 95.545659][ T159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.557556][ T159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.560061][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.573847][ T159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.619603][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.647919][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.745829][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.745849][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.853783][ T3512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.875854][ T5856] veth0_macvtap: entered promiscuous mode [ 95.890602][ T3512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.925879][ T3512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.978001][ T3512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.028723][ T5856] veth1_macvtap: entered promiscuous mode [ 96.154785][ T5965] process 'syz.0.6' launched './file0' with NULL argv: empty string added [ 96.833598][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.833618][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.109203][ T5967] syz.0.7 (5967) used greatest stack depth: 18008 bytes left [ 97.549959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.800251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.855056][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.013187][ T5976] binder: 5974:5976 ioctl c0306201 200000000180 returned -14 [ 98.035209][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.037117][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.037133][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.273934][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.309265][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.681115][ T5980] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 98.772312][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.818956][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.013882][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.145796][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.186950][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.357072][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.357093][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.357967][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.520439][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.740152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.740194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.740227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.740260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.740292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.740325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.740357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.740389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.330360][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.311079][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.311101][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.344095][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.517258][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.189875][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.304510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.304531][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.426849][ T5996] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.605497][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.432414][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.217135][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.217155][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.701227][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.701248][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.762309][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.970131][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.505429][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.693649][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.212174][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.250291][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.800656][ T6023] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 107.570331][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.033057][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.101652][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.991944][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.314226][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.737499][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.963515][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.509393][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.517941][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.518984][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.520257][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.521051][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.758335][ T5846] Bluetooth: hci1: command tx timeout [ 132.726545][ T5924] IPVS: starting estimator thread 0... [ 132.810659][ T6134] IPVS: using max 7 ests per chain, 16800 per kthread [ 132.830290][ T5846] Bluetooth: hci1: command tx timeout [ 132.938613][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938709][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.101593][ T5846] Bluetooth: hci1: command tx timeout [ 137.153424][ T5846] Bluetooth: hci1: command tx timeout [ 139.190439][ T208] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.444903][ T208] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.656852][ T5924] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.844859][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 142.084856][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.085432][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.939917][ T6176] delete_channel: no stack [ 143.994866][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.025596][ T5924] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 144.025638][ T5924] usb 4-1: can't read configurations, error -71 [ 144.313424][ T208] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.831354][ T6232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.63'. [ 149.037163][ T6229] 9pnet: Could not find request transport: fd0x0000000000000003 [ 149.678408][ T5845] IPVS: starting estimator thread 0... [ 149.810433][ T6233] IPVS: using max 7 ests per chain, 16800 per kthread [ 150.921411][ T208] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.951512][ T6247] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 152.951580][ T6247] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 158.717310][ T6099] chnl_net:caif_netlink_parms(): no params data found [ 158.841797][ T208] bridge_slave_1: left allmulticast mode [ 158.842145][ T208] bridge_slave_1: left promiscuous mode [ 158.843231][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.024577][ T208] bridge_slave_0: left allmulticast mode [ 162.024623][ T208] bridge_slave_0: left promiscuous mode [ 162.026290][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.700491][ T6290] syz.3.78 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 176.655479][ T6370] capability: warning: `syz.3.97' uses 32-bit capabilities (legacy support in use) [ 179.089326][ T6385] kAFS: No cell specified [ 180.026191][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.728065][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.883059][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.487162][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.783553][ T10] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 181.783595][ T10] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 181.783621][ T10] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 181.783646][ T10] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 181.783670][ T10] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 181.783694][ T10] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 181.783719][ T10] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 181.783744][ T10] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 182.282032][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.016479][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.056110][ T10] hid-generic 00A0:0008:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 183.276190][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.980984][ T6421] fido_id[6421]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.528185][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.558524][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.568602][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.580438][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.581242][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.408487][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 187.781230][ T5846] Bluetooth: hci5: command tx timeout [ 189.538842][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.632918][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.834873][ T208] bond0 (unregistering): Released all slaves [ 189.884455][ T5846] Bluetooth: hci5: command tx timeout [ 191.978635][ T5846] Bluetooth: hci5: command tx timeout [ 192.166122][ T6382] tipc: Started in network mode [ 192.166263][ T6382] tipc: Node identity d2006d9e85ca, cluster identity 4711 [ 192.167176][ T6382] tipc: Enabled bearer , priority 0 [ 192.473840][ T6403] tipc: Resetting bearer [ 193.339521][ T9] tipc: Node number set to 1472884126 [ 193.725161][ T6375] tipc: Disabling bearer [ 194.470825][ T5846] Bluetooth: hci5: command tx timeout [ 194.642952][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.643028][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.190944][ T1182] Bluetooth: hci6: Frame reassembly failed (-84) [ 197.491801][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 197.499305][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 197.532188][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 197.533414][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 197.534523][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 198.432838][ T5846] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 199.876269][ T5846] Bluetooth: hci7: command tx timeout [ 201.284719][ T10] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 201.284755][ T10] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 201.284782][ T10] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 201.284815][ T10] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 201.284840][ T10] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 201.284865][ T10] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 201.284891][ T10] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 201.284916][ T10] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 201.452901][ T10] hid-generic 00A0:0008:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 202.866410][ T5843] Bluetooth: hci7: command tx timeout [ 203.429631][ T6520] fido_id[6520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.790915][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.212636][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.216235][ T5157] Bluetooth: hci7: command tx timeout [ 207.733617][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.761961][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.777539][ T6541] capability: warning: `syz.0.133' uses deprecated v2 capabilities in a way that may be insecure [ 209.295047][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.300584][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 209.300617][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 209.301280][ T59] Bluetooth: hci7: command tx timeout [ 209.301308][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 209.579972][ T6548] block nbd0: Send control failed (result -22) [ 209.602075][ T6548] block nbd0: Request send failed, requeueing [ 209.617017][ T11] block nbd0: Dead connection, failed to find a fallback [ 209.617045][ T11] block nbd0: shutting down sockets [ 209.617158][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 209.619382][ T6548] EXT4-fs (nbd0): unable to read superblock [ 209.917570][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.146683][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.694124][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.840761][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.469747][ T6541] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 217.470182][ T991] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 217.727294][ T991] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.753381][ T991] usb 4-1: config 1 interface 0 has no altsetting 0 [ 218.698283][ T991] usb 4-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40 [ 218.698314][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.698333][ T991] usb 4-1: Product: syz [ 218.698347][ T991] usb 4-1: Manufacturer: syz [ 218.698361][ T991] usb 4-1: SerialNumber: syz [ 218.839537][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 218.839591][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 218.839957][ T6593] netlink: 36 bytes leftover after parsing attributes in process `syz.0.146'. [ 218.916634][ T6597] 9pnet: Could not find request transport: fd0x0000000000000003 [ 220.712589][ T991] usbhid 4-1:1.0: can't add hid device: -71 [ 220.712717][ T991] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 220.724327][ T991] usb 4-1: USB disconnect, device number 4 [ 226.980415][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 227.130274][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 227.132707][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.132732][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.132808][ T46] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.132855][ T46] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 227.132876][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.302387][ T208] hsr_slave_0: left promiscuous mode [ 227.343370][ T208] hsr_slave_1: left promiscuous mode [ 227.344352][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.344425][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.350296][ T46] usb 1-1: can't set config #1, error -71 [ 227.546323][ T46] usb 1-1: USB disconnect, device number 2 [ 228.870890][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.870926][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.042776][ T208] veth1_macvtap: left promiscuous mode [ 231.043045][ T208] veth0_macvtap: left promiscuous mode [ 231.043388][ T208] veth1_vlan: left promiscuous mode [ 231.044694][ T208] veth0_vlan: left promiscuous mode [ 231.517858][ T6650] 9pnet: Could not find request transport: fd0x0000000000000003 [ 232.247471][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 232.247492][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 232.247743][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 237.524700][ T6671] 9pnet_fd: p9_fd_create_tcp (6671): problem connecting socket to 127.0.0.1 [ 245.679781][ T6701] 9pnet: Could not find request transport: fd0x0000000000000003 [ 246.787086][ T6727] random: crng reseeded on system resumption [ 248.771915][ T991] IPVS: starting estimator thread 0... [ 248.900883][ T6726] IPVS: using max 6 ests per chain, 14400 per kthread [ 253.772764][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.775456][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.779992][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.803093][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.803980][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.882918][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.884926][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.919231][ T5843] Bluetooth: hci1: command tx timeout [ 256.634816][ T6771] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.006078][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.012751][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.069662][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.361542][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.390359][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.940611][ T5846] Bluetooth: hci1: command tx timeout [ 258.440919][ T6785] binder_alloc: 6778: binder_alloc_buf, no vma [ 260.025855][ T5843] Bluetooth: hci4: command tx timeout [ 260.026204][ T5843] Bluetooth: hci1: command tx timeout [ 262.207410][ T5843] Bluetooth: hci4: command tx timeout [ 262.207514][ T5846] Bluetooth: hci1: command tx timeout [ 262.557604][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.192'. [ 264.688255][ T5846] Bluetooth: hci4: command tx timeout [ 266.271150][ T208] team0 (unregistering): Port device team_slave_1 removed [ 266.564395][ T208] team0 (unregistering): Port device team_slave_0 removed [ 266.832384][ T5846] Bluetooth: hci4: command tx timeout [ 272.226432][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.247336][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.326015][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.370537][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.381943][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.262400][ T6842] tty tty4: ldisc open failed (-12), clearing slot 3 [ 274.394189][ T6845] tty tty1: ldisc open failed (-12), clearing slot 0 [ 274.500298][ T5846] Bluetooth: hci6: command tx timeout [ 276.583296][ T5846] Bluetooth: hci6: command tx timeout [ 278.661781][ T5846] Bluetooth: hci6: command tx timeout [ 281.730401][ T5846] Bluetooth: hci6: command tx timeout [ 284.934483][ T6906] Zero length message leads to an empty skb [ 285.324829][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.373481][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.122427][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.472502][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.623278][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.258740][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.785545][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.523004][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.970057][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.720590][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.847948][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.374869][ T6752] chnl_net:caif_netlink_parms(): no params data found [ 290.514016][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.276464][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.431805][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.507139][ T208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.578099][ T6838] chnl_net:caif_netlink_parms(): no params data found [ 292.377826][ T6775] chnl_net:caif_netlink_parms(): no params data found [ 292.726766][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.328045][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.352163][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.661947][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.816357][ T208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.997770][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.818540][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.819651][ T5846] Bluetooth: hci6: command 0x0405 tx timeout [ 295.046517][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.381803][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.653038][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.702118][ T208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.914050][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.603173][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.677870][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.963587][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.956059][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.031220][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.121894][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.639745][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.732061][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.858674][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.690709][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.968503][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.064530][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.797290][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.831744][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.844532][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.848170][ T6990] 9pnet: Could not find request transport: fd0x0000000000000003 [ 303.897429][ T208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.348355][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.348448][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.348616][ T6752] bridge_slave_0: entered allmulticast mode [ 304.360211][ T994] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 304.398931][ T6752] bridge_slave_0: entered promiscuous mode [ 304.426628][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.426767][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.426981][ T6838] bridge_slave_0: entered allmulticast mode [ 304.429817][ T6838] bridge_slave_0: entered promiscuous mode [ 304.510375][ T994] usb 4-1: Using ep0 maxpacket: 8 [ 304.512704][ T994] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 304.512739][ T994] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.512751][ T994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.512763][ T994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.512774][ T994] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.512797][ T994] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.512808][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.607644][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.607814][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.608014][ T6752] bridge_slave_1: entered allmulticast mode [ 304.651490][ T6752] bridge_slave_1: entered promiscuous mode [ 304.659457][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.659603][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.659837][ T6838] bridge_slave_1: entered allmulticast mode [ 304.706530][ T6838] bridge_slave_1: entered promiscuous mode [ 304.846610][ T994] usb 4-1: usb_control_msg returned -32 [ 304.846639][ T994] usbtmc 4-1:16.0: can't read capabilities [ 305.219129][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.219594][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.219826][ T6775] bridge_slave_0: entered allmulticast mode [ 305.253347][ T6775] bridge_slave_0: entered promiscuous mode [ 305.439725][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.452444][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.452706][ T6775] bridge_slave_1: entered allmulticast mode [ 305.456428][ T6775] bridge_slave_1: entered promiscuous mode [ 305.505738][ T6752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.527591][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.702616][ T7007] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 305.809604][ T6752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.838860][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.850215][ T6231] usb 4-1: USB disconnect, device number 5 [ 306.414570][ T6775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.675715][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.917987][ T7027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.183856][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.189890][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.206717][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.207986][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.209791][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.386425][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.498449][ T6775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.858045][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.908454][ T6838] team0: Port device team_slave_0 added [ 309.484679][ T7040] mmap: syz.2.236 (7040) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 309.616182][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.750518][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.113288][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.163629][ T6838] team0: Port device team_slave_1 added [ 310.283160][ T5846] Bluetooth: hci2: command tx timeout [ 311.055194][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.585879][ T6775] team0: Port device team_slave_0 added [ 311.733388][ T6775] team0: Port device team_slave_1 added [ 311.740788][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.740803][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.740825][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.927133][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.927151][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.927175][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.340130][ T5846] Bluetooth: hci2: command tx timeout [ 313.593642][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.745384][ T208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.174809][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.210894][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.207024][ T5846] Bluetooth: hci2: command tx timeout [ 315.260136][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.412414][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.946512][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.965162][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.967451][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.969752][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.010913][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.264498][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.466353][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.608759][ T7074] Bluetooth: MGMT ver 1.23 [ 316.653207][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.237917][ T5843] Bluetooth: hci2: command tx timeout [ 317.269409][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.272159][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.272232][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.648537][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.969853][ T7078] overlayfs: missing 'lowerdir' [ 317.972169][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.172751][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.610113][ T5843] Bluetooth: hci1: command tx timeout [ 318.626133][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.735693][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.807183][ T208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.496855][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.660289][ T5843] Bluetooth: hci1: command tx timeout [ 320.734811][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.105661][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.762960][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.927639][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.960770][ T7092] block device autoloading is deprecated and will be removed. [ 322.122951][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.734583][ T7100] gfs2: not a GFS2 filesystem [ 322.745985][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.334290][ T5843] Bluetooth: hci1: command tx timeout [ 323.360640][ T37] audit: type=1326 audit(1757682033.214:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7095 comm="syz.2.247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff90e80eba9 code=0x0 [ 324.758790][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.914115][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.207064][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.827038][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.857410][ T5843] Bluetooth: hci1: command tx timeout [ 326.026140][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.396293][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.252649][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.649669][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.384961][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.563006][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.937167][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.984047][ T208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.147113][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.219500][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.293838][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.656461][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.815568][ T6838] hsr_slave_0: entered promiscuous mode [ 329.816943][ T6838] hsr_slave_1: entered promiscuous mode [ 329.817895][ T6838] debugfs: 'hsr0' already exists in 'hsr' [ 329.817919][ T6838] Cannot create hsr debugfs directory [ 330.047020][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.378385][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.067853][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.661690][ T208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.376393][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.258'. [ 333.858187][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 334.275271][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.306202][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.310659][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.375619][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.387576][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.909546][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.762002][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.992918][ T208] bridge_slave_1: left allmulticast mode [ 335.992951][ T208] bridge_slave_1: left promiscuous mode [ 335.995204][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.090915][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.843887][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.810880][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.837498][ T5843] Bluetooth: hci4: command tx timeout [ 339.369369][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.519895][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.761416][ T208] bridge_slave_0: left allmulticast mode [ 339.761446][ T208] bridge_slave_0: left promiscuous mode [ 339.761712][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.795137][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.862868][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.593899][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.761714][ T208] bridge_slave_1: left allmulticast mode [ 340.761749][ T208] bridge_slave_1: left promiscuous mode [ 340.762018][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.943218][ T5847] Bluetooth: hci4: command tx timeout [ 340.943844][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.079758][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.652386][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.822062][ T208] bridge_slave_0: left allmulticast mode [ 341.822094][ T208] bridge_slave_0: left promiscuous mode [ 341.822344][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.950320][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.353833][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.420494][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.797315][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.857544][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.014159][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.351966][ T5843] Bluetooth: hci4: command 0x040f tx timeout [ 343.419073][ T7205] syz.2.265 (7205) used greatest stack depth: 15176 bytes left [ 343.699951][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.985043][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.165863][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.633221][ T7218] qnx6: unable to read the first superblock [ 344.851362][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.380471][ T5846] Bluetooth: hci4: command 0x040f tx timeout [ 345.416016][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.543478][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.660055][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.693913][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.065798][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.203323][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.100053][ T5846] Bluetooth: hci4: command 0x040f tx timeout [ 348.111460][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.206267][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.260104][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.310652][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.412194][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.685414][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.950920][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.816780][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.145827][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.301689][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.853801][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.391058][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.452866][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.474704][ T208] bond0 (unregistering): Released all slaves [ 352.125589][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.335555][ T5959] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 352.480097][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 352.490130][ T5959] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 352.490157][ T5959] usb 4-1: config 0 has no interface number 0 [ 352.528818][ T5959] usb 4-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=ff.80 [ 352.528848][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.528867][ T5959] usb 4-1: Product: syz [ 352.528881][ T5959] usb 4-1: Manufacturer: syz [ 352.528894][ T5959] usb 4-1: SerialNumber: syz [ 352.535245][ T5959] usb 4-1: config 0 descriptor?? [ 352.553449][ T5959] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state. [ 352.553824][ T5959] dvb-usb: bulk message failed: -22 (3/0) [ 352.614945][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.619526][ T5959] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T) [ 352.619582][ T5959] usb 4-1: media controller created [ 352.685626][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.761125][ T5959] dvb-usb: bulk message failed: -22 (6/0) [ 352.761205][ T5959] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T' [ 352.767908][ T5959] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 352.875160][ T5959] dvb-usb: schedule remote query interval to 150 msecs. [ 352.875225][ T5959] dvb-usb: bulk message failed: -22 (3/0) [ 352.890486][ T5959] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected. [ 352.911637][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.920282][ T5959] usb 4-1: USB disconnect, device number 6 [ 352.974933][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.999193][ T208] bond0 (unregistering): Released all slaves [ 353.051490][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.099870][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.185116][ T208] bond0 (unregistering): Released all slaves [ 353.235934][ T7218] lo speed is unknown, defaulting to 1000 [ 353.248504][ T7218] lo speed is unknown, defaulting to 1000 [ 353.280792][ T5959] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected. [ 353.286722][ T7218] lo speed is unknown, defaulting to 1000 [ 353.298304][ T7218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 353.311173][ T7218] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 353.355394][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.612882][ T7218] lo speed is unknown, defaulting to 1000 [ 353.619393][ T7218] lo speed is unknown, defaulting to 1000 [ 353.622480][ T7218] lo speed is unknown, defaulting to 1000 [ 353.625438][ T7218] lo speed is unknown, defaulting to 1000 [ 353.628379][ T7218] lo speed is unknown, defaulting to 1000 [ 353.631225][ T7218] lo speed is unknown, defaulting to 1000 [ 353.634156][ T7218] lo speed is unknown, defaulting to 1000 [ 353.637103][ T7218] lo speed is unknown, defaulting to 1000 [ 353.640114][ T7218] lo speed is unknown, defaulting to 1000 [ 353.645069][ T7218] lo speed is unknown, defaulting to 1000 [ 353.648034][ T7218] lo speed is unknown, defaulting to 1000 [ 353.791134][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.891963][ T208] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 354.204217][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.945014][ T7259] evm: overlay not supported [ 354.946267][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.010753][ T7028] chnl_net:caif_netlink_parms(): no params data found [ 355.092675][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.181190][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.646825][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 357.398817][ T208] tipc: Left network mode [ 357.402215][ T7068] chnl_net:caif_netlink_parms(): no params data found [ 357.902096][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.456339][ T37] audit: type=1800 audit(1757682068.554:3): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.279" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 358.798635][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.968966][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.203258][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.582120][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.752514][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.788430][ T7277] Bluetooth: MGMT ver 1.23 [ 359.812014][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.046848][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.266066][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.592642][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.828323][ T7292] overlayfs: missing 'lowerdir' [ 360.831042][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.296768][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.418835][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.563192][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.633323][ T7294] loop6: detected capacity change from 0 to 7 [ 363.662751][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.832555][ T7294] Dev loop6: unable to read RDB block 7 [ 363.832803][ T7294] loop6: unable to read partition table [ 363.841193][ T7294] loop6: partition table beyond EOD, truncated [ 363.841305][ T7294] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 364.913084][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.203392][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.647576][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.693668][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.693785][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.694006][ T7028] bridge_slave_0: entered allmulticast mode [ 365.724834][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.742985][ T7028] bridge_slave_0: entered promiscuous mode [ 365.870325][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.870485][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.870723][ T7028] bridge_slave_1: entered allmulticast mode [ 365.875448][ T7028] bridge_slave_1: entered promiscuous mode [ 366.425548][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.645371][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.939234][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.100659][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.442539][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.688013][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.746974][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.427988][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.439186][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.448945][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.456826][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.473026][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.025427][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.049517][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.049794][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.050356][ T7068] bridge_slave_0: entered allmulticast mode [ 370.052996][ T7068] bridge_slave_0: entered promiscuous mode [ 370.205993][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.733061][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.163093][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.163229][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.163475][ T7068] bridge_slave_1: entered allmulticast mode [ 371.168878][ T7068] bridge_slave_1: entered promiscuous mode [ 371.223750][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.550335][ T5846] Bluetooth: hci5: command tx timeout [ 373.632021][ T5846] Bluetooth: hci5: command tx timeout [ 374.235032][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.387806][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 374.785865][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.062098][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.123036][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.444997][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.792240][ T7333] lo speed is unknown, defaulting to 1000 [ 376.024737][ T5846] Bluetooth: hci5: command tx timeout [ 376.260130][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.651597][ T208] hsr_slave_0: left promiscuous mode [ 376.725441][ T208] hsr_slave_1: left promiscuous mode [ 376.726401][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.726428][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.788494][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.788525][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.991696][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.018286][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.032058][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.036257][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.038827][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.096630][ T208] hsr_slave_0: left promiscuous mode [ 377.141772][ T208] hsr_slave_1: left promiscuous mode [ 377.147582][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.147614][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.182010][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.182043][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.754292][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.786325][ T208] veth1_macvtap: left promiscuous mode [ 377.786441][ T208] veth0_macvtap: left promiscuous mode [ 377.786730][ T208] veth1_vlan: left promiscuous mode [ 377.786921][ T208] veth0_vlan: left promiscuous mode [ 377.963016][ T208] veth1_macvtap: left promiscuous mode [ 377.963138][ T208] veth0_macvtap: left promiscuous mode [ 377.963438][ T208] veth1_vlan: left promiscuous mode [ 377.963659][ T208] veth0_vlan: left promiscuous mode [ 378.101471][ T5843] Bluetooth: hci5: command tx timeout [ 378.529658][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.673036][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.673105][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.143122][ T5843] Bluetooth: hci1: command tx timeout [ 381.220574][ T5843] Bluetooth: hci1: command tx timeout [ 381.371084][ T208] team0 (unregistering): Port device team_slave_1 removed [ 381.651002][ T208] team0 (unregistering): Port device team_slave_0 removed [ 383.300238][ T5843] Bluetooth: hci1: command tx timeout [ 384.109425][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.380570][ T5843] Bluetooth: hci1: command tx timeout [ 386.039434][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.092311][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.440374][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.511016][ T208] team0 (unregistering): Port device team_slave_1 removed [ 386.741157][ T208] team0 (unregistering): Port device team_slave_0 removed [ 386.938850][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.190987][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.257955][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.912813][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.912928][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.913109][ T7152] bridge_slave_0: entered allmulticast mode [ 389.914649][ T7152] bridge_slave_0: entered promiscuous mode [ 389.940858][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.940990][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.941219][ T7152] bridge_slave_1: entered allmulticast mode [ 389.944685][ T7152] bridge_slave_1: entered promiscuous mode [ 389.946768][ T7384] lo speed is unknown, defaulting to 1000 [ 390.246144][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.273886][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.526692][ T7152] team0: Port device team_slave_0 added [ 390.571273][ T7152] team0: Port device team_slave_1 added [ 390.995308][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.995325][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.995348][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.083107][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.083123][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.083146][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.608905][ T7152] hsr_slave_0: entered promiscuous mode [ 391.620756][ T7152] hsr_slave_1: entered promiscuous mode [ 391.622457][ T7333] chnl_net:caif_netlink_parms(): no params data found [ 392.556442][ T7384] chnl_net:caif_netlink_parms(): no params data found [ 392.792162][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.792308][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.792910][ T7333] bridge_slave_0: entered allmulticast mode [ 392.805457][ T7333] bridge_slave_0: entered promiscuous mode [ 392.916812][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.916959][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.917201][ T7333] bridge_slave_1: entered allmulticast mode [ 392.991363][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.004573][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.005868][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.007333][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.010353][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.041180][ T7333] bridge_slave_1: entered promiscuous mode [ 393.057315][ T208] IPVS: stop unused estimator thread 0... [ 393.355860][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.658587][ T7333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.693887][ T7333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.200591][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.200732][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.200980][ T7384] bridge_slave_0: entered allmulticast mode [ 394.203807][ T7384] bridge_slave_0: entered promiscuous mode [ 394.303801][ T7333] team0: Port device team_slave_0 added [ 394.326308][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.326459][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.326672][ T7384] bridge_slave_1: entered allmulticast mode [ 394.345153][ T7384] bridge_slave_1: entered promiscuous mode [ 394.464038][ T7333] team0: Port device team_slave_1 added [ 394.608965][ T7426] lo speed is unknown, defaulting to 1000 [ 395.003938][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.015039][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.015055][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.015077][ T7333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.140186][ T5843] Bluetooth: hci2: command tx timeout [ 395.183021][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.184095][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.184108][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.184131][ T7333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.364449][ T208] bridge_slave_1: left allmulticast mode [ 395.364482][ T208] bridge_slave_1: left promiscuous mode [ 395.364732][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.441955][ T208] bridge_slave_0: left allmulticast mode [ 395.441989][ T208] bridge_slave_0: left promiscuous mode [ 395.442262][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.544545][ T208] bridge_slave_1: left allmulticast mode [ 395.544577][ T208] bridge_slave_1: left promiscuous mode [ 395.544829][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.632430][ T208] bridge_slave_0: left allmulticast mode [ 395.632464][ T208] bridge_slave_0: left promiscuous mode [ 395.632710][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.734826][ T208] bridge_slave_1: left allmulticast mode [ 395.734858][ T208] bridge_slave_1: left promiscuous mode [ 395.735120][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.824171][ T208] bridge_slave_0: left allmulticast mode [ 395.824203][ T208] bridge_slave_0: left promiscuous mode [ 395.824468][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.926870][ T208] bridge_slave_1: left allmulticast mode [ 395.926903][ T208] bridge_slave_1: left promiscuous mode [ 395.927146][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.991941][ T208] bridge_slave_0: left allmulticast mode [ 395.991974][ T208] bridge_slave_0: left promiscuous mode [ 395.992240][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.067188][ T208] bridge_slave_1: left allmulticast mode [ 396.067211][ T208] bridge_slave_1: left promiscuous mode [ 396.067367][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.132069][ T208] bridge_slave_0: left allmulticast mode [ 396.132102][ T208] bridge_slave_0: left promiscuous mode [ 396.132382][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.204693][ T208] bridge_slave_1: left allmulticast mode [ 396.204727][ T208] bridge_slave_1: left promiscuous mode [ 396.204972][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.263596][ T208] bridge_slave_0: left allmulticast mode [ 396.263630][ T208] bridge_slave_0: left promiscuous mode [ 396.263898][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.671938][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.771010][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.834710][ T208] bond0 (unregistering): Released all slaves [ 397.081988][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.145867][ T208] bond0 (unregistering): Released all slaves [ 397.220395][ T5843] Bluetooth: hci2: command tx timeout [ 397.318578][ T208] bond0 (unregistering): Released all slaves [ 397.592619][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.690680][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.754605][ T208] bond0 (unregistering): Released all slaves [ 397.993252][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.079049][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.145375][ T208] bond0 (unregistering): Released all slaves [ 398.361090][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.446557][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.509275][ T208] bond0 (unregistering): Released all slaves [ 398.782277][ T7384] team0: Port device team_slave_0 added [ 398.913899][ T7384] team0: Port device team_slave_1 added [ 399.135959][ T7333] hsr_slave_0: entered promiscuous mode [ 399.137317][ T7333] hsr_slave_1: entered promiscuous mode [ 399.138278][ T7333] debugfs: 'hsr0' already exists in 'hsr' [ 399.138302][ T7333] Cannot create hsr debugfs directory [ 399.254981][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.254998][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.255021][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.262212][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.262227][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.262250][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.300150][ T5843] Bluetooth: hci2: command tx timeout [ 399.792323][ T7384] hsr_slave_0: entered promiscuous mode [ 399.793683][ T7384] hsr_slave_1: entered promiscuous mode [ 399.794641][ T7384] debugfs: 'hsr0' already exists in 'hsr' [ 399.794663][ T7384] Cannot create hsr debugfs directory [ 400.668263][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 400.730383][ T208] hsr_slave_0: left promiscuous mode [ 400.778200][ T208] hsr_slave_1: left promiscuous mode [ 400.778845][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.800985][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.920198][ T208] hsr_slave_0: left promiscuous mode [ 400.950534][ T208] hsr_slave_1: left promiscuous mode [ 400.951583][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.001611][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.380273][ T5843] Bluetooth: hci2: command tx timeout [ 401.487916][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.701376][ T208] team0 (unregistering): Port device team_slave_1 removed [ 401.788043][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.840709][ T208] team0 (unregistering): Port device team_slave_0 removed [ 403.471235][ T208] team0 (unregistering): Port device team_slave_1 removed [ 403.610630][ T208] team0 (unregistering): Port device team_slave_0 removed [ 403.787672][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.380939][ T208] team0 (unregistering): Port device team_slave_1 removed [ 404.521300][ T208] team0 (unregistering): Port device team_slave_0 removed [ 405.720869][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.006240][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.260408][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.260557][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.260804][ T7426] bridge_slave_0: entered allmulticast mode [ 406.268673][ T7426] bridge_slave_0: entered promiscuous mode [ 406.319718][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.328485][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.328746][ T7426] bridge_slave_1: entered allmulticast mode [ 406.346250][ T7426] bridge_slave_1: entered promiscuous mode [ 406.468950][ T7333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 406.684002][ T7333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 406.777382][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.811634][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.811954][ T7333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 407.123764][ T7333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 407.299854][ T7426] team0: Port device team_slave_0 added [ 407.333034][ T7426] team0: Port device team_slave_1 added [ 407.660518][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.660532][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.660552][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.692695][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.692720][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.692750][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.894261][ T7384] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 407.970938][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.978231][ T7384] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 408.092689][ T7384] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 408.232532][ T7384] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 408.311010][ T7426] hsr_slave_0: entered promiscuous mode [ 408.313277][ T7426] hsr_slave_1: entered promiscuous mode [ 408.520920][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.527986][ T7333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.765988][ T7333] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.821931][ T7426] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 409.858449][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.858585][ T6091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.861037][ T7426] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 409.912839][ T7426] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 409.987513][ T7426] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 410.042428][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.043395][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.059591][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.235700][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.302665][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.302810][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.336529][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.336800][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.039478][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.213164][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.225425][ T7333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.259248][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.260210][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.315050][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.315488][ T6091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.667627][ T7384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.288521][ T7333] veth0_vlan: entered promiscuous mode [ 412.363371][ T7333] veth1_vlan: entered promiscuous mode [ 412.475550][ T7333] veth0_macvtap: entered promiscuous mode [ 412.514381][ T7333] veth1_macvtap: entered promiscuous mode [ 412.602272][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.626523][ T7333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.695523][ T7333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.782489][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.788387][ T7384] veth0_vlan: entered promiscuous mode [ 412.789732][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.798224][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.813646][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.914235][ T7384] veth1_vlan: entered promiscuous mode [ 413.264402][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.264423][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.323343][ T7384] veth0_macvtap: entered promiscuous mode [ 413.375867][ T7384] veth1_macvtap: entered promiscuous mode [ 413.395860][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.395880][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.535850][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.536162][ T7426] veth0_vlan: entered promiscuous mode [ 413.596819][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.614212][ T7426] veth1_vlan: entered promiscuous mode [ 413.657449][ T6115] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.671374][ T6115] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.682989][ T6115] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.701899][ T6115] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.789617][ T37] audit: type=1400 audit(1757682124.254:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7578 comm="syz.3.319" src=1 dest=20000 netif=wpan0 [ 414.067249][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.257763][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.508511][ T7589] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 414.727505][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.762187][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.968587][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.649882][ T7426] veth0_macvtap: entered promiscuous mode [ 415.791187][ T7426] veth1_macvtap: entered promiscuous mode [ 415.856914][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.856935][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.950319][ T6621] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 416.134001][ T6621] usb 4-1: Using ep0 maxpacket: 8 [ 416.137134][ T6621] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 416.137150][ T6621] usb 4-1: config 0 has no interface number 0 [ 416.162416][ T6621] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 416.162435][ T6621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.162445][ T6621] usb 4-1: Product: syz [ 416.162453][ T6621] usb 4-1: Manufacturer: syz [ 416.162460][ T6621] usb 4-1: SerialNumber: syz [ 416.252092][ T6621] usb 4-1: config 0 descriptor?? [ 416.271617][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.307257][ T6621] as10x_usb: device has been detected [ 416.308166][ T6621] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 416.412705][ T6621] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 416.415572][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.509171][ T6116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.509191][ T6116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.556626][ T6621] as10x_usb: error during firmware upload part1 [ 416.557381][ T6621] Registered device PCTV Systems picoStick (74e) [ 416.577972][ T6621] usb 4-1: USB disconnect, device number 7 [ 416.640504][ T6621] Unregistered device PCTV Systems picoStick (74e) [ 416.653242][ T6621] as10x_usb: device has been disconnected [ 416.654711][ T6091] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.702195][ T6091] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.705340][ T6091] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.731322][ T6091] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.915799][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.125647][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.220133][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.957939][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.957961][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.288526][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.367076][ T7643] qnx6: unable to read the first superblock [ 421.161439][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.803621][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.870360][ T7650] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 422.008010][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.008030][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.065082][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.961521][ T7663] vcan0: MTU too low for tipc bearer [ 422.961563][ T7663] tipc: Enabling of bearer rejected, failed to enable media [ 423.054344][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.353349][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.282061][ T7685] overlayfs: missing 'lowerdir' [ 425.920771][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.237896][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.513226][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.570110][ T6231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 426.639777][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.023636][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.089871][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.250560][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.486700][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.507492][ T6231] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 427.507521][ T6231] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 427.507538][ T6231] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.507588][ T6231] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 427.507613][ T6231] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 428.020669][ T6231] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 428.020698][ T6231] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 428.020716][ T6231] usb 6-1: Product: syz [ 428.020730][ T6231] usb 6-1: Manufacturer: syz [ 428.072382][ T6231] cdc_wdm 6-1:1.0: skipping garbage [ 428.072402][ T6231] cdc_wdm 6-1:1.0: skipping garbage [ 428.174805][ T6231] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 428.174837][ T6231] cdc_wdm 6-1:1.0: Unknown control protocol [ 428.205562][ T7708] netlink: 44 bytes leftover after parsing attributes in process `syz.6.339'. [ 428.292042][ T7697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.338'. [ 428.329806][ T7703] 9pnet: Could not find request transport: fd0x0000000000000003 [ 428.397161][ T5959] usb 6-1: USB disconnect, device number 2 [ 428.587206][ T7717] netlink: 7 bytes leftover after parsing attributes in process `syz.2.341'. [ 429.130174][ T6621] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 429.200200][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.301090][ T6621] usb 3-1: Using ep0 maxpacket: 32 [ 429.657003][ T6621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.657351][ T6621] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 429.657617][ T6621] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 429.657666][ T6621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.792708][ T6621] usb 3-1: config 0 descriptor?? [ 430.047138][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.270414][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 430.357731][ T6621] shield 0003:0955:7214.0003: item fetching failed at offset 0/1 [ 430.358594][ T6621] shield 0003:0955:7214.0003: Parse failed [ 430.379371][ T6621] shield 0003:0955:7214.0003: probe with driver shield failed with error -22 [ 430.398848][ T9] IPVS: starting estimator thread 0... [ 430.440574][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 430.446351][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.446383][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.446404][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 430.446445][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.446467][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.493016][ T7753] IPVS: using max 7 ests per chain, 16800 per kthread [ 430.555159][ T10] usb 6-1: config 0 descriptor?? [ 430.616895][ T5959] usb 3-1: USB disconnect, device number 2 [ 431.336639][ T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x1 [ 431.384540][ T10] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 431.384573][ T10] microsoft 0003:045E:07DA.0004: no inputs found [ 431.384585][ T10] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 431.556383][ T10] usb 6-1: USB disconnect, device number 3 [ 432.319850][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.830242][ T6621] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 432.844174][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.076720][ T6621] usb 8-1: Using ep0 maxpacket: 32 [ 433.304365][ T6621] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.307315][ T6621] usb 8-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 433.307392][ T6621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.602225][ T7782] fido_id[7782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 433.651953][ T6621] usb 8-1: config 0 descriptor?? [ 433.702690][ T6621] dvb-usb: found a 'TeVii S662' in warm state. [ 433.702748][ T6621] dw2102: su3000_power_ctrl: 1, initialized 0 [ 433.703357][ T6621] dvb-usb: bulk message failed: -22 (2/0) [ 433.716922][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.785173][ T6621] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 433.800815][ T6621] dvbdev: DVB: registering new adapter (TeVii S662) [ 433.800868][ T6621] usb 8-1: media controller created [ 433.801166][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 433.801181][ T6621] dw2102: i2c transfer failed. [ 433.801199][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 433.801212][ T6621] dw2102: i2c transfer failed. [ 433.801229][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 433.801242][ T6621] dw2102: i2c transfer failed. [ 433.801258][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 433.801271][ T6621] dw2102: i2c transfer failed. [ 433.801287][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 433.801299][ T6621] dw2102: i2c transfer failed. [ 433.801314][ T6621] dvb-usb: bulk message failed: -22 (6/0) [ 433.801334][ T6621] dw2102: i2c transfer failed. [ 433.801343][ T6621] dvb-usb: MAC address: 02:02:02:02:02:02 [ 433.897968][ T7780] dvb-usb: bulk message failed: -22 (4/0) [ 433.897991][ T7780] dw2102: i2c transfer failed. [ 433.941649][ T6621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.036956][ T6621] dvb-usb: bulk message failed: -22 (3/0) [ 434.036979][ T6621] dw2102: command 0x0e transfer failed. [ 434.036988][ T6621] dvb-usb: bulk message failed: -22 (3/0) [ 434.037001][ T6621] dw2102: command 0x0e transfer failed. [ 434.344360][ T6621] dvb-usb: bulk message failed: -22 (3/0) [ 434.344383][ T6621] dw2102: command 0x0e transfer failed. [ 434.344392][ T6621] dvb-usb: bulk message failed: -22 (3/0) [ 434.344406][ T6621] dw2102: command 0x0e transfer failed. [ 434.344415][ T6621] dvb-usb: bulk message failed: -22 (1/0) [ 434.344428][ T6621] dw2102: command 0x51 transfer failed. [ 434.344437][ T6621] dvb-usb: bulk message failed: -22 (5/0) [ 434.344449][ T6621] dw2102: i2c probe for address 0x68 failed. [ 434.344460][ T6621] dvb-usb: bulk message failed: -22 (5/0) [ 434.344472][ T6621] dw2102: i2c probe for address 0x69 failed. [ 434.344482][ T6621] dvb-usb: bulk message failed: -22 (5/0) [ 434.344495][ T6621] dw2102: i2c probe for address 0x6a failed. [ 434.344504][ T6621] dw2102: probing for demodulator failed. Is the external power switched on? [ 434.344514][ T6621] dvb-usb: no frontend was attached by 'TeVii S662' [ 434.387675][ T7799] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 434.550195][ T6621] rc_core: IR keymap rc-tt-1500 not found [ 434.550208][ T6621] Registered IR keymap rc-empty [ 434.552182][ T6621] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 434.554038][ T6621] input: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input8 [ 434.556796][ T6621] dvb-usb: schedule remote query interval to 250 msecs. [ 434.556816][ T6621] dw2102: su3000_power_ctrl: 0, initialized 1 [ 434.556829][ T6621] dvb-usb: TeVii S662 successfully initialized and connected. [ 434.619598][ T6621] usb 8-1: USB disconnect, device number 2 [ 434.720233][ T6231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 434.848504][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.6.366'. [ 434.851084][ T7809] 9pnet: Could not find request transport: fd0x0000000000000003 [ 434.875990][ T6231] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 434.876025][ T6231] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 434.876064][ T6231] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.876086][ T6231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.021803][ T6621] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 435.052506][ T7804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.257656][ T6231] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.388576][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.424733][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.695540][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.819230][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.956362][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.985110][ T46] IPVS: starting estimator thread 0... [ 436.313171][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.315731][ T7825] IPVS: using max 7 ests per chain, 16800 per kthread [ 436.478899][ T7833] overlayfs: missing 'lowerdir' [ 436.480976][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.569448][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.672344][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.828979][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.922405][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.201370][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.525588][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.140484][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.273133][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.382824][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.420525][ T6231] usb 3-1: USB disconnect, device number 3 [ 438.715303][ T7464] udevd[7464]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.231684][ T7865] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 440.072438][ T7873] netlink: 36 bytes leftover after parsing attributes in process `syz.6.384'. [ 440.106478][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.106563][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.314567][ T7872] 9pnet: Could not find request transport: fd0x0000000000000003 [ 440.758746][ T7880] overlayfs: missing 'lowerdir' [ 441.022813][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.031042][ T5843] Bluetooth: hci5: command tx timeout [ 441.159176][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.352385][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.431393][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.897006][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.450469][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.191848][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.428640][ T7921] overlayfs: missing 'lowerdir' [ 443.429917][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.589537][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.859769][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.177173][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.322013][ T7932] netlink: 'syz.6.401': attribute type 29 has an invalid length. [ 444.352573][ T7932] netlink: 'syz.6.401': attribute type 29 has an invalid length. [ 445.054965][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.189672][ T7926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.400'. [ 445.480113][ T7937] 9pnet: Could not find request transport: fd0x0000000000000003 [ 445.494465][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.405'. [ 446.123824][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.274877][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.782849][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.804897][ T7952] sctp: failed to load transform for md5: -2 [ 447.155093][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.490934][ T7977] sctp: [Deprecated]: syz.2.413 (pid 7977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.490934][ T7977] Use struct sctp_sack_info instead [ 447.491965][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.960778][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.266609][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.110726][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.386124][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.711475][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.856977][ T8013] program syz.7.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.398046][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.016011][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.342371][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.586445][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.856592][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.191028][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.203132][ T6231] IPVS: starting estimator thread 0... [ 453.300290][ T8035] IPVS: using max 8 ests per chain, 19200 per kthread [ 453.674387][ T37] audit: type=1326 audit(1757682164.124:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8040 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b42a7eba9 code=0x7ffc0000 [ 453.674443][ T37] audit: type=1326 audit(1757682164.134:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8040 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2b42a7eba9 code=0x7ffc0000 [ 453.674481][ T37] audit: type=1326 audit(1757682164.134:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8040 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b42a7eba9 code=0x7ffc0000 [ 453.701902][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.704222][ T6231] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 453.933429][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.312710][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.318484][ T6231] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.318510][ T6231] usb 3-1: config 0 has no interface number 0 [ 454.318562][ T6231] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 454.318584][ T6231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.332411][ T6231] usb 3-1: config 0 descriptor?? [ 454.371960][ T6231] usb 3-1: selecting invalid altsetting 1 [ 454.373273][ T6231] dvb_ttusb_budget: ttusb_init_controller: error [ 454.373292][ T6231] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 454.601030][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.869523][ T6231] DVB: Unable to find symbol cx22700_attach() [ 455.050102][ T46] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 455.106424][ T6231] DVB: Unable to find symbol tda10046_attach() [ 455.106438][ T6231] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 455.127351][ T6231] usb 3-1: USB disconnect, device number 4 [ 455.232291][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.232325][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 455.232367][ T46] usb 6-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 455.232389][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.274566][ T46] usb 6-1: config 0 descriptor?? [ 455.275645][ T8049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 455.735374][ T46] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 455.768671][ T46] lenovo 0003:17EF:60FE.0005: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.5-1/input0 [ 455.924938][ T7613] usb 6-1: USB disconnect, device number 4 [ 457.698051][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.795486][ T8067] fido_id[8067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 457.817682][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.932022][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.238549][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.790812][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.106504][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.306688][ T8094] overlayfs: missing 'lowerdir' [ 460.345255][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.685044][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.975916][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.067899][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.203414][ T8108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.683147][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.022628][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.641815][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.061022][ T8143] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 464.170094][ T5850] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 464.330112][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 464.334605][ T5850] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 464.334633][ T5850] usb 4-1: config 179 has no interface number 0 [ 464.334782][ T5850] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 464.334810][ T5850] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 464.334836][ T5850] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 464.334861][ T5850] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 464.334886][ T5850] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 464.334928][ T5850] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 464.334950][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.460597][ T8139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 464.465418][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.667685][ T8150] overlayfs: missing 'lowerdir' [ 464.668996][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.811665][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.128582][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.469188][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.931658][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.201556][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.548089][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.018739][ T5850] usb 4-1: USB disconnect, device number 8 [ 467.018832][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 467.019174][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 467.140653][ T6621] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 467.364051][ T8168] netlink: 'syz.3.466': attribute type 3 has an invalid length. [ 467.745521][ T8176] comedi comedi3: comedi_parport: I/O port conflict (0x4f27,3) [ 468.078946][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.257815][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.456634][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.658001][ T8194] overlayfs: missing 'lowerdir' [ 468.659372][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.818022][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.046264][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.281356][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.298485][ T8182] syz.2.471: vmalloc error: size 2764800, failed to allocated page array size 5400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 469.298912][ T8182] CPU: 1 UID: 0 PID: 8182 Comm: syz.2.471 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 469.298935][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.298954][ T8182] Call Trace: [ 469.298961][ T8182] [ 469.298969][ T8182] dump_stack_lvl+0x189/0x250 [ 469.299016][ T8182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.299045][ T8182] ? __pfx__printk+0x10/0x10 [ 469.299066][ T8182] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 469.299087][ T8182] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 469.299110][ T8182] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 469.299134][ T8182] warn_alloc+0x22e/0x3b0 [ 469.299174][ T8182] ? __pfx_warn_alloc+0x10/0x10 [ 469.299212][ T8182] ? __get_vm_area_node+0x2bc/0x350 [ 469.299239][ T8182] ? vb2_vmalloc_alloc+0xef/0x340 [ 469.299262][ T8182] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 469.299320][ T8182] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.299350][ T8182] ? vb2_vmalloc_alloc+0xb2/0x340 [ 469.299370][ T8182] ? __kasan_kmalloc+0x93/0xb0 [ 469.299394][ T8182] vmalloc_user_noprof+0xad/0xf0 [ 469.299419][ T8182] ? vb2_vmalloc_alloc+0xef/0x340 [ 469.299437][ T8182] vb2_vmalloc_alloc+0xef/0x340 [ 469.299454][ T8182] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 469.299474][ T8182] __vb2_queue_alloc+0x9bf/0x15a0 [ 469.299524][ T8182] vb2_core_reqbufs+0xc31/0x1420 [ 469.299572][ T8182] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 469.299599][ T8182] ? vb2_verify_memory_type+0x1fc/0x570 [ 469.299631][ T8182] ? vb2_reqbufs+0x3a9/0x630 [ 469.299666][ T8182] v4l2_m2m_ioctl_reqbufs+0x110/0x200 [ 469.299701][ T8182] __video_do_ioctl+0xc9b/0xdb0 [ 469.299733][ T8182] ? __pfx___video_do_ioctl+0x10/0x10 [ 469.299775][ T8182] video_usercopy+0x86e/0x14f0 [ 469.299805][ T8182] ? __pfx___video_do_ioctl+0x10/0x10 [ 469.299824][ T8182] ? __pfx_video_usercopy+0x10/0x10 [ 469.299841][ T8182] ? smack_file_ioctl+0x2ac/0x340 [ 469.299882][ T8182] ? __fget_files+0x2a/0x420 [ 469.299907][ T8182] ? __fget_files+0x3a6/0x420 [ 469.299938][ T8182] v4l2_ioctl+0x190/0x1e0 [ 469.299967][ T8182] ? __pfx_v4l2_ioctl+0x10/0x10 [ 469.299994][ T8182] __se_sys_ioctl+0xff/0x170 [ 469.300018][ T8182] do_syscall_64+0xfa/0x3b0 [ 469.300035][ T8182] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.300063][ T8182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.300083][ T8182] ? clear_bhb_loop+0x60/0xb0 [ 469.300107][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.300140][ T8182] RIP: 0033:0x7ff90e80eba9 [ 469.300161][ T8182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.300178][ T8182] RSP: 002b:00007ff90ca76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.300197][ T8182] RAX: ffffffffffffffda RBX: 00007ff90ea55fa0 RCX: 00007ff90e80eba9 [ 469.300212][ T8182] RDX: 00002000000001c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 469.300225][ T8182] RBP: 00007ff90e891e19 R08: 0000000000000000 R09: 0000000000000000 [ 469.300238][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.300250][ T8182] R13: 00007ff90ea56038 R14: 00007ff90ea55fa0 R15: 00007fff78b5ca98 [ 469.300281][ T8182] [ 469.370159][ T8182] Mem-Info: [ 469.370179][ T8182] active_anon:3118 inactive_anon:12958 isolated_anon:0 [ 469.370179][ T8182] active_file:6073 inactive_file:46926 isolated_file:0 [ 469.370179][ T8182] unevictable:768 dirty:85 writeback:0 [ 469.370179][ T8182] slab_reclaimable:12183 slab_unreclaimable:106626 [ 469.370179][ T8182] mapped:37748 shmem:9979 pagetables:1754 [ 469.370179][ T8182] sec_pagetables:0 bounce:0 [ 469.370179][ T8182] kernel_misc_reclaimable:0 [ 469.370179][ T8182] free:1303416 free_pcp:8068 free_cma:0 [ 469.370234][ T8182] Node 0 active_anon:12472kB inactive_anon:51832kB active_file:24092kB inactive_file:187704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150992kB dirty:340kB writeback:0kB shmem:38380kB kernel_stack:14012kB pagetables:6860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 469.370282][ T8182] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 469.370325][ T8182] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.370385][ T8182] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 469.370418][ T8182] Node 0 DMA32 free:1297792kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12468kB inactive_anon:51788kB active_file:23076kB inactive_file:187636kB unevictable:1536kB writepending:340kB present:3129332kB managed:2572304kB mlocked:0kB bounce:0kB free_pcp:32272kB local_pcp:9556kB free_cma:0kB [ 469.370475][ T8182] lowmem_reserve[]: 0 0 1 1 1 [ 469.370505][ T8182] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1016kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.370559][ T8182] lowmem_reserve[]: 0 0 0 0 0 [ 469.370588][ T8182] Node 1 Normal free:3900512kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.370644][ T8182] lowmem_reserve[]: 0 0 0 0 0 [ 469.370674][ T8182] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 469.371262][ T8182] Node 0 DMA32: 18*4kB (ME) 9*8kB (UM) 3*16kB (UM) 7*32kB (E) 3*64kB (ME) 2*128kB (ME) 36*256kB (UME) 75*512kB (UME) 36*1024kB (UME) 6*2048kB (UE) 293*4096kB (UM) = 1297760kB [ 469.371411][ T8182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 469.371505][ T8182] Node 1 Normal: 226*4kB (UE) 35*8kB (UME) 28*16kB (UME) 212*32kB (UME) 94*64kB (UME) 32*128kB (UME) 14*256kB (UME) 11*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3900512kB [ 469.371669][ T8182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.371686][ T8182] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.371702][ T8182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.371717][ T8182] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.371734][ T8182] 62974 total pagecache pages [ 469.371748][ T8182] 0 pages in swap cache [ 469.371754][ T8182] Free swap = 124996kB [ 469.371761][ T8182] Total swap = 124996kB [ 469.371768][ T8182] 2097051 pages RAM [ 469.371774][ T8182] 0 pages HighMem/MovableOnly [ 469.371781][ T8182] 422077 pages reserved [ 469.371788][ T8182] 0 pages cma reserved [ 469.561466][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 469.595160][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.728015][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 469.733408][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.733439][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.733481][ T9] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 469.733502][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.744169][ T9] usb 7-1: config 0 descriptor?? [ 470.297580][ T9] waltop 0003:172F:0034.0006: item fetching failed at offset 0/2 [ 470.298459][ T9] waltop 0003:172F:0034.0006: probe with driver waltop failed with error -22 [ 470.484160][ T5923] usb 7-1: USB disconnect, device number 2 [ 470.519806][ T8211] netlink: 60 bytes leftover after parsing attributes in process `syz.7.477'. [ 470.520678][ T8205] netlink: 60 bytes leftover after parsing attributes in process `syz.7.477'. [ 470.538172][ T8209] netlink: 60 bytes leftover after parsing attributes in process `syz.7.477'. [ 471.040063][ T5923] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 471.190205][ T5923] usb 8-1: Using ep0 maxpacket: 32 [ 471.200194][ T5923] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 471.200222][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.200240][ T5923] usb 8-1: Product: syz [ 471.200253][ T5923] usb 8-1: Manufacturer: syz [ 471.200265][ T5923] usb 8-1: SerialNumber: syz [ 471.266216][ T5923] usb 8-1: config 0 descriptor?? [ 471.317797][ T5923] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 471.945757][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.733243][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.963032][ T5923] gspca_stk1135: reg_w 0x5 err -71 [ 472.964100][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 472.964113][ T5923] gspca_stk1135: Sensor write failed [ 472.966643][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 472.966655][ T5923] gspca_stk1135: Sensor write failed [ 472.966678][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 472.966690][ T5923] gspca_stk1135: Sensor read failed [ 472.966712][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 472.966719][ T5923] gspca_stk1135: Sensor read failed [ 472.966725][ T5923] gspca_stk1135: Detected sensor type unknown (0x0) [ 472.966751][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 472.966759][ T5923] gspca_stk1135: Sensor read failed [ 472.966780][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 472.966787][ T5923] gspca_stk1135: Sensor read failed [ 472.966808][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 472.966816][ T5923] gspca_stk1135: Sensor write failed [ 472.966836][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 472.966843][ T5923] gspca_stk1135: Sensor write failed [ 472.966924][ T5923] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 472.999786][ T5923] usb 8-1: USB disconnect, device number 3 [ 474.005887][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.151991][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.254627][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.357218][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.712169][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.970526][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.330241][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.472435][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.062240][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.420076][ T6621] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 476.600092][ T6621] usb 3-1: Using ep0 maxpacket: 8 [ 476.609384][ T6621] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 476.609417][ T6621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.609436][ T6621] usb 3-1: Product: syz [ 476.609449][ T6621] usb 3-1: Manufacturer: syz [ 476.609463][ T6621] usb 3-1: SerialNumber: syz [ 477.261329][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.319330][ T6621] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 477.507181][ T6621] usb 3-1: USB disconnect, device number 5 [ 477.518596][ T6621] usblp0: removed [ 478.193400][ T8279] netlink: 36 bytes leftover after parsing attributes in process `syz.7.494'. [ 478.266056][ T8286] 9pnet: Could not find request transport: fd0x0000000000000003 [ 478.575596][ T8261] dlm: non-version read from control device 36 [ 478.678812][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.905204][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.339018][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.782086][ T6621] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 479.930129][ T6621] usb 8-1: Using ep0 maxpacket: 8 [ 479.932548][ T6621] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.932574][ T6621] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.932597][ T6621] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.932618][ T6621] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.932654][ T6621] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.932678][ T6621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.248343][ T6621] usb 8-1: GET_CAPABILITIES returned 0 [ 480.248393][ T6621] usbtmc 8-1:16.0: can't read capabilities [ 480.307787][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.329973][ T8318] netlink: 44 bytes leftover after parsing attributes in process `syz.6.505'. [ 481.262172][ T7613] usb 8-1: USB disconnect, device number 4 [ 481.420886][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.592756][ T6621] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 481.743519][ T6621] usb 3-1: Using ep0 maxpacket: 16 [ 481.746332][ T6621] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 481.746364][ T6621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 481.749493][ T6621] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 481.749521][ T6621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.749540][ T6621] usb 3-1: Product: syz [ 481.749554][ T6621] usb 3-1: Manufacturer: syz [ 481.749568][ T6621] usb 3-1: SerialNumber: syz [ 481.849354][ T6621] usb 3-1: config 0 descriptor?? [ 481.885624][ T6621] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 481.885663][ T6621] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 481.921330][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.081563][ T8337] overlayfs: missing 'lowerdir' [ 482.082967][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.269591][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.371338][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.630716][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.734434][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.895144][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.145752][ T6621] em28xx 3-1:0.0: chip ID is em2870 [ 483.393241][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 483.690526][ T6621] usb 3-1: USB disconnect, device number 6 [ 483.732445][ T6621] em28xx 3-1:0.0: Disconnecting em28xx [ 483.822121][ T8341] 9pnet: Could not find request transport: fd0x0000000000000003 [ 483.846496][ T8341] netlink: 36 bytes leftover after parsing attributes in process `syz.7.510'. [ 483.867570][ T6621] em28xx 3-1:0.0: Freeing device [ 483.901390][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 483.912890][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.912922][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.912959][ T31] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 483.912980][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.059622][ T31] usb 7-1: config 0 descriptor?? [ 484.709358][ T31] usb 7-1: string descriptor 0 read error: -71 [ 484.744940][ T31] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 484.745026][ T31] letsketch 0003:6161:4D15.0007: probe with driver letsketch failed with error -32 [ 484.817390][ T31] usb 7-1: USB disconnect, device number 3 [ 486.110745][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.441548][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.535551][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.778275][ T8386] overlayfs: missing 'lowerdir' [ 486.779432][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.926545][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.122962][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.315714][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.294874][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.525'. [ 488.408278][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.550185][ T8398] 9pnet: Could not find request transport: fd0x0000000000000003 [ 489.131464][ T8419] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.532'. [ 489.322735][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.280795][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.597613][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.797665][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.171254][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.590316][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.539'. [ 492.688473][ T8456] 9pnet: Could not find request transport: fd0x0000000000000003 [ 493.136773][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.327933][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.903489][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.033330][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 494.065361][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.230985][ T8475] input: syz1 as /devices/virtual/input/input10 [ 495.558775][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.604318][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.095281][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.167757][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.984277][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.026725][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.465746][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.679118][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.058638][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.229875][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.982274][ T8538] netlink: 36 bytes leftover after parsing attributes in process `syz.6.560'. [ 499.013928][ T8537] Driver unsupported XDP return value 0 on prog (id 155) dev N/A, expect packet loss! [ 499.135765][ T8530] 9pnet: Could not find request transport: fd0x0000000000000003 [ 499.456088][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.543131][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 499.543213][ T5959] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 500.240270][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.408652][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.560959][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.561041][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.770053][ T5923] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 501.951699][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 501.955769][ T5923] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 501.955798][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.987442][ T5923] usb 7-1: config 0 descriptor?? [ 502.079063][ T8574] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 502.219618][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 502.251143][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 502.261681][ T5923] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 502.261743][ T5923] usb 7-1: media controller created [ 502.341280][ T5959] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 502.341302][ T5959] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 502.342992][ C0] ------------[ cut here ]------------ [ 502.343003][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 502.343087][ C0] WARNING: CPU: 0 PID: 16 at kernel/workqueue.c:2256 __queue_work+0x2e5/0x1010 [ 502.343121][ C0] Modules linked in: [ 502.343139][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.343158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.343169][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 502.343193][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 36 a8 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f0 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 4d 6d 34 00 eb 2e e8 46 6d 34 00 e9 [ 502.343208][ C0] RSP: 0018:ffffc90000157828 EFLAGS: 00010046 [ 502.343223][ C0] RAX: 7c43131cf7048a00 RBX: 0000000000000000 RCX: ffff88801ae85940 [ 502.343237][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 502.343249][ C0] RBP: ffff88805a87c998 R08: 0000000000000000 R09: 0000000000000100 [ 502.343262][ C0] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 502.343275][ C0] R13: dffffc0000000000 R14: ffff8880307d8168 R15: ffff88801ae8644c [ 502.343288][ C0] FS: 0000000000000000(0000) GS:ffff8881268bd000(0000) knlGS:0000000000000000 [ 502.343299][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.343310][ C0] CR2: 00007f13832f6e9c CR3: 000000003a31c000 CR4: 00000000003526f0 [ 502.343324][ C0] Call Trace: [ 502.343330][ C0] [ 502.343354][ C0] call_timer_fn+0x17e/0x5f0 [ 502.343377][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 502.343400][ C0] ? call_timer_fn+0xbe/0x5f0 [ 502.343424][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 502.343464][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 502.343483][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 502.343510][ C0] __run_timer_base+0x709/0x970 [ 502.343553][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 502.343595][ C0] run_timer_softirq+0xb7/0x180 [ 502.343616][ C0] handle_softirqs+0x22f/0x710 [ 502.343643][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 502.343671][ C0] run_ktimerd+0xcf/0x190 [ 502.343691][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 502.343709][ C0] ? schedule+0x91/0x360 [ 502.343741][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 502.343761][ C0] smpboot_thread_fn+0x53f/0xa60 [ 502.343781][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 502.343805][ C0] kthread+0x70e/0x8a0 [ 502.343829][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 502.343845][ C0] ? __pfx_kthread+0x10/0x10 [ 502.343870][ C0] ? __pfx_kthread+0x10/0x10 [ 502.343891][ C0] ret_from_fork+0x439/0x7d0 [ 502.343913][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 502.343938][ C0] ? __switch_to_asm+0x39/0x70 [ 502.343952][ C0] ? __switch_to_asm+0x33/0x70 [ 502.343966][ C0] ? __pfx_kthread+0x10/0x10 [ 502.343999][ C0] ret_from_fork_asm+0x1a/0x30 [ 502.344032][ C0] [ 502.344046][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 502.344058][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.344074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.344082][ C0] Call Trace: [ 502.344088][ C0] [ 502.344093][ C0] dump_stack_lvl+0x99/0x250 [ 502.344115][ C0] ? __asan_memcpy+0x40/0x70 [ 502.344132][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.344153][ C0] ? __pfx__printk+0x10/0x10 [ 502.344184][ C0] vpanic+0x281/0x750 [ 502.344207][ C0] ? __pfx__printk+0x10/0x10 [ 502.344224][ C0] ? __pfx_vpanic+0x10/0x10 [ 502.344246][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 502.344279][ C0] panic+0xb9/0xc0 [ 502.344300][ C0] ? __pfx_panic+0x10/0x10 [ 502.344339][ C0] __warn+0x31b/0x4b0 [ 502.344362][ C0] ? __queue_work+0x2e5/0x1010 [ 502.344389][ C0] ? __queue_work+0x2e5/0x1010 [ 502.344409][ C0] report_bug+0x2be/0x4f0 [ 502.344431][ C0] ? __queue_work+0x2e5/0x1010 [ 502.344452][ C0] ? __queue_work+0x2e5/0x1010 [ 502.344472][ C0] ? __queue_work+0x2e7/0x1010 [ 502.344492][ C0] handle_bug+0x84/0x160 [ 502.344509][ C0] exc_invalid_op+0x1a/0x50 [ 502.344525][ C0] asm_exc_invalid_op+0x1a/0x20 [ 502.344543][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 502.344565][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 36 a8 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f0 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 4d 6d 34 00 eb 2e e8 46 6d 34 00 e9 [ 502.344581][ C0] RSP: 0018:ffffc90000157828 EFLAGS: 00010046 [ 502.344598][ C0] RAX: 7c43131cf7048a00 RBX: 0000000000000000 RCX: ffff88801ae85940 [ 502.344613][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 502.344625][ C0] RBP: ffff88805a87c998 R08: 0000000000000000 R09: 0000000000000100 [ 502.344640][ C0] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 502.344657][ C0] R13: dffffc0000000000 R14: ffff8880307d8168 R15: ffff88801ae8644c [ 502.344695][ C0] ? __queue_work+0x2e4/0x1010 [ 502.344735][ C0] call_timer_fn+0x17e/0x5f0 [ 502.344763][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 502.344791][ C0] ? call_timer_fn+0xbe/0x5f0 [ 502.344818][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 502.344858][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 502.344883][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 502.344914][ C0] __run_timer_base+0x709/0x970 [ 502.344959][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 502.345014][ C0] run_timer_softirq+0xb7/0x180 [ 502.345041][ C0] handle_softirqs+0x22f/0x710 [ 502.345080][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 502.345120][ C0] run_ktimerd+0xcf/0x190 [ 502.345148][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 502.345174][ C0] ? schedule+0x91/0x360 [ 502.345212][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 502.345237][ C0] smpboot_thread_fn+0x53f/0xa60 [ 502.345265][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 502.345302][ C0] kthread+0x70e/0x8a0 [ 502.345337][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 502.345363][ C0] ? __pfx_kthread+0x10/0x10 [ 502.345400][ C0] ? __pfx_kthread+0x10/0x10 [ 502.345432][ C0] ret_from_fork+0x439/0x7d0 [ 502.345463][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 502.345497][ C0] ? __switch_to_asm+0x39/0x70 [ 502.345517][ C0] ? __switch_to_asm+0x33/0x70 [ 502.345535][ C0] ? __pfx_kthread+0x10/0x10 [ 502.345567][ C0] ret_from_fork_asm+0x1a/0x30 [ 502.345608][ C0] [ 502.345882][ C0] Kernel Offset: disabled