last executing test programs: 17m10.174957698s ago: executing program 4 (id=139): sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, 0x0) 17m9.870384109s ago: executing program 4 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x101, 0x200, 0x4, 0x9}, 'syz1\x00', 0x4c}) ioctl$UI_DEV_CREATE(r3, 0x5501) 17m6.70308006s ago: executing program 4 (id=145): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)) sendmmsg$inet6(r1, 0x0, 0x0, 0x24000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17m2.513670168s ago: executing program 4 (id=149): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00270225bd7000ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 16m59.968145445s ago: executing program 4 (id=154): r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x8) preadv(r0, &(0x7f0000002040)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, 0x80, 0x53e8) 16m57.762469223s ago: executing program 4 (id=159): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)) sendmmsg$inet6(r1, 0x0, 0x0, 0x24000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16m39.910723202s ago: executing program 32 (id=159): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)) sendmmsg$inet6(r1, 0x0, 0x0, 0x24000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14m36.660510869s ago: executing program 3 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r5, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 14m32.533386286s ago: executing program 3 (id=345): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 14m30.884482831s ago: executing program 3 (id=348): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 14m28.603260491s ago: executing program 3 (id=351): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x24b}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 14m27.407389988s ago: executing program 3 (id=352): socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x4ca40, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 14m23.53573123s ago: executing program 3 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x56) 14m8.089677087s ago: executing program 33 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x56) 13m8.565524004s ago: executing program 0 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000001000005000000000c001800", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) 13m4.06712021s ago: executing program 0 (id=464): socketpair$unix(0x1, 0x0, 0x0, 0x0) getuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX]) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r6, r5, 0x0, 0xfffffffc) 13m1.52023686s ago: executing program 0 (id=466): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) 12m59.416572028s ago: executing program 0 (id=471): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) 12m57.705354146s ago: executing program 0 (id=473): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) getpgid(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r5, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) fcntl$lock(r7, 0x24, &(0x7f00000004c0)={0x1, 0x2, 0x0, 0x5, r2}) sendfile(r0, r1, 0x0, 0x20000023896) 12m56.139013923s ago: executing program 0 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9b2ef36f1708d7e9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e000000200"/224], 0x254}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) 12m41.110936475s ago: executing program 34 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9b2ef36f1708d7e9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e000000200"/224], 0x254}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) 8.161441271s ago: executing program 2 (id=1406): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 7.197318655s ago: executing program 2 (id=1407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) 6.643349928s ago: executing program 1 (id=1408): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.607283026s ago: executing program 2 (id=1409): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x7, 0x5}]}) 6.487211549s ago: executing program 1 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x2c, 0x7, {}, {}, {}, 0x1, @canfd={{0x3, 0x1}, 0xf, 0x1, 0x0, 0x0, "39f3efa1661764e61ca5742e20d8ee4a456e30b9eb94201624822357f1cd2106b7fbfec6c19d375915c3f434b8ff6cc311f816f4cac2d56f06d315cb914f0cf1"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4040) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x2, 0x7, 0xf226, 0x1, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x69, 0x4, 0x7d, 0x8, 0xabf, 0x3370, 0x30e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0xbc, 0x65}}]}}]}}, 0x0) 3.414819335s ago: executing program 2 (id=1411): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x1, 0x0, &(0x7f0000000280)="f8"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 3.209814582s ago: executing program 1 (id=1412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x48, 0x0, 0xab, 0x5, 0x5, 0x7, 0x8, r4}, 0x20) 2.044922493s ago: executing program 2 (id=1413): socket$vsock_stream(0x28, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 324.668256ms ago: executing program 1 (id=1414): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) 75.25893ms ago: executing program 1 (id=1415): setresuid(0xee00, 0xee01, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x808b9027}, 0xc) 65.261467ms ago: executing program 1 (id=1416): futex(&(0x7f0000000140)=0xfffffffe, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x3, 0x0, 0x4000}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='$.^h\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 0s ago: executing program 2 (id=1417): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2110}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.240506][ T9856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.082894][ T9806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 832.105710][ T9806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 832.106741][ T9806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 832.108430][ T9806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 832.109137][ T9806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.808551][ T5837] Bluetooth: hci1: command tx timeout [ 834.855778][ T9856] hsr_slave_0: entered promiscuous mode [ 834.856996][ T9856] hsr_slave_1: entered promiscuous mode [ 834.857822][ T9856] debugfs: 'hsr0' already exists in 'hsr' [ 834.857843][ T9856] Cannot create hsr debugfs directory [ 836.681254][T10026] chnl_net:caif_netlink_parms(): no params data found [ 836.875665][ T5837] Bluetooth: hci1: command tx timeout [ 838.522824][ T9806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 838.528398][ T9806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 838.533893][ T9806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 838.537453][ T9806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 838.538215][ T9806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.988749][ T5837] Bluetooth: hci1: command tx timeout [ 841.098783][T10190] capability: warning: `syz.1.949' uses 32-bit capabilities (legacy support in use) [ 841.100383][T10190] program syz.1.949 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.979493][ T5837] Bluetooth: hci2: command tx timeout [ 841.981089][ T5837] Bluetooth: hci1: command tx timeout [ 843.167468][ T6112] libceph: connect (1)[c::]:6789 error -101 [ 843.167978][ T6112] libceph: mon0 (1)[c::]:6789 connect error [ 843.192162][ T6112] libceph: connect (1)[c::]:6789 error -101 [ 843.192367][ T6112] libceph: mon0 (1)[c::]:6789 connect error [ 843.450579][ T6112] libceph: connect (1)[c::]:6789 error -101 [ 843.450781][ T6112] libceph: mon0 (1)[c::]:6789 connect error [ 843.525373][T10208] gfs2: not a GFS2 filesystem [ 843.997600][ T5837] Bluetooth: hci2: command tx timeout [ 844.023772][ T6112] libceph: connect (1)[c::]:6789 error -101 [ 844.023972][ T6112] libceph: mon0 (1)[c::]:6789 connect error [ 844.037951][T10203] ceph: No mds server is up or the cluster is laggy [ 846.085606][ T5837] Bluetooth: hci2: command tx timeout [ 846.422854][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.423086][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.423437][T10026] bridge_slave_0: entered allmulticast mode [ 846.428828][T10026] bridge_slave_0: entered promiscuous mode [ 846.543171][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.543317][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.543951][T10026] bridge_slave_1: entered allmulticast mode [ 846.583678][T10026] bridge_slave_1: entered promiscuous mode [ 847.180582][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.337519][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.164508][T10242] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 848.263315][ T5837] Bluetooth: hci2: command tx timeout [ 849.645387][ C1] vkms_vblank_simulate: vblank timer overrun [ 849.870522][T10255] Zero length message leads to an empty skb [ 850.453462][T10026] team0: Port device team_slave_0 added [ 850.702787][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.972401][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.116745][T10252] ceph: No mds server is up or the cluster is laggy [ 851.119687][ T997] libceph: connect (1)[c::]:6789 error -101 [ 851.119891][ T997] libceph: mon0 (1)[c::]:6789 connect error [ 851.184157][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.265077][T10026] team0: Port device team_slave_1 added [ 851.442703][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 851.442914][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 851.573191][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.858936][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.064802][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.800028][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.846945][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.846961][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.846987][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.930350][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.962896][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.962912][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.962937][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.265550][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.245098][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.326441][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.761547][T10151] chnl_net:caif_netlink_parms(): no params data found [ 857.747333][T10026] hsr_slave_0: entered promiscuous mode [ 857.748542][T10026] hsr_slave_1: entered promiscuous mode [ 857.749340][T10026] debugfs: 'hsr0' already exists in 'hsr' [ 857.749363][T10026] Cannot create hsr debugfs directory [ 860.145082][ T6269] libceph: connect (1)[c::]:6789 error -101 [ 860.145276][ T6269] libceph: mon0 (1)[c::]:6789 connect error [ 860.151551][ T6269] libceph: connect (1)[c::]:6789 error -101 [ 860.151733][ T6269] libceph: mon0 (1)[c::]:6789 connect error [ 860.151827][T10305] ceph: No mds server is up or the cluster is laggy [ 864.389719][T10327] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 865.199566][T10181] chnl_net:caif_netlink_parms(): no params data found [ 866.045428][T10333] comedi comedi2: reset error (fatal) [ 866.705321][T10151] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.706271][T10151] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.706489][T10151] bridge_slave_0: entered allmulticast mode [ 866.725676][ T6114] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 866.737334][T10151] bridge_slave_0: entered promiscuous mode [ 866.857252][T10151] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.857447][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.857638][T10151] bridge_slave_1: entered allmulticast mode [ 866.865954][T10151] bridge_slave_1: entered promiscuous mode [ 866.878348][ T6114] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.878383][ T6114] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.878408][ T6114] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 866.878452][ T6114] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.878478][ T6114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.884414][ T6114] usb 3-1: config 0 descriptor?? [ 867.376752][ T6114] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 867.502500][ T9806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 867.523257][ T9806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 867.540704][ T9806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 867.543622][ T9806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 867.544805][ T9806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 867.638273][ T6269] usb 3-1: USB disconnect, device number 15 [ 867.828053][T10350] fido_id[10350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 869.625005][ T9806] Bluetooth: hci4: command tx timeout [ 869.923158][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.923222][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.781802][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.060332][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.588080][T10375] gfs2: not a GFS2 filesystem [ 871.699077][ T9806] Bluetooth: hci4: command tx timeout [ 872.413301][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.413428][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.413618][T10181] bridge_slave_0: entered allmulticast mode [ 872.417264][T10181] bridge_slave_0: entered promiscuous mode [ 872.677718][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.677866][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.678084][T10181] bridge_slave_1: entered allmulticast mode [ 872.688215][T10181] bridge_slave_1: entered promiscuous mode [ 872.770772][T10151] team0: Port device team_slave_0 added [ 873.119419][T10151] team0: Port device team_slave_1 added [ 873.120171][ T6363] bridge_slave_1: left allmulticast mode [ 873.120198][ T6363] bridge_slave_1: left promiscuous mode [ 873.120441][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.166867][ T6363] bridge_slave_0: left allmulticast mode [ 873.166965][ T6363] bridge_slave_0: left promiscuous mode [ 873.167145][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.282381][ T6363] bridge_slave_1: left allmulticast mode [ 873.282421][ T6363] bridge_slave_1: left promiscuous mode [ 873.282684][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.379386][ T6363] bridge_slave_0: left allmulticast mode [ 873.379416][ T6363] bridge_slave_0: left promiscuous mode [ 873.384373][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.755545][ T9806] Bluetooth: hci4: command tx timeout [ 874.376292][ T6363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.496404][ T6363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.588079][ T6363] bond0 (unregistering): Released all slaves [ 874.619368][T10367] syz.2.988 (10367): drop_caches: 1 [ 874.915759][ T5919] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 874.917512][ T6363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.010496][ T6363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.068637][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.068667][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.068688][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 875.068731][ T5919] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 875.068752][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.069313][ T6363] bond0 (unregistering): Released all slaves [ 875.134384][ T5919] usb 3-1: config 0 descriptor?? [ 875.530677][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.607088][ T5919] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 875.842399][ T5837] Bluetooth: hci4: command tx timeout [ 875.907600][ T5924] usb 3-1: USB disconnect, device number 16 [ 876.044605][T10388] fido_id[10388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 876.068851][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.070753][T10151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.070765][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.070790][T10151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.367802][T10151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.367819][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.367844][T10151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.681461][T10181] team0: Port device team_slave_0 added [ 880.965169][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.002572][ T6363] hsr_slave_0: left promiscuous mode [ 881.115930][ T6363] hsr_slave_1: left promiscuous mode [ 881.116803][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.063877][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.531029][ T6363] hsr_slave_0: left promiscuous mode [ 882.575469][ T6363] hsr_slave_1: left promiscuous mode [ 882.577360][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.629871][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.785521][ T997] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 882.937893][ T997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.937926][ T997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.937947][ T997] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 882.937985][ T997] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 882.938008][ T997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.952654][ T997] usb 2-1: config 0 descriptor?? [ 883.111269][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.808482][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.151584][ T997] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 884.443411][ T997] usb 2-1: USB disconnect, device number 14 [ 885.647529][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.689306][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.129421][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.456030][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.487315][ T6363] team0 (unregistering): Port device team_slave_1 removed [ 887.632205][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.201462][ T6363] team0 (unregistering): Port device team_slave_0 removed [ 891.254153][ T9806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 891.288119][ T9806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 891.301448][ T9806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 891.366618][ T9806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 891.377439][ T9806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 894.152385][ T5837] Bluetooth: hci5: command tx timeout [ 895.367587][ T6363] team0 (unregistering): Port device team_slave_1 removed [ 896.167893][ T9806] Bluetooth: hci5: command tx timeout [ 897.996533][ T6363] team0 (unregistering): Port device team_slave_0 removed [ 898.235801][ T9806] Bluetooth: hci5: command tx timeout [ 898.619221][T10181] team0: Port device team_slave_1 added [ 900.345128][ T9806] Bluetooth: hci5: command tx timeout [ 902.155830][T10351] chnl_net:caif_netlink_parms(): no params data found [ 902.466855][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 902.476513][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 902.479268][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 902.489386][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 902.507108][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 904.385440][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.523285][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.605620][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.635540][ T5837] Bluetooth: hci6: command tx timeout [ 904.969174][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.196306][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.195258][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.580918][T10563] syz.2.1029 (10563): drop_caches: 1 [ 906.836564][T10470] chnl_net:caif_netlink_parms(): no params data found [ 906.986419][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.990231][ T5837] Bluetooth: hci6: command tx timeout [ 907.015899][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.194407][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.638942][ T6269] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 907.796015][ T6269] usb 3-1: Using ep0 maxpacket: 8 [ 907.819142][ T6269] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 907.819194][ T6269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.933390][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.023860][ T6269] usb 3-1: config 0 descriptor?? [ 908.378663][T10351] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.378864][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.379059][T10351] bridge_slave_0: entered allmulticast mode [ 908.407874][T10351] bridge_slave_0: entered promiscuous mode [ 908.443447][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.443579][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.443767][T10351] bridge_slave_1: entered allmulticast mode [ 908.449708][T10351] bridge_slave_1: entered promiscuous mode [ 908.900440][T10351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.006021][T10351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.006538][T10470] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.006627][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.006750][T10470] bridge_slave_0: entered allmulticast mode [ 909.008516][T10470] bridge_slave_0: entered promiscuous mode [ 909.036489][ T5837] Bluetooth: hci6: command tx timeout [ 909.191932][T10470] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.192038][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.192204][T10470] bridge_slave_1: entered allmulticast mode [ 909.194634][T10470] bridge_slave_1: entered promiscuous mode [ 909.689928][ T997] usb 3-1: USB disconnect, device number 17 [ 910.096270][T10351] team0: Port device team_slave_0 added [ 910.316594][T10351] team0: Port device team_slave_1 added [ 910.347807][T10470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.681517][T10470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.239105][ T9806] Bluetooth: hci6: command tx timeout [ 911.239186][ T997] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 911.405505][ T997] usb 2-1: Using ep0 maxpacket: 8 [ 911.413242][ T997] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 911.413269][ T997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.440955][ T997] usb 2-1: config 0 descriptor?? [ 911.545743][T10351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.545760][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.545787][T10351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.958346][T10351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.958363][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.958388][T10351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.997203][T10470] team0: Port device team_slave_0 added [ 912.038743][T10470] team0: Port device team_slave_1 added [ 912.896348][T10470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.896365][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.896391][T10470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.222796][T10470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.222812][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.222838][T10470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.407307][T10351] hsr_slave_0: entered promiscuous mode [ 913.408579][T10351] hsr_slave_1: entered promiscuous mode [ 913.409433][T10351] debugfs: 'hsr0' already exists in 'hsr' [ 913.409456][T10351] Cannot create hsr debugfs directory [ 913.587725][T10529] chnl_net:caif_netlink_parms(): no params data found [ 913.940967][ T6421] bridge_slave_1: left allmulticast mode [ 913.940997][ T6421] bridge_slave_1: left promiscuous mode [ 913.941229][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.057045][ T6421] bridge_slave_0: left allmulticast mode [ 914.057080][ T6421] bridge_slave_0: left promiscuous mode [ 914.057417][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.200570][ T6421] bridge_slave_1: left allmulticast mode [ 914.200606][ T6421] bridge_slave_1: left promiscuous mode [ 914.200887][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.273336][ T997] usb 2-1: USB disconnect, device number 15 [ 914.368397][ T6421] bridge_slave_0: left allmulticast mode [ 914.368427][ T6421] bridge_slave_0: left promiscuous mode [ 914.368662][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.490077][ T6421] bridge_slave_1: left allmulticast mode [ 914.490107][ T6421] bridge_slave_1: left promiscuous mode [ 914.490320][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.573936][ T6421] bridge_slave_0: left allmulticast mode [ 914.573965][ T6421] bridge_slave_0: left promiscuous mode [ 914.574187][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.680700][ T6421] bridge_slave_1: left allmulticast mode [ 914.680730][ T6421] bridge_slave_1: left promiscuous mode [ 914.680947][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.792321][ T6421] bridge_slave_0: left allmulticast mode [ 914.792350][ T6421] bridge_slave_0: left promiscuous mode [ 914.792660][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.849911][ T6421] bridge_slave_1: left allmulticast mode [ 914.849939][ T6421] bridge_slave_1: left promiscuous mode [ 914.850168][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.927287][ T6421] bridge_slave_0: left allmulticast mode [ 914.927315][ T6421] bridge_slave_0: left promiscuous mode [ 914.927530][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.396971][T10638] syz.1.1041 (10638): drop_caches: 1 [ 917.571813][T10647] syz.1.1043 (10647): drop_caches: 1 [ 917.970084][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.120522][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.180674][ T6421] bond0 (unregistering): Released all slaves [ 918.721245][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.906594][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.207994][ T6421] bond0 (unregistering): Released all slaves [ 920.855561][ T5919] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 921.015589][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 921.048975][ T5919] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 921.049002][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.095611][ T5919] usb 2-1: config 0 descriptor?? [ 922.506430][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.569425][ T997] usb 2-1: USB disconnect, device number 16 [ 922.767191][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.098876][ T6421] bond0 (unregistering): Released all slaves [ 925.470909][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.957181][ C0] vkms_vblank_simulate: vblank timer overrun [ 931.400752][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.401930][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.733911][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.819104][ T6421] bond0 (unregistering): Released all slaves [ 933.066248][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.161234][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.229095][ T6421] bond0 (unregistering): Released all slaves [ 933.576032][T10470] hsr_slave_0: entered promiscuous mode [ 933.577221][T10470] hsr_slave_1: entered promiscuous mode [ 933.578048][T10470] debugfs: 'hsr0' already exists in 'hsr' [ 933.578071][T10470] Cannot create hsr debugfs directory [ 935.452378][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 935.655846][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 935.681866][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 936.415861][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 936.418759][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 937.145594][ T997] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 937.305585][ T997] usb 2-1: Using ep0 maxpacket: 8 [ 937.309069][ T997] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 937.309111][ T997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.359931][ T997] usb 2-1: config 0 descriptor?? [ 938.463196][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.463322][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.463507][T10529] bridge_slave_0: entered allmulticast mode [ 938.475753][ T9806] Bluetooth: hci1: command tx timeout [ 938.494969][T10529] bridge_slave_0: entered promiscuous mode [ 938.524388][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.524599][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.524786][T10529] bridge_slave_1: entered allmulticast mode [ 938.527443][T10529] bridge_slave_1: entered promiscuous mode [ 938.810410][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.836115][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.881498][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.897446][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.989797][ T6421] hsr_slave_0: left promiscuous mode [ 939.007458][ T6421] hsr_slave_1: left promiscuous mode [ 939.009856][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.049838][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.107312][ T6421] hsr_slave_0: left promiscuous mode [ 939.155539][ T6421] hsr_slave_1: left promiscuous mode [ 939.156349][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.179302][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.339342][ T6421] hsr_slave_0: left promiscuous mode [ 939.375967][ T6421] hsr_slave_1: left promiscuous mode [ 939.379235][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.411800][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.586968][ T997] usb 2-1: USB disconnect, device number 17 [ 940.206221][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 940.567989][ T9806] Bluetooth: hci1: command tx timeout [ 941.746125][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 942.715566][ T9806] Bluetooth: hci1: command tx timeout [ 943.475894][ T6114] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 944.332203][ T6114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.332593][ T6114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.333103][ T6114] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 944.335183][ T6114] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.343208][ T6114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.542912][ T6114] usb 2-1: config 0 descriptor?? [ 945.039701][ T9806] Bluetooth: hci1: command tx timeout [ 945.045036][ T6114] usbhid 2-1:0.0: can't add hid device: -71 [ 945.045153][ T6114] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 945.083930][ T6114] usb 2-1: USB disconnect, device number 18 [ 945.395544][ T6112] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 945.496310][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 945.545821][ T6112] usb 3-1: Using ep0 maxpacket: 8 [ 945.553295][ T6112] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 945.553321][ T6112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.579704][ T6112] usb 3-1: config 0 descriptor?? [ 945.686150][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 946.657831][T10783] program syz.1.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 947.317490][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 947.447695][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 947.844720][ T10] usb 3-1: USB disconnect, device number 18 [ 950.806219][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 950.975609][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 954.966227][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 954.971879][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 954.976041][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 954.978975][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 954.979910][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.545615][ T5924] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 956.706170][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 956.709354][ T5924] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 956.709380][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.720186][ T5924] usb 2-1: config 0 descriptor?? [ 956.930676][ T5924] usb 2-1: USB disconnect, device number 19 [ 956.966593][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 957.148124][ T9806] Bluetooth: hci2: command tx timeout [ 959.610750][ T9806] Bluetooth: hci2: command tx timeout [ 959.614954][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 961.524221][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.826233][ C1] vkms_vblank_simulate: vblank timer overrun [ 962.107343][ T9806] Bluetooth: hci2: command tx timeout [ 963.458104][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.946323][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.072862][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.141301][ T9806] Bluetooth: hci2: command tx timeout [ 965.413556][ T9806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 965.433064][ T9806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 965.434083][ T9806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 965.460807][ T9806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 965.462075][ T9806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 965.691442][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.364661][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.045028][T10720] chnl_net:caif_netlink_parms(): no params data found [ 967.760450][ T5837] Bluetooth: hci4: command tx timeout [ 969.573991][T10819] chnl_net:caif_netlink_parms(): no params data found [ 969.876175][ T5837] Bluetooth: hci4: command tx timeout [ 971.999153][ T5837] Bluetooth: hci4: command tx timeout [ 974.075555][ T5837] Bluetooth: hci4: command tx timeout [ 975.895473][ T5924] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 976.055579][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 976.057958][ T5924] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 976.057985][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.096667][ T5924] usb 3-1: config 0 descriptor?? [ 976.167305][ T5924] usb 3-1: USB disconnect, device number 19 [ 979.699243][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.699386][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.699739][T10720] bridge_slave_0: entered allmulticast mode [ 979.702592][T10720] bridge_slave_0: entered promiscuous mode [ 980.254092][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.735638][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.924674][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.924798][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.924982][T10720] bridge_slave_1: entered allmulticast mode [ 980.947743][T10720] bridge_slave_1: entered promiscuous mode [ 980.984065][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.984188][T10819] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.984357][T10819] bridge_slave_0: entered allmulticast mode [ 980.997660][T10819] bridge_slave_0: entered promiscuous mode [ 981.308464][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.377747][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.694867][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.889182][ C1] vkms_vblank_simulate: vblank timer overrun [ 982.025292][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.027055][T10819] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.027273][T10819] bridge_slave_1: entered allmulticast mode [ 982.029933][T10819] bridge_slave_1: entered promiscuous mode [ 983.650155][T10720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.022059][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.633861][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.660944][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.753461][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.902219][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.917429][T10720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.100545][ C1] vkms_vblank_simulate: vblank timer overrun [ 985.101165][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 985.224814][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.442131][T10819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.690680][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.799107][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.138100][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.186713][T10819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.189150][T10720] team0: Port device team_slave_0 added [ 988.360583][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.866795][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.341732][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.382999][T10720] team0: Port device team_slave_1 added [ 989.897142][T10819] team0: Port device team_slave_0 added [ 990.220872][T10819] team0: Port device team_slave_1 added [ 990.268096][T10720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.268110][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.268130][T10720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.711480][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.087672][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.277995][T10720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.278011][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.278037][T10720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.793059][T10819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.793075][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.793101][T10819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.816335][T10819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.816351][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.816390][T10819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.915577][ T6112] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 992.075814][ T6112] usb 3-1: Using ep0 maxpacket: 8 [ 992.079908][ T6112] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 992.079940][ T6112] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 992.079964][ T6112] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 992.079987][ T6112] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.080029][ T6112] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 992.080051][ T6112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.230234][T10720] hsr_slave_0: entered promiscuous mode [ 992.231546][T10720] hsr_slave_1: entered promiscuous mode [ 992.232405][T10720] debugfs: 'hsr0' already exists in 'hsr' [ 992.232428][T10720] Cannot create hsr debugfs directory [ 992.356138][T10888] chnl_net:caif_netlink_parms(): no params data found [ 992.395439][ T6112] usb 3-1: usb_control_msg returned -71 [ 992.395478][ T6112] usbtmc 3-1:16.0: can't read capabilities [ 992.445780][ T6112] usb 3-1: USB disconnect, device number 20 [ 992.802261][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.802335][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.939730][T10819] hsr_slave_0: entered promiscuous mode [ 992.940968][T10819] hsr_slave_1: entered promiscuous mode [ 992.941816][T10819] debugfs: 'hsr0' already exists in 'hsr' [ 992.941839][T10819] Cannot create hsr debugfs directory [ 996.445913][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.260217][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.456148][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.625449][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.278862][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.393258][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.663422][T10888] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.663553][T10888] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.663769][T10888] bridge_slave_0: entered allmulticast mode [ 998.696269][ T9806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 998.698594][ T9806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 998.699533][ T9806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 998.701361][ T9806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 998.707294][ T9806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 998.727023][T10888] bridge_slave_0: entered promiscuous mode [ 998.792047][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.792172][T10888] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.792385][T10888] bridge_slave_1: entered allmulticast mode [ 998.794837][T10888] bridge_slave_1: entered promiscuous mode [ 999.252426][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.764282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.038478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.125053][T10888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.379732][ C0] vkms_vblank_simulate: vblank timer overrun [ 1001.239789][ C0] vkms_vblank_simulate: vblank timer overrun [ 1001.253551][ T9806] Bluetooth: hci1: command tx timeout [ 1001.310257][T10888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.867129][T10888] team0: Port device team_slave_0 added [ 1002.908906][T10888] team0: Port device team_slave_1 added [ 1003.255648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.285890][ T9806] Bluetooth: hci1: command tx timeout [ 1004.162929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.627835][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.849376][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.336456][T10888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.336475][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.336499][T10888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.355594][ T9806] Bluetooth: hci1: command tx timeout [ 1005.777853][T10888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.777869][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.777895][T10888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.913608][ T6421] bridge_slave_1: left allmulticast mode [ 1006.914670][ T6421] bridge_slave_1: left promiscuous mode [ 1006.914841][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.976507][ T6421] bridge_slave_0: left allmulticast mode [ 1006.976533][ T6421] bridge_slave_0: left promiscuous mode [ 1006.976708][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.050652][ T6421] bridge_slave_1: left allmulticast mode [ 1007.050682][ T6421] bridge_slave_1: left promiscuous mode [ 1007.050910][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.156558][ T6421] bridge_slave_0: left allmulticast mode [ 1007.156581][ T6421] bridge_slave_0: left promiscuous mode [ 1007.162457][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.252560][ T6421] bridge_slave_1: left allmulticast mode [ 1007.252583][ T6421] bridge_slave_1: left promiscuous mode [ 1007.252742][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.337926][ T6421] bridge_slave_0: left allmulticast mode [ 1007.337955][ T6421] bridge_slave_0: left promiscuous mode [ 1007.338262][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.418368][ T6421] bridge_slave_1: left allmulticast mode [ 1007.418399][ T6421] bridge_slave_1: left promiscuous mode [ 1007.418619][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.435604][ T9806] Bluetooth: hci1: command tx timeout [ 1007.644216][ T6421] bridge_slave_0: left allmulticast mode [ 1007.644247][ T6421] bridge_slave_0: left promiscuous mode [ 1007.644528][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.864770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.005360][T11170] comedi comedi2: reset error (fatal) [ 1011.646234][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.647648][T11177] syz.1.1140 (11177): drop_caches: 1 [ 1012.748429][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.827884][ T6421] bond0 (unregistering): Released all slaves [ 1013.041760][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.116327][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.180122][ T6421] bond0 (unregistering): Released all slaves [ 1013.386329][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.476130][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.550313][ T6421] bond0 (unregistering): Released all slaves [ 1014.002961][T11190] input: syz1 as /devices/virtual/input/input26 [ 1014.002994][T11190] input: failed to attach handler leds to device input26, error: -6 [ 1014.796287][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.056933][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1015.546253][ T6112] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1015.767057][ T6112] usb 3-1: Using ep0 maxpacket: 8 [ 1015.811297][ T6112] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1015.811428][ T6112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.928156][ T6112] usb 3-1: config 0 descriptor?? [ 1015.948786][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.974162][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1015.981836][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1015.984280][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1015.987027][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1015.989370][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1016.028607][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.028636][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.028657][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1016.028695][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.028716][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.054640][ T10] usb 2-1: config 0 descriptor?? [ 1016.059900][ T6421] bond0 (unregistering): Released all slaves [ 1016.563052][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1016.667634][T10888] hsr_slave_0: entered promiscuous mode [ 1016.668810][T10888] hsr_slave_1: entered promiscuous mode [ 1016.669583][T10888] debugfs: 'hsr0' already exists in 'hsr' [ 1016.669606][T10888] Cannot create hsr debugfs directory [ 1016.917105][ T6112] usb 2-1: USB disconnect, device number 20 [ 1017.140913][T11208] fido_id[11208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1017.408345][ T6421] hsr_slave_0: left promiscuous mode [ 1017.429109][ T6421] hsr_slave_1: left promiscuous mode [ 1017.432816][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.506113][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.628178][ T7105] Bluetooth: hci2: Frame reassembly failed (-84) [ 1017.642478][ T6421] hsr_slave_0: left promiscuous mode [ 1017.677257][ T6421] hsr_slave_1: left promiscuous mode [ 1017.678894][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.700461][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.813938][ T6421] hsr_slave_0: left promiscuous mode [ 1017.848252][ T6112] usb 3-1: USB disconnect, device number 21 [ 1017.876171][ T6421] hsr_slave_1: left promiscuous mode [ 1017.876954][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.928121][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.996171][ T5837] Bluetooth: hci5: command tx timeout [ 1018.667370][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1018.806289][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1019.767142][ T9806] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1020.075514][ T5837] Bluetooth: hci5: command tx timeout [ 1022.168928][ T5837] Bluetooth: hci5: command tx timeout [ 1022.723958][T11233] syz.1.1150 (11233): drop_caches: 1 [ 1022.948647][T11241] input: syz1 as /devices/virtual/input/input27 [ 1022.948682][T11241] input: failed to attach handler leds to device input27, error: -6 [ 1024.235550][ T5837] Bluetooth: hci5: command tx timeout [ 1024.467987][ T9806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1024.470326][ T9806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1024.491379][ T9806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1024.492245][ T9806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1024.492837][ T9806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1025.135995][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1025.652914][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 1025.820195][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1026.557358][ T9806] Bluetooth: hci2: command tx timeout [ 1027.048314][ T6269] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1027.206166][ T6269] usb 2-1: Using ep0 maxpacket: 8 [ 1027.208077][ T6269] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1027.208103][ T6269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.245824][ T6269] usb 2-1: config 0 descriptor?? [ 1028.635775][ T9806] Bluetooth: hci2: command tx timeout [ 1028.862514][ T6696] usb 2-1: USB disconnect, device number 21 [ 1028.948916][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1029.849355][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1030.286851][T11280] input: syz1 as /devices/virtual/input/input28 [ 1030.286884][T11280] input: failed to attach handler leds to device input28, error: -6 [ 1031.140455][ T9806] Bluetooth: hci2: command tx timeout [ 1033.141031][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 1033.239345][ T9806] Bluetooth: hci2: command tx timeout [ 1035.783212][ T6269] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1035.966515][ T6269] usb 3-1: Using ep0 maxpacket: 8 [ 1035.974411][ T6269] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1035.974439][ T6269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.045059][ T6269] usb 3-1: config 0 descriptor?? [ 1038.665456][T11123] chnl_net:caif_netlink_parms(): no params data found [ 1039.028036][T11310] usb 3-1: USB disconnect, device number 22 [ 1041.713331][T11123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.713493][T11123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.713665][T11123] bridge_slave_0: entered allmulticast mode [ 1041.736715][T11123] bridge_slave_0: entered promiscuous mode [ 1041.738824][T11198] chnl_net:caif_netlink_parms(): no params data found [ 1041.787889][T11123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.788049][T11123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.788261][T11123] bridge_slave_1: entered allmulticast mode [ 1041.790881][T11123] bridge_slave_1: entered promiscuous mode [ 1042.900042][T11123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.988737][T11123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.171419][T11360] input: syz1 as /devices/virtual/input/input29 [ 1043.171452][T11360] input: failed to attach handler leds to device input29, error: -6 [ 1044.087716][T11123] team0: Port device team_slave_0 added [ 1044.258787][T11123] team0: Port device team_slave_1 added [ 1044.261379][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.261642][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.261816][T11198] bridge_slave_0: entered allmulticast mode [ 1044.264298][T11198] bridge_slave_0: entered promiscuous mode [ 1044.323878][T11254] chnl_net:caif_netlink_parms(): no params data found [ 1044.494299][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.494441][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.494641][T11198] bridge_slave_1: entered allmulticast mode [ 1044.525279][T11198] bridge_slave_1: entered promiscuous mode [ 1044.988116][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 1045.274753][T11123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.274769][T11123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.274796][T11123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.546769][T11386] gfs2: not a GFS2 filesystem [ 1047.059988][T11123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.060005][T11123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.060034][T11123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.150707][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.252204][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.052576][T11198] team0: Port device team_slave_0 added [ 1049.316655][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.316775][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.316945][T11254] bridge_slave_0: entered allmulticast mode [ 1049.318966][T11254] bridge_slave_0: entered promiscuous mode [ 1050.082906][ T5837] Bluetooth: hci4: command 0x1003 tx timeout [ 1050.083217][ T9806] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1050.118241][T11198] team0: Port device team_slave_1 added [ 1050.367058][T11123] hsr_slave_0: entered promiscuous mode [ 1050.383620][T11123] hsr_slave_1: entered promiscuous mode [ 1050.384493][T11123] debugfs: 'hsr0' already exists in 'hsr' [ 1050.384516][T11123] Cannot create hsr debugfs directory [ 1050.561157][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 1050.694596][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.694754][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.695000][T11254] bridge_slave_1: entered allmulticast mode [ 1050.701572][T11254] bridge_slave_1: entered promiscuous mode [ 1053.961103][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.961120][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.961145][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.022994][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.123990][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.124006][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.124032][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.179182][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.246289][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.246359][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.607446][ T5837] Bluetooth: hci4: Malformed Event: 0x02 [ 1054.617797][ T7193] Bluetooth: hci4: Frame reassembly failed (-84) [ 1055.410126][T11254] team0: Port device team_slave_0 added [ 1055.585910][T11254] team0: Port device team_slave_1 added [ 1056.193139][T11198] hsr_slave_0: entered promiscuous mode [ 1056.216717][T11198] hsr_slave_1: entered promiscuous mode [ 1056.217492][T11198] debugfs: 'hsr0' already exists in 'hsr' [ 1056.217514][T11198] Cannot create hsr debugfs directory [ 1056.635637][ T5837] Bluetooth: hci4: command 0x1003 tx timeout [ 1056.637782][ T9806] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1056.745902][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 1057.431448][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1057.483927][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1057.498612][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1057.499791][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1057.500543][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1057.793037][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.793055][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.793080][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.991425][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.991441][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.991467][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.367470][T11464] gfs2: not a GFS2 filesystem [ 1059.364982][T11467] program syz.1.1203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.745546][ T5837] Bluetooth: hci1: command tx timeout [ 1060.945429][ T5919] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1061.075526][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1061.218487][T11254] hsr_slave_0: entered promiscuous mode [ 1061.219655][T11254] hsr_slave_1: entered promiscuous mode [ 1061.224942][T11254] debugfs: 'hsr0' already exists in 'hsr' [ 1061.224968][T11254] Cannot create hsr debugfs directory [ 1061.315662][ T5919] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1061.445462][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1061.952010][ T5837] Bluetooth: hci1: command tx timeout [ 1061.952235][ T5919] usb usb2-port1: attempt power cycle [ 1062.315445][ T5919] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1062.336206][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1062.625463][ T5919] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1062.646165][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1062.765619][ T5919] usb usb2-port1: unable to enumerate USB device [ 1063.996467][ T9806] Bluetooth: hci1: command tx timeout [ 1064.536004][ T6421] bridge_slave_1: left allmulticast mode [ 1064.536033][ T6421] bridge_slave_1: left promiscuous mode [ 1064.536236][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.588539][ T6421] bridge_slave_0: left allmulticast mode [ 1064.588568][ T6421] bridge_slave_0: left promiscuous mode [ 1064.589880][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.669320][ T6421] bridge_slave_1: left allmulticast mode [ 1064.669349][ T6421] bridge_slave_1: left promiscuous mode [ 1064.669558][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.728070][ T6421] bridge_slave_0: left allmulticast mode [ 1064.728098][ T6421] bridge_slave_0: left promiscuous mode [ 1064.728303][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.406377][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.487522][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.549384][ T6421] bond0 (unregistering): Released all slaves [ 1065.595506][ T9806] Bluetooth: hci4: command 0x1003 tx timeout [ 1065.595642][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1066.016047][ T6269] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1066.026828][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.075639][ T5837] Bluetooth: hci1: command tx timeout [ 1066.151414][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.168157][ T6269] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1066.168175][ T6269] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1066.168187][ T6269] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1066.168223][ T6269] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1066.168242][ T6269] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1066.170285][ T6269] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1066.170302][ T6269] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1066.170315][ T6269] usb 3-1: Product: syz [ 1066.170323][ T6269] usb 3-1: Manufacturer: syz [ 1066.219623][ T6269] cdc_wdm 3-1:1.0: skipping garbage [ 1066.219642][ T6269] cdc_wdm 3-1:1.0: skipping garbage [ 1066.243373][ T6269] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1066.243405][ T6269] cdc_wdm 3-1:1.0: Unknown control protocol [ 1066.285868][ T6421] bond0 (unregistering): Released all slaves [ 1066.820257][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1067.177704][ T6421] hsr_slave_0: left promiscuous mode [ 1067.215590][ T6421] hsr_slave_1: left promiscuous mode [ 1067.216674][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.269202][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.455570][ T6421] hsr_slave_0: left promiscuous mode [ 1067.479824][ T6421] hsr_slave_1: left promiscuous mode [ 1067.484542][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.520586][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.456373][T11519] gfs2: not a GFS2 filesystem [ 1069.284592][ T5919] usb 3-1: USB disconnect, device number 23 [ 1070.656191][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1070.866889][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1070.945632][ T5919] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1071.075612][ T5919] usb 3-1: device descriptor read/64, error -71 [ 1071.325989][ T5919] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1071.467738][ T5919] usb 3-1: device descriptor read/64, error -71 [ 1071.575865][ T5919] usb usb3-port1: attempt power cycle [ 1072.007088][ T5919] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1072.056767][ T5919] usb 3-1: device descriptor read/8, error -71 [ 1072.425502][ T5919] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1072.446458][ T5919] usb 3-1: device descriptor read/8, error -71 [ 1072.556235][ T5919] usb usb3-port1: unable to enumerate USB device [ 1073.098847][ T9806] Bluetooth: hci4: Malformed Event: 0x02 [ 1073.101760][ T6418] Bluetooth: hci4: Frame reassembly failed (-84) [ 1074.426980][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1074.565855][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1075.035541][ T9806] Bluetooth: hci4: command 0x1003 tx timeout [ 1075.035799][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1076.245336][T11548] comedi comedi2: reset error (fatal) [ 1077.402159][ T9806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1077.412843][ T9806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1077.413978][ T9806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1077.416421][ T9806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1077.429600][ T9806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1079.749227][T11453] chnl_net:caif_netlink_parms(): no params data found [ 1079.995497][ T5919] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1080.038551][ T5837] Bluetooth: hci4: command tx timeout [ 1080.335469][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1080.867203][ T5919] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1081.245442][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1081.356417][ T5919] usb usb2-port1: attempt power cycle [ 1081.560260][T11453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.560446][T11453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.560631][T11453] bridge_slave_0: entered allmulticast mode [ 1081.563200][T11453] bridge_slave_0: entered promiscuous mode [ 1081.667008][T11453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.667152][T11453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.667403][T11453] bridge_slave_1: entered allmulticast mode [ 1081.670175][T11453] bridge_slave_1: entered promiscuous mode [ 1081.703150][ T5919] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1081.732911][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1081.975538][ T5919] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1082.006438][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1082.075407][ T9806] Bluetooth: hci4: command tx timeout [ 1082.115970][ T5919] usb usb2-port1: unable to enumerate USB device [ 1082.209620][T11453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.214070][T11453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.715564][ T5837] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1082.847916][T11453] team0: Port device team_slave_0 added [ 1082.900740][T11453] team0: Port device team_slave_1 added [ 1083.443244][T11583] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1229' sets config #1 [ 1083.622320][T11453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.622332][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.622349][T11453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.686023][T11453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.686038][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.686064][T11453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.040931][T11453] hsr_slave_0: entered promiscuous mode [ 1084.042127][T11453] hsr_slave_1: entered promiscuous mode [ 1084.042961][T11453] debugfs: 'hsr0' already exists in 'hsr' [ 1084.042982][T11453] Cannot create hsr debugfs directory [ 1084.043691][T11554] chnl_net:caif_netlink_parms(): no params data found [ 1084.162609][ T5837] Bluetooth: hci4: command tx timeout [ 1085.586116][T11605] gfs2: not a GFS2 filesystem [ 1086.228362][ T9806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1086.266243][ T5154] Bluetooth: hci4: command tx timeout [ 1086.269217][ T9806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1086.270506][ T9806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1086.272050][ T9806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1086.272887][ T9806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1088.541548][ T5837] Bluetooth: hci2: command tx timeout [ 1088.869297][ T5919] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1088.997481][ T9806] Bluetooth: hci5: Malformed Event: 0x02 [ 1089.004674][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1089.146771][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1089.466272][ T5919] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1089.595570][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1089.706129][ T5919] usb usb2-port1: attempt power cycle [ 1089.726345][ T3579] bridge_slave_1: left allmulticast mode [ 1089.726375][ T3579] bridge_slave_1: left promiscuous mode [ 1089.726600][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.781496][ T3579] bridge_slave_0: left allmulticast mode [ 1089.781525][ T3579] bridge_slave_0: left promiscuous mode [ 1089.781780][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.839581][ T3579] bridge_slave_1: left allmulticast mode [ 1089.839612][ T3579] bridge_slave_1: left promiscuous mode [ 1089.839831][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.899433][ T3579] bridge_slave_0: left allmulticast mode [ 1089.899463][ T3579] bridge_slave_0: left promiscuous mode [ 1089.899678][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.045585][ T5919] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1090.066409][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1090.216030][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.296394][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.305515][ T5919] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1090.328527][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1090.383739][ T3579] bond0 (unregistering): Released all slaves [ 1090.440851][ T5919] usb usb2-port1: unable to enumerate USB device [ 1090.555620][ T9806] Bluetooth: hci2: command tx timeout [ 1090.606243][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.696212][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.794643][ T3579] bond0 (unregistering): Released all slaves [ 1090.795463][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1091.901827][ T6269] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1092.398795][ T6269] usb 3-1: Using ep0 maxpacket: 8 [ 1092.400764][ T6269] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1092.400791][ T6269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.410581][ T6269] usb 3-1: config 0 descriptor?? [ 1092.504943][T11554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.505058][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.505214][T11554] bridge_slave_0: entered allmulticast mode [ 1092.508187][T11554] bridge_slave_0: entered promiscuous mode [ 1092.546644][T11554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.548603][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.548779][T11554] bridge_slave_1: entered allmulticast mode [ 1092.552250][T11554] bridge_slave_1: entered promiscuous mode [ 1092.662926][ T9806] Bluetooth: hci2: command tx timeout [ 1092.917073][ T3579] hsr_slave_0: left promiscuous mode [ 1092.955938][ T3579] hsr_slave_1: left promiscuous mode [ 1092.956583][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.986455][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.986543][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 1092.986620][T11641] netlink: 'syz.1.1241': attribute type 20 has an invalid length. [ 1092.986636][T11641] netlink: 'syz.1.1241': attribute type 21 has an invalid length. [ 1093.085432][ T3579] hsr_slave_0: left promiscuous mode [ 1093.105487][ T3579] hsr_slave_1: left promiscuous mode [ 1093.106168][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.156959][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.045514][ T5919] usb 3-1: USB disconnect, device number 28 [ 1094.116135][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 1094.306146][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 1094.715399][ T9806] Bluetooth: hci2: command tx timeout [ 1095.941929][T11654] binder: 11653:11654 ioctl 4018620d 0 returned -22 [ 1096.396675][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 1096.507516][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 1096.615473][ T5924] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1096.745517][ T5924] usb 3-1: device descriptor read/64, error -71 [ 1096.995509][ T5924] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1097.125418][ T5924] usb 3-1: device descriptor read/64, error -71 [ 1097.186735][T11554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.218017][T11554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.235998][ T5924] usb usb3-port1: attempt power cycle [ 1097.739930][ T5924] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1097.798984][ T5924] usb 3-1: device descriptor read/8, error -71 [ 1098.121066][T11664] syz.1.1248 (11664): drop_caches: 1 [ 1098.122293][ T5924] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1098.135918][ T5924] usb 3-1: device descriptor read/8, error -71 [ 1098.246720][ T5924] usb usb3-port1: unable to enumerate USB device [ 1098.667663][T11554] team0: Port device team_slave_0 added [ 1098.855679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.276263][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.744168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.232486][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.249185][T11554] team0: Port device team_slave_1 added [ 1100.439502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.219963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.438234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.565040][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.319741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.643693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.852822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.958078][T11554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.958095][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.958121][T11554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.970704][T11554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.970721][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.970769][T11554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.696599][T11695] comedi comedi2: reset error (fatal) [ 1105.842672][T11554] hsr_slave_0: entered promiscuous mode [ 1105.843887][T11554] hsr_slave_1: entered promiscuous mode [ 1105.844737][T11554] debugfs: 'hsr0' already exists in 'hsr' [ 1105.844759][T11554] Cannot create hsr debugfs directory [ 1107.343123][T11608] chnl_net:caif_netlink_parms(): no params data found [ 1107.699523][ T3579] bridge_slave_1: left allmulticast mode [ 1107.699546][ T3579] bridge_slave_1: left promiscuous mode [ 1107.699865][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.759332][ T3579] bridge_slave_0: left allmulticast mode [ 1107.759354][ T3579] bridge_slave_0: left promiscuous mode [ 1107.759540][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.531173][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.871271][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.916063][ T6269] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1109.950303][ T3579] bond0 (unregistering): Released all slaves [ 1109.997723][T11453] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1110.075567][ T6269] usb 2-1: Using ep0 maxpacket: 8 [ 1110.078116][ T6269] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1110.078141][ T6269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.084264][ T6269] usb 2-1: config 0 descriptor?? [ 1110.161155][T11453] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1110.300817][T11453] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1110.388875][T11453] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1110.545591][ T3579] hsr_slave_0: left promiscuous mode [ 1110.570517][ T3579] hsr_slave_1: left promiscuous mode [ 1110.571568][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.606294][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.087490][ T5924] usb 2-1: USB disconnect, device number 34 [ 1112.215813][T11341] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1112.415406][T11341] usb 3-1: Using ep0 maxpacket: 8 [ 1112.417201][T11341] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1112.417227][T11341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.427428][T11341] usb 3-1: config 0 descriptor?? [ 1112.733229][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 1112.733311][T11738] netlink: 'syz.1.1265': attribute type 20 has an invalid length. [ 1112.733326][T11738] netlink: 'syz.1.1265': attribute type 21 has an invalid length. [ 1112.968974][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 1113.197583][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 1113.824684][ T6269] usb 3-1: USB disconnect, device number 33 [ 1114.737500][T11608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.737630][T11608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.737820][T11608] bridge_slave_0: entered allmulticast mode [ 1114.788325][T11608] bridge_slave_0: entered promiscuous mode [ 1114.829359][T11608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.829502][T11608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.829698][T11608] bridge_slave_1: entered allmulticast mode [ 1114.859970][T11608] bridge_slave_1: entered promiscuous mode [ 1116.316576][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.316641][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.760097][T11608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.902715][T11608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.312878][T11608] team0: Port device team_slave_0 added [ 1117.321084][T11608] team0: Port device team_slave_1 added [ 1117.570728][T11554] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1120.531121][T11780] syz.2.1274 (11780): drop_caches: 1 [ 1121.137980][T11608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.137997][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.138025][T11608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.260718][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1121.265141][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1121.273917][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1121.278458][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1121.281245][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1121.550165][T11554] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1121.820316][T11608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.820334][T11608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.820364][T11608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.072156][T11554] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1122.197359][T11554] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1123.359832][ T9806] Bluetooth: hci1: command tx timeout [ 1123.554565][T11608] hsr_slave_0: entered promiscuous mode [ 1123.557211][T11608] hsr_slave_1: entered promiscuous mode [ 1123.559393][T11608] debugfs: 'hsr0' already exists in 'hsr' [ 1123.559421][T11608] Cannot create hsr debugfs directory [ 1123.580615][T11810] warning: `syz.2.1279' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1124.001214][T11813] syz.2.1280 (11813): drop_caches: 1 [ 1125.437563][ T9806] Bluetooth: hci1: command tx timeout [ 1127.565320][ T9806] Bluetooth: hci1: command tx timeout [ 1127.995402][ T5919] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1128.164928][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.164962][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1128.165002][ T5919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1128.165023][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.220914][ T5919] usb 2-1: config 0 descriptor?? [ 1128.257619][ T5919] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1129.840567][ T9806] Bluetooth: hci1: command tx timeout [ 1129.906995][ T3579] bridge_slave_1: left allmulticast mode [ 1129.907026][ T3579] bridge_slave_1: left promiscuous mode [ 1129.907251][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.987148][ T3579] bridge_slave_0: left allmulticast mode [ 1129.987180][ T3579] bridge_slave_0: left promiscuous mode [ 1129.991775][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.365266][T11851] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 1130.618884][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.645789][ T5919] usb 2-1: USB disconnect, device number 35 [ 1130.687291][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.729461][ T3579] bond0 (unregistering): Released all slaves [ 1130.912795][T11786] chnl_net:caif_netlink_parms(): no params data found [ 1131.026452][T11608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1131.956694][T11608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1132.026722][T11608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1133.905548][ T3579] hsr_slave_0: left promiscuous mode [ 1133.925424][ T3579] hsr_slave_1: left promiscuous mode [ 1133.926210][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.966234][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.697593][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 1135.838170][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 1137.278698][T11608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1137.350497][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1137.353348][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1137.354812][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1137.385818][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1137.386878][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1138.101353][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.101605][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.101793][T11786] bridge_slave_0: entered allmulticast mode [ 1138.131945][T11786] bridge_slave_0: entered promiscuous mode [ 1138.162526][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.162657][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.162829][T11786] bridge_slave_1: entered allmulticast mode [ 1138.203049][T11786] bridge_slave_1: entered promiscuous mode [ 1138.676508][T11786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.735654][T11786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.043270][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1139.501517][ T5837] Bluetooth: hci5: command tx timeout [ 1139.525373][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.525403][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.525423][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1139.526207][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.535462][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.614043][ T10] usb 3-1: config 0 descriptor?? [ 1139.938571][T11786] team0: Port device team_slave_0 added [ 1139.986559][T11786] team0: Port device team_slave_1 added [ 1140.046771][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1140.046879][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1140.072792][ T10] usb 3-1: USB disconnect, device number 34 [ 1140.362408][T11786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.362426][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.362443][T11786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.440196][T11786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.440207][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.440224][T11786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.847100][ T5837] Bluetooth: hci5: command tx timeout [ 1143.684048][T11786] hsr_slave_0: entered promiscuous mode [ 1143.685561][T11786] hsr_slave_1: entered promiscuous mode [ 1143.686443][T11786] debugfs: 'hsr0' already exists in 'hsr' [ 1143.686466][T11786] Cannot create hsr debugfs directory [ 1144.443919][ T5837] Bluetooth: hci5: command tx timeout [ 1144.990557][ T5919] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1145.239808][T11924] netlink: 'syz.1.1302': attribute type 4 has an invalid length. [ 1145.316198][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 1145.319046][ T5919] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1145.319072][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.357729][ T5919] usb 3-1: config 0 descriptor?? [ 1145.526422][ T997] usb 3-1: USB disconnect, device number 35 [ 1146.461764][T11885] chnl_net:caif_netlink_parms(): no params data found [ 1146.478821][ T5837] Bluetooth: hci5: command tx timeout [ 1147.695713][ T6112] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1147.848083][ T6112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.848118][ T6112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.848141][ T6112] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1147.848185][ T6112] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1147.848210][ T6112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.853253][ T6112] usb 3-1: config 0 descriptor?? [ 1147.969064][ T9806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1147.972806][ T9806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1147.994109][ T9806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1148.001909][ T9806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1148.002708][ T9806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1148.283565][ T6112] usbhid 3-1:0.0: can't add hid device: -71 [ 1148.283683][ T6112] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1148.321618][ T6112] usb 3-1: USB disconnect, device number 36 [ 1148.526145][T11885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.526277][T11885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.526491][T11885] bridge_slave_0: entered allmulticast mode [ 1148.529319][T11885] bridge_slave_0: entered promiscuous mode [ 1148.686839][T11885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.686963][T11885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.687164][T11885] bridge_slave_1: entered allmulticast mode [ 1148.705675][T11885] bridge_slave_1: entered promiscuous mode [ 1148.853484][ T6421] bridge_slave_1: left allmulticast mode [ 1148.853514][ T6421] bridge_slave_1: left promiscuous mode [ 1148.853741][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.924899][ T6421] bridge_slave_0: left allmulticast mode [ 1148.924920][ T6421] bridge_slave_0: left promiscuous mode [ 1148.925108][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.079441][ T9806] Bluetooth: hci2: command tx timeout [ 1151.417274][T11962] gfs2: not a GFS2 filesystem [ 1152.155661][ T9806] Bluetooth: hci2: command tx timeout [ 1154.235585][ T9806] Bluetooth: hci2: command tx timeout [ 1154.646648][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.798503][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.817187][ T5919] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1154.859145][ T6421] bond0 (unregistering): Released all slaves [ 1154.989785][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.989815][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.989836][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1154.989873][ T5919] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1154.989895][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.048662][ T5919] usb 3-1: config 0 descriptor?? [ 1155.352257][T11885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.398224][T11885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.472631][ T5919] usbhid 3-1:0.0: can't add hid device: -71 [ 1155.472811][ T5919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1155.502619][ T5919] usb 3-1: USB disconnect, device number 37 [ 1155.625660][ T6421] hsr_slave_0: left promiscuous mode [ 1155.645885][ T6421] hsr_slave_1: left promiscuous mode [ 1155.646651][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.698855][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.780373][ T9806] Bluetooth: hci2: command tx timeout [ 1158.287122][T11996] gfs2: not a GFS2 filesystem [ 1160.265556][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1160.685883][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1163.065398][ T5919] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1164.065462][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1164.067552][ T5919] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1164.067578][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.114914][ T5919] usb 2-1: config 0 descriptor?? [ 1165.178703][T11885] team0: Port device team_slave_0 added [ 1165.196685][T11885] team0: Port device team_slave_1 added [ 1165.438026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.443609][ T5919] usb 2-1: USB disconnect, device number 36 [ 1165.687305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.144272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.611199][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.863630][T11885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.863653][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.863698][T11885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.914248][T11885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.914263][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.914289][T11885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.864977][ C1] vkms_vblank_simulate: vblank timer overrun [ 1168.310540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1168.612296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1168.891228][ T37] audit: type=1326 audit(1759073857.280:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1168.892147][ T37] audit: type=1326 audit(1759073857.280:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9b522d710 code=0x7ffc0000 [ 1168.892811][ T37] audit: type=1326 audit(1759073857.280:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1168.893727][ T37] audit: type=1326 audit(1759073857.280:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1168.894184][ T37] audit: type=1326 audit(1759073857.280:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1168.894719][ T37] audit: type=1326 audit(1759073857.280:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1169.923209][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 1169.923239][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 1169.931069][ T37] audit: type=1326 audit(1759073858.310:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1169.931126][ T37] audit: type=1326 audit(1759073858.310:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1169.971062][ T37] audit: type=1326 audit(1759073858.340:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1169.971112][ T37] audit: type=1326 audit(1759073858.340:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12048 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1170.136033][T11885] hsr_slave_0: entered promiscuous mode [ 1170.140067][T11885] hsr_slave_1: entered promiscuous mode [ 1170.147496][T11885] debugfs: 'hsr0' already exists in 'hsr' [ 1170.147533][T11885] Cannot create hsr debugfs directory [ 1170.177149][T12054] pim6reg: entered allmulticast mode [ 1170.676099][T12048] pim6reg: left allmulticast mode [ 1171.945539][T11786] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1172.018162][T11944] chnl_net:caif_netlink_parms(): no params data found [ 1172.374481][T11786] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1173.314189][T11786] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1174.362101][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1174.362146][ T37] audit: type=1326 audit(1759073861.980:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e090eec9 code=0x7ffc0000 [ 1174.362411][ T37] audit: type=1326 audit(1759073861.980:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89e090d710 code=0x7ffc0000 [ 1174.362637][ T37] audit: type=1326 audit(1759073861.980:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e090eec9 code=0x7ffc0000 [ 1174.362895][ T37] audit: type=1326 audit(1759073861.980:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89e090eec9 code=0x7ffc0000 [ 1174.528319][ T37] audit: type=1326 audit(1759073862.910:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e090eec9 code=0x7ffc0000 [ 1174.528366][ T37] audit: type=1326 audit(1759073862.910:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e090eec9 code=0x7ffc0000 [ 1174.672398][ T37] audit: type=1326 audit(1759073863.060:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f89e090eec9 code=0x7ffc0000 [ 1174.673161][ T37] audit: type=1326 audit(1759073863.060:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e090eec9 code=0x7ffc0000 [ 1174.674291][ T37] audit: type=1326 audit(1759073863.060:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.2.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e090eec9 code=0x7ffc0000 [ 1176.075470][T11786] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1176.142578][T12073] pim6reg: entered allmulticast mode [ 1176.195433][T11341] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1176.345691][T11341] usb 2-1: Using ep0 maxpacket: 8 [ 1176.347522][T11341] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1176.347550][T11341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.364012][T11341] usb 2-1: config 0 descriptor?? [ 1177.140215][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.140284][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.673213][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.673603][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.673773][T11944] bridge_slave_0: entered allmulticast mode [ 1177.700776][T11944] bridge_slave_0: entered promiscuous mode [ 1177.865208][ T5919] usb 2-1: USB disconnect, device number 37 [ 1177.913274][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.913422][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.913938][T11944] bridge_slave_1: entered allmulticast mode [ 1177.941559][T11944] bridge_slave_1: entered promiscuous mode [ 1178.764500][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.814094][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.307232][T11944] team0: Port device team_slave_0 added [ 1179.341691][T11944] team0: Port device team_slave_1 added [ 1179.765045][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.765062][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.765087][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.992435][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.992452][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.992486][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.627269][ T6421] bridge_slave_1: left allmulticast mode [ 1180.627300][ T6421] bridge_slave_1: left promiscuous mode [ 1180.627476][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.658163][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1180.679486][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1180.680517][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1180.681780][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1180.682349][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1180.716921][ T6421] bridge_slave_0: left allmulticast mode [ 1180.716940][ T6421] bridge_slave_0: left promiscuous mode [ 1180.717104][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.838827][T12113] gfs2: not a GFS2 filesystem [ 1182.804566][ T5837] Bluetooth: hci1: command tx timeout [ 1184.226194][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.348452][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.475546][ T6421] bond0 (unregistering): Released all slaves [ 1184.788560][T11944] hsr_slave_0: entered promiscuous mode [ 1184.789711][T11944] hsr_slave_1: entered promiscuous mode [ 1184.790510][T11944] debugfs: 'hsr0' already exists in 'hsr' [ 1184.790532][T11944] Cannot create hsr debugfs directory [ 1184.875763][ T5837] Bluetooth: hci1: command tx timeout [ 1186.185399][ T6421] hsr_slave_0: left promiscuous mode [ 1186.210150][ T6421] hsr_slave_1: left promiscuous mode [ 1186.210769][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.235429][ T5924] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1186.256370][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1186.385471][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 1186.387286][ T5924] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1186.387312][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.715341][ T5924] usb 3-1: config 0 descriptor?? [ 1186.956075][ T5837] Bluetooth: hci1: command tx timeout [ 1188.030393][ T5919] usb 3-1: USB disconnect, device number 38 [ 1189.127852][ T5837] Bluetooth: hci1: command tx timeout [ 1189.386054][ T5919] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1189.506068][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1189.576173][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 1189.581680][ T5919] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1189.581706][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.614906][ T5919] usb 3-1: config 0 descriptor?? [ 1189.667295][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1190.924944][T11885] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1191.007178][T11885] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1191.104718][T11885] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1191.245602][T11885] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1191.283630][ T5919] usb 3-1: USB disconnect, device number 39 [ 1193.046013][ T5919] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1193.256359][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1193.288044][ T5919] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1193.288233][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.367536][ T5919] usb 2-1: config 0 descriptor?? [ 1194.524210][T12105] chnl_net:caif_netlink_parms(): no params data found [ 1195.182128][ T997] usb 2-1: USB disconnect, device number 38 [ 1195.790536][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.790737][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.790960][T12105] bridge_slave_0: entered allmulticast mode [ 1195.793298][T12105] bridge_slave_0: entered promiscuous mode [ 1195.882912][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.883058][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.883233][T12105] bridge_slave_1: entered allmulticast mode [ 1195.894783][T12105] bridge_slave_1: entered promiscuous mode [ 1196.330413][T11885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.348387][T12105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.698739][T12105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.274515][T12105] team0: Port device team_slave_0 added [ 1197.290722][T11944] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1197.357332][T12105] team0: Port device team_slave_1 added [ 1197.369912][T11944] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1197.676250][T11944] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1197.933436][T11944] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1198.074626][ T9806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1198.091838][ T9806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1198.093416][ T9806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1198.095060][ T9806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1198.102647][ T9806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1198.169765][T12105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.169780][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.169806][T12105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.186408][T12105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.186421][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.186446][T12105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.795769][T12105] hsr_slave_0: entered promiscuous mode [ 1198.796948][T12105] hsr_slave_1: entered promiscuous mode [ 1198.804020][T12105] debugfs: 'hsr0' already exists in 'hsr' [ 1198.804044][T12105] Cannot create hsr debugfs directory [ 1198.853361][ T6421] bridge_slave_1: left allmulticast mode [ 1198.853388][ T6421] bridge_slave_1: left promiscuous mode [ 1198.853614][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.951143][ T6421] bridge_slave_0: left allmulticast mode [ 1198.951172][ T6421] bridge_slave_0: left promiscuous mode [ 1198.952994][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.465374][ T6269] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1199.615371][ T6269] usb 3-1: Using ep0 maxpacket: 16 [ 1199.618721][ T6269] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1199.618765][ T6269] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1199.618787][ T6269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.675137][ T6269] usb 3-1: config 0 descriptor?? [ 1199.694312][ T6269] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 1199.761075][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.876467][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.996594][ T6421] bond0 (unregistering): Released all slaves [ 1200.165526][ T5837] Bluetooth: hci4: command tx timeout [ 1200.706102][ T6421] hsr_slave_0: left promiscuous mode [ 1200.757535][ T6421] hsr_slave_1: left promiscuous mode [ 1200.758980][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.807994][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.936379][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1202.136671][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1202.235644][ T5837] Bluetooth: hci4: command tx timeout [ 1202.333656][ T5190] bcm5974 3-1:0.0: could not read from device [ 1202.424724][ T6269] bcm5974 3-1:0.0: could not read from device [ 1202.471502][ T5190] bcm5974 3-1:0.0: could not read from device [ 1202.565554][ T6269] input: failed to attach handler mousedev to device input30, error: -5 [ 1202.596002][ T6269] usb 3-1: USB disconnect, device number 40 [ 1202.611615][ T5190] bcm5974 3-1:0.0: could not read from device [ 1203.075369][ T6269] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1203.245481][ T6269] usb 3-1: Using ep0 maxpacket: 32 [ 1203.247489][ T6269] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1203.247511][ T6269] usb 3-1: config 0 has no interface number 0 [ 1203.251138][ T6269] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1203.251161][ T6269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.251173][ T6269] usb 3-1: Product: syz [ 1203.251182][ T6269] usb 3-1: Manufacturer: syz [ 1203.251190][ T6269] usb 3-1: SerialNumber: syz [ 1203.256768][ T6269] usb 3-1: config 0 descriptor?? [ 1203.292551][ T6269] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1203.481168][ T10] usb 3-1: USB disconnect, device number 41 [ 1204.318575][T12239] chnl_net:caif_netlink_parms(): no params data found [ 1204.321505][ T5837] Bluetooth: hci4: command tx timeout [ 1204.508069][T11944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.594473][T12373] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 1205.655657][T12373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1205.656770][T12239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.656968][T12239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.657128][T12239] bridge_slave_0: entered allmulticast mode [ 1205.659803][T12239] bridge_slave_0: entered promiscuous mode [ 1205.695345][ T6269] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1205.737178][T12375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1205.737620][T12375] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1205.739460][T12375] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1205.845609][ T6269] usb 3-1: Using ep0 maxpacket: 16 [ 1205.854155][T12239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.854277][T12239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.854455][T12239] bridge_slave_1: entered allmulticast mode [ 1205.855032][ T6269] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 1205.855055][ T6269] usb 3-1: config 8 has no interface number 0 [ 1205.855097][ T6269] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1205.855122][ T6269] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1205.855148][ T6269] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1205.855179][ T6269] usb 3-1: config 8 interface 206 has no altsetting 0 [ 1205.865061][T12239] bridge_slave_1: entered promiscuous mode [ 1205.880606][T11944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.961320][ T6269] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1205.961345][ T6269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.961361][ T6269] usb 3-1: Product: syz [ 1205.961372][ T6269] usb 3-1: Manufacturer: syz [ 1205.961383][ T6269] usb 3-1: SerialNumber: syz [ 1205.961401][T12373] ip6erspan0: entered promiscuous mode [ 1205.975406][T12373] bond1: (slave ip6erspan0): making interface the new active one [ 1205.979393][T12373] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1206.241939][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1206.269416][ T6269] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 1206.293751][ T6269] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1206.309985][ T6269] usb 3-1: USB disconnect, device number 42 [ 1206.328922][ T6269] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1206.330797][ T6269] garmin_gps 3-1:8.206: device disconnected [ 1206.405956][ T5837] Bluetooth: hci4: command tx timeout [ 1206.596711][T12239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.644160][T11543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.644713][T11543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.664204][T12239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.664630][T12105] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1207.050862][T12105] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1207.400331][T12105] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1207.425091][T12239] team0: Port device team_slave_0 added [ 1207.428694][T12105] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1207.650922][T12239] team0: Port device team_slave_1 added [ 1208.057373][T12239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.057389][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.057416][T12239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.061777][T12239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.061790][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.061816][T12239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.394862][T12239] hsr_slave_0: entered promiscuous mode [ 1208.396164][T12397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'. [ 1208.399210][T12239] hsr_slave_1: entered promiscuous mode [ 1208.399985][T12239] debugfs: 'hsr0' already exists in 'hsr' [ 1208.400008][T12239] Cannot create hsr debugfs directory [ 1208.910561][ T9806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1208.917017][ T9806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1208.934128][ T37] audit: type=1326 audit(1759073897.320:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1208.934178][ T37] audit: type=1326 audit(1759073897.320:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12400 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b522eec9 code=0x7ffc0000 [ 1208.934630][ T9806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1208.953135][ T9806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1208.953930][ T9806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1209.466577][ T6421] bridge_slave_1: left allmulticast mode [ 1209.466668][ T6421] bridge_slave_1: left promiscuous mode [ 1209.466928][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.536465][ T6421] bridge_slave_0: left allmulticast mode [ 1209.536491][ T6421] bridge_slave_0: left promiscuous mode [ 1209.536717][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.035610][ T5837] Bluetooth: hci2: command tx timeout [ 1211.447847][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.527171][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.597522][ T6421] bond0 (unregistering): Released all slaves [ 1212.043531][ T6421] hsr_slave_0: left promiscuous mode [ 1212.074737][ T6421] hsr_slave_1: left promiscuous mode [ 1212.081567][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.110720][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.105215][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1398'. [ 1213.115461][ T5837] Bluetooth: hci2: command tx timeout [ 1213.176107][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1213.271319][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 1213.316813][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1214.737194][T12105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.900594][T12105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.172904][T12452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1215.173806][T12454] lo speed is unknown, defaulting to 1000 [ 1215.209549][ T5837] Bluetooth: hci2: command tx timeout [ 1215.212782][T12454] lo speed is unknown, defaulting to 1000 [ 1215.249864][T12455] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1403'. [ 1215.324083][T12454] lo speed is unknown, defaulting to 1000 [ 1215.333776][T12454] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1215.346695][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.346929][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.418451][T12454] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1215.541655][T12404] chnl_net:caif_netlink_parms(): no params data found [ 1215.813623][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.813836][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.829952][T12454] lo speed is unknown, defaulting to 1000 [ 1215.858801][T12454] lo speed is unknown, defaulting to 1000 [ 1216.468441][ T5919] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1216.725709][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.725734][ T5919] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1216.725770][ T5919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1216.725791][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.734050][ T5919] usb 2-1: config 0 descriptor?? [ 1216.845492][T12454] lo speed is unknown, defaulting to 1000 [ 1216.980993][T12454] lo speed is unknown, defaulting to 1000 [ 1217.008779][T12454] lo speed is unknown, defaulting to 1000 [ 1217.062940][T12454] lo speed is unknown, defaulting to 1000 [ 1217.275474][ T5837] Bluetooth: hci2: command tx timeout [ 1217.525215][T12404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.525496][T12404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.525646][T12404] bridge_slave_0: entered allmulticast mode [ 1217.531516][T12404] bridge_slave_0: entered promiscuous mode [ 1217.865695][T12404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.865838][T12404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.866024][T12404] bridge_slave_1: entered allmulticast mode [ 1217.871080][T12404] bridge_slave_1: entered promiscuous mode [ 1217.889604][T12239] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1218.032227][T12239] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1218.406858][T12239] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1218.460883][T12404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.463999][T12239] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1218.516617][T12404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.581614][ T5919] usb 2-1: string descriptor 0 read error: -71 [ 1218.592992][ T5919] usb 2-1: USB disconnect, device number 39 [ 1218.864749][ T37] audit: type=1326 audit(1759073907.250:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12476 comm="syz.2.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89e090eec9 code=0x0 [ 1218.935976][ T37] audit: type=1326 audit(1759073907.300:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12476 comm="syz.2.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f89e090eec9 code=0x0 [ 1219.785742][ T5924] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1219.971459][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 1219.993931][ T5924] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1219.994006][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.179964][ T5924] usb 2-1: config 0 descriptor?? [ 1220.585192][T12404] team0: Port device team_slave_0 added [ 1220.818322][T12404] team0: Port device team_slave_1 added [ 1221.045755][T12404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.045772][T12404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.045799][T12404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.053144][T12404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.053172][T12404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.053200][T12404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.480205][T12404] hsr_slave_0: entered promiscuous mode [ 1221.483938][T12404] hsr_slave_1: entered promiscuous mode [ 1221.486918][T12404] debugfs: 'hsr0' already exists in 'hsr' [ 1221.486946][T12404] Cannot create hsr debugfs directory [ 1221.972422][ T6112] usb 2-1: USB disconnect, device number 40 [ 1222.155631][ T6421] bridge_slave_1: left allmulticast mode [ 1222.155661][ T6421] bridge_slave_1: left promiscuous mode [ 1222.155895][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.453694][ T6421] bridge_slave_0: left allmulticast mode [ 1222.453735][ T6421] bridge_slave_0: left promiscuous mode [ 1222.453962][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.340672][T12509] ------------[ cut here ]------------ [ 1225.340694][T12509] WARNING: CPU: 0 PID: 12509 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 1225.340731][T12509] Modules linked in: [ 1225.340764][T12509] CPU: 0 UID: 0 PID: 12509 Comm: syz.1.1416 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1225.340787][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1225.340806][T12509] RIP: 0010:path_noexec+0x1af/0x200 [ 1225.340828][T12509] Code: 02 31 ff 48 89 de e8 c0 bc 92 ff d1 eb eb 07 e8 57 b7 92 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 b7 92 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1225.340844][T12509] RSP: 0018:ffffc90005017bf8 EFLAGS: 00010283 [ 1225.340861][T12509] RAX: ffffffff822bb47e RBX: ffff88802374c4c0 RCX: 0000000000080000 [ 1225.340876][T12509] RDX: ffffc9000dd22000 RSI: 000000000000005d RDI: 000000000000005e [ 1225.340888][T12509] RBP: 0000000000080000 R08: 0000000000000000 R09: 0000000000000000 [ 1225.340900][T12509] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000011 [ 1225.340911][T12509] R13: 1ffff92000a02f90 R14: 0000000000000000 R15: dffffc0000000000 [ 1225.340925][T12509] FS: 00007ff9b348e6c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1225.340941][T12509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1225.340953][T12509] CR2: 000000110c341e39 CR3: 0000000057c5e000 CR4: 00000000003526f0 [ 1225.340969][T12509] Call Trace: [ 1225.340977][T12509] [ 1225.340989][T12509] do_mmap+0xa20/0x10c0 [ 1225.341024][T12509] ? __pfx_do_mmap+0x10/0x10 [ 1225.341049][T12509] ? rwbase_write_lock+0x56f/0x750 [ 1225.341068][T12509] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1225.341104][T12509] vm_mmap_pgoff+0x2a9/0x4d0 [ 1225.341138][T12509] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1225.341171][T12509] ? __fget_files+0x2a/0x420 [ 1225.341198][T12509] ? __fget_files+0x3a6/0x420 [ 1225.341222][T12509] ? __fget_files+0x2a/0x420 [ 1225.341254][T12509] ksys_mmap_pgoff+0x4e9/0x720 [ 1225.341281][T12509] ? __x64_sys_mmap+0x7f/0x140 [ 1225.341311][T12509] do_syscall_64+0xfa/0x3b0 [ 1225.341329][T12509] ? lockdep_hardirqs_on+0x9c/0x150 [ 1225.341357][T12509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.341376][T12509] ? clear_bhb_loop+0x60/0xb0 [ 1225.341399][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.341417][T12509] RIP: 0033:0x7ff9b522eec9 [ 1225.341441][T12509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.341457][T12509] RSP: 002b:00007ff9b348e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1225.341476][T12509] RAX: ffffffffffffffda RBX: 00007ff9b5485fa0 RCX: 00007ff9b522eec9 [ 1225.341491][T12509] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 1225.341504][T12509] RBP: 00007ff9b52b1f91 R08: 0000000000000009 R09: 0000000000000000 [ 1225.341516][T12509] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1225.341527][T12509] R13: 00007ff9b5486038 R14: 00007ff9b5485fa0 R15: 00007fff60377358 [ 1225.341557][T12509] [ 1225.341567][T12509] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1225.341582][T12509] CPU: 0 UID: 0 PID: 12509 Comm: syz.1.1416 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1225.341604][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1225.341616][T12509] Call Trace: [ 1225.341623][T12509] [ 1225.341632][T12509] dump_stack_lvl+0x99/0x250 [ 1225.341669][T12509] ? __asan_memcpy+0x40/0x70 [ 1225.341691][T12509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1225.341720][T12509] ? __pfx__printk+0x10/0x10 [ 1225.341754][T12509] vpanic+0x281/0x750 [ 1225.341781][T12509] ? __pfx__printk+0x10/0x10 [ 1225.341801][T12509] ? __pfx_vpanic+0x10/0x10 [ 1225.341828][T12509] ? is_bpf_text_address+0x292/0x2b0 [ 1225.341866][T12509] panic+0xb9/0xc0 [ 1225.341894][T12509] ? __pfx_panic+0x10/0x10 [ 1225.341937][T12509] __warn+0x31b/0x4b0 [ 1225.341979][T12509] ? path_noexec+0x1af/0x200 [ 1225.342003][T12509] ? path_noexec+0x1af/0x200 [ 1225.342024][T12509] report_bug+0x2be/0x4f0 [ 1225.342054][T12509] ? path_noexec+0x1af/0x200 [ 1225.342077][T12509] ? path_noexec+0x1af/0x200 [ 1225.342099][T12509] ? path_noexec+0x1b1/0x200 [ 1225.342120][T12509] handle_bug+0x84/0x160 [ 1225.342142][T12509] exc_invalid_op+0x1a/0x50 [ 1225.342165][T12509] asm_exc_invalid_op+0x1a/0x20 [ 1225.342183][T12509] RIP: 0010:path_noexec+0x1af/0x200 [ 1225.342205][T12509] Code: 02 31 ff 48 89 de e8 c0 bc 92 ff d1 eb eb 07 e8 57 b7 92 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 b7 92 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1225.342223][T12509] RSP: 0018:ffffc90005017bf8 EFLAGS: 00010283 [ 1225.342241][T12509] RAX: ffffffff822bb47e RBX: ffff88802374c4c0 RCX: 0000000000080000 [ 1225.342257][T12509] RDX: ffffc9000dd22000 RSI: 000000000000005d RDI: 000000000000005e [ 1225.342270][T12509] RBP: 0000000000080000 R08: 0000000000000000 R09: 0000000000000000 [ 1225.342284][T12509] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000011 [ 1225.342297][T12509] R13: 1ffff92000a02f90 R14: 0000000000000000 R15: dffffc0000000000 [ 1225.342320][T12509] ? path_noexec+0x1ae/0x200 [ 1225.342349][T12509] ? path_noexec+0x1ae/0x200 [ 1225.342372][T12509] do_mmap+0xa20/0x10c0 [ 1225.342409][T12509] ? __pfx_do_mmap+0x10/0x10 [ 1225.342435][T12509] ? rwbase_write_lock+0x56f/0x750 [ 1225.342456][T12509] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1225.342494][T12509] vm_mmap_pgoff+0x2a9/0x4d0 [ 1225.342530][T12509] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1225.342564][T12509] ? __fget_files+0x2a/0x420 [ 1225.342591][T12509] ? __fget_files+0x3a6/0x420 [ 1225.342619][T12509] ? __fget_files+0x2a/0x420 [ 1225.342653][T12509] ksys_mmap_pgoff+0x4e9/0x720 [ 1225.342691][T12509] ? __x64_sys_mmap+0x7f/0x140 [ 1225.342722][T12509] do_syscall_64+0xfa/0x3b0 [ 1225.342740][T12509] ? lockdep_hardirqs_on+0x9c/0x150 [ 1225.342772][T12509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.342791][T12509] ? clear_bhb_loop+0x60/0xb0 [ 1225.342816][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.342835][T12509] RIP: 0033:0x7ff9b522eec9 [ 1225.342852][T12509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.342869][T12509] RSP: 002b:00007ff9b348e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1225.342890][T12509] RAX: ffffffffffffffda RBX: 00007ff9b5485fa0 RCX: 00007ff9b522eec9 [ 1225.342905][T12509] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 1225.342919][T12509] RBP: 00007ff9b52b1f91 R08: 0000000000000009 R09: 0000000000000000 [ 1225.342932][T12509] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1225.342944][T12509] R13: 00007ff9b5486038 R14: 00007ff9b5485fa0 R15: 00007fff60377358 [ 1225.342977][T12509] [ 1225.343294][T12509] Kernel Offset: disabled