last executing test programs: 18m2.066400699s ago: executing program 4 (id=5): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) setfsgid(0xee00) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(r6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x8, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, r2, 0x4, 0x8, 'syz1\x00', &(0x7f0000000180)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00', '\x00', ':#,\x00'], 0x17}) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000040)={0x4, 0x6, 0x8001, 0x9, 0x2c, "5d2bcc687b4800c6983dddd71b57ca74cf018e", 0xc0b1, 0x5}) socket$kcm(0x10, 0x2, 0x0) 17m59.81082638s ago: executing program 4 (id=6): syz_usb_connect(0x0, 0xf0, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x41, 0xb4, 0x40, 0x10, 0x12d1, 0x1004, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x1, 0x40, 0x1, 0x20, 0x9, [{{0x9, 0x4, 0x2a, 0x1, 0x7, 0x5a, 0xfa, 0x8a, 0x7, [], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x8, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2}, @generic={0x2, 0x6}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x0, 0xdc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x100}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x68, 0x1, 0x7, [@generic={0x5, 0xb, '+[N'}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xf, 0x3, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x4, 0x8, 0x5, [@generic={0x2, 0x9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x5, 0x8, 0x4, [@generic={0x76, 0x10, "06ec7c7f5ca6ab8763c345b7de008309f2e2ba5bfb32e0ce61db0682bc723aa81bca3c9bb110bef5daadb0405b035a8c1669c94dfbe8f2dc95afaa339a5ef72f1c0aafc2edf1abfd133779a13bc54bc9d2de2baa99e55b84351349e0e2e4ddda6cab88010c7ff13973b8c953776c5aaf1f394793"}]}}]}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) close(0x3) 17m56.278864965s ago: executing program 4 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 17m55.344916892s ago: executing program 4 (id=13): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m54.949535873s ago: executing program 0 (id=14): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018e2ffff02000000000000000200000d0a00bbf61640a1ea621d000002000000000000"], &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0xfffd, 0x1005, @mcast2, 0x8676}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) sched_setscheduler(0x0, 0x2, 0x0) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', &(0x7f0000000380), 0x22000, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',default_permissions,smackfsfloor=\x00,fowner>', @ANYBLOB=',measure,sm']) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, 0x0, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17m51.228010568s ago: executing program 4 (id=19): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x8c}, 0x1, 0xbb1414ac}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 17m48.527966618s ago: executing program 4 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) socket$kcm(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) pipe2$watch_queue(0x0, 0x80) 17m48.332316757s ago: executing program 0 (id=22): socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x1c, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 17m44.2046286s ago: executing program 0 (id=26): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03) 17m42.861547255s ago: executing program 0 (id=27): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) mlockall(0x3) 17m41.62867542s ago: executing program 0 (id=28): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffdfe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 17m40.579690105s ago: executing program 0 (id=30): socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x4000000000000, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1]}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xfffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 17m27.669243109s ago: executing program 32 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) socket$kcm(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) pipe2$watch_queue(0x0, 0x80) 17m25.277230707s ago: executing program 33 (id=30): socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x4000000000000, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1]}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xfffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7m55.011981783s ago: executing program 3 (id=742): socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x6, 0x10002) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) chmod(0x0, 0x44) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='afs\x00', &(0x7f0000000240)='/dev/sequencer2\x00', 0x0) 7m53.566097882s ago: executing program 3 (id=743): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xda, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 7m52.331568993s ago: executing program 3 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x40005) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572d00000000000002000000000000000000000000000000000000004"], 0x68) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) process_vm_writev(0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/89, 0x59}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 7m48.463288587s ago: executing program 3 (id=748): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0xff96}, {0x6, 0x0, 0x1}]}}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x4}, 0x50) 7m45.908274811s ago: executing program 3 (id=752): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80, 0x800) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000000)=""/4102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 7m44.769347568s ago: executing program 3 (id=754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x40005) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572d00000000000002000000000000000000000000000000000000004"], 0x68) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0xc) process_vm_writev(r4, &(0x7f0000000340)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/89, 0x59}], 0x1, 0x0) 7m29.213692841s ago: executing program 34 (id=754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x40005) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572d00000000000002000000000000000000000000000000000000004"], 0x68) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0xc) process_vm_writev(r4, &(0x7f0000000340)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/89, 0x59}], 0x1, 0x0) 21.566870766s ago: executing program 5 (id=1306): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x0, 0x0, 'syz0\x00', 0xa13d}, 0x0, [0x0, 0x0, 0x0, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffff15, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x20000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000007c0)={{0x2, 0x4, 0x6, 0x6, '\x00', 0x5}, 0x0, [0xa9, 0x7, 0x8, 0x9, 0x2, 0x0, 0x2c, 0x5, 0x7, 0x100, 0x6, 0x7, 0x4, 0x2, 0xfff, 0x8001, 0xd0, 0x5, 0x101, 0x5, 0x1, 0x7fffffffffffffff, 0x2, 0x8001, 0x3, 0x10, 0x7, 0xebd3, 0x7, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x4, 0x7fffffff, 0x6, 0x4, 0x77c2, 0x3, 0x401, 0xc, 0x8, 0x4, 0x5, 0x10000, 0x0, 0x4dc4, 0x2000000000000000, 0x4, 0xfffffffffffffff9, 0x3, 0x4c4a, 0xfff, 0x8, 0xa, 0x5, 0xff, 0x2, 0x3, 0x6, 0xc, 0x37b0, 0x9, 0x5, 0x3, 0x5, 0x9, 0x80000, 0x3, 0x8000000000000000, 0xc, 0x8179, 0x7, 0x7, 0xb2bf, 0x0, 0x3, 0x3, 0xffffffffffffff76, 0xb12, 0x5c, 0x6, 0x10000, 0xd, 0xdff6, 0x9, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x800, 0x10, 0xfffffffffffffff8, 0x8000000, 0x8, 0x9, 0xfff, 0x8000, 0x6b0a, 0x8d, 0x4, 0xba, 0xfffffffffffffffa, 0x9, 0x9, 0x6, 0x4, 0xcd, 0x7, 0x8, 0x8, 0x7, 0x8, 0x5a, 0xa, 0xffff, 0x7ff, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff5, 0xff2, 0xfff, 0x8, 0x6, 0x2, 0x100000001, 0x303e]}) r1 = socket$alg(0x26, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, 0x0, 0x88c0) r8 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000780)=ANY=[@ANYBLOB="2400004121d7", @ANYRES16=r2, @ANYBLOB="a1ab00000000fbdbdf2532000000080001006000000008000300", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x20008844) 14.790926666s ago: executing program 5 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a90000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0xc100, 0x0) r3 = dup(r2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_int(r5, 0x101, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x5fa982857339a2a8, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d0f, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r8}, 0x18) mbind(&(0x7f0000751000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x4730, 0x5, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="8e82b9", 0x3, 0xfffffffffffffffb) keyctl$revoke(0x3, r9) keyctl$set_timeout(0xf, r9, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000130a010400000000000000000a0000210900010073797a310000000028000480240001800b000100736f636b6574000014000280080002400000000808000140000000030900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) keyctl$read(0xb, r9, &(0x7f0000000240)=""/234, 0xea) 6.593948248s ago: executing program 5 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0) 6.558142384s ago: executing program 1 (id=1326): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffff8ba2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) 6.512624194s ago: executing program 6 (id=1327): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xda, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 5.039926212s ago: executing program 6 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c) syz_open_dev$vim2m(0x0, 0xd3f5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) 4.797013302s ago: executing program 5 (id=1329): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000000)=""/4102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0) 3.609798929s ago: executing program 6 (id=1331): r0 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfb", 0x28}], 0x2) 3.111057318s ago: executing program 6 (id=1333): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.110385406s ago: executing program 5 (id=1334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000"], 0x0) 2.375233692s ago: executing program 1 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x1c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}}, 0x1c}, 0x1, 0xffffff7f}, 0x84) 1.660941222s ago: executing program 1 (id=1338): socket(0x1d, 0x2, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfdff, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.262585123s ago: executing program 1 (id=1341): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) 1.213691281s ago: executing program 2 (id=1342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) 1.186931355s ago: executing program 1 (id=1343): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) gettid() timer_create(0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 1.052219962s ago: executing program 2 (id=1344): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r1}}, 0x48) 996.553856ms ago: executing program 6 (id=1345): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) unshare(0x28040680) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) r2 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x354}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r2, 0x47bc, 0x0, 0x4, 0x0, 0x0) 939.260505ms ago: executing program 2 (id=1346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 824.308187ms ago: executing program 2 (id=1347): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 518.31475ms ago: executing program 2 (id=1348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 405.852003ms ago: executing program 5 (id=1349): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) 52.283927ms ago: executing program 1 (id=1350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0)="1a0000000200", 0x6) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd"], 0xfdef) 52.021836ms ago: executing program 2 (id=1351): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 0s ago: executing program 6 (id=1352): unshare(0x28040680) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) kernel console output (not intermixed with test programs): (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.503437][T10299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.947859][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 813.951041][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 813.960599][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.960684][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.981862][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 813.994536][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 813.998778][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 814.013237][T10299] hsr_slave_0: entered promiscuous mode [ 814.014997][T10299] hsr_slave_1: entered promiscuous mode [ 814.016164][T10299] debugfs: 'hsr0' already exists in 'hsr' [ 814.016194][T10299] Cannot create hsr debugfs directory [ 816.008558][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.034448][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.051319][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.057157][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.075782][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 816.115680][ T5812] Bluetooth: hci2: command tx timeout [ 818.192526][ T5812] Bluetooth: hci0: command tx timeout [ 818.193018][ T5812] Bluetooth: hci2: command tx timeout [ 818.932907][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 819.462433][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 819.464886][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 819.464914][ T10] usb 3-1: config 0 has no interface number 0 [ 819.464968][ T10] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.464998][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 819.469716][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 819.469746][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.469768][ T10] usb 3-1: Product: syz [ 819.469783][ T10] usb 3-1: Manufacturer: syz [ 819.469798][ T10] usb 3-1: SerialNumber: syz [ 819.559101][ T10] usb 3-1: config 0 descriptor?? [ 819.570777][ T10] appletouch 3-1:0.85: Could not find int-in endpoint [ 819.570814][ T10] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 819.588358][ T10] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 820.273389][ T5806] Bluetooth: hci2: command tx timeout [ 820.273426][ T5806] Bluetooth: hci0: command tx timeout [ 820.869910][T10419] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 820.869926][T10419] UDF-fs: Scanning with blocksize 512 failed [ 820.876724][T10419] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 820.876753][T10419] UDF-fs: Scanning with blocksize 1024 failed [ 820.877305][T10419] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 820.877324][T10419] UDF-fs: Scanning with blocksize 2048 failed [ 820.877807][T10419] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 820.877825][T10419] UDF-fs: Scanning with blocksize 4096 failed [ 821.523981][T10381] chnl_net:caif_netlink_parms(): no params data found [ 821.785246][ T9] usb 3-1: USB disconnect, device number 57 [ 821.894371][T10434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.488024][ T5812] Bluetooth: hci0: command tx timeout [ 822.488057][ T5812] Bluetooth: hci2: command tx timeout [ 823.577902][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 824.517039][ T5806] Bluetooth: hci0: command tx timeout [ 825.579058][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.579170][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.579325][T10381] bridge_slave_0: entered allmulticast mode [ 825.581444][T10381] bridge_slave_0: entered promiscuous mode [ 825.626129][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.626289][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.626574][T10381] bridge_slave_1: entered allmulticast mode [ 825.679085][T10381] bridge_slave_1: entered promiscuous mode [ 825.786497][T10394] chnl_net:caif_netlink_parms(): no params data found [ 826.696917][T10460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.881'. [ 827.274267][T10299] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 827.454438][T10299] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 827.507146][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.536159][T10299] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 827.645798][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.646579][T10299] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 828.014578][T10381] team0: Port device team_slave_0 added [ 828.033485][ T31] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 828.155665][T10381] team0: Port device team_slave_1 added [ 828.182626][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 828.188214][ T31] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 828.188237][ T31] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 828.188251][ T31] usb 3-1: Product: syz [ 828.188261][ T31] usb 3-1: Manufacturer: syz [ 828.188271][ T31] usb 3-1: SerialNumber: syz [ 828.237775][ T31] usb 3-1: config 0 descriptor?? [ 828.498148][T10468] Bluetooth: MGMT ver 1.23 [ 828.568524][ T10] usb 3-1: USB disconnect, device number 58 [ 828.834528][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.834735][T10394] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.834961][T10394] bridge_slave_0: entered allmulticast mode [ 828.849040][T10394] bridge_slave_0: entered promiscuous mode [ 829.040133][T10394] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.040262][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.040841][T10394] bridge_slave_1: entered allmulticast mode [ 829.053766][T10394] bridge_slave_1: entered promiscuous mode [ 829.071039][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.071059][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.071089][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.422442][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.422678][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 829.495858][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.495877][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.495908][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.580702][T10482] No source specified [ 830.193119][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.222329][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 830.229628][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 830.229656][ T10] usb 2-1: config 0 has no interface number 0 [ 830.229702][ T10] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 830.229721][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 830.232191][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 830.232218][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.232363][ T10] usb 2-1: Product: syz [ 830.232380][ T10] usb 2-1: Manufacturer: syz [ 830.232394][ T10] usb 2-1: SerialNumber: syz [ 830.327484][ T10] usb 2-1: config 0 descriptor?? [ 830.339139][ T10] appletouch 2-1:0.85: Could not find int-in endpoint [ 830.339174][ T10] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 830.340750][ T10] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 830.408888][T10394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.427796][T10394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.546598][ T10] usb 2-1: USB disconnect, device number 57 [ 830.694998][ T12] bridge_slave_1: left allmulticast mode [ 830.695021][ T12] bridge_slave_1: left promiscuous mode [ 830.695196][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.780836][ T12] bridge_slave_0: left allmulticast mode [ 830.780860][ T12] bridge_slave_0: left promiscuous mode [ 830.781054][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.860825][ T12] bridge_slave_1: left allmulticast mode [ 830.860850][ T12] bridge_slave_1: left promiscuous mode [ 830.861029][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.914000][ T12] bridge_slave_0: left allmulticast mode [ 830.914089][ T12] bridge_slave_0: left promiscuous mode [ 830.914410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.981813][ T12] bridge_slave_1: left allmulticast mode [ 830.981836][ T12] bridge_slave_1: left promiscuous mode [ 830.982007][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.076907][ T12] bridge_slave_0: left allmulticast mode [ 831.076930][ T12] bridge_slave_0: left promiscuous mode [ 831.077109][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.382384][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 831.490317][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.532387][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 831.535025][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 831.535270][ T10] usb 2-1: config 0 has no interface number 0 [ 831.535908][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 831.535936][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.535958][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 831.541943][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 831.541970][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.541989][ T10] usb 2-1: Product: syz [ 831.542003][ T10] usb 2-1: Manufacturer: syz [ 831.542017][ T10] usb 2-1: SerialNumber: syz [ 831.659857][ T10] usb 2-1: config 0 descriptor?? [ 832.013187][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.139732][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.188691][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.322781][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.423483][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.493572][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 832.497131][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input9 [ 832.583266][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.670325][ T12] bond0 (unregistering): Released all slaves [ 832.708064][ T5913] usb 2-1: USB disconnect, device number 58 [ 833.004224][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.044870][ T5913] appletouch 2-1:0.85: input: appletouch disconnected [ 834.235537][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.282843][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 834.336367][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.408440][ T12] bond0 (unregistering): Released all slaves [ 834.452624][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 834.460350][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 834.460378][ T9] usb 2-1: config 0 has no interface number 0 [ 834.460425][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 834.460449][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 834.460465][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 834.511393][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 834.511425][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.511446][ T9] usb 2-1: Product: syz [ 834.511461][ T9] usb 2-1: Manufacturer: syz [ 834.511476][ T9] usb 2-1: SerialNumber: syz [ 834.559256][ T9] usb 2-1: config 0 descriptor?? [ 835.035753][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 835.039177][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input10 [ 835.292875][T10505] usb 2-1: USB disconnect, device number 59 [ 835.379705][T10505] appletouch 2-1:0.85: input: appletouch disconnected [ 836.179411][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.255947][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.280201][ T12] bond0 (unregistering): Released all slaves [ 836.738199][T10394] team0: Port device team_slave_0 added [ 836.784137][T10381] hsr_slave_0: entered promiscuous mode [ 836.786543][T10381] hsr_slave_1: entered promiscuous mode [ 836.791048][T10381] debugfs: 'hsr0' already exists in 'hsr' [ 836.791068][T10381] Cannot create hsr debugfs directory [ 837.171097][T10521] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 837.171167][T10521] UDF-fs: Scanning with blocksize 512 failed [ 837.197388][T10521] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 837.197435][T10521] UDF-fs: Scanning with blocksize 1024 failed [ 837.216960][T10521] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 837.217051][T10521] UDF-fs: Scanning with blocksize 2048 failed [ 837.230394][T10521] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 837.230442][T10521] UDF-fs: Scanning with blocksize 4096 failed [ 837.417023][T10394] team0: Port device team_slave_1 added [ 837.995481][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 838.616445][T10525] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 838.983495][T10394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.983513][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.983538][T10394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.987277][T10394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.987291][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.987312][T10394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.282479][ T12] hsr_slave_0: left promiscuous mode [ 839.303526][ T12] hsr_slave_1: left promiscuous mode [ 839.304546][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.354241][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.562473][ T12] hsr_slave_0: left promiscuous mode [ 839.582428][ T12] hsr_slave_1: left promiscuous mode [ 839.583148][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.633335][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.672495][ T9] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 839.793246][ T12] hsr_slave_0: left promiscuous mode [ 839.813045][ T12] hsr_slave_1: left promiscuous mode [ 839.813751][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.838226][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.838265][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 839.840613][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 839.840633][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.840666][ T9] usb 2-1: Product: syz [ 839.840675][ T9] usb 2-1: Manufacturer: syz [ 839.840685][ T9] usb 2-1: SerialNumber: syz [ 839.987832][ T9] usb 2-1: config 0 descriptor?? [ 839.988339][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.788969][ T5884] usb 2-1: USB disconnect, device number 60 [ 842.623289][ T12] team0 (unregistering): Port device team_slave_1 removed [ 843.635432][ T12] team0 (unregistering): Port device team_slave_0 removed [ 843.693456][T10554] netlink: 548 bytes leftover after parsing attributes in process `syz.1.902'. [ 844.063604][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.904'. [ 846.444753][ T12] team0 (unregistering): Port device team_slave_1 removed [ 846.643068][ T12] team0 (unregistering): Port device team_slave_0 removed [ 847.458562][T10568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 848.517430][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 848.893039][ T12] team0 (unregistering): Port device team_slave_1 removed [ 849.022548][ T5884] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 849.124171][ T12] team0 (unregistering): Port device team_slave_0 removed [ 849.214360][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.214422][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.216870][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 849.216897][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.216911][ T5884] usb 3-1: Product: syz [ 849.216921][ T5884] usb 3-1: Manufacturer: syz [ 849.216932][ T5884] usb 3-1: SerialNumber: syz [ 849.230871][ T5884] usb 3-1: config 0 descriptor?? [ 850.144250][ T9] usb 3-1: USB disconnect, device number 59 [ 851.093927][T10580] No source specified [ 852.888991][T10548] netlink: 'syz.1.902': attribute type 29 has an invalid length. [ 853.414942][ T31] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 854.216230][T10394] hsr_slave_0: entered promiscuous mode [ 854.217823][T10394] hsr_slave_1: entered promiscuous mode [ 854.342473][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 854.344891][ T31] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 854.344918][ T31] usb 3-1: config 0 has no interface number 0 [ 854.344988][ T31] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.345017][ T31] usb 3-1: config 0 interface 85 has no altsetting 0 [ 854.347809][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 854.347836][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.347855][ T31] usb 3-1: Product: syz [ 854.347869][ T31] usb 3-1: Manufacturer: syz [ 854.347884][ T31] usb 3-1: SerialNumber: syz [ 854.354750][ T31] usb 3-1: config 0 descriptor?? [ 854.367544][ T31] appletouch 3-1:0.85: Could not find int-in endpoint [ 854.367585][ T31] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 854.369266][ T31] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 854.582731][ T31] usb 3-1: USB disconnect, device number 60 [ 854.712460][ T5953] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 854.862830][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 854.866659][ T5953] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 854.866686][ T5953] usb 2-1: config 0 has no interface number 0 [ 854.866735][ T5953] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.866761][ T5953] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.866782][ T5953] usb 2-1: config 0 interface 85 has no altsetting 0 [ 854.878488][ T5953] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 854.878520][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.878543][ T5953] usb 2-1: Product: syz [ 854.878558][ T5953] usb 2-1: Manufacturer: syz [ 854.878575][ T5953] usb 2-1: SerialNumber: syz [ 854.989932][ T5953] usb 2-1: config 0 descriptor?? [ 855.213458][ T5953] appletouch 2-1:0.85: Failed to read mode from device. [ 855.213668][ T5953] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 855.226196][ T5953] usb 2-1: USB disconnect, device number 61 [ 855.495153][T10299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.779453][T10299] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.801661][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.801835][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.983356][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.983523][ T6064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.913775][T10622] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 857.913797][T10622] UDF-fs: Scanning with blocksize 512 failed [ 857.915330][T10622] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 857.915350][T10622] UDF-fs: Scanning with blocksize 1024 failed [ 857.915748][T10622] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 857.915763][T10622] UDF-fs: Scanning with blocksize 2048 failed [ 857.916155][T10622] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 857.916172][T10622] UDF-fs: Scanning with blocksize 4096 failed [ 858.393318][T10299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.562848][ T31] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 858.732641][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 859.104686][ T31] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 859.104813][ T31] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 859.104903][ T31] usb 2-1: Product: syz [ 859.104982][ T31] usb 2-1: Manufacturer: syz [ 859.105063][ T31] usb 2-1: SerialNumber: syz [ 859.294722][ T31] usb 2-1: config 0 descriptor?? [ 859.616868][T10628] Bluetooth: hci0: invalid length 0, exp 2 for type 26 [ 859.673174][ T31] usb 2-1: USB disconnect, device number 62 [ 860.496525][T10299] veth0_vlan: entered promiscuous mode [ 860.634178][T10299] veth1_vlan: entered promiscuous mode [ 860.865767][T10662] hfs: can't find a HFS filesystem on dev nullb0 [ 861.052874][T10381] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 861.157517][T10381] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 861.302171][T10381] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 861.537186][T10381] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 862.169435][T10394] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 862.399805][T10394] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 862.485804][T10394] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 862.509264][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 862.546993][T10394] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 862.548965][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 862.551381][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 862.564554][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 862.568470][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 863.689037][ C1] vkms_vblank_simulate: vblank timer overrun [ 864.672414][ T5812] Bluetooth: hci3: command tx timeout [ 866.752450][ T5812] Bluetooth: hci3: command tx timeout [ 867.042449][ T31] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 867.081654][T10381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.103905][T10394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.104665][T10686] chnl_net:caif_netlink_parms(): no params data found [ 867.192570][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 867.200579][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 867.200633][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 867.200659][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 867.200683][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.200735][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 867.200759][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.974300][ T31] usb 2-1: usb_control_msg returned -32 [ 867.974351][ T31] usbtmc 2-1:16.0: can't read capabilities [ 868.288828][ T3557] bridge_slave_1: left allmulticast mode [ 868.288857][ T3557] bridge_slave_1: left promiscuous mode [ 868.289108][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.364009][ T3557] bridge_slave_0: left allmulticast mode [ 868.364040][ T3557] bridge_slave_0: left promiscuous mode [ 868.364293][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.832463][ T5812] Bluetooth: hci3: command tx timeout [ 869.452443][T10505] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 869.612456][T10505] usb 3-1: Using ep0 maxpacket: 32 [ 869.614605][T10505] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 869.614625][T10505] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.614639][T10505] usb 3-1: config 0 has no interface number 0 [ 869.614672][T10505] usb 3-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 869.617250][T10505] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 869.617271][T10505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.617285][T10505] usb 3-1: Product: syz [ 869.617296][T10505] usb 3-1: Manufacturer: syz [ 869.617306][T10505] usb 3-1: SerialNumber: syz [ 869.621998][T10505] usb 3-1: config 0 descriptor?? [ 869.628878][T10505] redrat3 3-1:0.83: Couldn't find all endpoints [ 869.780851][ T2063] usb 2-1: USB disconnect, device number 63 [ 870.407869][ T31] usb 3-1: USB disconnect, device number 61 [ 870.932057][ T5812] Bluetooth: hci3: command tx timeout [ 872.018103][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.026366][T10761] hfs: can't find a HFS filesystem on dev nullb0 [ 872.077377][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.099243][ T3557] bond0 (unregistering): Released all slaves [ 873.546168][T10381] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.777766][T10394] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.922377][ T5885] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 874.052604][ T3557] hsr_slave_0: left promiscuous mode [ 874.083339][ T5885] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 874.083377][ T5885] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 874.083419][ T5885] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 874.083444][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.143068][ T3557] hsr_slave_1: left promiscuous mode [ 874.144094][T10779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 874.144142][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.173028][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 874.240027][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.422197][ T3557] veth1_vlan: left promiscuous mode [ 874.444457][ T3557] veth0_vlan: left promiscuous mode [ 875.437187][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.438245][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.965444][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 875.987636][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 875.990172][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 876.008388][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 876.044508][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 876.882403][T10505] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 876.901747][T10659] usb 3-1: USB disconnect, device number 62 [ 877.082388][T10505] usb 2-1: Using ep0 maxpacket: 32 [ 877.088443][T10505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.088468][T10505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.088497][T10505] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 877.088514][T10505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.152331][T10505] usb 2-1: config 0 descriptor?? [ 877.184620][T10505] hub 2-1:0.0: USB hub found [ 877.198642][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 877.208687][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 877.210613][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 877.212075][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 877.214705][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 877.391745][T10505] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 877.643755][T10505] usbhid 2-1:0.0: can't add hid device: -71 [ 877.643914][T10505] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 877.683897][T10505] usb 2-1: USB disconnect, device number 64 [ 878.282370][ T5806] Bluetooth: hci2: command tx timeout [ 878.333414][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 879.312448][ T5806] Bluetooth: hci5: command tx timeout [ 879.583063][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 879.805554][T10826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.352458][ T5806] Bluetooth: hci2: command tx timeout [ 881.245104][T10831] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 881.245141][T10831] UDF-fs: Scanning with blocksize 512 failed [ 881.250081][T10831] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 881.250117][T10831] UDF-fs: Scanning with blocksize 1024 failed [ 881.251582][T10831] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 881.251611][T10831] UDF-fs: Scanning with blocksize 2048 failed [ 881.258690][T10831] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 881.258895][T10831] UDF-fs: Scanning with blocksize 4096 failed [ 881.475280][ T5806] Bluetooth: hci5: command tx timeout [ 882.327955][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 882.432962][ T5806] Bluetooth: hci2: command tx timeout [ 883.562565][ T5806] Bluetooth: hci5: command tx timeout [ 884.272473][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.272649][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.272887][T10686] bridge_slave_0: entered allmulticast mode [ 884.277195][T10686] bridge_slave_0: entered promiscuous mode [ 884.512506][ T5806] Bluetooth: hci2: command tx timeout [ 884.657123][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.657301][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.657538][T10686] bridge_slave_1: entered allmulticast mode [ 884.683432][T10686] bridge_slave_1: entered promiscuous mode [ 885.000293][T10686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.024117][T10686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.673520][ T5806] Bluetooth: hci5: command tx timeout [ 885.814698][T10659] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 886.007709][T10849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.082403][T10659] usb 3-1: Using ep0 maxpacket: 32 [ 886.084782][T10659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.084814][T10659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.084855][T10659] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 886.084878][T10659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.103693][T10659] usb 3-1: config 0 descriptor?? [ 886.131824][T10659] hub 3-1:0.0: USB hub found [ 886.346654][T10659] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 886.424921][T10686] team0: Port device team_slave_0 added [ 886.466071][T10686] team0: Port device team_slave_1 added [ 886.558095][T10659] usbhid 3-1:0.0: can't add hid device: -71 [ 886.558250][T10659] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 886.613414][T10659] usb 3-1: USB disconnect, device number 63 [ 886.819559][T10686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.819573][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.819592][T10686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.869554][T10686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.869567][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.869586][T10686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.922195][T10855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 887.763603][T10686] hsr_slave_0: entered promiscuous mode [ 887.784021][T10686] hsr_slave_1: entered promiscuous mode [ 887.784787][T10686] debugfs: 'hsr0' already exists in 'hsr' [ 887.784806][T10686] Cannot create hsr debugfs directory [ 888.974781][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 890.897611][T10796] chnl_net:caif_netlink_parms(): no params data found [ 892.736451][T10804] chnl_net:caif_netlink_parms(): no params data found [ 894.053123][T10925] hfs: can't find a HFS filesystem on dev nullb0 [ 894.235728][T10796] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.235883][T10796] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.236058][T10796] bridge_slave_0: entered allmulticast mode [ 894.242541][T10796] bridge_slave_0: entered promiscuous mode [ 894.347585][T10796] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.360201][T10796] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.360460][T10796] bridge_slave_1: entered allmulticast mode [ 894.377168][T10796] bridge_slave_1: entered promiscuous mode [ 894.846069][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.846275][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.846528][T10804] bridge_slave_0: entered allmulticast mode [ 894.859674][T10804] bridge_slave_0: entered promiscuous mode [ 895.142149][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.142512][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.143119][T10804] bridge_slave_1: entered allmulticast mode [ 895.153283][T10804] bridge_slave_1: entered promiscuous mode [ 895.161187][T10796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.690967][T10796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.926378][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.769939][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 898.296554][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.310369][T10796] team0: Port device team_slave_0 added [ 898.597670][T10796] team0: Port device team_slave_1 added [ 899.466766][T10804] team0: Port device team_slave_0 added [ 899.512367][T10505] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 899.611235][T10804] team0: Port device team_slave_1 added [ 899.612744][T10796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.612764][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.612797][T10796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.696731][T10505] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 899.696759][T10505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.696774][T10505] usb 3-1: Product: syz [ 899.696784][T10505] usb 3-1: Manufacturer: syz [ 899.696794][T10505] usb 3-1: SerialNumber: syz [ 899.757343][T10505] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 899.770558][ T5913] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 899.845722][T10796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.845742][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.845876][T10796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.511549][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.511567][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.511593][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.518838][ T5913] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 901.519012][ T5913] ath9k_htc: Failed to initialize the device [ 901.519481][T10505] usb 3-1: USB disconnect, device number 64 [ 901.597868][T10505] usb 3-1: ath9k_htc: USB layer deinitialized [ 901.843569][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.843583][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.843604][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.275937][T10686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 902.337529][T10796] hsr_slave_0: entered promiscuous mode [ 902.348267][T10796] hsr_slave_1: entered promiscuous mode [ 902.350826][T10796] debugfs: 'hsr0' already exists in 'hsr' [ 902.350855][T10796] Cannot create hsr debugfs directory [ 902.474066][T10686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 902.647273][T10686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 902.716767][T10804] hsr_slave_0: entered promiscuous mode [ 902.719609][T10804] hsr_slave_1: entered promiscuous mode [ 902.727443][T10804] debugfs: 'hsr0' already exists in 'hsr' [ 902.727481][T10804] Cannot create hsr debugfs directory [ 902.856429][T10686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 903.926118][ T1487] bridge_slave_1: left allmulticast mode [ 903.926149][ T1487] bridge_slave_1: left promiscuous mode [ 903.926424][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.007084][ T1487] bridge_slave_0: left allmulticast mode [ 904.007116][ T1487] bridge_slave_0: left promiscuous mode [ 904.007437][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.088078][ T1487] bridge_slave_1: left allmulticast mode [ 904.088112][ T1487] bridge_slave_1: left promiscuous mode [ 904.088370][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.174485][ T1487] bridge_slave_0: left allmulticast mode [ 904.174516][ T1487] bridge_slave_0: left promiscuous mode [ 904.174758][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.342527][ T31] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 904.498735][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 909.934890][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 909.934934][ T31] usb 3-1: can't read configurations, error -71 [ 913.196173][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.295780][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.361010][ T1487] bond0 (unregistering): Released all slaves [ 922.238213][T11009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 923.590108][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 923.600503][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 923.607798][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 923.613594][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 923.615451][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 923.891978][T11021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.322978][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.403099][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.485552][ T1487] bond0 (unregistering): Released all slaves [ 924.682902][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 925.219601][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 925.222004][ T31] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 925.222030][ T31] usb 3-1: config 0 has no interface number 0 [ 925.222084][ T31] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 925.222112][ T31] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 925.222136][ T31] usb 3-1: config 0 interface 85 has no altsetting 0 [ 925.227855][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 925.227890][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.227925][ T31] usb 3-1: Product: syz [ 925.227941][ T31] usb 3-1: Manufacturer: syz [ 925.227956][ T31] usb 3-1: SerialNumber: syz [ 925.237441][ T31] usb 3-1: config 0 descriptor?? [ 925.528604][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 925.681712][ T31] appletouch 3-1:0.85: Geyser mode initialized. [ 925.700924][ T31] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input12 [ 925.712641][ T5812] Bluetooth: hci0: command tx timeout [ 925.935149][ T2063] usb 3-1: USB disconnect, device number 67 [ 926.087073][ T2063] appletouch 3-1:0.85: input: appletouch disconnected [ 926.432400][ T1487] hsr_slave_0: left promiscuous mode [ 926.452382][ T1487] hsr_slave_1: left promiscuous mode [ 926.453164][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.522930][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.152357][ T1487] hsr_slave_0: left promiscuous mode [ 927.206314][ T1487] hsr_slave_1: left promiscuous mode [ 927.207053][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.250141][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.792425][ T5812] Bluetooth: hci0: command tx timeout [ 928.616429][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 928.909025][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 929.230573][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 929.875356][ T5812] Bluetooth: hci0: command tx timeout [ 931.987061][ T5812] Bluetooth: hci0: command tx timeout [ 933.434338][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 933.594126][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 936.026866][T11017] chnl_net:caif_netlink_parms(): no params data found [ 936.864699][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.864775][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.115692][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 937.155109][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 937.156419][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 937.159318][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 937.160087][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 937.452731][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.452871][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.453117][T11017] bridge_slave_0: entered allmulticast mode [ 937.456105][T11017] bridge_slave_0: entered promiscuous mode [ 937.573420][T11017] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.573543][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.573821][T11017] bridge_slave_1: entered allmulticast mode [ 937.576041][T11017] bridge_slave_1: entered promiscuous mode [ 937.888903][T11017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.906982][T11017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.213926][T11102] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1002'. [ 938.358237][T11017] team0: Port device team_slave_0 added [ 938.406139][T11017] team0: Port device team_slave_1 added [ 938.608277][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 938.621108][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 938.629062][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 938.636142][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 938.642525][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 938.984386][T11017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.984403][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.984429][T11017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.050683][T11017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.050700][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.050729][T11017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.234438][ T5812] Bluetooth: hci2: command tx timeout [ 939.252364][T10747] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 939.418572][T10747] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 939.418611][T10747] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 939.418653][T10747] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 939.418678][T10747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.460889][T11111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 939.481701][T10747] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 940.120461][T10659] usb 2-1: USB disconnect, device number 65 [ 940.155703][T11017] hsr_slave_0: entered promiscuous mode [ 940.157238][T11017] hsr_slave_1: entered promiscuous mode [ 940.672696][ T5812] Bluetooth: hci3: command tx timeout [ 941.910525][ T5812] Bluetooth: hci2: command tx timeout [ 942.752378][ T5812] Bluetooth: hci3: command tx timeout [ 943.957080][ T5812] Bluetooth: hci2: command tx timeout [ 944.552770][T11086] chnl_net:caif_netlink_parms(): no params data found [ 944.832446][ T5812] Bluetooth: hci3: command tx timeout [ 945.841980][T11156] netlink: 548 bytes leftover after parsing attributes in process `syz.2.1012'. [ 945.940612][T11153] netlink: 'syz.2.1012': attribute type 29 has an invalid length. [ 946.032469][ T5812] Bluetooth: hci2: command tx timeout [ 946.172969][T11155] netlink: 'syz.2.1012': attribute type 29 has an invalid length. [ 947.292378][ T5812] Bluetooth: hci3: command tx timeout [ 947.529351][T11086] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.529492][T11086] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.530087][T11086] bridge_slave_0: entered allmulticast mode [ 947.559240][T11086] bridge_slave_0: entered promiscuous mode [ 947.563270][T11086] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.563404][T11086] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.563892][T11086] bridge_slave_1: entered allmulticast mode [ 947.566094][T11086] bridge_slave_1: entered promiscuous mode [ 948.059203][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 948.145936][T11176] No source specified [ 949.009285][T11086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.055212][T11086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.104658][T11106] chnl_net:caif_netlink_parms(): no params data found [ 949.577145][T11086] team0: Port device team_slave_0 added [ 949.702767][T11086] team0: Port device team_slave_1 added [ 949.801060][ T1487] bridge_slave_1: left allmulticast mode [ 949.801090][ T1487] bridge_slave_1: left promiscuous mode [ 949.801344][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.856458][ T1487] bridge_slave_0: left allmulticast mode [ 949.856489][ T1487] bridge_slave_0: left promiscuous mode [ 949.856744][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.937780][ T1487] bridge_slave_1: left allmulticast mode [ 949.937802][ T1487] bridge_slave_1: left promiscuous mode [ 949.937973][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.003468][ T1487] bridge_slave_0: left allmulticast mode [ 950.003492][ T1487] bridge_slave_0: left promiscuous mode [ 950.003673][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.082880][ T1487] bridge_slave_1: left allmulticast mode [ 950.082902][ T1487] bridge_slave_1: left promiscuous mode [ 950.083067][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.153581][ T1487] bridge_slave_0: left allmulticast mode [ 950.153605][ T1487] bridge_slave_0: left promiscuous mode [ 950.153794][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.920997][T11194] No source specified [ 951.603254][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.683205][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.786090][ T1487] bond0 (unregistering): Released all slaves [ 952.164055][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.243183][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.304699][ T1487] bond0 (unregistering): Released all slaves [ 952.554101][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.633805][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.678338][ T1487] bond0 (unregistering): Released all slaves [ 953.133545][T11210] hfs: can't find a HFS filesystem on dev nullb0 [ 954.132710][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 954.174658][T11086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.174677][T11086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.174703][T11086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.356263][T11086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.356280][T11086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.356300][T11086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.833829][T11106] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.833967][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.834215][T11106] bridge_slave_0: entered allmulticast mode [ 954.837046][T11106] bridge_slave_0: entered promiscuous mode [ 954.877165][T11106] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.877339][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.877759][T11106] bridge_slave_1: entered allmulticast mode [ 955.692744][T11106] bridge_slave_1: entered promiscuous mode [ 956.134169][T11229] No source specified [ 957.762570][ T1487] hsr_slave_0: left promiscuous mode [ 957.784365][ T1487] hsr_slave_1: left promiscuous mode [ 957.785819][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.833343][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.452387][ T1487] hsr_slave_0: left promiscuous mode [ 958.492380][ T1487] hsr_slave_1: left promiscuous mode [ 958.493407][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.523208][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.682516][ T1487] hsr_slave_0: left promiscuous mode [ 958.702341][T10747] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 958.705781][ T1487] hsr_slave_1: left promiscuous mode [ 958.707586][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.764124][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.852447][T10747] usb 2-1: Using ep0 maxpacket: 32 [ 958.855136][T10747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.855169][T10747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.855210][T10747] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 958.855234][T10747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.861052][T10747] usb 2-1: config 0 descriptor?? [ 958.924011][T10747] hub 2-1:0.0: USB hub found [ 959.068814][T10747] hub 2-1:0.0: 1 port detected [ 959.170705][T11247] hfs: can't find a HFS filesystem on dev nullb0 [ 960.125451][T10747] usb 2-1: USB disconnect, device number 66 [ 960.582943][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 960.943172][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 961.032674][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 963.372297][T10747] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 963.522384][T10747] usb 2-1: Using ep0 maxpacket: 16 [ 963.525402][T10747] usb 2-1: config 0 has no interfaces? [ 963.526614][T10747] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 963.526659][T10747] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 963.526674][T10747] usb 2-1: Manufacturer: syz [ 963.530750][T10747] usb 2-1: config 0 descriptor?? [ 963.738454][ T38] audit: type=1326 audit(2000000009.410:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11261 comm="syz.1.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e8defc9 code=0x7ffc0000 [ 963.738551][ T38] audit: type=1326 audit(2000000009.410:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11261 comm="syz.1.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e8defc9 code=0x7ffc0000 [ 963.972957][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 964.116473][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 965.473084][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 965.603053][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 965.692349][T10747] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 965.852389][T10747] usb 3-1: Using ep0 maxpacket: 16 [ 965.858902][T10747] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 965.858927][T10747] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 965.858941][T10747] usb 3-1: Product: syz [ 965.858951][T10747] usb 3-1: Manufacturer: syz [ 965.858960][T10747] usb 3-1: SerialNumber: syz [ 965.864920][T10747] usb 3-1: config 0 descriptor?? [ 966.195649][T11278] Bluetooth: MGMT ver 1.23 [ 966.230015][T11106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.255974][T11086] hsr_slave_0: entered promiscuous mode [ 966.257115][T11086] hsr_slave_1: entered promiscuous mode [ 966.257845][T11086] debugfs: 'hsr0' already exists in 'hsr' [ 966.257866][T11086] Cannot create hsr debugfs directory [ 966.282725][T10747] usb 3-1: USB disconnect, device number 68 [ 966.316496][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.425354][T11106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.545273][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.600339][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.825778][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.880286][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.948059][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.008259][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.020250][T11106] team0: Port device team_slave_0 added [ 967.034275][T11106] team0: Port device team_slave_1 added [ 967.144909][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.152424][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 967.182194][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.256663][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.305837][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 967.321626][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 967.321654][ T9] usb 3-1: config 0 has no interface number 0 [ 967.321698][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 967.321718][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 967.321733][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 967.347159][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 967.347198][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.347221][ T9] usb 3-1: Product: syz [ 967.347235][ T9] usb 3-1: Manufacturer: syz [ 967.347254][ T9] usb 3-1: SerialNumber: syz [ 967.356574][ T9] usb 3-1: config 0 descriptor?? [ 967.627258][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.640168][ T5913] usb 2-1: USB disconnect, device number 67 [ 967.718560][T11106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.718578][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.718605][T11106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.811923][ T9] appletouch 3-1:0.85: Geyser mode initialized. [ 967.852439][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input13 [ 967.932802][T11106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.932820][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.932850][T11106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.047255][ T9] usb 3-1: USB disconnect, device number 69 [ 968.207293][ T9] appletouch 3-1:0.85: input: appletouch disconnected [ 968.927928][T11106] hsr_slave_0: entered promiscuous mode [ 968.929918][T11106] hsr_slave_1: entered promiscuous mode [ 968.930820][T11106] debugfs: 'hsr0' already exists in 'hsr' [ 968.930840][T11106] Cannot create hsr debugfs directory [ 968.984837][T11017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 969.055749][T11017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 969.293940][T11017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 969.406695][T11017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 969.439971][ C1] vkms_vblank_simulate: vblank timer overrun [ 969.664721][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.033990][T11086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 970.206598][T11086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 970.509311][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.642403][T11086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 970.763609][T11086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 970.819675][ C1] vkms_vblank_simulate: vblank timer overrun [ 971.511533][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 971.988401][T11106] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 972.029025][T11106] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 972.068939][T11106] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 972.118256][T11106] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 972.242400][ T5787] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 972.284027][T11017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.381196][T11017] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.392592][ T5787] usb 3-1: Using ep0 maxpacket: 16 [ 972.400373][ T5787] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 972.400403][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 972.400425][ T5787] usb 3-1: Product: syz [ 972.400439][ T5787] usb 3-1: Manufacturer: syz [ 972.400454][ T5787] usb 3-1: SerialNumber: syz [ 972.419544][ T5787] usb 3-1: config 0 descriptor?? [ 972.491626][T11086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.534733][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.534872][ T8658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.606975][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.609848][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.227735][T11086] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.269677][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.269901][ T8658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.266597][ T5913] usb 3-1: USB disconnect, device number 70 [ 974.362788][T10747] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 974.385400][T11106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.406084][ T1422] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.406249][ T1422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.477384][T11106] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.512301][T10747] usb 2-1: Using ep0 maxpacket: 16 [ 974.520953][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.521430][T10747] usb 2-1: config 0 has no interfaces? [ 974.522839][T10747] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 974.522865][T10747] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 974.522885][T10747] usb 2-1: Manufacturer: syz [ 974.535457][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.566390][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.566556][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.596219][T10747] usb 2-1: config 0 descriptor?? [ 974.817227][ T38] audit: type=1326 audit(2000000003.000:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11332 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e8defc9 code=0x7ffc0000 [ 974.817285][ T38] audit: type=1326 audit(2000000003.000:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11332 comm="syz.1.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2e8defc9 code=0x7ffc0000 [ 975.171446][T11017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.365882][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.673964][T11086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.862799][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.962997][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.315875][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.366557][ T9] usb 2-1: USB disconnect, device number 68 [ 977.532387][T10747] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 977.702666][T10747] usb 3-1: Using ep0 maxpacket: 16 [ 977.978306][T10747] usb 3-1: config 0 has no interfaces? [ 978.001484][T10747] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 978.001513][T10747] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 978.001533][T10747] usb 3-1: Manufacturer: syz [ 978.051723][T10747] usb 3-1: config 0 descriptor?? [ 978.119781][T10747] usb 3-1: can't set config #0, error -71 [ 978.205807][T10747] usb 3-1: USB disconnect, device number 71 [ 978.485072][ C1] vkms_vblank_simulate: vblank timer overrun [ 978.676894][T11106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.983515][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.023305][T11017] veth0_vlan: entered promiscuous mode [ 979.726517][T11390] nvme_fabrics: missing parameter 'transport=%s' [ 979.726538][T11390] nvme_fabrics: missing parameter 'nqn=%s' [ 980.025989][T11017] veth1_vlan: entered promiscuous mode [ 981.444016][T11086] veth0_vlan: entered promiscuous mode [ 981.506354][T11017] veth0_macvtap: entered promiscuous mode [ 981.521664][T11086] veth1_vlan: entered promiscuous mode [ 981.562158][T11017] veth1_macvtap: entered promiscuous mode [ 981.611962][T11106] veth0_vlan: entered promiscuous mode [ 981.612425][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 981.630311][T11017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.747926][T11017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.762356][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 981.780498][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.780530][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.780586][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 981.780610][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.788815][ T10] usb 3-1: config 0 descriptor?? [ 981.795812][ T10] hub 3-1:0.0: USB hub found [ 982.134048][T11106] veth1_vlan: entered promiscuous mode [ 982.155693][ T10] hub 3-1:0.0: 1 port detected [ 982.160376][T11086] veth0_macvtap: entered promiscuous mode [ 982.162044][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.200583][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.083875][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.114256][ T1015] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.131726][T11086] veth1_macvtap: entered promiscuous mode [ 983.333651][T11411] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1060'. [ 983.381931][T11086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.427402][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 983.440188][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 983.451958][T11086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.452119][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 983.467927][T11106] veth0_macvtap: entered promiscuous mode [ 983.476972][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 983.483918][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 983.509025][ T2063] hub 3-1:0.0: activate --> -90 [ 983.867156][ T1487] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.872829][T11106] veth1_macvtap: entered promiscuous mode [ 983.874875][ T1487] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.530645][ T5913] usb 3-1: USB disconnect, device number 72 [ 984.542293][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.577249][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.680102][ T2063] usb 3-1-port1: cannot reset (err = -71) [ 984.680716][ T2063] usb 3-1-port1: attempt power cycle [ 985.632419][ T5806] Bluetooth: hci5: command tx timeout [ 986.676202][T11106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.069953][T11106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.407274][ T3557] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.468291][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.501369][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.518354][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.552423][ T2063] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 987.688581][ T3557] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.708154][ T2063] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 987.708183][ T2063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.708201][ T2063] usb 2-1: Product: syz [ 987.708215][ T2063] usb 2-1: Manufacturer: syz [ 987.708226][ T2063] usb 2-1: SerialNumber: syz [ 987.712460][ T5806] Bluetooth: hci5: command tx timeout [ 987.745329][ T2063] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 987.762728][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.778829][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 987.781246][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.781267][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.117676][ T3557] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.325445][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.325467][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.428787][ T5913] usb 2-1: USB disconnect, device number 69 [ 988.506774][ T2063] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 988.524927][ T3557] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.674211][ T2063] usb 3-1: Using ep0 maxpacket: 32 [ 988.676628][ T2063] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 988.676669][ T2063] usb 3-1: config 0 has no interface number 0 [ 988.680198][ T2063] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 988.680225][ T2063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.680245][ T2063] usb 3-1: Product: syz [ 988.680258][ T2063] usb 3-1: Manufacturer: syz [ 988.680272][ T2063] usb 3-1: SerialNumber: syz [ 988.694605][ T2063] usb 3-1: config 0 descriptor?? [ 988.699817][ T2063] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 988.849060][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.849083][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.924908][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 988.928907][ T10] ath9k_htc: Failed to initialize the device [ 988.945936][ T5913] usb 2-1: ath9k_htc: USB layer deinitialized [ 989.132115][T11412] chnl_net:caif_netlink_parms(): no params data found [ 989.436163][ T2063] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 989.501017][ T2063] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 989.629385][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 989.634478][ T2063] usb 3-1: USB disconnect, device number 77 [ 989.679859][ T2063] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 989.703338][ T2063] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 989.704357][ T2063] quatech2 3-1:0.51: device disconnected [ 989.792530][ T5806] Bluetooth: hci5: command tx timeout [ 989.910041][ T8658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.910060][ T8658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.664798][T11455] tty tty31: ldisc open failed (-12), clearing slot 30 [ 992.616360][ T5806] Bluetooth: hci5: command tx timeout [ 993.164259][ T3557] bridge_slave_1: left allmulticast mode [ 993.164280][ T3557] bridge_slave_1: left promiscuous mode [ 993.164479][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.313321][ T3557] bridge_slave_0: left allmulticast mode [ 994.316604][ T3557] bridge_slave_0: left promiscuous mode [ 994.317057][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.472396][T10747] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 995.686753][T10747] usb 2-1: Using ep0 maxpacket: 16 [ 995.691894][T10747] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 995.691925][T10747] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 995.691943][T10747] usb 2-1: Product: syz [ 995.691954][T10747] usb 2-1: Manufacturer: syz [ 995.691964][T10747] usb 2-1: SerialNumber: syz [ 995.760990][T10747] usb 2-1: config 0 descriptor?? [ 996.107696][T10747] usb 2-1: USB disconnect, device number 70 [ 996.208361][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.262850][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.742223][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.796031][ T3557] bond0 (unregistering): Released all slaves [ 996.849537][T11412] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.859804][T11412] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.860081][T11412] bridge_slave_0: entered allmulticast mode [ 996.884183][T11412] bridge_slave_0: entered promiscuous mode [ 996.911011][T11412] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.911281][T11412] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.911542][T11412] bridge_slave_1: entered allmulticast mode [ 996.954173][T11412] bridge_slave_1: entered promiscuous mode [ 998.010282][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.974824][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.027687][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.027783][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.094593][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.363195][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1078'. [ 999.467170][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.975895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.663173][ T3557] hsr_slave_0: left promiscuous mode [ 1001.717103][ T3557] hsr_slave_1: left promiscuous mode [ 1001.717895][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.717914][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.807784][T11499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.830376][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.830405][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.987758][ T3557] veth1_macvtap: left promiscuous mode [ 1001.988024][ T3557] veth0_macvtap: left promiscuous mode [ 1001.988328][ T3557] veth1_vlan: left promiscuous mode [ 1001.988663][ T3557] veth0_vlan: left promiscuous mode [ 1008.994925][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 1009.040430][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 1010.614070][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 1014.985496][T11412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.053978][T11412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.290371][T11412] team0: Port device team_slave_0 added [ 1018.311558][T11412] team0: Port device team_slave_1 added [ 1018.652342][ T2063] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1019.149792][ T2063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1019.149882][ T2063] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1019.149938][ T2063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1019.149984][ T2063] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1019.150239][ T2063] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1019.150313][ T2063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.619925][ T2063] usb 2-1: config 0 descriptor?? [ 1019.855582][ T2063] hdpvr 2-1:0.0: unexpected answer of status request, len 41 [ 1019.855614][ T2063] hdpvr 2-1:0.0: device init failed [ 1019.855708][ T2063] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1020.209111][T11412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.209125][T11412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.209143][T11412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.539772][T11599] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1107'. [ 1021.071713][T11598] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1021.073405][T11412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.073422][T11412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.073455][T11412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.402948][ T9] usb 2-1: USB disconnect, device number 71 [ 1022.171521][T11602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.357400][T11412] hsr_slave_0: entered promiscuous mode [ 1022.358694][T11412] hsr_slave_1: entered promiscuous mode [ 1031.153124][T11673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.306242][T11680] process 'syz.6.1126' launched 'ELFüÿÿÿÿÿÿÿ' with NULL argv: empty string added [ 1032.881652][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 1032.882886][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1130'. [ 1034.022409][T11715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1034.127775][T11412] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1034.182293][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1034.213869][T11412] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1034.350786][ T9] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.350814][ T9] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1034.350833][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1034.350858][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1034.350874][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.358140][T11412] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1034.382289][ T5913] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1034.445040][ T9] usb 3-1: config 0 descriptor?? [ 1034.541855][T11412] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1034.548987][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 1034.551271][ T5913] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1034.551295][ T5913] usb 2-1: config 0 has no interface number 0 [ 1034.582215][ T5913] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1034.582243][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.582261][ T5913] usb 2-1: Product: syz [ 1034.582275][ T5913] usb 2-1: Manufacturer: syz [ 1034.582290][ T5913] usb 2-1: SerialNumber: syz [ 1034.587910][ T5913] usb 2-1: config 0 descriptor?? [ 1034.642466][ T5913] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1035.248565][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1135'. [ 1035.452301][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1035.471068][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1035.741056][ T9] usb 3-1: USB disconnect, device number 78 [ 1035.925858][ T5913] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1035.938049][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1035.953698][ T5913] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1035.978850][ T5913] usb 2-1: USB disconnect, device number 72 [ 1036.023653][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1036.072502][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1036.073456][ T5913] quatech2 2-1:0.51: device disconnected [ 1036.173457][T11412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.317686][T11412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.331195][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.331443][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.346800][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.348833][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.109124][T11750] hfs: can't find a HFS filesystem on dev nullb0 [ 1038.729337][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 1040.169045][T11412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.962362][ T5913] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1043.031131][ T5913] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1043.031154][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.031168][ T5913] usb 2-1: Product: syz [ 1043.031178][ T5913] usb 2-1: Manufacturer: syz [ 1043.031188][ T5913] usb 2-1: SerialNumber: syz [ 1043.045161][ T5913] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1043.145705][T10747] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1044.462611][T10747] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1044.462822][T10747] ath9k_htc: Failed to initialize the device [ 1047.503326][ T31] usb 2-1: USB disconnect, device number 73 [ 1047.551576][ T31] usb 2-1: ath9k_htc: USB layer deinitialized [ 1048.437539][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1148'. [ 1049.377194][T11809] hfs: can't find a HFS filesystem on dev nullb0 [ 1050.134867][T10747] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1050.316109][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1050.334007][T10747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1050.334050][T10747] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1050.334075][T10747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1050.334097][T10747] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1050.334137][T10747] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1050.334160][T10747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.336005][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1050.344973][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1050.347635][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1050.349151][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1050.435276][T10747] usb 2-1: config 0 descriptor?? [ 1050.679310][T10747] hdpvr 2-1:0.0: unexpected answer of status request, len 41 [ 1050.679334][T10747] hdpvr 2-1:0.0: device init failed [ 1050.679428][T10747] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1052.432316][ T5812] Bluetooth: hci0: command tx timeout [ 1053.446659][ T5953] usb 2-1: USB disconnect, device number 74 [ 1054.512280][ T5812] Bluetooth: hci0: command tx timeout [ 1055.402505][ T5884] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1055.562383][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 1055.565992][ T5884] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1055.566012][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.566027][ T5884] usb 2-1: Product: syz [ 1055.566036][ T5884] usb 2-1: Manufacturer: syz [ 1055.566047][ T5884] usb 2-1: SerialNumber: syz [ 1055.610781][ T5884] usb 2-1: config 0 descriptor?? [ 1055.816688][ T5884] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1056.022360][ T5884] usb write operation failed. (-71) [ 1056.088331][ T5884] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1056.089234][ T5884] dvbdev: DVB: registering new adapter (Terratec H7) [ 1056.089360][ T5884] usb 2-1: media controller created [ 1056.089821][ T5884] usb read operation failed. (-71) [ 1056.090461][ T5884] usb write operation failed. (-71) [ 1056.166074][ T5884] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1056.192952][ T5884] usb 2-1: USB disconnect, device number 75 [ 1056.356012][T11813] chnl_net:caif_netlink_parms(): no params data found [ 1056.592501][ T5812] Bluetooth: hci0: command tx timeout [ 1057.789226][T11813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.790028][T11813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.790244][T11813] bridge_slave_0: entered allmulticast mode [ 1057.820744][T11813] bridge_slave_0: entered promiscuous mode [ 1057.991980][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 1058.396134][T11813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.396311][T11813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.396588][T11813] bridge_slave_1: entered allmulticast mode [ 1058.404012][T11813] bridge_slave_1: entered promiscuous mode [ 1058.672333][ T5812] Bluetooth: hci0: command tx timeout [ 1058.775112][ T6065] bridge_slave_1: left allmulticast mode [ 1058.775197][ T6065] bridge_slave_1: left promiscuous mode [ 1058.775455][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.886220][T11871] hfs: can't find a HFS filesystem on dev nullb0 [ 1059.788011][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.788113][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.823359][ T6065] bridge_slave_0: left allmulticast mode [ 1059.823387][ T6065] bridge_slave_0: left promiscuous mode [ 1059.823621][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.872579][T11872] Bluetooth: hci2: command 0x0406 tx timeout [ 1061.872615][T11872] Bluetooth: hci3: command 0x0406 tx timeout [ 1062.809763][T10505] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1062.835178][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 1062.917409][T11893] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1172'. [ 1062.917494][T11893] nbd: must specify at least one socket [ 1063.805853][T10505] usb 6-1: Using ep0 maxpacket: 32 [ 1063.808804][T10505] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.808839][T10505] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.808881][T10505] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1063.808906][T10505] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.858902][T10505] usb 6-1: config 0 descriptor?? [ 1063.865459][T10505] hub 6-1:0.0: USB hub found [ 1064.101040][T10505] hub 6-1:0.0: 1 port detected [ 1064.831065][T10505] hub 6-1:0.0: activate --> -90 [ 1065.142777][T10659] usb 6-1: USB disconnect, device number 2 [ 1065.252436][T10505] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1065.270698][ T6065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.353318][ T6065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.395658][ T6065] bond0 (unregistering): Released all slaves [ 1065.412293][T10505] usb 2-1: Using ep0 maxpacket: 16 [ 1065.430719][T10505] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1065.430750][T10505] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1065.430771][T10505] usb 2-1: Product: syz [ 1065.430786][T10505] usb 2-1: Manufacturer: syz [ 1065.430800][T10505] usb 2-1: SerialNumber: syz [ 1065.480139][T10505] usb 2-1: config 0 descriptor?? [ 1065.689959][T11813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.742994][T11813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.802319][ T5884] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1065.907400][T10659] usb 2-1: USB disconnect, device number 76 [ 1065.984830][ T5884] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1065.984866][ T5884] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1065.984907][ T5884] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1065.984930][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.990824][T11910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1066.041291][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1066.251855][ T6065] hsr_slave_0: left promiscuous mode [ 1066.294376][ T6065] hsr_slave_1: left promiscuous mode [ 1066.297937][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.327368][T10505] usb 3-1: USB disconnect, device number 79 [ 1066.343338][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.506087][T10747] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1067.702527][T10747] usb 7-1: Using ep0 maxpacket: 16 [ 1067.807355][T10659] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1067.828603][T10747] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1067.828635][T10747] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1067.828656][T10747] usb 7-1: Product: syz [ 1067.828672][T10747] usb 7-1: Manufacturer: syz [ 1067.828686][T10747] usb 7-1: SerialNumber: syz [ 1067.834732][T10747] usb 7-1: config 0 descriptor?? [ 1067.973678][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1184'. [ 1068.242370][T10659] usb 3-1: Using ep0 maxpacket: 8 [ 1068.319727][T10659] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1068.319838][T10659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.319859][T10659] usb 3-1: Product: syz [ 1068.319873][T10659] usb 3-1: Manufacturer: syz [ 1068.319888][T10659] usb 3-1: SerialNumber: syz [ 1068.389501][T10659] usb 3-1: config 0 descriptor?? [ 1068.484677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.677772][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.704382][T10659] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1069.055658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.057408][T10659] usb write operation failed. (-71) [ 1069.167878][T10659] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1069.187312][T10659] dvbdev: DVB: registering new adapter (Terratec H7) [ 1069.187374][T10659] usb 3-1: media controller created [ 1069.190260][T10659] usb read operation failed. (-71) [ 1069.191125][T10659] usb write operation failed. (-71) [ 1069.228604][T11941] nvme_fabrics: missing parameter 'transport=%s' [ 1069.228623][T11941] nvme_fabrics: missing parameter 'nqn=%s' [ 1069.335386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.409498][T11920] Bluetooth: MGMT ver 1.23 [ 1069.424985][T10659] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1069.455333][T10659] usb 3-1: USB disconnect, device number 80 [ 1069.524812][ T5884] usb 7-1: USB disconnect, device number 2 [ 1069.605165][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.056943][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.188137][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.229911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.440006][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.057915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.146579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.229498][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.311949][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.372358][ T31] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1073.562336][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 1073.562505][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.585104][ T31] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1073.585134][ T31] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1073.585156][ T31] usb 3-1: Product: syz [ 1073.585170][ T31] usb 3-1: Manufacturer: syz [ 1073.585186][ T31] usb 3-1: SerialNumber: syz [ 1073.630065][ T31] usb 3-1: config 0 descriptor?? [ 1073.674140][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.859857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.087465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.195478][T11966] No source specified [ 1074.887458][ T9] usb 3-1: USB disconnect, device number 81 [ 1074.903091][ T6065] team0 (unregistering): Port device team_slave_1 removed [ 1074.936872][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.054202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.153335][ T6065] team0 (unregistering): Port device team_slave_0 removed [ 1075.216974][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.271092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.321555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.369219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.422424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.484119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.683394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.789667][T11972] No source specified [ 1076.327245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.474868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.583796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.636404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.691103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.739513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.795665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.900856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.999789][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.102173][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.241127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.292573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.358560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.473167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.589859][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.843187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.610040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.647809][T11813] team0: Port device team_slave_0 added [ 1078.706286][T11813] team0: Port device team_slave_1 added [ 1078.996635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.065112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.643475][T11813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.643506][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.643533][T11813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.645180][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1079.649853][T11813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.649870][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.651314][T11813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.972505][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 1079.975543][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.975599][ T31] usb 6-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.975627][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1079.984656][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1079.984684][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.984703][ T31] usb 6-1: Product: syz [ 1079.984717][ T31] usb 6-1: Manufacturer: syz [ 1079.984731][ T31] usb 6-1: SerialNumber: syz [ 1081.472625][ T5884] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1081.652328][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 1081.662105][ T5884] usb 7-1: config 0 has no interfaces? [ 1081.665704][ T5884] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1081.665733][ T5884] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1081.665752][ T5884] usb 7-1: Manufacturer: syz [ 1081.708400][ T5884] usb 7-1: config 0 descriptor?? [ 1081.747748][ T31] usb 6-1: bad CDC descriptors [ 1081.809778][ T31] usb 6-1: USB disconnect, device number 3 [ 1082.847459][T11813] hsr_slave_0: entered promiscuous mode [ 1082.851870][T11813] hsr_slave_1: entered promiscuous mode [ 1083.100827][T10659] usb 7-1: USB disconnect, device number 3 [ 1084.952837][ T5884] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1085.151528][ T5884] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.151569][ T5884] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1085.151630][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1085.151758][ T5884] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1085.151819][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.334786][ T5884] usb 2-1: config 0 descriptor?? [ 1085.814489][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1206'. [ 1085.875366][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 1085.882285][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1086.186612][ T5884] usb 2-1: USB disconnect, device number 77 [ 1087.335209][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1208'. [ 1088.862781][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1210'. [ 1089.776507][T12062] hfs: can't find a HFS filesystem on dev nullb0 [ 1090.880964][T12069] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1090.881005][T12069] UDF-fs: Scanning with blocksize 512 failed [ 1090.883562][T12069] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1090.883602][T12069] UDF-fs: Scanning with blocksize 1024 failed [ 1090.900924][T12069] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1090.900972][T12069] UDF-fs: Scanning with blocksize 2048 failed [ 1090.929820][T12069] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1090.929860][T12069] UDF-fs: Scanning with blocksize 4096 failed [ 1091.219806][T12077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1092.452711][ T2063] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1093.402684][ T2063] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1093.402711][ T2063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1093.402730][ T2063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1093.402746][ T2063] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1093.402777][ T2063] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.402793][ T2063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.709859][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1219'. [ 1093.935717][ T2063] usb 3-1: config 0 descriptor?? [ 1094.512780][ T2063] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1094.779639][ T2063] usb 3-1: USB disconnect, device number 82 [ 1095.787533][T12096] fido_id[12096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1095.787564][T11813] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1096.317364][T11813] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1096.389875][T11813] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1096.469004][T11813] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1096.899486][T12123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1097.141079][T11813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.192052][T11813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.214420][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.214562][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.221532][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.221675][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.317457][T11813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1097.317477][T11813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1097.601228][T12128] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1097.601277][T12128] UDF-fs: Scanning with blocksize 512 failed [ 1097.621451][T12128] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1097.621545][T12128] UDF-fs: Scanning with blocksize 1024 failed [ 1097.666616][T12128] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1097.666664][T12128] UDF-fs: Scanning with blocksize 2048 failed [ 1097.689315][T12128] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1097.689404][T12128] UDF-fs: Scanning with blocksize 4096 failed [ 1098.665705][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1225'. [ 1101.721954][T11813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.005707][T12167] hfs: can't find a HFS filesystem on dev nullb0 [ 1103.682392][ T5812] Bluetooth: hci0: command 0x0405 tx timeout [ 1104.352783][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1104.565410][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1104.565442][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.565464][ T9] usb 6-1: Product: syz [ 1104.565479][ T9] usb 6-1: Manufacturer: syz [ 1104.565495][ T9] usb 6-1: SerialNumber: syz [ 1104.652946][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1104.818890][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1105.144168][T11813] veth0_vlan: entered promiscuous mode [ 1105.240687][T11813] veth1_vlan: entered promiscuous mode [ 1105.559963][T11813] veth0_macvtap: entered promiscuous mode [ 1106.532278][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1106.532448][ T10] ath9k_htc: Failed to initialize the device [ 1106.576275][T11813] veth1_macvtap: entered promiscuous mode [ 1108.562287][ T31] usb 6-1: USB disconnect, device number 4 [ 1108.657531][ T31] usb 6-1: ath9k_htc: USB layer deinitialized [ 1108.703455][T11813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.794109][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.828739][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.831388][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.847938][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.848603][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1113.093402][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 1113.485050][T12221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.913219][ T5806] Bluetooth: hci0: command tx timeout [ 1117.002787][ T5806] Bluetooth: hci0: command tx timeout [ 1119.349926][ T5806] Bluetooth: hci0: command tx timeout [ 1120.702027][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 1121.233231][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.233310][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.402431][ T5806] Bluetooth: hci0: command tx timeout [ 1126.436058][T12213] chnl_net:caif_netlink_parms(): no params data found [ 1126.982285][T10659] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1127.185623][T12303] hfs: can't find a HFS filesystem on dev nullb0 [ 1130.359478][T10659] usb 7-1: unable to read config index 0 descriptor/all [ 1130.359523][T10659] usb 7-1: can't read configurations, error -71 [ 1131.114970][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'. [ 1131.723311][T12213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.723454][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.723710][T12213] bridge_slave_0: entered allmulticast mode [ 1131.726546][T12213] bridge_slave_0: entered promiscuous mode [ 1133.048265][T12213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.048400][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.048631][T12213] bridge_slave_1: entered allmulticast mode [ 1133.124779][T12213] bridge_slave_1: entered promiscuous mode [ 1133.541994][T12331] No source specified [ 1135.028781][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 1136.396292][T12213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.401504][T12213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.320834][T11937] bridge_slave_1: left allmulticast mode [ 1138.320858][T11937] bridge_slave_1: left promiscuous mode [ 1138.321037][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.324308][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1138.354153][T12352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1138.443521][T11937] bridge_slave_0: left allmulticast mode [ 1138.443544][T11937] bridge_slave_0: left promiscuous mode [ 1138.443750][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.472225][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1138.475447][ T9] usb 7-1: config 0 has no interfaces? [ 1138.476679][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1138.476707][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1138.476729][ T9] usb 7-1: Manufacturer: syz [ 1138.480975][ T9] usb 7-1: config 0 descriptor?? [ 1138.891620][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 1138.981993][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1267'. [ 1138.982078][T12355] nbd: must specify at least one socket [ 1139.759182][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 1140.132567][ T2063] usb 7-1: USB disconnect, device number 6 [ 1140.517200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.450502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.452540][ T5950] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1141.583139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.682273][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 1141.852670][ T5950] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1141.852693][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1141.852708][ T5950] usb 2-1: Product: syz [ 1141.852718][ T5950] usb 2-1: Manufacturer: syz [ 1141.852729][ T5950] usb 2-1: SerialNumber: syz [ 1141.859632][ T5950] usb 2-1: config 0 descriptor?? [ 1141.983516][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.083696][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.243489][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1272'. [ 1142.828330][ T5950] usb 2-1: USB disconnect, device number 78 [ 1143.145221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.048617][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.534075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.988124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.039622][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.123036][T11937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.203167][T11937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.225568][T11937] bond0 (unregistering): Released all slaves [ 1145.285513][T12213] team0: Port device team_slave_0 added [ 1145.544108][T12213] team0: Port device team_slave_1 added [ 1145.689347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.001528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.030811][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.610017][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.458663][T11937] hsr_slave_0: left promiscuous mode [ 1148.702333][T11937] hsr_slave_1: left promiscuous mode [ 1148.703556][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.703583][T11937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.134244][T11937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.201327][T12418] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1149.201349][T12418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1149.241822][T12418] vhci_hcd vhci_hcd.0: Device attached [ 1149.402751][ T5950] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1149.515941][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 1149.529339][T11937] veth1_macvtap: left promiscuous mode [ 1149.529463][T11937] veth0_macvtap: left promiscuous mode [ 1149.529811][T11937] veth1_vlan: left promiscuous mode [ 1149.530044][T11937] veth0_vlan: left promiscuous mode [ 1149.563051][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 1149.586165][ T5913] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1149.597731][ T5950] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1149.597753][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1149.597767][ T5950] usb 3-1: Product: syz [ 1149.597778][ T5950] usb 3-1: Manufacturer: syz [ 1149.597788][ T5950] usb 3-1: SerialNumber: syz [ 1149.650586][ T5950] usb 3-1: config 0 descriptor?? [ 1149.662271][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1149.713020][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035dfd800: rx timeout, send abort [ 1149.822757][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1149.828789][ T31] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1149.828820][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.828841][ T31] usb 7-1: Product: syz [ 1149.828857][ T31] usb 7-1: Manufacturer: syz [ 1149.828872][ T31] usb 7-1: SerialNumber: syz [ 1149.885721][ T31] usb 7-1: config 0 descriptor?? [ 1150.152327][ T31] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1150.214091][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e618c00: rx timeout, send abort [ 1150.214563][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035dfd800: abort rx timeout. Force session deactivation [ 1150.217615][ T2063] usb 3-1: USB disconnect, device number 83 [ 1150.338277][ T31] usb write operation failed. (-71) [ 1150.351703][ T31] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1150.366195][ T31] dvbdev: DVB: registering new adapter (Terratec H7) [ 1150.366266][ T31] usb 7-1: media controller created [ 1150.366740][ T31] usb read operation failed. (-71) [ 1150.367224][ T31] usb write operation failed. (-71) [ 1150.367658][T12419] vhci_hcd: connection reset by peer [ 1150.400663][ T31] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1150.413015][ T31] usb 7-1: USB disconnect, device number 7 [ 1150.502056][T12275] vhci_hcd: stop threads [ 1150.562312][T12275] vhci_hcd: release socket [ 1150.656402][T12275] vhci_hcd: disconnect device [ 1150.719710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1150.719749][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e618c00: abort rx timeout. Force session deactivation [ 1150.938204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1151.509781][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1286'. [ 1151.519338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1152.765036][ C0] vkms_vblank_simulate: vblank timer overrun [ 1152.869497][T12443] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 1152.917001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1153.129693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1153.299549][ C0] vkms_vblank_simulate: vblank timer overrun [ 1154.272311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1155.452337][ T5913] vhci_hcd: vhci_device speed not set [ 1156.623388][T11937] team0 (unregistering): Port device team_slave_1 removed [ 1156.934394][T11937] team0 (unregistering): Port device team_slave_0 removed [ 1157.398425][T12467] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1296'. [ 1157.398446][T12467] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1296'. [ 1157.398459][T12467] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1296'. [ 1157.802469][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1158.011944][ T10] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.011977][ T10] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1158.011996][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1158.012022][ T10] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1158.012037][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.018949][ T10] usb 7-1: config 0 descriptor?? [ 1158.454818][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1158.454971][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1158.459854][ T10] usb 7-1: USB disconnect, device number 8 [ 1160.471572][T12213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.471591][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.471619][T12213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.524107][T12213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.524125][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.524153][T12213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.488146][ T5913] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1162.721136][T12213] hsr_slave_0: entered promiscuous mode [ 1162.739195][ T5913] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1162.739226][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.739245][ T5913] usb 6-1: Product: syz [ 1162.739259][ T5913] usb 6-1: Manufacturer: syz [ 1162.739273][ T5913] usb 6-1: SerialNumber: syz [ 1162.776108][T12213] hsr_slave_1: entered promiscuous mode [ 1162.791900][T10747] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1162.826127][ T5913] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1162.866397][ T31] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1162.993441][T10747] usb 7-1: Using ep0 maxpacket: 16 [ 1162.998151][T10747] usb 7-1: config 0 has no interfaces? [ 1162.999513][T10747] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1162.999608][T10747] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1162.999632][T10747] usb 7-1: Manufacturer: syz [ 1163.059083][T10747] usb 7-1: config 0 descriptor?? [ 1163.357057][T12511] No source specified [ 1164.562064][ T31] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1164.562313][ T31] ath9k_htc: Failed to initialize the device [ 1164.562520][T10747] usb 6-1: USB disconnect, device number 5 [ 1164.681008][T10747] usb 6-1: ath9k_htc: USB layer deinitialized [ 1164.733396][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1165.702513][ T10] usb 7-1: USB disconnect, device number 9 [ 1166.184803][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1304'. [ 1166.658734][T12527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1168.340873][T12546] No source specified [ 1170.821517][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 1172.049014][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1310'. [ 1172.803335][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1172.814349][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1172.815685][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1172.817070][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1172.818443][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1173.003943][T12579] hfs: can't find a HFS filesystem on dev nullb0 [ 1173.816109][T12576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.194137][T12588] No source specified [ 1174.832363][ T5812] Bluetooth: hci5: command tx timeout [ 1176.914494][ T5812] Bluetooth: hci5: command tx timeout [ 1177.314372][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 1177.343340][T10747] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1177.567391][T10747] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.567424][T10747] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1177.567452][T10747] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1177.567497][T10747] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1177.567521][T10747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.589109][T10747] usb 2-1: config 0 descriptor?? [ 1178.147895][T10747] usbhid 2-1:0.0: can't add hid device: -71 [ 1178.148027][T10747] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1178.199886][T10747] usb 2-1: USB disconnect, device number 79 [ 1178.724595][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1321'. [ 1178.993030][ T5812] Bluetooth: hci5: command tx timeout [ 1179.796282][T12645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1179.862830][T12573] chnl_net:caif_netlink_parms(): no params data found [ 1180.306706][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 1180.741223][ T3130] bridge_slave_1: left allmulticast mode [ 1180.741246][ T3130] bridge_slave_1: left promiscuous mode [ 1180.741419][ T3130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.829279][ T3130] bridge_slave_0: left allmulticast mode [ 1180.829311][ T3130] bridge_slave_0: left promiscuous mode [ 1180.829593][ T3130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.271666][ T5812] Bluetooth: hci5: command tx timeout [ 1181.694829][T12669] hfs: can't find a HFS filesystem on dev nullb0 [ 1182.613292][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.613370][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.672335][T10659] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1182.856756][T10659] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.856813][T10659] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1182.861562][T10659] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1182.861594][T10659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.861616][T10659] usb 2-1: Product: syz [ 1182.861631][T10659] usb 2-1: Manufacturer: syz [ 1182.861647][T10659] usb 2-1: SerialNumber: syz [ 1183.196063][T10659] usb 2-1: config 0 descriptor?? [ 1184.202351][ T9] usb 2-1: USB disconnect, device number 80 [ 1184.233023][ T3130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.437615][ T3130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.682384][ T5884] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1185.496376][ T5884] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.496408][ T5884] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1185.496454][ T5884] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1185.496489][ T5884] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1185.496513][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.507813][ T5884] usb 7-1: config 0 descriptor?? [ 1185.590765][ T3130] bond0 (unregistering): Released all slaves [ 1185.712279][ T5913] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1185.871265][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 1185.879017][ T5913] usb 6-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.879045][ T5913] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1185.879085][ T5913] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1185.879109][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.964754][ T5884] usbhid 7-1:0.0: can't add hid device: -71 [ 1185.964887][ T5884] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1186.025367][ T5884] usb 7-1: USB disconnect, device number 10 [ 1186.277188][ T5913] usb 6-1: USB disconnect, device number 6 [ 1186.348708][ T3130] hsr_slave_0: left promiscuous mode [ 1186.402694][ T3130] hsr_slave_1: left promiscuous mode [ 1186.403744][ T3130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.470465][ T3130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.642557][T12746] ------------[ cut here ]------------ [ 1187.642580][T12746] WARNING: CPU: 0 PID: 12746 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1187.642731][T12746] Modules linked in: [ 1187.642769][T12746] CPU: 0 UID: 0 PID: 12746 Comm: syz.2.1351 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1187.642791][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1187.642807][T12746] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1187.642839][T12746] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 1a 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1187.642857][T12746] RSP: 0018:ffffc900078878e0 EFLAGS: 00010283 [ 1187.642873][T12746] RAX: ffffffff81b894f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1187.642888][T12746] RDX: ffffc9000f9f1000 RSI: 00000000000000a6 RDI: 00000000000000a7 [ 1187.642902][T12746] RBP: ffffc90007887a70 R08: 0000000000000000 R09: 0000000000000000 [ 1187.642916][T12746] R10: dffffc0000000000 R11: fffffbfff1deee6f R12: dffffc0000000000 [ 1187.642931][T12746] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888010f9c791 [ 1187.642945][T12746] FS: 00007f857ca056c0(0000) GS:ffff888126bc6000(0000) knlGS:0000000000000000 [ 1187.642961][T12746] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1187.642974][T12746] CR2: 00007f857ca04f98 CR3: 000000003a80c000 CR4: 00000000003526f0 [ 1187.642991][T12746] Call Trace: [ 1187.643004][T12746] [ 1187.643018][T12746] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1187.643182][T12746] ? __pfx_cgroup_freeze+0x10/0x10 [ 1187.643212][T12746] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1187.643245][T12746] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.643296][T12746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1187.643335][T12746] ? mutex_lock_nested+0x154/0x1d0 [ 1187.643360][T12746] ? cgroup_kn_lock_live+0x13c/0x230 [ 1187.643393][T12746] cgroup_freeze_write+0x156/0x1c0 [ 1187.643422][T12746] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1187.643455][T12746] ? kernfs_root+0x1c/0x230 [ 1187.643511][T12746] ? kernfs_root+0x1c/0x230 [ 1187.643541][T12746] ? kernfs_root+0x1ea/0x230 [ 1187.643568][T12746] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1187.643595][T12746] cgroup_file_write+0x39e/0x740 [ 1187.643623][T12746] ? __pfx_cgroup_file_write+0x10/0x10 [ 1187.643691][T12746] ? __pfx_cgroup_file_write+0x10/0x10 [ 1187.643711][T12746] kernfs_fop_write_iter+0x3b0/0x540 [ 1187.643741][T12746] vfs_write+0x5d5/0xb40 [ 1187.643801][T12746] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1187.643825][T12746] ? __pfx_vfs_write+0x10/0x10 [ 1187.643854][T12746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1187.643891][T12746] ? mutex_lock_nested+0x154/0x1d0 [ 1187.643915][T12746] ? fdget_pos+0x253/0x320 [ 1187.643948][T12746] ksys_write+0x14b/0x260 [ 1187.643983][T12746] ? __pfx_ksys_write+0x10/0x10 [ 1187.644021][T12746] ? do_syscall_64+0xbe/0xfa0 [ 1187.644112][T12746] do_syscall_64+0xfa/0xfa0 [ 1187.644142][T12746] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.644175][T12746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.644215][T12746] ? clear_bhb_loop+0x60/0xb0 [ 1187.644241][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.644261][T12746] RIP: 0033:0x7f857e7befc9 [ 1187.644285][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.644321][T12746] RSP: 002b:00007f857ca05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1187.644346][T12746] RAX: ffffffffffffffda RBX: 00007f857ea16090 RCX: 00007f857e7befc9 [ 1187.644363][T12746] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1187.644378][T12746] RBP: 00007f857e841f91 R08: 0000000000000000 R09: 0000000000000000 [ 1187.644392][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.644405][T12746] R13: 00007f857ea16128 R14: 00007f857ea16090 R15: 00007fffab427128 [ 1187.644453][T12746] [ 1187.644473][T12746] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1187.644491][T12746] CPU: 0 UID: 0 PID: 12746 Comm: syz.2.1351 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1187.644515][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1187.644529][T12746] Call Trace: [ 1187.644538][T12746] [ 1187.644548][T12746] dump_stack_lvl+0x99/0x250 [ 1187.644592][T12746] ? __asan_memcpy+0x40/0x70 [ 1187.644645][T12746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.644671][T12746] ? __pfx__printk+0x10/0x10 [ 1187.644710][T12746] vpanic+0x237/0x6d0 [ 1187.644741][T12746] ? __pfx_vpanic+0x10/0x10 [ 1187.644774][T12746] panic+0xb9/0xc0 [ 1187.644794][T12746] ? __pfx_panic+0x10/0x10 [ 1187.644833][T12746] __warn+0x31b/0x4b0 [ 1187.644851][T12746] ? cgroup_freeze+0x80a/0xf90 [ 1187.644887][T12746] ? cgroup_freeze+0x80a/0xf90 [ 1187.644920][T12746] report_bug+0x2be/0x4f0 [ 1187.645023][T12746] ? cgroup_freeze+0x80a/0xf90 [ 1187.645056][T12746] ? cgroup_freeze+0x80a/0xf90 [ 1187.645089][T12746] ? cgroup_freeze+0x80c/0xf90 [ 1187.645122][T12746] handle_bug+0x84/0x160 [ 1187.645145][T12746] exc_invalid_op+0x1a/0x50 [ 1187.645167][T12746] asm_exc_invalid_op+0x1a/0x20 [ 1187.645187][T12746] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1187.645221][T12746] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 1a 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1187.645239][T12746] RSP: 0018:ffffc900078878e0 EFLAGS: 00010283 [ 1187.645258][T12746] RAX: ffffffff81b894f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1187.645273][T12746] RDX: ffffc9000f9f1000 RSI: 00000000000000a6 RDI: 00000000000000a7 [ 1187.645290][T12746] RBP: ffffc90007887a70 R08: 0000000000000000 R09: 0000000000000000 [ 1187.645304][T12746] R10: dffffc0000000000 R11: fffffbfff1deee6f R12: dffffc0000000000 [ 1187.645320][T12746] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888010f9c791 [ 1187.645341][T12746] ? cgroup_freeze+0x809/0xf90 [ 1187.645386][T12746] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1187.645423][T12746] ? __pfx_cgroup_freeze+0x10/0x10 [ 1187.645461][T12746] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1187.645492][T12746] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.645525][T12746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1187.645562][T12746] ? mutex_lock_nested+0x154/0x1d0 [ 1187.645587][T12746] ? cgroup_kn_lock_live+0x13c/0x230 [ 1187.645620][T12746] cgroup_freeze_write+0x156/0x1c0 [ 1187.645647][T12746] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1187.645670][T12746] ? kernfs_root+0x1c/0x230 [ 1187.645695][T12746] ? kernfs_root+0x1c/0x230 [ 1187.645724][T12746] ? kernfs_root+0x1ea/0x230 [ 1187.645750][T12746] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1187.645776][T12746] cgroup_file_write+0x39e/0x740 [ 1187.645802][T12746] ? __pfx_cgroup_file_write+0x10/0x10 [ 1187.645836][T12746] ? __pfx_cgroup_file_write+0x10/0x10 [ 1187.645856][T12746] kernfs_fop_write_iter+0x3b0/0x540 [ 1187.645886][T12746] vfs_write+0x5d5/0xb40 [ 1187.645925][T12746] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1187.645948][T12746] ? __pfx_vfs_write+0x10/0x10 [ 1187.645996][T12746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1187.646035][T12746] ? mutex_lock_nested+0x154/0x1d0 [ 1187.646063][T12746] ? fdget_pos+0x253/0x320 [ 1187.646096][T12746] ksys_write+0x14b/0x260 [ 1187.646135][T12746] ? __pfx_ksys_write+0x10/0x10 [ 1187.646176][T12746] ? do_syscall_64+0xbe/0xfa0 [ 1187.646217][T12746] do_syscall_64+0xfa/0xfa0 [ 1187.646250][T12746] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.646286][T12746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.646310][T12746] ? clear_bhb_loop+0x60/0xb0 [ 1187.646337][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.646358][T12746] RIP: 0033:0x7f857e7befc9 [ 1187.646388][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.646408][T12746] RSP: 002b:00007f857ca05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1187.646430][T12746] RAX: ffffffffffffffda RBX: 00007f857ea16090 RCX: 00007f857e7befc9 [ 1187.646466][T12746] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1187.646499][T12746] RBP: 00007f857e841f91 R08: 0000000000000000 R09: 0000000000000000 [ 1187.646514][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.646528][T12746] R13: 00007f857ea16128 R14: 00007f857ea16090 R15: 00007fffab427128 [ 1187.646567][T12746] [ 1187.646958][T12746] Kernel Offset: disabled