last executing test programs: 10m41.512859088s ago: executing program 4 (id=34): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) geteuid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="263ec0a5fb5808a12b00"/20, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000045f53713a585d63f1d941d8a5c796b8a7d68375fcbc600000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 10m38.820602416s ago: executing program 4 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="bc289597996583f628c4c41e16163719c085d39994fd4c34a0cfafb0e3e06ff06b54207b5ba6d20ba02354211f5e01df4b5b593eb5ae38373e2a4ee92809b770d850ffa5e9d70e84f13631ec796141b8e61ca5d1e46d3d6f6949b2d30d9e1e713aa9847ffe0274d749572604edc8448136a4630dcfdb88857ff5101b381559d6feb6e0cd0f"], 0xe}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000800)}, {0x0}, {&(0x7f0000000200)="f8733e7a32562be64b125a1ce08129e92a7877795ed513ca3654a4ff30ec15a6562a1b5ef6ab86fcc2130f7be3b3462721264102dcf76470cabee310129bd0746008c420122124e16a4ecee136991f9b4dbca0382c2788ae083c815e68795606036834852b5d379d4083febda7e658df7a1dd3cc66c21a7a52447e682b3ecb9fdc9e85deb899d16596d4fc1b8d4843fe0d9e0948d2deebdec74fc4db97bcfb6dc34070527d8604098bfca6730c49c5948f6710", 0xb3}], 0x3}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x5}, 0x1c, &(0x7f0000002800)}}], 0x3, 0x0) recvmmsg(r0, &(0x7f0000000380), 0x0, 0x100, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) getsockopt$sock_buf(r0, 0x1, 0xccd4453e7e835cf8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x100000000000f7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x20) 10m35.744960855s ago: executing program 4 (id=41): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) 10m34.948572848s ago: executing program 4 (id=43): socket$inet6(0xa, 0x80001, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) r6 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x7, 0x1}, 0x0, {0xfd, 0x8}, 0xfe, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0xc0bc5310, &(0x7f0000000040)={0x87, @time={0xbc, 0x7}, 0x0, {0x71, 0x6}, 0x6, 0x0, 0x1}) tkill(r4, 0x7) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xe, {0x8, 0x7, 0x1e, 0x10, "a0f271c0ed219c4a2de74ff82e0e709e"}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 10m33.864652342s ago: executing program 4 (id=46): r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() landlock_create_ruleset(0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x1, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x80) 10m31.444373535s ago: executing program 4 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="bc289597996583f628c4c41e16163719c085d39994fd4c34a0cfafb0e3e06ff06b54207b5ba6d20ba02354211f5e01df4b5b593eb5ae38373e2a4ee92809b770d850ffa5e9d70e84f13631ec796141b8e61ca5d1e46d3d6f6949b2d30d9e1e713aa9847ffe0274d749572604edc8448136a4630dcfdb88857ff5101b381559d6feb6e0cd0f"], 0xe}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000800)}, {0x0}, {&(0x7f0000000200)="f8733e7a32562be64b125a1ce08129e92a7877795ed513ca3654a4ff30ec15a6562a1b5ef6ab86fcc2130f7be3b3462721264102dcf76470cabee310129bd0746008c420122124e16a4ecee136991f9b4dbca0382c2788ae083c815e68795606036834852b5d379d4083febda7e658df7a1dd3cc66c21a7a52447e682b3ecb9fdc9e85deb899d16596d4fc1b8d4843fe0d9e0948d2deebdec74fc4db97bcfb6dc34070527d8604098bfca6730c49c5948f6710", 0xb3}], 0x3}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x5}, 0x1c, &(0x7f0000002800)}}], 0x3, 0x0) recvmmsg(r0, &(0x7f0000000380), 0x0, 0x100, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) getsockopt$sock_buf(r0, 0x1, 0xccd4453e7e835cf8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x100000000000f7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x20) 10m16.058269332s ago: executing program 32 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="bc289597996583f628c4c41e16163719c085d39994fd4c34a0cfafb0e3e06ff06b54207b5ba6d20ba02354211f5e01df4b5b593eb5ae38373e2a4ee92809b770d850ffa5e9d70e84f13631ec796141b8e61ca5d1e46d3d6f6949b2d30d9e1e713aa9847ffe0274d749572604edc8448136a4630dcfdb88857ff5101b381559d6feb6e0cd0f"], 0xe}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000800)}, {0x0}, {&(0x7f0000000200)="f8733e7a32562be64b125a1ce08129e92a7877795ed513ca3654a4ff30ec15a6562a1b5ef6ab86fcc2130f7be3b3462721264102dcf76470cabee310129bd0746008c420122124e16a4ecee136991f9b4dbca0382c2788ae083c815e68795606036834852b5d379d4083febda7e658df7a1dd3cc66c21a7a52447e682b3ecb9fdc9e85deb899d16596d4fc1b8d4843fe0d9e0948d2deebdec74fc4db97bcfb6dc34070527d8604098bfca6730c49c5948f6710", 0xb3}], 0x3}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x5}, 0x1c, &(0x7f0000002800)}}], 0x3, 0x0) recvmmsg(r0, &(0x7f0000000380), 0x0, 0x100, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) getsockopt$sock_buf(r0, 0x1, 0xccd4453e7e835cf8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x100000000000f7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x20) 8m57.374462811s ago: executing program 3 (id=199): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) setreuid(0x0, 0x0) getpriority(0x2, 0x0) 8m52.993644935s ago: executing program 3 (id=206): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd2a, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) 8m51.490069626s ago: executing program 3 (id=207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r6, 0x0, 0x0, 0x8040, 0x0, 0x0) write$binfmt_elf64(r6, 0x0, 0x78) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = dup2(0xffffffffffffffff, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3, 0x4}, {0x5, 0x1c9d}}}}, 0x11) 8m50.131148204s ago: executing program 3 (id=209): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x1f, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc}) 8m49.124373219s ago: executing program 3 (id=210): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xb65}, &(0x7f00000001c0)=0x8) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0xc, 0x80000001) syz_emit_ethernet(0xf3, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd62c5240900bd0600fc010000000000000000000000000001000000000000000000000000000000018800023164000000320a040505480300fe8000000000000000000000000000bbfc01000000000000000000000000000000000000000000000000fffffffffffffe8000000000000000000000000000bb000000000000000000000000000000014e244e23", @ANYRES32, @ANYRES32=r5, @ANYBLOB="f120000e907872da0274aa9cf9603e9208080a00010021000001002205d2a9071e030efe06e2d4c3d9fe06e2d401d900f76fe5c75810edaf6788845b092c70a24a051445fdd347"], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000980)={0x0, 0x5}, &(0x7f00000009c0)=0x8) 8m39.793417789s ago: executing program 3 (id=222): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x3, 0x169}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m38.129602032s ago: executing program 5 (id=68): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x47, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r4, 0x1}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9738}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) 8m22.725050901s ago: executing program 33 (id=222): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x3, 0x169}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m22.426815112s ago: executing program 34 (id=68): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x47, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r4, 0x1}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9738}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) 17.967635352s ago: executing program 1 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x2, [{@multicast1, 0x7}, {@empty, 0xe6a5}, {@rand_addr=0x64010100, 0x8}]}]}}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}}}}}}, 0x0) 17.926865683s ago: executing program 0 (id=843): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 10.740210503s ago: executing program 0 (id=845): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x4, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 10.731562609s ago: executing program 1 (id=846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) 10.493282403s ago: executing program 1 (id=848): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xa) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) 6.85433777s ago: executing program 2 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) listen(0xffffffffffffffff, 0x7ff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.766291042s ago: executing program 0 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc4}}, 0x0) 6.511677517s ago: executing program 0 (id=853): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) 5.300270586s ago: executing program 2 (id=854): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) 5.155401547s ago: executing program 0 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x2, [{@multicast1, 0x7}, {@empty, 0xe6a5}, {@rand_addr=0x64010100, 0x8}]}]}}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}}}}}}, 0x0) 3.644338809s ago: executing program 0 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, 0x0, &(0x7f00000002c0)=r5}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250a0000000c009900040000001f000000090007004274e10ad400000038005080110001004573423a66b52879b9aaa8aea900000005000900000000001000040063ab779f3ed393349d9877cb0800030005ac0f0048005080090001002c9c62f04800000009000100c8f0e8899f0000000500090001000000090001008d6cc839b1000000050009000000000004000500040006000800088004000100"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.379751182s ago: executing program 2 (id=857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) 3.091850686s ago: executing program 1 (id=858): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 1.960479063s ago: executing program 2 (id=859): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1.816194466s ago: executing program 1 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 508.984254ms ago: executing program 2 (id=861): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}}, 0x40) 169.939335ms ago: executing program 1 (id=862): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xa) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) 0s ago: executing program 2 (id=863): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x4, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) sync() tkill(0x0, 0x7) socket$inet6(0xa, 0x2, 0x3a) kernel console output (not intermixed with test programs): idge_slave_1: left promiscuous mode [ 276.458057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.595674][ T12] bridge_slave_0: left allmulticast mode [ 276.595698][ T12] bridge_slave_0: left promiscuous mode [ 276.595892][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.017954][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.290332][ T1938] usb 3-1: USB disconnect, device number 5 [ 280.084211][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.252880][ T5841] Bluetooth: Wrong link type (-57) [ 280.848275][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.944981][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.293299][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.378222][ T12] bond0 (unregistering): Released all slaves [ 284.673666][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.673804][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.674036][ T6957] bridge_slave_0: entered allmulticast mode [ 284.686873][ T6957] bridge_slave_0: entered promiscuous mode [ 284.802751][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.802866][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.803032][ T6957] bridge_slave_1: entered allmulticast mode [ 284.806746][ T6957] bridge_slave_1: entered promiscuous mode [ 286.008895][ T7120] 9pnet_fd: Insufficient options for proto=fd [ 286.239315][ T6957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.494807][ T6957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.554933][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.555072][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.555299][ T6953] bridge_slave_0: entered allmulticast mode [ 286.563129][ T6953] bridge_slave_0: entered promiscuous mode [ 287.272981][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.273131][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.273297][ T6953] bridge_slave_1: entered allmulticast mode [ 287.274967][ T6953] bridge_slave_1: entered promiscuous mode [ 287.804678][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.226068][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.716055][ T5841] Bluetooth: Wrong link type (-57) [ 288.857810][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.009876][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.053669][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.201218][ T12] hsr_slave_0: left promiscuous mode [ 289.281695][ T12] hsr_slave_1: left promiscuous mode [ 289.283734][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.283761][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.343254][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.449129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.449158][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.909719][ T12] veth1_macvtap: left promiscuous mode [ 289.909840][ T12] veth0_macvtap: left promiscuous mode [ 289.910130][ T12] veth1_vlan: left promiscuous mode [ 289.910342][ T12] veth0_vlan: left promiscuous mode [ 292.787710][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.290405][ T7165] netlink: 300 bytes leftover after parsing attributes in process `syz.0.278'. [ 296.306725][ T7165] net_ratelimit: 10 callbacks suppressed [ 296.306737][ T7165] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 296.709094][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.731518][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.329175][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.845826][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.078358][ T5841] Bluetooth: Wrong link type (-57) [ 298.504494][ T12] team0 (unregistering): Port device team_slave_1 removed [ 298.556934][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.585068][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.145075][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.764217][ T7184] vivid-000: kernel_thread() failed [ 299.867831][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.895551][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.599242][ T12] team0 (unregistering): Port device team_slave_0 removed [ 300.945382][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 302.370348][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.972881][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.190928][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.657023][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.729088][ T5841] Bluetooth: Wrong link type (-57) [ 307.297314][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.331943][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.647606][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 309.145897][ T7237] netlink: 300 bytes leftover after parsing attributes in process `syz.0.296'. [ 309.164190][ T7237] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 309.592696][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.203037][ T6957] team0: Port device team_slave_0 added [ 310.474953][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.756932][ T6957] team0: Port device team_slave_1 added [ 310.875185][ T6953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.249051][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.378992][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.767179][ T6953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.955432][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.083797][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.084138][ T5841] Bluetooth: Wrong link type (-57) [ 312.368537][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 312.510855][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.510867][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.510880][ T6957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.881442][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.478232][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.719201][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.089335][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.157602][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.157616][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.157639][ T6957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.160389][ T6953] team0: Port device team_slave_0 added [ 314.267962][ T6953] team0: Port device team_slave_1 added [ 314.958711][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.004794][ T7273] netlink: 300 bytes leftover after parsing attributes in process `syz.2.306'. [ 315.008144][ T7273] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 315.836249][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.836266][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.836290][ T6953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.273153][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.273168][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.273191][ T6953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.505336][ T6957] hsr_slave_0: entered promiscuous mode [ 316.506615][ T6957] hsr_slave_1: entered promiscuous mode [ 316.507523][ T6957] debugfs: 'hsr0' already exists in 'hsr' [ 316.507546][ T6957] Cannot create hsr debugfs directory [ 317.346949][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.347021][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.717170][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.776779][ T5841] Bluetooth: Wrong link type (-57) [ 318.205583][ T6953] hsr_slave_0: entered promiscuous mode [ 318.210099][ T6953] hsr_slave_1: entered promiscuous mode [ 318.227118][ T6953] debugfs: 'hsr0' already exists in 'hsr' [ 318.227146][ T6953] Cannot create hsr debugfs directory [ 318.697032][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.490771][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.564283][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.156200][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.362977][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.813259][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.394453][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.852689][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.960559][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.033037][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.228608][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.479262][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.518469][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.597637][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.860568][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.895142][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.001543][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.011521][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.309482][ T7341] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 324.576888][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.733535][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.748583][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.750215][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.751799][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.760838][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.666338][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.728931][ T5841] Bluetooth: Wrong link type (-57) [ 325.829009][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.126448][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.145667][ T5837] Bluetooth: hci0: command tx timeout [ 326.283573][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.335408][ T7353] syz.0.322 (7353) used greatest stack depth: 17384 bytes left [ 326.395842][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.650264][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.113824][ T5841] Bluetooth: hci4: command tx timeout [ 327.326968][ T7355] netlink: 300 bytes leftover after parsing attributes in process `syz.2.323'. [ 327.327745][ T7355] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 327.732082][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.901081][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.212742][ T5841] Bluetooth: hci0: command tx timeout [ 328.525593][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.629535][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.172511][ T5841] Bluetooth: hci4: command tx timeout [ 329.223107][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.628334][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.056248][ T7385] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 330.302885][ T5841] Bluetooth: hci0: command tx timeout [ 330.404395][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.933802][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 331.252501][ T5841] Bluetooth: hci4: command tx timeout [ 331.499614][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.249736][ T7404] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 332.556132][ T5841] Bluetooth: hci0: command tx timeout [ 332.906273][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.362534][ T5841] Bluetooth: hci4: command tx timeout [ 333.394575][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.981259][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.379059][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.662437][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.994151][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.027023][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.774802][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.857098][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.632765][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 340.654247][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.529014][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.617575][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.916055][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.199746][ T12] bridge_slave_1: left allmulticast mode [ 342.199777][ T12] bridge_slave_1: left promiscuous mode [ 342.200036][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.657141][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.734941][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.789073][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.825692][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.920198][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.985329][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.533042][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.734153][ T12] bridge_slave_0: left allmulticast mode [ 343.734184][ T12] bridge_slave_0: left promiscuous mode [ 343.735425][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.244857][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 344.401811][ T7482] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 344.472459][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 344.634136][ T10] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 344.634161][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.634179][ T10] usb 3-1: Product: syz [ 344.634191][ T10] usb 3-1: Manufacturer: syz [ 344.634202][ T10] usb 3-1: SerialNumber: syz [ 345.152769][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 345.152821][ T10] usb 3-1: setting power ON [ 345.152840][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 345.320328][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 345.341587][ T10] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 345.343756][ T10] dvb_usb_cxusb 3-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 347.364208][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.400844][ T10] usb 3-1: USB disconnect, device number 6 [ 348.636300][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.364878][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.993714][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 350.125801][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.267979][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.749890][ T7523] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 350.799103][ T12] bond0 (unregistering): Released all slaves [ 350.951932][ T7342] chnl_net:caif_netlink_parms(): no params data found [ 351.010184][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 351.938859][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.215485][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.268269][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.519448][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.852684][ T1938] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 353.029038][ T1938] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 353.029055][ T1938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.029064][ T1938] usb 2-1: Product: syz [ 353.029071][ T1938] usb 2-1: Manufacturer: syz [ 353.029078][ T1938] usb 2-1: SerialNumber: syz [ 353.101204][ T1938] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 353.101258][ T1938] usb 2-1: setting power ON [ 353.101275][ T1938] dvb-usb: bulk message failed: -22 (2/0) [ 353.140206][ T1938] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 353.174228][ T1938] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 353.174611][ T1938] dvb_usb_cxusb 2-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 353.923707][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.377637][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.076864][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.129384][ T5925] usb 2-1: USB disconnect, device number 4 [ 355.250216][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 356.281401][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.950784][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.042489][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.882897][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.883055][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.883794][ T7342] bridge_slave_0: entered allmulticast mode [ 363.010785][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.457701][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.518871][ T7342] bridge_slave_0: entered promiscuous mode [ 363.533149][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.533300][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.535884][ T7335] bridge_slave_0: entered allmulticast mode [ 363.566032][ T7335] bridge_slave_0: entered promiscuous mode [ 363.738790][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.738897][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.739060][ T7342] bridge_slave_1: entered allmulticast mode [ 363.750633][ T7342] bridge_slave_1: entered promiscuous mode [ 364.594896][ T12] hsr_slave_0: left promiscuous mode [ 364.664608][ T12] hsr_slave_1: left promiscuous mode [ 364.665609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.665637][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.741202][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.741223][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.389060][ T5925] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 366.003551][ T5925] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 366.003578][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.003595][ T5925] usb 2-1: Product: syz [ 366.003608][ T5925] usb 2-1: Manufacturer: syz [ 366.003620][ T5925] usb 2-1: SerialNumber: syz [ 366.041297][ T5925] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 366.041364][ T5925] usb 2-1: setting power ON [ 366.041382][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 366.041772][ T12] veth1_macvtap: left promiscuous mode [ 366.041883][ T12] veth0_macvtap: left promiscuous mode [ 366.042158][ T12] veth1_vlan: left promiscuous mode [ 366.051667][ T12] veth0_vlan: left promiscuous mode [ 366.300689][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.336969][ T5841] Bluetooth: hci2: unexpected event for opcode 0x202a [ 366.375029][ T5925] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 366.394952][ T5925] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 366.395253][ T5925] dvb_usb_cxusb 2-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 367.484171][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.545969][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.228747][ T992] usb 2-1: USB disconnect, device number 5 [ 370.911803][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.027761][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.949452][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.214950][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.271599][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.290387][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.735761][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.722764][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.473110][ T12] team0 (unregistering): Port device team_slave_1 removed [ 374.662965][ T12] team0 (unregistering): Port device team_slave_0 removed [ 376.609678][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.788304][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.795228][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.795360][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.795695][ T7335] bridge_slave_1: entered allmulticast mode [ 376.804850][ T7335] bridge_slave_1: entered promiscuous mode [ 378.302916][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.829534][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.829607][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.832500][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.002915][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.031904][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.083246][ T5841] Bluetooth: hci1: unexpected event for opcode 0x202a [ 379.896832][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.988299][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.019031][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.104008][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.459061][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.516501][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.984923][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.997728][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.001208][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.015897][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.017716][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.254961][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.314669][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.880301][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.096239][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.126066][ T12] bridge_slave_1: left allmulticast mode [ 383.126096][ T12] bridge_slave_1: left promiscuous mode [ 383.126451][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.756690][ T12] bridge_slave_0: left allmulticast mode [ 383.756723][ T12] bridge_slave_0: left promiscuous mode [ 383.758605][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.140057][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.157640][ T5841] Bluetooth: hci5: command tx timeout [ 384.363224][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.393482][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.450732][ T5841] Bluetooth: hci2: unexpected event for opcode 0x202a [ 384.601034][ T12] bridge_slave_1: left allmulticast mode [ 384.601170][ T12] bridge_slave_1: left promiscuous mode [ 385.145028][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.170079][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.311724][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.323913][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.334241][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.343674][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.348707][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.851132][ T12] bridge_slave_0: left allmulticast mode [ 385.851163][ T12] bridge_slave_0: left promiscuous mode [ 385.851410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.214053][ T5841] Bluetooth: hci5: command tx timeout [ 386.806083][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.972503][ T5841] Bluetooth: hci4: command tx timeout [ 388.302564][ T5841] Bluetooth: hci5: command tx timeout [ 389.916497][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.939349][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.053788][ T5841] Bluetooth: hci4: command tx timeout [ 390.372504][ T5841] Bluetooth: hci5: command tx timeout [ 390.622830][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.279730][ T12] bond0 (unregistering): Released all slaves [ 392.133265][ T5841] Bluetooth: hci4: command tx timeout [ 392.295218][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.374384][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.435909][ T12] bond0 (unregistering): Released all slaves [ 393.655561][ T5841] Bluetooth: Wrong link type (-57) [ 393.656178][ T5841] Bluetooth: hci2: link tx timeout [ 393.656602][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 393.737555][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.992913][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.163740][ T12] hsr_slave_0: left promiscuous mode [ 394.192642][ T12] hsr_slave_1: left promiscuous mode [ 394.193791][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.213097][ T5841] Bluetooth: hci4: command tx timeout [ 394.256104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.332547][ T12] hsr_slave_0: left promiscuous mode [ 394.354806][ T12] hsr_slave_1: left promiscuous mode [ 394.355533][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.403375][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.837344][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.140458][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 396.394717][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.553852][ T7755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.593773][ T6370] Bluetooth: hci0: Frame reassembly failed (-84) [ 396.594106][ T6370] Bluetooth: hci0: Frame reassembly failed (-84) [ 396.594155][ T6370] Bluetooth: hci0: Frame reassembly failed (-84) [ 396.594201][ T6370] Bluetooth: hci0: Frame reassembly failed (-84) [ 396.594244][ T6370] Bluetooth: hci0: Frame reassembly failed (-84) [ 396.594286][ T6370] Bluetooth: hci0: Frame reassembly failed (-84) [ 397.390406][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.497673][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.509842][ T12] team0 (unregistering): Port device team_slave_1 removed [ 398.624518][ T5841] Bluetooth: hci0: command 0x1003 tx timeout [ 398.637162][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 401.848761][ T12] team0 (unregistering): Port device team_slave_0 removed [ 402.301677][ T992] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 402.464533][ T992] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 402.464560][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.470778][ T992] usb 1-1: config 0 descriptor?? [ 402.679445][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.780193][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.827982][ T7774] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 405.168434][ T12] team0 (unregistering): Port device team_slave_1 removed [ 405.438739][ T12] team0 (unregistering): Port device team_slave_0 removed [ 407.767397][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.428629][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.474699][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.504852][ T992] usb 1-1: Cannot read MAC address [ 408.505017][ T992] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 409.568419][ T5904] usb 1-1: USB disconnect, device number 4 [ 409.722746][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.262112][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.485243][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.763178][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.015815][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.210288][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.653020][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.757200][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.808025][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.368449][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.515314][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.726237][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.210423][ T7836] vivid-002: kernel_thread() failed [ 413.335089][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 413.514049][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.545573][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.730108][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.724126][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.892315][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.138293][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 415.973622][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.428470][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.445092][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.445248][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.445474][ T7669] bridge_slave_0: entered allmulticast mode [ 416.448142][ T7669] bridge_slave_0: entered promiscuous mode [ 416.759326][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.861255][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.890804][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.320785][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.402608][ T5925] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 417.433728][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.433992][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.434217][ T7669] bridge_slave_1: entered allmulticast mode [ 417.514229][ T7669] bridge_slave_1: entered promiscuous mode [ 417.556672][ T5925] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 417.556689][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.579004][ T5925] usb 3-1: config 0 descriptor?? [ 417.675992][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.788987][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.789593][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.843890][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.875514][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.989406][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.875901][ T5925] usb 3-1: Cannot read MAC address [ 420.876057][ T5925] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 420.928081][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.968557][ T5925] usb 3-1: USB disconnect, device number 7 [ 421.060909][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.075755][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.075970][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.076203][ T7689] bridge_slave_0: entered allmulticast mode [ 421.170233][ T7689] bridge_slave_0: entered promiscuous mode [ 421.419813][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.419898][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.420060][ T7689] bridge_slave_1: entered allmulticast mode [ 421.456027][ T7689] bridge_slave_1: entered promiscuous mode [ 422.002077][ T7669] team0: Port device team_slave_0 added [ 422.293993][ T7669] team0: Port device team_slave_1 added [ 422.298983][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.545007][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.990731][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.990754][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.990778][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.731634][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.731656][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.731679][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.737965][ T12] bridge_slave_1: left allmulticast mode [ 423.737996][ T12] bridge_slave_1: left promiscuous mode [ 423.738258][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.972587][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.444247][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.493227][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.347252][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.378857][ T12] bridge_slave_0: left allmulticast mode [ 425.378888][ T12] bridge_slave_0: left promiscuous mode [ 425.379150][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.479596][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.002013][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.174760][ T12] bridge_slave_1: left allmulticast mode [ 426.174781][ T12] bridge_slave_1: left promiscuous mode [ 426.174931][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.701469][ T12] bridge_slave_0: left allmulticast mode [ 426.701502][ T12] bridge_slave_0: left promiscuous mode [ 426.701741][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.932660][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 427.088842][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 427.088870][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.108317][ T9] usb 3-1: config 0 descriptor?? [ 427.118208][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.214827][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.280324][ T12] bond0 (unregistering): Released all slaves [ 427.328042][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.329287][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.592001][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.650760][ T12] bond0 (unregistering): Released all slaves [ 427.721243][ T7689] team0: Port device team_slave_0 added [ 427.801086][ T7689] team0: Port device team_slave_1 added [ 428.720502][ T9] usb 3-1: Cannot read MAC address [ 428.720747][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 429.208047][ T9] usb 3-1: USB disconnect, device number 8 [ 429.324804][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.435755][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.435769][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.435791][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.651564][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.651580][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.651603][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.140088][ T7669] hsr_slave_0: entered promiscuous mode [ 430.148941][ T7669] hsr_slave_1: entered promiscuous mode [ 430.151106][ T7669] debugfs: 'hsr0' already exists in 'hsr' [ 430.152233][ T7669] Cannot create hsr debugfs directory [ 431.690475][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.914306][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.087824][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.976006][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.120371][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.712555][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 433.877381][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 433.877408][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.032900][ T9] usb 3-1: config 0 descriptor?? [ 434.334309][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.339986][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.631629][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.360409][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.243078][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.271061][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.675571][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.054416][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.395194][ T8027] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 439.104472][ T9] usb 3-1: Cannot read MAC address [ 439.106268][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 439.122918][ T9] usb 3-1: USB disconnect, device number 9 [ 440.046579][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.080787][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.193379][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.305790][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.326066][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.326140][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.399702][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.426024][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.876072][ T7689] hsr_slave_0: entered promiscuous mode [ 440.913182][ T7689] hsr_slave_1: entered promiscuous mode [ 440.918289][ T7689] debugfs: 'hsr0' already exists in 'hsr' [ 440.918315][ T7689] Cannot create hsr debugfs directory [ 441.873241][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.018829][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.876508][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.172732][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.661463][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.286242][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.782775][ T8069] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 446.053172][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.234083][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.239034][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.240268][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.251556][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.264625][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.285049][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 446.658999][ T5904] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 446.659080][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.779333][ T5904] usb 2-1: config 0 descriptor?? [ 447.003011][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.038848][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.059839][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.320802][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 447.354826][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 447.360390][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 447.382875][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 447.383802][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 447.791898][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.146519][ T5904] usb 2-1: Cannot read MAC address [ 448.146775][ T5904] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 448.289849][ T5904] usb 2-1: USB disconnect, device number 6 [ 448.512461][ T5848] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 448.672385][ T5848] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 448.672413][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.672429][ T5848] usb 3-1: Product: syz [ 448.672441][ T5848] usb 3-1: Manufacturer: syz [ 448.672452][ T5848] usb 3-1: SerialNumber: syz [ 448.752003][ T5848] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 448.752077][ T5848] usb 3-1: setting power ON [ 448.752094][ T5848] dvb-usb: bulk message failed: -22 (2/0) [ 448.814047][ T5848] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 448.839887][ T5848] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 448.840171][ T5848] dvb_usb_cxusb 3-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 448.932895][ T5841] Bluetooth: hci0: command tx timeout [ 449.986038][ T5841] Bluetooth: hci6: command tx timeout [ 450.558511][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.717415][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.464559][ T992] usb 3-1: USB disconnect, device number 10 [ 451.707585][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.817996][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.855892][ T5841] Bluetooth: hci0: command tx timeout [ 452.079498][ T5841] Bluetooth: hci6: command tx timeout [ 452.775478][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.932741][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.079794][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.902429][ T5841] Bluetooth: hci0: command tx timeout [ 454.219202][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 454.391545][ T5841] Bluetooth: hci6: command tx timeout [ 454.408212][ T12] bridge_slave_1: left allmulticast mode [ 454.408246][ T12] bridge_slave_1: left promiscuous mode [ 454.408523][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.862598][ T12] bridge_slave_0: left allmulticast mode [ 454.862630][ T12] bridge_slave_0: left promiscuous mode [ 454.862884][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.870609][ T5925] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 454.870625][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.901217][ T5925] usb 1-1: config 0 descriptor?? [ 455.011034][ T12] bridge_slave_1: left allmulticast mode [ 455.014332][ T12] bridge_slave_1: left promiscuous mode [ 455.016053][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.186366][ T12] bridge_slave_0: left allmulticast mode [ 455.186396][ T12] bridge_slave_0: left promiscuous mode [ 455.186641][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.197893][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.200157][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.210182][ T8139] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 455.972518][ T5841] Bluetooth: hci0: command tx timeout [ 456.145111][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.162572][ T5848] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 456.339981][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.361971][ T5848] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 456.361997][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.362014][ T5848] usb 2-1: Product: syz [ 456.362026][ T5848] usb 2-1: Manufacturer: syz [ 456.362038][ T5848] usb 2-1: SerialNumber: syz [ 456.431739][ T5848] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 456.431792][ T5848] usb 2-1: setting power ON [ 456.431809][ T5848] dvb-usb: bulk message failed: -22 (2/0) [ 456.452495][ T5841] Bluetooth: hci6: command tx timeout [ 456.470423][ T5848] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 456.494223][ T12] bond0 (unregistering): Released all slaves [ 456.513722][ T5848] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 456.514000][ T5848] dvb_usb_cxusb 2-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 457.056976][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.133289][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.197642][ T12] bond0 (unregistering): Released all slaves [ 457.577548][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.900770][ T5925] usb 1-1: Cannot read MAC address [ 457.901064][ T5925] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 458.474747][ T5925] usb 1-1: USB disconnect, device number 5 [ 459.544693][ T8080] chnl_net:caif_netlink_parms(): no params data found [ 459.548499][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.646950][ T5848] usb 2-1: USB disconnect, device number 7 [ 461.340284][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.032675][ T12] hsr_slave_0: left promiscuous mode [ 462.053672][ T12] hsr_slave_1: left promiscuous mode [ 462.054566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.084224][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.175900][ T12] hsr_slave_0: left promiscuous mode [ 462.217709][ T12] hsr_slave_1: left promiscuous mode [ 462.218703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.236627][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.984935][ T5904] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 463.157852][ T5904] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 463.157879][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.174660][ T5904] usb 3-1: config 0 descriptor?? [ 463.396986][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.403302][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.804750][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.715365][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.204504][ T12] team0 (unregistering): Port device team_slave_1 removed [ 465.493692][ T12] team0 (unregistering): Port device team_slave_0 removed [ 465.840319][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.093409][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.507007][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.935546][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.494458][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.501605][ T5904] usb 3-1: Cannot read MAC address [ 468.501873][ T5904] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 469.603970][ T12] team0 (unregistering): Port device team_slave_1 removed [ 470.283937][ T12] team0 (unregistering): Port device team_slave_0 removed [ 470.451286][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.600797][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.225723][ T8082] chnl_net:caif_netlink_parms(): no params data found [ 473.534597][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.077526][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.501015][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.668662][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.737843][ T5848] usb 3-1: USB disconnect, device number 11 [ 475.164082][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.108522][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.293604][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.943932][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.944074][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.944315][ T8080] bridge_slave_0: entered allmulticast mode [ 476.948674][ T8080] bridge_slave_0: entered promiscuous mode [ 477.004540][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.004681][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.004875][ T8080] bridge_slave_1: entered allmulticast mode [ 477.007579][ T8080] bridge_slave_1: entered promiscuous mode [ 477.553007][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.667031][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.303085][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.588559][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.107596][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.490810][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.688727][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.692670][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.692788][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.692964][ T8082] bridge_slave_0: entered allmulticast mode [ 479.703032][ T8082] bridge_slave_0: entered promiscuous mode [ 479.724284][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.724850][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.724981][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.725158][ T8082] bridge_slave_1: entered allmulticast mode [ 479.727787][ T8082] bridge_slave_1: entered promiscuous mode [ 481.507347][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.533897][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.391016][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.640775][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.212265][ T8080] team0: Port device team_slave_0 added [ 483.573997][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.578129][ T8080] team0: Port device team_slave_1 added [ 483.598964][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.475913][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.308955][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.341543][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.580018][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.253802][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.253818][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.253842][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.351304][ T8082] team0: Port device team_slave_0 added [ 486.507156][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.535388][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.213014][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.213030][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.213054][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.299207][ T8082] team0: Port device team_slave_1 added [ 487.616459][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.988096][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.037380][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.051895][ T5925] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 489.505461][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.786464][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.472876][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.622999][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.657978][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.837148][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.837159][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.837173][ T8082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.104562][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.852810][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.305850][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.305861][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.305875][ T8082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.561829][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.710378][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.291810][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.272080][ T8080] hsr_slave_0: entered promiscuous mode [ 494.279841][ T8080] hsr_slave_1: entered promiscuous mode [ 494.280880][ T8080] debugfs: 'hsr0' already exists in 'hsr' [ 494.280903][ T8080] Cannot create hsr debugfs directory [ 494.375170][ T8402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.524783][ T4464] Bluetooth: hci4: Frame reassembly failed (-84) [ 494.791528][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.605542][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.816558][ T8082] hsr_slave_0: entered promiscuous mode [ 495.839616][ T8082] hsr_slave_1: entered promiscuous mode [ 495.840588][ T8082] debugfs: 'hsr0' already exists in 'hsr' [ 495.840610][ T8082] Cannot create hsr debugfs directory [ 495.867990][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.908058][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.934959][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.560419][ T5841] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 497.970588][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.034613][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.978040][ T8414] Falling back ldisc for ttyS3. [ 501.335471][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.304101][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.304205][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.305792][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.578801][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.282815][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.338096][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.504222][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.530157][ T5925] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 505.152580][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 505.156873][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.156898][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 505.156928][ T5925] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 505.157788][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.225694][ T5925] usb 2-1: config 0 descriptor?? [ 505.246634][ T5925] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 505.456987][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.562505][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.723425][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 505.747882][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 505.811224][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.835758][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.837658][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.863416][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.865721][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.906232][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 505.927248][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 505.928105][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.839263][ T9] usb 2-1: USB disconnect, device number 9 [ 506.984254][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.905530][ T5843] Bluetooth: hci5: command tx timeout [ 508.212533][ T5843] Bluetooth: hci4: command tx timeout [ 508.501195][ T52] bridge_slave_1: left allmulticast mode [ 508.501227][ T52] bridge_slave_1: left promiscuous mode [ 508.501500][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.659906][ T52] bridge_slave_0: left allmulticast mode [ 508.659945][ T52] bridge_slave_0: left promiscuous mode [ 508.660278][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.243130][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.383993][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.459845][ T52] bond0 (unregistering): Released all slaves [ 509.983048][ T5843] Bluetooth: hci5: command tx timeout [ 510.292432][ T5843] Bluetooth: hci4: command tx timeout [ 510.462681][ T52] hsr_slave_0: left promiscuous mode [ 510.502507][ T52] hsr_slave_1: left promiscuous mode [ 510.503586][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.541437][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.027963][ T8493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.175723][ T1118] Bluetooth: hci0: Frame reassembly failed (-84) [ 512.182339][ T5841] Bluetooth: hci5: command tx timeout [ 512.372517][ T5841] Bluetooth: hci4: command tx timeout [ 512.525178][ T52] team0 (unregistering): Port device team_slave_1 removed [ 512.740641][ T52] team0 (unregistering): Port device team_slave_0 removed [ 513.162911][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.199758][ T5843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 513.374991][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.428862][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.772271][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.212565][ T5843] Bluetooth: hci5: command tx timeout [ 514.325474][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.430500][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.462508][ T5843] Bluetooth: hci4: command tx timeout [ 514.934595][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.300309][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.350667][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.711837][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.756949][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.671544][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.705511][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.982498][ T5848] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 518.145709][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 518.149766][ T5848] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.149792][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 518.149825][ T5848] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 518.149844][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.174508][ T5848] usb 1-1: config 0 descriptor?? [ 518.188112][ T5848] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 518.554354][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.750110][ T8536] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 519.487377][ T8542] 9pnet_fd: Insufficient options for proto=fd [ 519.737763][ T5848] usb 1-1: USB disconnect, device number 6 [ 519.781848][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 522.492754][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.521358][ T8559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.699545][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.351082][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.394564][ T6060] Bluetooth: hci0: Frame reassembly failed (-84) [ 523.511499][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.575906][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 524.006696][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.554425][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.109689][ T8593] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 525.173036][ T5841] Bluetooth: hci0: command 0x1003 tx timeout [ 525.173382][ T5843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 525.694086][ T8597] 9pnet_fd: Insufficient options for proto=fd [ 525.982631][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.982858][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.983069][ T8452] bridge_slave_0: entered allmulticast mode [ 525.985858][ T8452] bridge_slave_0: entered promiscuous mode [ 526.057429][ T52] bridge_slave_1: left allmulticast mode [ 526.057467][ T52] bridge_slave_1: left promiscuous mode [ 526.057721][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.179479][ T52] bridge_slave_0: left allmulticast mode [ 526.179512][ T52] bridge_slave_0: left promiscuous mode [ 526.220193][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.617165][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.232327][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.413810][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.462553][ T5843] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 528.486653][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.862116][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.158937][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.160107][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.267919][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.884067][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.050247][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.302399][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.438415][ T8644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.544760][ T79] Bluetooth: hci0: Frame reassembly failed (-84) [ 531.600088][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.807040][ T52] bond0 (unregistering): Released all slaves [ 531.997260][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.023852][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.023991][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.024213][ T8452] bridge_slave_1: entered allmulticast mode [ 532.067898][ T8452] bridge_slave_1: entered promiscuous mode [ 532.286470][ T8649] 9pnet_fd: Insufficient options for proto=fd [ 532.377037][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.283284][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.419770][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.584121][ T5843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 533.763033][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.105702][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.716478][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.605034][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.543105][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.577709][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.794247][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.835041][ T992] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 536.863378][ T52] hsr_slave_0: left promiscuous mode [ 536.905071][ T52] hsr_slave_1: left promiscuous mode [ 536.906122][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.971369][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.982510][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 536.987313][ T992] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.987338][ T992] usb 3-1: config 0 interface 0 has no altsetting 0 [ 536.987369][ T992] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 536.987389][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.021738][ T992] usb 3-1: config 0 descriptor?? [ 537.050827][ T992] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 537.423295][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.668186][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.263359][ T52] team0 (unregistering): Port device team_slave_1 removed [ 538.536210][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.541302][ T5925] usb 3-1: USB disconnect, device number 12 [ 538.743271][ T52] team0 (unregistering): Port device team_slave_0 removed [ 539.230003][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.287337][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.637744][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.782059][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.358501][ T8699] 9pnet_fd: Insufficient options for proto=fd [ 541.139870][ T5843] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 541.798238][ T8713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.836345][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.836568][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.836807][ T8450] bridge_slave_0: entered allmulticast mode [ 541.869635][ T8450] bridge_slave_0: entered promiscuous mode [ 541.899192][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.952749][ T159] Bluetooth: hci0: Frame reassembly failed (-84) [ 541.962989][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.963129][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.963342][ T8450] bridge_slave_1: entered allmulticast mode [ 541.966038][ T8450] bridge_slave_1: entered promiscuous mode [ 542.928905][ T8452] team0: Port device team_slave_0 added [ 542.945801][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.078831][ T8452] team0: Port device team_slave_1 added [ 543.108570][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.976878][ T5843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 544.283586][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.283602][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.283627][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.286356][ T8450] team0: Port device team_slave_0 added [ 544.290702][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.290712][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.290726][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.392727][ T8450] team0: Port device team_slave_1 added [ 545.677108][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.713958][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.225747][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.535949][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.976593][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.976604][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.976619][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.192827][ T8452] hsr_slave_0: entered promiscuous mode [ 547.193706][ T8452] hsr_slave_1: entered promiscuous mode [ 547.194197][ T8452] debugfs: 'hsr0' already exists in 'hsr' [ 547.194212][ T8452] Cannot create hsr debugfs directory [ 547.198066][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.198079][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.198108][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.601864][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.467989][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.714791][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.246192][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.311714][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.991158][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.153650][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.243415][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.287281][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.737600][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.400152][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.692014][ T8807] 9pnet_fd: Insufficient options for proto=fd [ 555.928161][ T8450] hsr_slave_0: entered promiscuous mode [ 555.929485][ T8450] hsr_slave_1: entered promiscuous mode [ 555.930328][ T8450] debugfs: 'hsr0' already exists in 'hsr' [ 555.930358][ T8450] Cannot create hsr debugfs directory [ 556.322653][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.526982][ T8821] futex_wake_op: syz.1.631 tries to shift op by 36; fix this program [ 556.551539][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.596947][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.906007][ T5840] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 557.309318][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.686909][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.294011][ T5840] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 558.294038][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.294056][ T5840] usb 1-1: Product: syz [ 558.294067][ T5840] usb 1-1: Manufacturer: syz [ 558.294080][ T5840] usb 1-1: SerialNumber: syz [ 558.416326][ T5840] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 558.416373][ T5840] usb 1-1: setting power ON [ 558.416392][ T5840] dvb-usb: bulk message failed: -22 (2/0) [ 558.448310][ T5840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 558.463999][ T5840] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 558.464273][ T5840] dvb_usb_cxusb 1-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 559.138925][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.831922][ T8837] 9pnet_fd: Insufficient options for proto=fd [ 560.234290][ T9] usb 1-1: USB disconnect, device number 7 [ 560.262535][ T5848] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 560.417570][ T5848] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 560.417596][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.465726][ T8452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 560.472035][ T5848] usb 2-1: config 0 descriptor?? [ 560.584657][ T8452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 560.627228][ T8452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 560.692846][ T8839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.694742][ T8839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.720823][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'. [ 560.978649][ T8452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 561.177858][ T5848] usb 2-1: Cannot read MAC address [ 561.178122][ T5848] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 561.221307][ T5848] usb 2-1: USB disconnect, device number 10 [ 561.685792][ T8450] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 562.253308][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.317888][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.840581][ T8450] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.891043][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.974925][ T8450] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 563.000003][ T8450] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 563.100972][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.101063][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.806487][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.357347][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.380411][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.062601][ T1938] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 565.242934][ T1938] usb 2-1: Using ep0 maxpacket: 16 [ 565.245924][ T1938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.245950][ T1938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 565.245981][ T1938] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 565.246002][ T1938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.548592][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.576825][ T1938] usb 2-1: config 0 descriptor?? [ 565.596029][ T1938] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 565.713722][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.535518][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.836589][ T5840] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 566.982925][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 566.989928][ T5840] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.989977][ T5840] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.990018][ T5840] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 566.990038][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.202963][ T5840] usb 3-1: config 0 descriptor?? [ 567.211126][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 567.225202][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 567.226571][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 567.227738][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 567.228491][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 567.574540][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.639366][ T5840] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 567.770904][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 567.793744][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 567.798851][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 567.838774][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 567.852020][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 568.716067][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.745700][ T5840] usb 3-1: USB disconnect, device number 13 [ 569.652792][ T5841] Bluetooth: hci0: command tx timeout [ 569.802435][ T5840] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 569.945283][ T5925] usb 2-1: USB disconnect, device number 11 [ 569.973204][ T5840] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 569.973231][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.973249][ T5840] usb 1-1: Product: syz [ 569.973261][ T5840] usb 1-1: Manufacturer: syz [ 569.973274][ T5840] usb 1-1: SerialNumber: syz [ 570.010351][ T5841] Bluetooth: hci4: command tx timeout [ 570.070645][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.136287][ T5840] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 570.136345][ T5840] usb 1-1: setting power ON [ 570.136364][ T5840] dvb-usb: bulk message failed: -22 (2/0) [ 570.174424][ T5840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 570.194925][ T5840] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 570.195209][ T5840] dvb_usb_cxusb 1-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 571.741774][ T5841] Bluetooth: hci0: command tx timeout [ 572.055841][ T5841] Bluetooth: hci4: command tx timeout [ 573.009921][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.091520][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.703360][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.734664][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.930784][ T5841] Bluetooth: hci0: command tx timeout [ 573.931040][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.963042][ T992] usb 1-1: USB disconnect, device number 8 [ 574.036104][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.286256][ T5841] Bluetooth: hci4: command tx timeout [ 574.437253][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.460016][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.320358][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.488176][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.975614][ T5841] Bluetooth: hci0: command tx timeout [ 575.978744][ T12] bridge_slave_1: left allmulticast mode [ 575.978763][ T12] bridge_slave_1: left promiscuous mode [ 575.978922][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.073398][ T12] bridge_slave_0: left allmulticast mode [ 576.073420][ T12] bridge_slave_0: left promiscuous mode [ 576.073623][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.078295][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 576.079976][ T8920] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 576.234144][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.426155][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.202339][ T5841] Bluetooth: hci4: command tx timeout [ 577.289837][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.330149][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.992834][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.033274][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.070149][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.226437][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.497044][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.738672][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 578.783851][ T8936] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 579.414068][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.774662][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.812444][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.847450][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.999768][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.873707][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.205217][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.282543][ T1938] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 581.633158][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.406573][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.473971][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.522412][ T1938] usb 3-1: Using ep0 maxpacket: 16 [ 583.524607][ T1938] usb 3-1: device descriptor read/all, error -71 [ 583.665210][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.817869][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.749948][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.974400][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.997010][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.181609][ T8972] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 585.403151][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.530058][ T12] bond0 (unregistering): Released all slaves [ 585.919203][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.235118][ T12] hsr_slave_0: left promiscuous mode [ 586.266120][ T12] hsr_slave_1: left promiscuous mode [ 586.266915][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.303209][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.190161][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 587.191358][ T8986] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 588.191064][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 588.195521][ T8989] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 589.392970][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.562720][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.841088][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.910992][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.058661][ T12] team0 (unregistering): Port device team_slave_1 removed [ 591.235895][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.994042][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.142837][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 592.143980][ T8997] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 592.650839][ T9006] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 592.871136][ T12] team0 (unregistering): Port device team_slave_0 removed [ 592.960722][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.326837][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.580692][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.847806][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.491009][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.512824][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.749747][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.053371][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.115948][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.722678][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.808622][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.951534][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.954777][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 595.956838][ T9015] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 596.254693][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 598.238306][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 598.279063][ T8883] chnl_net:caif_netlink_parms(): no params data found [ 598.743832][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.784327][ T9041] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 599.630249][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.703972][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.981851][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.052046][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.580624][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.742621][ T1938] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 601.906568][ T1938] usb 1-1: Using ep0 maxpacket: 16 [ 602.041439][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.092125][ T1938] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.092153][ T1938] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.092184][ T1938] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 602.092202][ T1938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.179152][ T1938] usb 1-1: config 0 descriptor?? [ 602.195023][ T1938] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 602.515074][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.559900][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.838747][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.092510][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 608.141187][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 608.175208][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.193763][ T992] usb 1-1: USB disconnect, device number 9 [ 608.507982][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.527942][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 609.002971][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.274052][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.361475][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.444255][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.606170][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.606251][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.606366][ T8881] bridge_slave_0: entered allmulticast mode [ 610.648783][ T8881] bridge_slave_0: entered promiscuous mode [ 610.692474][ T992] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 610.695206][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.695356][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.696282][ T8883] bridge_slave_0: entered allmulticast mode [ 610.734201][ T8883] bridge_slave_0: entered promiscuous mode [ 612.596737][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.643297][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.643379][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.643590][ T8881] bridge_slave_1: entered allmulticast mode [ 612.647162][ T8881] bridge_slave_1: entered promiscuous mode [ 613.262507][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 613.608595][ T992] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.608617][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 613.608637][ T992] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 613.608649][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.841846][ T9094] Falling back ldisc for ttyS3. [ 614.969040][ T992] usb 1-1: config 0 descriptor?? [ 614.993465][ T992] usb 1-1: can't set config #0, error -71 [ 614.996517][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.996637][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.996844][ T8883] bridge_slave_1: entered allmulticast mode [ 615.051041][ T992] usb 1-1: USB disconnect, device number 10 [ 615.119953][ T8883] bridge_slave_1: entered promiscuous mode [ 616.274860][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.309670][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.970928][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.142734][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.197021][ T8883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.230731][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.260178][ T8883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.647542][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.674535][ T8881] team0: Port device team_slave_0 added [ 618.681045][ T8883] team0: Port device team_slave_0 added [ 619.627858][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.716708][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.882475][ T5904] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 620.032527][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 620.034956][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.034982][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 620.035014][ T5904] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 620.035035][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.085521][ T5904] usb 3-1: config 0 descriptor?? [ 620.091353][ T5904] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 620.280787][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.320130][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.549752][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.613337][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.232388][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.333657][ T8881] team0: Port device team_slave_1 added [ 621.337413][ T8883] team0: Port device team_slave_1 added [ 621.393122][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.750516][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.329912][ T31] usb 3-1: USB disconnect, device number 16 [ 624.553928][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.564368][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.261162][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.025368][ T8883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.025384][ T8883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.025409][ T8883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.573405][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.590081][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.591616][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.599893][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.601187][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.674652][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.767724][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 627.023303][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.412567][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 628.645871][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.853515][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.911142][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.958589][ T5841] Bluetooth: hci0: command tx timeout [ 629.360447][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 629.373146][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 629.375702][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 629.377940][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 629.380169][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.608343][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.701023][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.012678][ T5841] Bluetooth: hci0: command tx timeout [ 631.492434][ T5841] Bluetooth: hci4: command tx timeout [ 631.620709][ T9171] futex_wake_op: syz.2.712 tries to shift op by 36; fix this program [ 631.919656][ T12] bridge_slave_1: left allmulticast mode [ 631.919678][ T12] bridge_slave_1: left promiscuous mode [ 631.919833][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.019861][ T12] bridge_slave_0: left allmulticast mode [ 632.019892][ T12] bridge_slave_0: left promiscuous mode [ 632.020155][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.115439][ T5841] Bluetooth: hci0: command tx timeout [ 633.573172][ T5841] Bluetooth: hci4: command tx timeout [ 634.204198][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.382158][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.526189][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.637148][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.753126][ T12] bond0 (unregistering): Released all slaves [ 634.983775][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.130786][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.356015][ T5841] Bluetooth: hci0: command tx timeout [ 635.653140][ T5841] Bluetooth: hci4: command tx timeout [ 635.911206][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.073601][ T8933] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 636.243040][ T9132] chnl_net:caif_netlink_parms(): no params data found [ 636.413647][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.442397][ T8933] usb 2-1: Using ep0 maxpacket: 16 [ 636.446139][ T8933] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.446167][ T8933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 636.446199][ T8933] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 636.446218][ T8933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.522857][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.532678][ T8933] usb 2-1: config 0 descriptor?? [ 636.597990][ T8933] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 636.715826][ T9158] chnl_net:caif_netlink_parms(): no params data found [ 636.771199][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.065642][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.084955][ T12] hsr_slave_0: left promiscuous mode [ 637.154299][ T12] hsr_slave_1: left promiscuous mode [ 637.157119][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.215623][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.463948][ T9210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 639.971400][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.990249][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.900898][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.936246][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.982062][ T49] usb 2-1: USB disconnect, device number 12 [ 641.997961][ T5843] Bluetooth: hci4: command tx timeout [ 644.372400][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.587977][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.615143][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.365703][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.573368][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.854009][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.052614][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 646.173234][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 646.223683][ T9225] futex_wake_op: syz.1.721 tries to shift op by 36; fix this program [ 646.350309][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 646.350337][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.365493][ T10] usb 1-1: config 0 descriptor?? [ 646.589052][ T9223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.599899][ T9223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.640570][ T9223] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 646.685501][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.979575][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.367750][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.403856][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.856869][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.122622][ T49] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 648.290811][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.291839][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 648.306742][ T49] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.306768][ T49] usb 3-1: config 0 interface 0 has no altsetting 0 [ 648.306799][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 648.306820][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.354967][ T49] usb 3-1: config 0 descriptor?? [ 648.384738][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 648.463401][ T12] team0 (unregistering): Port device team_slave_1 removed [ 648.583489][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.750222][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.803720][ T12] team0 (unregistering): Port device team_slave_0 removed [ 649.878489][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.883596][ T8933] usb 3-1: USB disconnect, device number 17 [ 650.267487][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.294051][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.603544][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.371543][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.770797][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.847458][ T10] usb 1-1: Cannot read MAC address [ 651.847736][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 651.857717][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.096437][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 652.253099][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 652.257073][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.257098][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 652.257130][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 652.257151][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.319066][ T10] usb 2-1: config 0 descriptor?? [ 652.392925][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 652.634269][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.878648][ T49] usb 1-1: USB disconnect, device number 11 [ 652.997289][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.746591][ T10] usb 2-1: USB disconnect, device number 13 [ 653.984576][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.985506][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.985952][ T9132] bridge_slave_0: entered allmulticast mode [ 654.035078][ T9132] bridge_slave_0: entered promiscuous mode [ 654.366815][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.366894][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.367029][ T9132] bridge_slave_1: entered allmulticast mode [ 654.374060][ T9132] bridge_slave_1: entered promiscuous mode [ 654.444277][ T9266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.942903][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.345151][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.620789][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.644322][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.334971][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.347453][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.611651][ T9276] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 659.045253][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.386977][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.684974][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.685105][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.685238][ T9158] bridge_slave_0: entered allmulticast mode [ 659.691615][ T9158] bridge_slave_0: entered promiscuous mode [ 659.948168][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.948264][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.948416][ T9158] bridge_slave_1: entered allmulticast mode [ 659.979564][ T9158] bridge_slave_1: entered promiscuous mode [ 659.993140][ T9132] team0: Port device team_slave_0 added [ 661.109637][ T9132] team0: Port device team_slave_1 added [ 661.752747][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.816587][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.327959][ T37] audit: type=1326 audit(1756593915.395:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9305 comm="syz.0.743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8dfdbebe9 code=0x0 [ 663.407421][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.776748][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.779737][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.779752][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.779775][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.001877][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.001889][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.001903][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.399398][ T9315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.589813][ T9158] team0: Port device team_slave_0 added [ 668.629847][ T9158] team0: Port device team_slave_1 added [ 668.630323][ T12] bridge_slave_1: left allmulticast mode [ 668.630341][ T12] bridge_slave_1: left promiscuous mode [ 668.630527][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.766438][ T12] bridge_slave_0: left allmulticast mode [ 668.766466][ T12] bridge_slave_0: left promiscuous mode [ 668.782864][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.166098][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.216641][ T12] bridge_slave_1: left allmulticast mode [ 669.216662][ T12] bridge_slave_1: left promiscuous mode [ 669.216820][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.379180][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.405741][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.088524][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.258101][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.284470][ T12] bridge_slave_0: left allmulticast mode [ 670.284500][ T12] bridge_slave_0: left promiscuous mode [ 670.291790][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.831972][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.024803][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.215652][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.282665][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.515937][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.560358][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.753240][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.916381][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.018895][ T12] bond0 (unregistering): Released all slaves [ 673.606485][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.923390][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.698974][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.728909][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.092137][ T12] bond0 (unregistering): Released all slaves [ 675.347447][ T9362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.403726][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.208074][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.208085][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.208099][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.363810][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.363822][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.363837][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.384348][ T9132] hsr_slave_0: entered promiscuous mode [ 682.385910][ T9132] hsr_slave_1: entered promiscuous mode [ 682.386770][ T9132] debugfs: 'hsr0' already exists in 'hsr' [ 682.386794][ T9132] Cannot create hsr debugfs directory [ 682.613276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.985907][ T12] team0 (unregistering): Port device team_slave_1 removed [ 683.276698][ T12] team0 (unregistering): Port device team_slave_0 removed [ 683.572838][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 683.904085][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.939455][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.149114][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.458930][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 685.510755][ T9377] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 685.899927][ T12] team0 (unregistering): Port device team_slave_1 removed [ 686.026213][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.646181][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.646256][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.973732][ T12] team0 (unregistering): Port device team_slave_0 removed [ 688.145047][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.900925][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.046541][ T9402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.497309][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.979856][ T1118] Bluetooth: hci5: Frame reassembly failed (-84) [ 691.128818][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.163849][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.634946][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 691.671321][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 691.691864][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 691.732824][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 691.749136][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 691.757422][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 692.526819][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.022514][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.113313][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 693.121002][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.156142][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.498797][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.734139][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.974468][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.976336][ T5837] Bluetooth: hci6: command tx timeout [ 695.267526][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.049431][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 696.065704][ T5843] Bluetooth: hci6: command tx timeout [ 696.078567][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.107595][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.112842][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.113700][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.929905][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.015516][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.109433][ T9440] mkiss: ax0: crc mode is auto. [ 698.132633][ T5841] Bluetooth: hci6: command tx timeout [ 698.224605][ T5841] Bluetooth: hci0: command tx timeout [ 698.551399][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.966819][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.004407][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.329581][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.587847][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.814160][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.040292][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.449271][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.591057][ T5841] Bluetooth: hci6: command tx timeout [ 700.591090][ T5841] Bluetooth: hci0: command tx timeout [ 701.033679][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.012318][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.037744][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.583695][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.693103][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.265777][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.272061][ T5837] Bluetooth: hci0: command tx timeout [ 703.339230][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.584916][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.809069][ T9404] chnl_net:caif_netlink_parms(): no params data found [ 705.647940][ T5837] Bluetooth: hci0: command tx timeout [ 706.178615][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.930728][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.429075][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.016100][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.041300][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.351047][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.594853][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.564298][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.306861][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.335416][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.556962][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.678240][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.143504][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.437786][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.810567][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.938485][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.185027][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.382715][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.204372][ T9404] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.204562][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.204771][ T9404] bridge_slave_0: entered allmulticast mode [ 713.239882][ T9404] bridge_slave_0: entered promiscuous mode [ 713.447718][ T12] bridge_slave_1: left allmulticast mode [ 713.447750][ T12] bridge_slave_1: left promiscuous mode [ 713.447995][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.710239][ T12] bridge_slave_0: left allmulticast mode [ 713.710270][ T12] bridge_slave_0: left promiscuous mode [ 713.712706][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.941907][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.012779][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.937925][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.019906][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.099530][ T12] bridge_slave_1: left allmulticast mode [ 715.099563][ T12] bridge_slave_1: left promiscuous mode [ 715.099817][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.274988][ T12] bridge_slave_0: left allmulticast mode [ 715.275009][ T12] bridge_slave_0: left promiscuous mode [ 715.275189][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.440590][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.704967][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.752192][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.972945][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.685146][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.792475][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 717.800360][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.873000][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.948199][ T10] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 717.948216][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.948226][ T10] usb 2-1: Product: syz [ 717.948233][ T10] usb 2-1: Manufacturer: syz [ 717.948239][ T10] usb 2-1: SerialNumber: syz [ 717.980167][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 717.980220][ T10] usb 2-1: setting power ON [ 717.980238][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 718.029647][ T12] bond0 (unregistering): Released all slaves [ 718.087022][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 718.242958][ T10] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 718.243857][ T10] dvb_usb_cxusb 2-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 718.345971][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.944905][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.228666][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.326444][ T10] usb 2-1: USB disconnect, device number 14 [ 719.833131][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.920348][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.969272][ T9606] netlink: 300 bytes leftover after parsing attributes in process `syz.2.807'. [ 720.985780][ T9606] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 721.029348][ T12] bond0 (unregistering): Released all slaves [ 721.108719][ T9404] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.108803][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.108968][ T9404] bridge_slave_1: entered allmulticast mode [ 721.134670][ T9404] bridge_slave_1: entered promiscuous mode [ 721.998846][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.061914][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.193549][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.219860][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.756944][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.145028][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.220040][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.593145][ T9404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.662873][ T9404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.672989][ T9437] chnl_net:caif_netlink_parms(): no params data found [ 726.266763][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.295323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.775533][ T12] hsr_slave_0: left promiscuous mode [ 726.822470][ T12] hsr_slave_1: left promiscuous mode [ 726.823092][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.854260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.351651][ T9662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.565201][ T43] Bluetooth: hci4: Frame reassembly failed (-84) [ 728.417457][ T12] team0 (unregistering): Port device team_slave_1 removed [ 729.586677][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 730.260061][ T12] team0 (unregistering): Port device team_slave_0 removed [ 732.203919][ T12] team0 (unregistering): Port device team_slave_1 removed [ 732.414265][ T12] team0 (unregistering): Port device team_slave_0 removed [ 732.767429][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.641151][ T9673] netlink: 300 bytes leftover after parsing attributes in process `syz.1.823'. [ 733.671767][ T9673] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 733.825670][ T9657] smc: net device bond0 applied user defined pnetid SYZ0 [ 733.913046][ T9404] team0: Port device team_slave_0 added [ 733.921019][ T9404] team0: Port device team_slave_1 added [ 735.517352][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.579917][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.670889][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.790996][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.844084][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.045890][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.244413][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.281753][ T9404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.281769][ T9404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.281793][ T9404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.429507][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.603697][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.736734][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.939444][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.036109][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.089967][ T9404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.089979][ T9404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.089993][ T9404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.230214][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.871258][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.172138][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.181343][ T9722] netlink: 'syz.2.833': attribute type 4 has an invalid length. [ 738.181363][ T9722] netlink: 17 bytes leftover after parsing attributes in process `syz.2.833'. [ 739.015890][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.969141][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.553063][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.553209][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.553429][ T9437] bridge_slave_0: entered allmulticast mode [ 740.610210][ T9437] bridge_slave_0: entered promiscuous mode [ 741.859658][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.859795][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.860030][ T9437] bridge_slave_1: entered allmulticast mode [ 741.905571][ T9437] bridge_slave_1: entered promiscuous mode [ 745.971151][ T9754] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 745.971172][ T9754] netlink: 17 bytes leftover after parsing attributes in process `syz.0.843'. [ 748.596337][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.596412][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.672961][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 751.872342][ T9787] lo speed is unknown, defaulting to 1000 [ 751.921797][ T9787] lo speed is unknown, defaulting to 1000 [ 751.985348][ T9787] lo speed is unknown, defaulting to 1000 [ 752.725170][ T9787] infiniband sz1: set active [ 752.725198][ T9787] infiniband sz1: added lo [ 752.726309][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.755436][ T9787] sz1: rxe_create_cq: returned err = -12 [ 752.755624][ T9787] infiniband sz1: Couldn't create ib_mad CQ [ 752.755814][ T9787] infiniband sz1: Couldn't open port 1 [ 752.803359][ T9787] RDS/IB: sz1: added [ 752.804220][ T9787] smc: adding ib device sz1 with port count 1 [ 752.804611][ T9787] smc: ib device sz1 port 1 has pnetid [ 752.812628][ T9787] lo speed is unknown, defaulting to 1000 [ 752.824581][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.851135][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.864191][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 752.985339][ T9763] lo speed is unknown, defaulting to 1000 [ 752.986597][ T9763] lo speed is unknown, defaulting to 1000 [ 753.408887][ T9787] lo speed is unknown, defaulting to 1000 [ 753.639004][ T9792] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 753.736592][ T9787] lo speed is unknown, defaulting to 1000 [ 754.040748][ T9787] lo speed is unknown, defaulting to 1000 [ 754.360964][ T9787] lo speed is unknown, defaulting to 1000 [ 754.594286][ T9795] netlink: 'syz.2.850': attribute type 4 has an invalid length. [ 754.689195][ T9787] lo speed is unknown, defaulting to 1000 [ 754.762854][ T9796] netlink: 'syz.2.850': attribute type 4 has an invalid length. [ 755.016651][ T5837] Bluetooth: hci4: command tx timeout [ 756.654285][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 756.678727][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 756.681345][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 756.697833][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 756.708909][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 757.092608][ T5837] Bluetooth: hci4: command tx timeout [ 758.852434][ T5837] Bluetooth: hci5: command tx timeout [ 759.376938][ T5837] Bluetooth: hci4: command tx timeout [ 761.287039][ T5837] Bluetooth: hci5: command tx timeout [ 761.652366][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.861'. [ 761.972419][ T5837] Bluetooth: hci4: command tx timeout [ 762.276791][ T9858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 762.855273][ C1] ------------[ cut here ]------------ [ 762.855297][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 762.855349][ C1] Modules linked in: [ 762.855400][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 762.855456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.855490][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 762.855522][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 762.855541][ C1] RSP: 0000:ffffc90000a3f7a0 EFLAGS: 00010246 [ 762.855560][ C1] RAX: ffffffff88dc677b RBX: 0000000000000001 RCX: ffff88801c6b1dc0 [ 762.855582][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 762.855596][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 762.855611][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000005 [ 762.855627][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888034fd8e68 [ 762.855641][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 762.855660][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.855676][ C1] CR2: 0000001b31814ff8 CR3: 000000003fc60000 CR4: 00000000003526f0 [ 762.855695][ C1] Call Trace: [ 762.855703][ C1] [ 762.855732][ C1] ? __pfx_est_timer+0x10/0x10 [ 762.855770][ C1] call_timer_fn+0x17b/0x5f0 [ 762.855799][ C1] ? __pfx_est_timer+0x10/0x10 [ 762.855820][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 762.855844][ C1] ? call_timer_fn+0xbe/0x5f0 [ 762.855870][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 762.855907][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 762.855937][ C1] ? __pfx_est_timer+0x10/0x10 [ 762.855962][ C1] __run_timer_base+0x648/0x970 [ 762.856012][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 762.856060][ C1] run_timer_softirq+0xb7/0x180 [ 762.856087][ C1] handle_softirqs+0x22c/0x710 [ 762.856125][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 762.856165][ C1] run_ktimerd+0xcf/0x190 [ 762.856193][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 762.856220][ C1] ? schedule+0x91/0x360 [ 762.856254][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 762.856279][ C1] smpboot_thread_fn+0x542/0xa60 [ 762.856307][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 762.856343][ C1] kthread+0x711/0x8a0 [ 762.856378][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 762.856404][ C1] ? __pfx_kthread+0x10/0x10 [ 762.856441][ C1] ? __pfx_kthread+0x10/0x10 [ 762.856473][ C1] ret_from_fork+0x3f9/0x770 [ 762.856504][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 762.856539][ C1] ? __switch_to_asm+0x39/0x70 [ 762.856559][ C1] ? __switch_to_asm+0x33/0x70 [ 762.856582][ C1] ? __pfx_kthread+0x10/0x10 [ 762.856614][ C1] ret_from_fork_asm+0x1a/0x30 [ 762.856654][ C1] [ 762.856665][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 762.856681][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 762.856706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.856719][ C1] Call Trace: [ 762.856727][ C1] [ 762.856736][ C1] dump_stack_lvl+0x99/0x250 [ 762.856766][ C1] ? __asan_memcpy+0x40/0x70 [ 762.856790][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.856820][ C1] ? __pfx__printk+0x10/0x10 [ 762.856861][ C1] vpanic+0x281/0x750 [ 762.856890][ C1] ? __pfx__printk+0x10/0x10 [ 762.856913][ C1] ? __pfx_vpanic+0x10/0x10 [ 762.856942][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 762.856985][ C1] panic+0xb9/0xc0 [ 762.857013][ C1] ? __pfx_panic+0x10/0x10 [ 762.857062][ C1] __warn+0x31b/0x4b0 [ 762.857089][ C1] ? est_timer+0x6dc/0x9f0 [ 762.857115][ C1] ? est_timer+0x6dc/0x9f0 [ 762.857137][ C1] report_bug+0x2be/0x4f0 [ 762.857163][ C1] ? est_timer+0x6dc/0x9f0 [ 762.857186][ C1] ? est_timer+0x6dc/0x9f0 [ 762.857209][ C1] ? est_timer+0x6de/0x9f0 [ 762.857231][ C1] handle_bug+0x84/0x160 [ 762.857262][ C1] exc_invalid_op+0x1a/0x50 [ 762.857292][ C1] asm_exc_invalid_op+0x1a/0x20 [ 762.857313][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 762.857335][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 762.857354][ C1] RSP: 0000:ffffc90000a3f7a0 EFLAGS: 00010246 [ 762.857372][ C1] RAX: ffffffff88dc677b RBX: 0000000000000001 RCX: ffff88801c6b1dc0 [ 762.857388][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 762.857402][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 762.857417][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000005 [ 762.857433][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888034fd8e68 [ 762.857458][ C1] ? est_timer+0x6db/0x9f0 [ 762.857506][ C1] ? __pfx_est_timer+0x10/0x10 [ 762.857543][ C1] call_timer_fn+0x17b/0x5f0 [ 762.857575][ C1] ? __pfx_est_timer+0x10/0x10 [ 762.857595][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 762.857619][ C1] ? call_timer_fn+0xbe/0x5f0 [ 762.857646][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 762.857682][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 762.857711][ C1] ? __pfx_est_timer+0x10/0x10 [ 762.857736][ C1] __run_timer_base+0x648/0x970 [ 762.857781][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 762.857827][ C1] run_timer_softirq+0xb7/0x180 [ 762.857854][ C1] handle_softirqs+0x22c/0x710 [ 762.857892][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 762.857932][ C1] run_ktimerd+0xcf/0x190 [ 762.857960][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 762.857986][ C1] ? schedule+0x91/0x360 [ 762.858024][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 762.858049][ C1] smpboot_thread_fn+0x542/0xa60 [ 762.858076][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 762.858114][ C1] kthread+0x711/0x8a0 [ 762.858149][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 762.858174][ C1] ? __pfx_kthread+0x10/0x10 [ 762.858211][ C1] ? __pfx_kthread+0x10/0x10 [ 762.858244][ C1] ret_from_fork+0x3f9/0x770 [ 762.858274][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 762.858309][ C1] ? __switch_to_asm+0x39/0x70 [ 762.858328][ C1] ? __switch_to_asm+0x33/0x70 [ 762.858347][ C1] ? __pfx_kthread+0x10/0x10 [ 762.858379][ C1] ret_from_fork_asm+0x1a/0x30 [ 762.858419][ C1] [ 762.858718][ C1] Kernel Offset: disabled