last executing test programs: 22m41.499574804s ago: executing program 1 (id=1800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000005400), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 22m40.198951971s ago: executing program 1 (id=1802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 22m38.934953251s ago: executing program 1 (id=1804): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) 22m37.952678195s ago: executing program 1 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b61"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000005400), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 22m36.761281532s ago: executing program 1 (id=1816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) accept(r0, 0x0, 0x0) 22m35.625981826s ago: executing program 1 (id=1822): socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 22m20.297538628s ago: executing program 32 (id=1822): socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 21m32.095020102s ago: executing program 4 (id=2210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setresuid(0xee00, 0xee00, 0xee00) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r4 = dup(r3) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x68db, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 21m31.017907198s ago: executing program 4 (id=2213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x0, 0x7}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21m29.416943169s ago: executing program 4 (id=2223): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 21m28.684606759s ago: executing program 4 (id=2226): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpriority(0x1, 0x0) process_vm_writev(0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000740)=""/211, 0xd3}], 0x5, &(0x7f0000000380)=[{&(0x7f0000000840)=""/209, 0xd1}, {0x0}], 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) getgroups(0x0, 0x0) creat(0x0, 0xa1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) setregid(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 21m27.965133638s ago: executing program 4 (id=2229): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x40240, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c0002800800014036"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 21m21.04973563s ago: executing program 4 (id=2284): syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r0 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00000001", @ANYRES16], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="080001"], 0x90}}, 0x0) 21m5.953553813s ago: executing program 33 (id=2284): syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r0 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc00000001", @ANYRES16], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="080001"], 0x90}}, 0x0) 4m28.468772006s ago: executing program 3 (id=9109): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m26.40087088s ago: executing program 3 (id=9113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x807, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m22.487661102s ago: executing program 3 (id=9132): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x85, 0xfffffffb}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m22.225027027s ago: executing program 3 (id=9136): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(0x0, r0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 4m21.893748367s ago: executing program 3 (id=9143): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) close(r3) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 4m19.91689004s ago: executing program 3 (id=9145): r0 = socket$nl_route(0x10, 0x3, 0x0) tee(0xffffffffffffffff, r0, 0x0, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001d000bcc0000000000000000070000", @ANYRES32=r2, @ANYBLOB="000000000a000200aaaaaaaaaa0c00c00600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m19.787849486s ago: executing program 34 (id=9145): r0 = socket$nl_route(0x10, 0x3, 0x0) tee(0xffffffffffffffff, r0, 0x0, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001d000bcc0000000000000000070000", @ANYRES32=r2, @ANYBLOB="000000000a000200aaaaaaaaaa0c00c00600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m41.53211742s ago: executing program 2 (id=9268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0xa, 0x6, &(0x7f0000000080)={0xa, "b17b5452b3b94bce47509d00"}}) 3m38.763479568s ago: executing program 2 (id=9274): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}}, 0x20}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) timer_create(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3m38.428936969s ago: executing program 2 (id=9277): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c02", 0x5}, {&(0x7f0000002800)}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000c00)="ce90", 0x2}, {&(0x7f00000007c0)="f2e6", 0x2}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x4, 0x40000e3) 3m38.399479844s ago: executing program 2 (id=9278): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3m38.304802787s ago: executing program 2 (id=9279): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "94c408213d36be01d7000000000000e1100ad985544600", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m37.115246823s ago: executing program 2 (id=9282): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 3m21.197582718s ago: executing program 35 (id=9282): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 30.602502175s ago: executing program 5 (id=9714): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 5.724451448s ago: executing program 8 (id=9792): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xdc9d4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fsmount(0xffffffffffffffff, 0x0, 0x82) 4.892543469s ago: executing program 5 (id=9719): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x406, r1) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000800)=""/251, 0x0, 0x1000}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) 4.618529384s ago: executing program 5 (id=9794): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x4814) 4.352939365s ago: executing program 5 (id=9796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f00000002c0)={0xe, 0x0, 0xfffffffffffffff7, 0x6, 0x4006, 0x2, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 4.35264116s ago: executing program 8 (id=9797): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.230492004s ago: executing program 7 (id=9799): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) write$vga_arbiter(r0, &(0x7f0000000280), 0xf) 4.152244829s ago: executing program 7 (id=9800): r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)=0xb, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16, @ANYRESDEC=r0, @ANYBLOB], 0x8) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 4.129345941s ago: executing program 8 (id=9801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.774935341s ago: executing program 8 (id=9804): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 3.20876102s ago: executing program 5 (id=9806): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) setpriority(0x2, 0x0, 0xffffffffffffffcd) 2.628600354s ago: executing program 7 (id=9809): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r0, 0x8c343) 1.987736147s ago: executing program 6 (id=9813): 1.758274739s ago: executing program 6 (id=9814): epoll_create1(0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000000840)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x9, 0x24, 0x68, 0x0, 0x5, 0x21, 0x0, @empty, @loopback}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x6, "e3322c", 0x12, "f0431e"}}}}}}, 0x0) 1.580870673s ago: executing program 7 (id=9815): socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000600020001000000080005", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.466987375s ago: executing program 6 (id=9816): socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, 0x19, 0x0) 1.296481428s ago: executing program 6 (id=9817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 1.284036199s ago: executing program 7 (id=9818): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @local, 0x80000, 0x9, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 968.465896ms ago: executing program 7 (id=9819): r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)=0xb, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16, @ANYRESDEC=r0, @ANYBLOB], 0x8) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0) socket$kcm(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 898.443887ms ago: executing program 0 (id=9820): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x40010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4c050) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 662.485703ms ago: executing program 0 (id=9821): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000600)={0x0, 0xfa122, 0x60, {0x3, 0x103}, 0x0, 0x9}) 604.823855ms ago: executing program 8 (id=9822): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) write$vga_arbiter(r0, &(0x7f0000000280), 0xf) 535.095719ms ago: executing program 0 (id=9823): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 509.230073ms ago: executing program 8 (id=9824): syz_usb_connect(0x5, 0x44, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 357.272327ms ago: executing program 0 (id=9825): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 318.461754ms ago: executing program 6 (id=9826): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 100.864099ms ago: executing program 6 (id=9827): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 100.545332ms ago: executing program 5 (id=9828): socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, 0x19, 0x0) 84.448194ms ago: executing program 0 (id=9829): socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000600020001000000080005", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=9830): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) kernel console output (not intermixed with test programs): ce descriptor read/64, error -71 [ 1501.624279][T28592] tipc: Enabled bearer , priority 0 [ 1501.625056][T28592] syzkaller0: entered promiscuous mode [ 1501.625079][T28592] syzkaller0: entered allmulticast mode [ 1501.782908][T28591] tipc: Resetting bearer [ 1501.894988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1501.895892][ T1228] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1501.923429][T28591] tipc: Disabling bearer [ 1502.050946][ T1228] usb 3-1: device descriptor read/64, error -71 [ 1502.161179][ T1228] usb usb3-port1: attempt power cycle [ 1502.380406][T28607] kvm: kvm [28606]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1502.510988][ T1228] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1502.531723][ T1228] usb 3-1: device descriptor read/8, error -71 [ 1502.570660][ T5870] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1502.720625][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 1502.728683][ T5870] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 1502.728914][ T5870] usb 1-1: config 0 has no interface number 0 [ 1502.728994][ T5870] usb 1-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.729036][ T5870] usb 1-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.729089][ T5870] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1502.729124][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.789456][ T1228] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1502.807140][ T5870] usb 1-1: config 0 descriptor?? [ 1502.822167][ T1228] usb 3-1: device descriptor read/8, error -71 [ 1502.931703][ T1228] usb usb3-port1: unable to enumerate USB device [ 1503.331121][ T1228] usb 6-1: USB disconnect, device number 72 [ 1503.559859][ T31] usb 1-1: USB disconnect, device number 80 [ 1504.422691][T28636] tipc: Started in network mode [ 1504.422726][T28636] tipc: Node identity c2a28295672b, cluster identity 4711 [ 1504.422940][T28636] tipc: Enabled bearer , priority 0 [ 1504.429665][T28636] syzkaller0: entered promiscuous mode [ 1504.429690][T28636] syzkaller0: entered allmulticast mode [ 1504.587828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1504.682455][ C0] vkms_vblank_simulate: vblank timer overrun [ 1505.347302][ C0] vkms_vblank_simulate: vblank timer overrun [ 1505.430597][ T1228] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1505.450887][T28633] tipc: Resetting bearer [ 1505.560866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1505.592892][ T1228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1505.592929][ T1228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.592970][ T1228] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1505.592994][ T1228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.593613][T28633] tipc: Disabling bearer [ 1505.597990][ T1228] usb 6-1: config 0 descriptor?? [ 1505.600722][ T5990] tipc: Node number set to 2777252501 [ 1505.680685][ T31] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1505.830603][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 1505.832932][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.832957][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1505.836011][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1505.836039][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.836116][ T31] usb 3-1: Product: syz [ 1505.836134][ T31] usb 3-1: Manufacturer: syz [ 1505.836151][ T31] usb 3-1: SerialNumber: syz [ 1506.030292][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1506.038301][ T1228] usbhid 6-1:0.0: can't add hid device: -71 [ 1506.038561][ T1228] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1506.059062][ T1228] usb 6-1: USB disconnect, device number 73 [ 1506.111973][ T31] usb 3-1: 0:2 : does not exist [ 1506.136474][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1506.225956][ T31] usb 3-1: USB disconnect, device number 65 [ 1506.304846][T28236] udevd[28236]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.390638][T15684] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1506.460872][ T5990] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1506.520794][T15684] usb 4-1: device descriptor read/64, error -71 [ 1506.600647][ T5990] usb 7-1: device descriptor read/64, error -71 [ 1506.760663][T15684] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1506.860971][ T5990] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1506.875547][T28689] tipc: Enabled bearer , priority 0 [ 1506.876673][T28689] syzkaller0: entered promiscuous mode [ 1506.876701][T28689] syzkaller0: entered allmulticast mode [ 1506.880596][ T1228] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1506.890681][T15684] usb 4-1: device descriptor read/64, error -71 [ 1507.001145][T15684] usb usb4-port1: attempt power cycle [ 1507.023779][ T5990] usb 7-1: device descriptor read/64, error -71 [ 1507.024162][T28687] tipc: Resetting bearer [ 1507.030745][ T1228] usb 6-1: Using ep0 maxpacket: 32 [ 1507.034506][ T1228] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 1507.034535][ T1228] usb 6-1: config 0 has no interface number 0 [ 1507.034592][ T1228] usb 6-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 1507.034632][ T1228] usb 6-1: config 0 interface 5 has no altsetting 0 [ 1507.040871][ T1228] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 1507.040905][ T1228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.040930][ T1228] usb 6-1: Product: syz [ 1507.040948][ T1228] usb 6-1: Manufacturer: syz [ 1507.040966][ T1228] usb 6-1: SerialNumber: syz [ 1507.049801][ T1228] usb 6-1: config 0 descriptor?? [ 1507.130907][ T5990] usb usb7-port1: attempt power cycle [ 1507.220961][ C0] vkms_vblank_simulate: vblank timer overrun [ 1507.249084][T28687] tipc: Disabling bearer [ 1507.268472][ T1228] radio-si470x 6-1:0.5: could not find interrupt in endpoint [ 1507.268559][ T1228] radio-si470x 6-1:0.5: probe with driver radio-si470x failed with error -5 [ 1507.293006][ T1228] radio-raremono 6-1:0.5: this is not Thanko's Raremono. [ 1507.293446][ T1228] usbhid 6-1:0.5: couldn't find an input interrupt endpoint [ 1507.297376][ T1228] usb 6-1: USB disconnect, device number 74 [ 1507.340862][T15684] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1507.361393][T15684] usb 4-1: device descriptor read/8, error -71 [ 1507.510668][ T5990] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1507.532491][ T5990] usb 7-1: device descriptor read/8, error -71 [ 1507.610710][T15684] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1507.631386][T15684] usb 4-1: device descriptor read/8, error -71 [ 1507.741452][T15684] usb usb4-port1: unable to enumerate USB device [ 1507.770660][ T5990] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1507.791717][ T5990] usb 7-1: device descriptor read/8, error -71 [ 1507.806891][ T990] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1507.901214][ T5990] usb usb7-port1: unable to enumerate USB device [ 1507.920637][ T31] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1507.951952][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 1507.955318][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.955351][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.955392][ T990] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1507.955418][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.964899][ T990] usb 3-1: config 0 descriptor?? [ 1507.977756][ T990] hub 3-1:0.0: USB hub found [ 1508.071893][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1508.074176][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.074203][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1508.076847][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1508.076968][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.076984][ T31] usb 1-1: Product: syz [ 1508.076995][ T31] usb 1-1: Manufacturer: syz [ 1508.077006][ T31] usb 1-1: SerialNumber: syz [ 1508.174964][ T990] hub 3-1:0.0: 1 port detected [ 1508.358463][ T31] usb 1-1: 0:2 : does not exist [ 1508.380246][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1508.458174][ T31] usb 1-1: USB disconnect, device number 81 [ 1508.518895][T28717] tipc: Enabled bearer , priority 0 [ 1508.528917][T28717] syzkaller0: entered promiscuous mode [ 1508.528944][T28717] syzkaller0: entered allmulticast mode [ 1508.568558][T28236] udevd[28236]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1508.625942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.690871][T28716] tipc: Resetting bearer [ 1508.796732][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.813998][T28716] tipc: Disabling bearer [ 1509.110663][ T990] hub 3-1:0.0: activate --> -90 [ 1509.203979][ T990] hub 3-1:0.0: hub_ext_port_status failed (err = 3) [ 1509.207679][T28726] 9pnet_fd: Insufficient options for proto=fd [ 1509.511179][ T990] usb 3-1: USB disconnect, device number 66 [ 1509.783882][T28755] 9pnet_fd: Insufficient options for proto=fd [ 1509.860623][T15684] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1509.990729][T15684] usb 4-1: device descriptor read/64, error -71 [ 1509.994167][T28765] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8984'. [ 1510.120729][ T990] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1510.230741][T15684] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1510.250938][ T990] usb 6-1: device descriptor read/64, error -71 [ 1510.310737][ T5990] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1510.320997][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1510.360681][T15684] usb 4-1: device descriptor read/64, error -71 [ 1510.470920][T15684] usb usb4-port1: attempt power cycle [ 1510.474595][ T5990] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.474655][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1510.474745][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1510.474774][ T5990] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1510.477822][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1510.477868][ T31] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1510.477893][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.479998][ T5990] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1510.480025][ T5990] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1510.480046][ T5990] usb 1-1: Manufacturer: syz [ 1510.497765][ T31] usb 3-1: config 0 descriptor?? [ 1510.510349][ T5990] usb 1-1: config 0 descriptor?? [ 1510.515985][ T990] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1510.680713][ T990] usb 6-1: device descriptor read/64, error -71 [ 1510.683860][T28777] 9pnet_fd: Insufficient options for proto=fd [ 1510.794863][ T990] usb usb6-port1: attempt power cycle [ 1510.870804][T15684] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1510.891490][T15684] usb 4-1: device descriptor read/8, error -71 [ 1510.920559][ T5990] rc_core: IR keymap rc-hauppauge not found [ 1510.920581][ T5990] Registered IR keymap rc-empty [ 1510.935654][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1510.953960][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1510.978402][ T5990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1510.993857][ T31] creative-sb0540 0003:041E:3100.001C: unbalanced delimiter at end of report description [ 1510.994642][ T31] creative-sb0540 0003:041E:3100.001C: parse failed [ 1510.994750][ T31] creative-sb0540 0003:041E:3100.001C: probe with driver creative-sb0540 failed with error -22 [ 1511.012023][ T5990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 1511.038047][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.054371][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.072327][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.090985][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.111076][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.133324][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.140753][ T990] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1511.161423][ T990] usb 6-1: device descriptor read/8, error -71 [ 1511.162790][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.182668][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.190140][T15684] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1511.202680][T23353] usb 3-1: USB disconnect, device number 67 [ 1511.203002][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.221043][ T5990] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1511.231342][T15684] usb 4-1: device descriptor read/8, error -71 [ 1511.251869][ T5990] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1511.251897][ T5990] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1511.259971][ T5990] usb 1-1: USB disconnect, device number 82 [ 1511.330653][ T5870] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1511.341776][T15684] usb usb4-port1: unable to enumerate USB device [ 1511.400861][ T990] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1511.422076][ T990] usb 6-1: device descriptor read/8, error -71 [ 1511.480609][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 1511.483073][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.483104][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.483140][ T5870] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1511.483163][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.488788][ T5870] usb 7-1: config 0 descriptor?? [ 1511.534892][ T990] usb usb6-port1: unable to enumerate USB device [ 1511.548774][ T5870] hub 7-1:0.0: USB hub found [ 1511.699969][ T5870] hub 7-1:0.0: 1 port detected [ 1511.988657][T28801] 9pnet_fd: Insufficient options for proto=fd [ 1512.440901][ T5870] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1512.591149][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 1512.593225][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1512.593272][ T5870] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1512.593295][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.603444][ T5870] usb 3-1: config 0 descriptor?? [ 1512.651191][T15684] hub 7-1:0.0: activate --> -90 [ 1512.658034][ T5870] hub 3-1:0.0: bad descriptor, ignoring hub [ 1512.658136][ T5870] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1512.682339][ T5870] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1512.716939][T15684] hub 7-1:0.0: hub_ext_port_status failed (err = 3) [ 1513.022837][ T31] usb 7-1: USB disconnect, device number 58 [ 1514.355202][ T31] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1514.504928][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.504957][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1514.506758][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1514.506783][ T31] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1514.506801][ T31] usb 1-1: Manufacturer: syz [ 1514.523485][ T31] usb 1-1: config 0 descriptor?? [ 1514.610629][T15684] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1514.646924][T28869] netlink: 6 bytes leftover after parsing attributes in process `syz.6.9029'. [ 1514.661676][T28869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1514.777022][T15684] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1514.777056][T15684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.805577][T15684] usb 6-1: config 0 descriptor?? [ 1515.013335][T15684] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1515.231222][T15684] [drm:udl_init] *ERROR* Selecting channel failed [ 1515.279576][T15684] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1515.279604][T15684] [drm] Initialized udl on minor 2 [ 1515.295879][T15684] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1515.296224][T15684] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1515.299090][ T5870] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1515.303164][ T5870] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1515.303352][ T5870] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1515.345243][T15684] usb 6-1: USB disconnect, device number 79 [ 1515.451027][ T990] usb 3-1: USB disconnect, device number 68 [ 1516.131910][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1516.290627][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1516.295680][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1516.295729][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1516.295758][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.313595][ T31] usb 3-1: config 0 descriptor?? [ 1516.329840][ T31] hub 3-1:0.0: bad descriptor, ignoring hub [ 1516.329885][ T31] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1516.348648][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1516.670627][ T31] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1516.834945][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1516.845855][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1516.845891][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.855109][ T31] usb 6-1: config 0 descriptor?? [ 1516.873954][ T31] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1517.145400][ T5870] usb 1-1: USB disconnect, device number 83 [ 1518.103553][ T31] gspca_sonixj: reg_w1 err -71 [ 1518.130691][ T31] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1518.160566][ T31] usb 6-1: USB disconnect, device number 80 [ 1518.710607][ T31] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1518.863967][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1518.864021][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1518.864048][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.868256][ T31] usb 4-1: config 0 descriptor?? [ 1518.960604][ T5990] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1519.061034][ T5870] usb 3-1: USB disconnect, device number 69 [ 1519.130673][ T5990] usb 6-1: Using ep0 maxpacket: 32 [ 1519.134336][ T5990] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 1519.134363][ T5990] usb 6-1: config 0 has no interface number 0 [ 1519.134442][ T5990] usb 6-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 1519.134465][ T5990] usb 6-1: config 0 interface 5 has no altsetting 0 [ 1519.137195][ T5990] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 1519.137216][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.137279][ T5990] usb 6-1: Product: syz [ 1519.137290][ T5990] usb 6-1: Manufacturer: syz [ 1519.137301][ T5990] usb 6-1: SerialNumber: syz [ 1519.157168][ T5990] usb 6-1: config 0 descriptor?? [ 1519.287335][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 1519.288911][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1519.354349][ T31] usb 4-1: USB disconnect, device number 97 [ 1519.447772][ T5990] radio-si470x 6-1:0.5: could not find interrupt in endpoint [ 1519.447867][ T5990] radio-si470x 6-1:0.5: probe with driver radio-si470x failed with error -5 [ 1519.448628][T28978] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9076'. [ 1519.489707][ T5990] radio-raremono 6-1:0.5: this is not Thanko's Raremono. [ 1519.490300][ T5990] usbhid 6-1:0.5: couldn't find an input interrupt endpoint [ 1519.515410][ T5990] usb 6-1: USB disconnect, device number 81 [ 1521.038480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1521.440625][ T5870] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1521.593675][ T5870] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.593736][ T5870] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1521.593782][ T5870] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1521.593807][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.652242][ T5870] usb 7-1: config 0 descriptor?? [ 1521.669749][ T5870] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1521.690645][ T5990] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1521.782700][T29012] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9090'. [ 1521.840610][ T5990] usb 1-1: Using ep0 maxpacket: 32 [ 1521.843132][ T5990] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1521.843160][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.850414][ T5990] usb 1-1: config 0 descriptor?? [ 1522.086534][ T5990] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1522.107258][ T5990] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1522.107299][ T5990] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1522.261435][T19159] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1522.549967][T29028] overlay: Bad value for 'workdir' [ 1524.078481][T19159] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1524.078534][T19159] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1524.078559][T19159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.089577][T19159] usb 6-1: config 0 descriptor?? [ 1524.514618][T19159] usbhid 6-1:0.0: can't add hid device: -71 [ 1524.514746][T19159] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1524.559525][T19159] usb 6-1: USB disconnect, device number 82 [ 1524.860777][T15684] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1524.862027][ T990] usb 7-1: USB disconnect, device number 59 [ 1525.027349][T15684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 141, changing to 11 [ 1525.027389][T15684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1525.027432][T15684] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 1525.027457][T15684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.077318][T15684] usb 4-1: config 0 descriptor?? [ 1525.158467][T29070] binder: 29069:29070 ioctl c018620c 200000000240 returned -22 [ 1525.381920][T29075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9101'. [ 1525.689743][T15684] usbhid 4-1:0.0: can't add hid device: -71 [ 1525.689876][T15684] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1525.714253][T15684] usb 4-1: USB disconnect, device number 98 [ 1525.740614][ T990] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1525.907086][ T990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.907116][ T990] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1525.909089][ T990] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1525.909118][ T990] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1525.909140][ T990] usb 6-1: Manufacturer: syz [ 1525.926269][ T990] usb 6-1: config 0 descriptor?? [ 1527.820636][ T1228] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1527.970673][ T1228] usb 3-1: Using ep0 maxpacket: 16 [ 1527.975357][ T1228] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1527.975384][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.975399][ T1228] usb 3-1: Product: syz [ 1527.975409][ T1228] usb 3-1: Manufacturer: syz [ 1527.975420][ T1228] usb 3-1: SerialNumber: syz [ 1528.036052][ T1228] usb 3-1: config 0 descriptor?? [ 1528.431706][T15684] usb 6-1: USB disconnect, device number 83 [ 1528.596966][ T1228] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1528.762889][ T1228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1528.762941][ T1228] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1528.762966][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.766925][ T1228] usb 4-1: config 0 descriptor?? [ 1529.711060][T29110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9114'. [ 1529.842562][ T1228] usbhid 4-1:0.0: can't add hid device: -71 [ 1529.842690][ T1228] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1529.872078][ T1228] usb 4-1: USB disconnect, device number 99 [ 1529.953628][T20652] usb 3-1: USB disconnect, device number 70 [ 1530.513734][T29141] netlink: 'syz.5.9123': attribute type 3 has an invalid length. [ 1530.513824][T29141] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9123'. [ 1532.285494][T29155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9131'. [ 1535.307328][T22607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.400117][T10471] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1535.428723][T10471] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1535.432536][T10471] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1535.445037][T10471] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1535.448216][T10471] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1536.859566][T22607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.146068][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.196267][T22607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.340631][ T1228] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1537.445189][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.474668][T22607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.520701][ T1228] usb 7-1: Using ep0 maxpacket: 16 [ 1537.540882][T10471] Bluetooth: hci2: command tx timeout [ 1537.544621][ T1228] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1537.544654][ T1228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.544676][ T1228] usb 7-1: Product: syz [ 1537.544693][ T1228] usb 7-1: Manufacturer: syz [ 1537.544721][ T1228] usb 7-1: SerialNumber: syz [ 1537.584276][ T1228] usb 7-1: config 0 descriptor?? [ 1537.872486][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.594579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.877254][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.122096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.288804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.295341][T10471] Bluetooth: hci2: command tx timeout [ 1541.149426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.149978][ T1228] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1541.300987][ T1228] usb 3-1: Using ep0 maxpacket: 32 [ 1541.306243][ T1228] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 1541.306273][ T1228] usb 3-1: config 0 has no interface number 0 [ 1541.306320][ T1228] usb 3-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 1541.306349][ T1228] usb 3-1: config 0 interface 5 has no altsetting 0 [ 1541.320213][ T1228] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 1541.320258][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.320282][ T1228] usb 3-1: Product: syz [ 1541.320301][ T1228] usb 3-1: Manufacturer: syz [ 1541.320319][ T1228] usb 3-1: SerialNumber: syz [ 1541.327270][T15684] usb 7-1: USB disconnect, device number 60 [ 1541.399345][ T1228] usb 3-1: config 0 descriptor?? [ 1541.647567][ T1228] radio-si470x 3-1:0.5: could not find interrupt in endpoint [ 1541.647654][ T1228] radio-si470x 3-1:0.5: probe with driver radio-si470x failed with error -5 [ 1541.689030][ T1228] radio-raremono 3-1:0.5: this is not Thanko's Raremono. [ 1541.689628][ T1228] usbhid 3-1:0.5: couldn't find an input interrupt endpoint [ 1541.785628][ T1228] usb 3-1: USB disconnect, device number 71 [ 1541.827594][T29197] chnl_net:caif_netlink_parms(): no params data found [ 1541.875593][T29269] netlink: 'syz.0.9171': attribute type 3 has an invalid length. [ 1541.875619][T29269] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9171'. [ 1542.343654][T10471] Bluetooth: hci2: command tx timeout [ 1543.202449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.287059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.338397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.645864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.667312][T29289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9179'. [ 1543.721691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.781042][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.857088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.952667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.030556][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.048036][T29291] kvm: kvm [29290]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1544.426986][T10471] Bluetooth: hci2: command tx timeout [ 1544.573116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.737713][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.796188][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.933750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.999015][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.021851][T29298] netlink: 'syz.6.9182': attribute type 3 has an invalid length. [ 1545.021869][T29298] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9182'. [ 1545.132712][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.193783][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.252851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.313098][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.372394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.548730][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.601373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.663658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.693263][T22607] bond0 (unregistering): Released all slaves [ 1545.789760][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.853979][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.869043][T22607] tipc: Left network mode [ 1545.927164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1546.077906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1546.280561][T20652] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1546.419775][ C0] vkms_vblank_simulate: vblank timer overrun [ 1546.444556][T20652] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1546.444612][T20652] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1546.444639][T20652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.459796][T20652] usb 3-1: config 0 descriptor?? [ 1547.043190][T29197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.043491][T29197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.043749][T29197] bridge_slave_0: entered allmulticast mode [ 1547.158600][T20652] usbhid 3-1:0.0: can't add hid device: -71 [ 1547.158748][T20652] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1547.174911][T29197] bridge_slave_0: entered promiscuous mode [ 1547.181817][T20652] usb 3-1: USB disconnect, device number 72 [ 1547.193030][T29197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.193242][T29197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.194984][T29197] bridge_slave_1: entered allmulticast mode [ 1547.235366][T29197] bridge_slave_1: entered promiscuous mode [ 1547.583614][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.813031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1548.745326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.209223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.472252][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.602657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.871566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1550.591931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1550.948517][ C0] vkms_vblank_simulate: vblank timer overrun [ 1551.010760][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.010825][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.128387][T29197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.312225][T22607] hsr_slave_0: left promiscuous mode [ 1551.335369][T22607] hsr_slave_1: left promiscuous mode [ 1551.522648][T22607] veth1_macvtap: left promiscuous mode [ 1551.522766][T22607] veth0_macvtap: left promiscuous mode [ 1551.523059][T22607] veth1_vlan: left promiscuous mode [ 1551.523281][T22607] veth0_vlan: left promiscuous mode [ 1551.780787][ T990] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1551.930611][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 1551.933052][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.933084][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.933124][ T990] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1551.933149][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.963143][ T990] usb 3-1: config 0 descriptor?? [ 1551.980938][ T990] hub 3-1:0.0: USB hub found [ 1552.230655][ T990] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1552.402851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.452568][ T990] usbhid 3-1:0.0: can't add hid device: -71 [ 1552.452699][ T990] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1552.515896][ T990] usb 3-1: USB disconnect, device number 73 [ 1552.522876][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.907390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.973708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.083677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.136389][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.270664][T22730] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1553.332867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.434350][T22730] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1553.434383][T22730] usb 7-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1553.434407][T22730] usb 7-1: config 150 has no interface number 0 [ 1553.434444][T22730] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1553.491582][T22730] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1553.491606][T22730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.491621][T22730] usb 7-1: Product: syz [ 1553.491638][T22730] usb 7-1: Manufacturer: syz [ 1553.491649][T22730] usb 7-1: SerialNumber: syz [ 1553.788917][T22730] xr_serial 7-1:150.204: skipping garbage [ 1553.788942][T22730] xr_serial 7-1:150.204: skipping garbage [ 1553.955623][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.112975][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.243289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.362325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.612067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.750894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.813451][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.932305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.021985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.205423][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.455131][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.521544][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.693091][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.758821][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.879697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.955716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.027855][ T1228] usb 7-1: USB disconnect, device number 61 [ 1556.084781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.169441][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.278660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.503875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.566500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.798108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.920060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.994330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.063738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.156206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.214589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.220860][ T990] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1557.356928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.372695][ T990] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1557.372743][ T990] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1557.372762][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.376928][ T990] usb 7-1: config 0 descriptor?? [ 1557.420016][ T990] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1557.451352][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.639348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.749112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.872220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.905261][T29197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.030333][ T990] usb 7-1: USB disconnect, device number 62 [ 1560.200177][T29197] team0: Port device team_slave_0 added [ 1560.218952][T29197] team0: Port device team_slave_1 added [ 1560.309378][ C1] vkms_vblank_simulate: vblank timer overrun [ 1560.391339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1560.514934][T29197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.514954][T29197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.514984][T29197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.519171][T29197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.519188][T29197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.519218][T29197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.674876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1560.867209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1561.345183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1561.879433][T29197] hsr_slave_0: entered promiscuous mode [ 1561.886833][T29197] hsr_slave_1: entered promiscuous mode [ 1561.996731][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.366257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.596856][T29448] kvm: kvm [29446]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1562.920602][T20652] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1563.074961][T20652] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.075047][T20652] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1563.076575][T20652] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1563.076604][T20652] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1563.076626][T20652] usb 7-1: Manufacturer: syz [ 1563.152172][T20652] usb 7-1: config 0 descriptor?? [ 1563.191777][T20652] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1563.429390][T29197] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1563.488627][T29197] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1563.565507][T29197] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1563.783689][T29197] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1564.358961][T29496] bond0: entered promiscuous mode [ 1564.368503][T29496] dummy0: entered promiscuous mode [ 1564.370248][T29496] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1564.390957][T29496] hsr1: entered promiscuous mode [ 1564.391358][T29496] hsr1: entered allmulticast mode [ 1564.391378][T29496] bond0: entered allmulticast mode [ 1564.391396][T29496] dummy0: entered allmulticast mode [ 1564.553001][T29197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.590141][T29197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.625675][T22607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.625821][T22607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.683400][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.683541][T13389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.779345][ T1228] usb 7-1: USB disconnect, device number 63 [ 1565.802701][T29197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.056809][T29522] kvm: kvm [29520]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1566.241877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.500739][ T31] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1567.665068][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1567.667533][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1567.667565][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1567.667587][ T31] usb 3-1: Manufacturer: syz [ 1567.748464][ T31] usb 3-1: config 0 descriptor?? [ 1567.797719][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1567.923510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.637430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.928238][T29197] veth0_vlan: entered promiscuous mode [ 1572.081408][T29197] veth1_vlan: entered promiscuous mode [ 1572.129943][ T1228] usb 3-1: USB disconnect, device number 74 [ 1572.419514][T29197] veth0_macvtap: entered promiscuous mode [ 1572.435779][T29197] veth1_macvtap: entered promiscuous mode [ 1572.551876][T29197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1572.623549][T29197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.700623][T20652] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1572.703336][T21760] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.704486][T21760] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.704953][T21760] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.705189][T21760] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.860602][T20652] usb 6-1: Using ep0 maxpacket: 32 [ 1572.863618][T20652] usb 6-1: config 0 has no interfaces? [ 1572.863656][T20652] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1572.863681][T20652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.004673][T20652] usb 6-1: config 0 descriptor?? [ 1573.550878][ T990] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1573.585536][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1573.585560][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.711586][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 1573.713726][ T990] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1573.713757][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.759960][ T990] usb 3-1: config 0 descriptor?? [ 1573.995249][ T990] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1574.160724][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.160749][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.752454][T23353] usb 6-1: USB disconnect, device number 84 [ 1576.011097][T29628] bridge0: port 1(syz_tun) entered blocking state [ 1576.012389][T29628] bridge0: port 1(syz_tun) entered disabled state [ 1576.013121][T29628] syz_tun: entered allmulticast mode [ 1576.031438][T29628] syz_tun: entered promiscuous mode [ 1576.044403][T29628] bridge0: port 1(syz_tun) entered blocking state [ 1576.044573][T29628] bridge0: port 1(syz_tun) entered forwarding state [ 1576.142520][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.512354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.609512][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.916643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.299243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.333843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.582488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1578.839568][ T31] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1579.000561][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1579.002990][ T31] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1579.003021][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.034043][ T31] usb 6-1: config 0 descriptor?? [ 1579.241036][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1579.460832][T19159] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1579.615701][T19159] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1579.615733][T19159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.615754][T19159] usb 7-1: Product: syz [ 1579.615765][T19159] usb 7-1: Manufacturer: syz [ 1579.615776][T19159] usb 7-1: SerialNumber: syz [ 1579.710891][T19159] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1579.769124][T20652] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1580.161054][T29674] 9pnet: Could not find request transport: fd00000000000000000000005 [ 1580.462307][ T5870] usb 7-1: USB disconnect, device number 64 [ 1580.918610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.351485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.364115][T20652] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1581.364340][T20652] ath9k_htc: Failed to initialize the device [ 1581.614763][ T5870] usb 7-1: ath9k_htc: USB layer deinitialized [ 1582.924369][T29695] No control pipe specified [ 1583.989531][T29719] 9pnet: Could not find request transport: fd00000000000000000000005 [ 1584.741789][T29732] netlink: 'syz.6.9307': attribute type 3 has an invalid length. [ 1584.741844][T29732] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9307'. [ 1584.749741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1585.354816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.854620][ T31] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1586.854716][ T31] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1586.855918][ T990] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1586.856006][ T990] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1588.052596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.054416][ T31] usb 6-1: USB disconnect, device number 85 [ 1588.170585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.223270][ T5990] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1588.223361][ T5990] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1588.232412][ T990] usb 3-1: USB disconnect, device number 75 [ 1588.242662][ T5990] usb 1-1: USB disconnect, device number 84 [ 1588.980682][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 1589.038660][T29767] overlayfs: failed to resolve './file1': -2 [ 1589.100509][ T31] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1589.270584][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 1589.273144][ T31] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1589.273177][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.282793][ T31] usb 7-1: config 0 descriptor?? [ 1589.295297][ T31] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1590.174532][ T31] gspca_sonixj: reg_r err -32 [ 1590.174607][ T31] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1591.032094][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1591.052103][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1591.054681][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1591.057559][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1591.171364][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1591.914889][T15684] usb 7-1: USB disconnect, device number 65 [ 1592.290625][ T5990] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1592.445009][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.445049][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.445076][ T5990] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1592.445124][ T5990] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1592.445150][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.537919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.570343][ T5990] usb 6-1: config 0 descriptor?? [ 1592.642941][T29805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9324'. [ 1592.982355][ T5990] usbhid 6-1:0.0: can't add hid device: -71 [ 1592.982499][ T5990] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1592.995941][ T5990] usb 6-1: USB disconnect, device number 86 [ 1593.221100][T10471] Bluetooth: hci4: command tx timeout [ 1593.409450][T29803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1593.894749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.244271][ T6231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.285967][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1594.306237][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1594.309121][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1594.315047][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1594.319094][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1594.769209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.151010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.549970][T29784] chnl_net:caif_netlink_parms(): no params data found [ 1595.734484][T29838] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1595.980577][T10471] Bluetooth: hci4: command tx timeout [ 1596.782221][ T5813] Bluetooth: hci0: command tx timeout [ 1596.889843][ T5813] Bluetooth: hci5: unexpected event for opcode 0x0404 [ 1598.442066][ T5813] Bluetooth: hci4: command tx timeout [ 1598.490340][ T6231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.718064][T29824] chnl_net:caif_netlink_parms(): no params data found [ 1598.820608][ T5813] Bluetooth: hci0: command tx timeout [ 1600.560343][ T5813] Bluetooth: hci4: command tx timeout [ 1600.590780][T29866] overlayfs: failed to resolve './bus': -2 [ 1600.902960][ T5813] Bluetooth: hci0: command tx timeout [ 1600.953267][ T6231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.100639][T20652] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1601.256784][T20652] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.256813][T20652] usb 7-1: config 0 has no interfaces? [ 1601.256847][T20652] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1601.256873][T20652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.281374][T20652] usb 7-1: config 0 descriptor?? [ 1601.501367][T29877] netlink: 'syz.6.9340': attribute type 10 has an invalid length. [ 1601.680710][T23353] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1601.830577][T23353] usb 6-1: Using ep0 maxpacket: 32 [ 1601.833007][T23353] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 1601.833037][T23353] usb 6-1: config 0 has no interface number 0 [ 1601.833073][T23353] usb 6-1: config 0 interface 5 has no altsetting 0 [ 1601.836224][T23353] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 1601.836256][T23353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.836279][T23353] usb 6-1: Product: syz [ 1601.836295][T23353] usb 6-1: Manufacturer: syz [ 1601.836311][T23353] usb 6-1: SerialNumber: syz [ 1601.899761][T23353] usb 6-1: config 0 descriptor?? [ 1602.984515][ T5813] Bluetooth: hci0: command tx timeout [ 1603.059050][ T6231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.200818][T23353] radio-si470x 6-1:0.5: could not find interrupt in endpoint [ 1603.200909][T23353] radio-si470x 6-1:0.5: probe with driver radio-si470x failed with error -5 [ 1603.230973][T23353] radio-raremono 6-1:0.5: this is not Thanko's Raremono. [ 1603.258718][T23353] usbhid 6-1:0.5: couldn't find an input interrupt endpoint [ 1603.276288][T23353] usb 6-1: USB disconnect, device number 87 [ 1604.068442][T29877] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1611.722188][T29649] bridge0: port 1(syz_tun) entered disabled state [ 1611.924722][T29649] syz_tun (unregistering): left allmulticast mode [ 1611.924745][T29649] syz_tun (unregistering): left promiscuous mode [ 1611.924821][T29649] bridge0: port 1(syz_tun) entered disabled state [ 1612.014932][ T5990] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1612.128236][T29885] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1612.133326][T29784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.133460][T29784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.133724][T29784] bridge_slave_0: entered allmulticast mode [ 1612.170911][T29784] bridge_slave_0: entered promiscuous mode [ 1612.192176][ T5990] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1612.192210][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.192231][ T5990] usb 6-1: Product: syz [ 1612.192248][ T5990] usb 6-1: Manufacturer: syz [ 1612.192264][ T5990] usb 6-1: SerialNumber: syz [ 1612.240246][ T5990] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1612.285267][T20652] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1612.406588][T29784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.406946][T29784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.407393][T29784] bridge_slave_1: entered allmulticast mode [ 1612.429549][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.429617][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.477864][T29784] bridge_slave_1: entered promiscuous mode [ 1612.543145][ T5990] usb 7-1: USB disconnect, device number 66 [ 1613.040442][T29918] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1613.041309][T29918] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1613.044562][T29918] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1613.051577][T29918] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1613.052775][T29918] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1613.054429][T29918] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1613.055244][T29918] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1613.059183][T29918] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1613.059666][T29918] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1613.059717][T29918] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1613.062168][T29918] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1613.372201][T22730] usb 6-1: USB disconnect, device number 88 [ 1613.380549][T20652] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1613.380784][T20652] ath9k_htc: Failed to initialize the device [ 1613.521910][T22730] usb 6-1: ath9k_htc: USB layer deinitialized [ 1613.732082][T29784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1613.735502][T29824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.735634][T29824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.735912][T29824] bridge_slave_0: entered allmulticast mode [ 1613.742800][T29824] bridge_slave_0: entered promiscuous mode [ 1613.758503][T29784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1613.759115][T29824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.764910][T29824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.765230][T29824] bridge_slave_1: entered allmulticast mode [ 1613.769880][T29824] bridge_slave_1: entered promiscuous mode [ 1615.594185][T29784] team0: Port device team_slave_0 added [ 1615.605388][T29824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.624988][T29784] team0: Port device team_slave_1 added [ 1615.974762][T29824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.324671][T29784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.324691][T29784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.324720][T29784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.481021][T29784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.481042][T29784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.481073][T29784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.538318][T29824] team0: Port device team_slave_0 added [ 1616.608484][T29824] team0: Port device team_slave_1 added [ 1618.412677][T20652] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1618.803463][T20652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.803499][T20652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.805484][T20652] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1618.805514][T20652] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1618.805537][T20652] usb 6-1: Manufacturer: syz [ 1618.886935][T20652] usb 6-1: config 0 descriptor?? [ 1619.343411][T29971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9370'. [ 1619.352914][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1619.367600][T20652] usbhid 6-1:0.0: can't add hid device: -71 [ 1619.367726][T20652] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1619.386323][T20652] usb 6-1: USB disconnect, device number 89 [ 1622.119265][T29999] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9380'. [ 1623.871956][T22730] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1624.070104][T22730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.070144][T22730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.070168][T22730] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1624.070214][T22730] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1624.070239][T22730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.083766][T22730] usb 7-1: config 0 descriptor?? [ 1624.500080][T22730] usbhid 7-1:0.0: can't add hid device: -71 [ 1624.500208][T22730] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1624.507891][T22730] usb 7-1: USB disconnect, device number 67 [ 1624.903164][ T6231] bond0 (unregistering): Released all slaves [ 1624.940646][T20652] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1625.985886][T20652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.985925][T20652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.987497][T20652] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1625.987529][T20652] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1625.987552][T20652] usb 6-1: Manufacturer: syz [ 1626.013254][T20652] usb 6-1: config 0 descriptor?? [ 1626.639681][T20652] usbhid 6-1:0.0: can't add hid device: -71 [ 1626.639980][T20652] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1626.661700][ T6231] tipc: Left network mode [ 1626.723440][T20652] usb 6-1: USB disconnect, device number 90 [ 1627.571458][T29824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.571479][T29824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.571511][T29824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1628.950909][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.151788][T29824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.151808][T29824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.151839][T29824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.212741][T29784] hsr_slave_0: entered promiscuous mode [ 1629.219341][T29784] hsr_slave_1: entered promiscuous mode [ 1629.232186][T29784] debugfs: 'hsr0' already exists in 'hsr' [ 1629.232217][T29784] Cannot create hsr debugfs directory [ 1629.254050][T30035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9391'. [ 1629.620837][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.759426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.791126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.323378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.896903][T29824] hsr_slave_0: entered promiscuous mode [ 1630.906838][T29824] hsr_slave_1: entered promiscuous mode [ 1630.908156][T29824] debugfs: 'hsr0' already exists in 'hsr' [ 1630.908186][T29824] Cannot create hsr debugfs directory [ 1631.070765][ T6231] hsr_slave_0: left promiscuous mode [ 1631.269649][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.300841][ T6231] hsr_slave_1: left promiscuous mode [ 1631.444633][ T6231] veth1_macvtap: left promiscuous mode [ 1631.446099][ T6231] veth0_macvtap: left promiscuous mode [ 1631.447475][ T6231] veth1_vlan: left promiscuous mode [ 1631.447615][ T6231] veth0_vlan: left promiscuous mode [ 1632.088832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.547384][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.869727][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.170527][T20652] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1633.329482][T20652] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.329517][T20652] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1633.339131][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.361768][T20652] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1633.361797][T20652] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1633.361817][T20652] usb 7-1: Manufacturer: syz [ 1633.424900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.428647][T20652] usb 7-1: config 0 descriptor?? [ 1633.628071][T30068] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9404'. [ 1633.628096][T30068] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9404'. [ 1633.732271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.779889][T30066] kvm: kvm [30065]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1633.885191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.889933][T20652] usbhid 7-1:0.0: can't add hid device: -71 [ 1633.890074][T20652] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1633.919134][T20652] usb 7-1: USB disconnect, device number 68 [ 1634.186474][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.273148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.389725][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.509050][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.595365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.669565][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.751075][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.808930][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.050996][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.115213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.189356][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.265911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.340148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.400924][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.520186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.598462][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.650510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.780965][T23353] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1635.855954][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.924541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.940642][T23353] usb 7-1: Using ep0 maxpacket: 16 [ 1635.941540][T23353] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 1635.942699][T23353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.943810][T23353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.944938][T23353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.946043][T23353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.947137][T23353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.949228][T23353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.950356][T23353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.014294][T23353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.045934][T23353] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1636.045967][T23353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1636.045989][T23353] usb 7-1: SerialNumber: syz [ 1636.050332][T23353] usb 7-1: config 0 descriptor?? [ 1636.084543][T23353] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17 [ 1636.217466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.294093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.387603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.459440][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.529055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.607589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.701978][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.783421][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.857239][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.925896][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.983855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1637.059443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1638.647309][ T5167] bcm5974 7-1:0.0: could not read from device [ 1638.736650][T23353] usb 7-1: USB disconnect, device number 69 [ 1639.260649][T23353] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1639.432762][T23353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.432795][T23353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.432812][T23353] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1639.432849][T23353] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1639.432874][T23353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.436705][T23353] usb 7-1: config 0 descriptor?? [ 1639.869874][T23353] usbhid 7-1:0.0: can't add hid device: -71 [ 1639.870030][T23353] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1639.889341][T23353] usb 7-1: USB disconnect, device number 70 [ 1641.740024][T30091] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 1641.740055][T30091] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0/file1 [ 1649.401499][T30128] No control pipe specified [ 1651.599908][T11765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.552404][T10471] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1652.565417][T10471] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1652.567310][T10471] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1652.575597][T10471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1652.576541][T10471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1653.332301][T11765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.984476][T11765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.273196][T30181] IPv6: sit1: Disabled Multicast RS [ 1654.662505][T10471] Bluetooth: hci1: command tx timeout [ 1656.291822][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 1656.291842][ T37] audit: type=1326 audit(1759839717.077:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.291896][ T37] audit: type=1326 audit(1759839717.077:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.291946][ T37] audit: type=1326 audit(1759839717.077:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.382349][ T37] audit: type=1326 audit(1759839717.087:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.382407][ T37] audit: type=1326 audit(1759839717.177:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.382458][ T37] audit: type=1326 audit(1759839717.177:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.382508][ T37] audit: type=1326 audit(1759839717.177:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.382557][ T37] audit: type=1326 audit(1759839717.177:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.384187][ T37] audit: type=1326 audit(1759839717.177:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1656.384241][ T37] audit: type=1326 audit(1759839717.177:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30191 comm="syz.7.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f55deec9 code=0x7ffc0000 [ 1657.121295][T10471] Bluetooth: hci1: command tx timeout [ 1657.161033][T30200] netlink: 136 bytes leftover after parsing attributes in process `syz.7.9441'. [ 1658.216891][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1659.282088][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1659.284388][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1659.287409][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1659.301958][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1659.537218][ T5813] Bluetooth: hci1: command tx timeout [ 1659.861725][T11765] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.901630][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 1660.920660][ T31] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1661.082112][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1661.088827][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.088854][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1661.124224][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1661.124255][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.124294][ T31] usb 6-1: Product: syz [ 1661.124310][ T31] usb 6-1: Manufacturer: syz [ 1661.124326][ T31] usb 6-1: SerialNumber: syz [ 1661.380914][T30211] Bluetooth: hci4: command tx timeout [ 1661.402975][ T31] usb 6-1: 0:2 : does not exist [ 1661.403072][ T31] usb 6-1: unit 6 not found! [ 1661.653085][T30211] Bluetooth: hci1: command tx timeout [ 1662.506259][ T31] usb 6-1: USB disconnect, device number 91 [ 1663.748235][T30211] Bluetooth: hci4: command tx timeout [ 1664.158735][T30170] udevd[30170]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1665.447554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.598688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.816733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.816898][T30211] Bluetooth: hci4: command tx timeout [ 1665.856211][T30245] tipc: Enabling of bearer rejected, failed to enable media [ 1665.935559][T30164] chnl_net:caif_netlink_parms(): no params data found [ 1666.000228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.084870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.100686][T23353] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1666.197816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.335827][T23353] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1666.335854][T23353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.335868][T23353] usb 7-1: Product: syz [ 1666.335879][T23353] usb 7-1: Manufacturer: syz [ 1666.335892][T23353] usb 7-1: SerialNumber: syz [ 1666.405161][T23353] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1666.429079][T29777] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1666.882770][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.950906][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.025792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.043278][T23354] usb 7-1: USB disconnect, device number 71 [ 1667.490068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.559096][T29777] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1667.566907][T29777] ath9k_htc: Failed to initialize the device [ 1668.249788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.250794][T23354] usb 7-1: ath9k_htc: USB layer deinitialized [ 1668.255968][T30211] Bluetooth: hci4: command tx timeout [ 1668.380872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.610867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.879282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.948670][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.700830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.763417][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.840550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.972149][ C1] vkms_vblank_simulate: vblank timer overrun [ 1670.283140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1670.358950][T30291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9464'. [ 1671.536775][T30290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.855809][T11765] bond0 (unregistering): Released all slaves [ 1671.893630][T30281] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 1671.893654][T30281] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0/file1 [ 1672.186384][T11765] tipc: Left network mode [ 1673.350720][T30304] tipc: Enabling of bearer rejected, failed to enable media [ 1673.867038][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.867125][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.455539][T30336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9474'. [ 1678.023979][T30335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1679.035692][T30164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.035847][T30164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.036110][T30164] bridge_slave_0: entered allmulticast mode [ 1679.038971][T30164] bridge_slave_0: entered promiscuous mode [ 1679.075178][T30164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.075314][T30164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.075573][T30164] bridge_slave_1: entered allmulticast mode [ 1679.110058][T30164] bridge_slave_1: entered promiscuous mode [ 1679.302404][T30362] tipc: Enabling of bearer rejected, failed to enable media [ 1679.305344][T30360] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9481'. [ 1679.622509][T11765] hsr_slave_0: left promiscuous mode [ 1679.661792][T11765] hsr_slave_1: left promiscuous mode [ 1679.738490][T11765] veth1_macvtap: left promiscuous mode [ 1679.738571][T11765] veth0_macvtap: left promiscuous mode [ 1679.802571][T11765] veth1_vlan: left promiscuous mode [ 1679.802836][T11765] veth0_vlan: left promiscuous mode [ 1684.134731][T30389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9488'. [ 1685.010012][T30388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1686.755508][T30164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.755876][T30203] chnl_net:caif_netlink_parms(): no params data found [ 1686.855689][T30164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.002035][T30401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9490'. [ 1687.334479][T30164] team0: Port device team_slave_0 added [ 1687.362117][T30164] team0: Port device team_slave_1 added [ 1688.513412][T30427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9498'. [ 1688.545585][T30419] tipc: Enabling of bearer rejected, failed to enable media [ 1688.547077][T30164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.547094][T30164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.547123][T30164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.650017][T30430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9499'. [ 1688.785169][T30164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.785189][T30164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.785219][T30164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.864475][T30428] bond1 (unregistering): Released all slaves [ 1689.078307][T30441] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9503'. [ 1689.432449][T30203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.432662][T30203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.432882][T30203] bridge_slave_0: entered allmulticast mode [ 1689.435358][T30203] bridge_slave_0: entered promiscuous mode [ 1689.582292][T30203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.582496][T30203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.582761][T30203] bridge_slave_1: entered allmulticast mode [ 1689.590977][T30203] bridge_slave_1: entered promiscuous mode [ 1689.619990][T30429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1689.893738][T11765] IPVS: stop unused estimator thread 0... [ 1690.039580][T30203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.060365][T30164] hsr_slave_0: entered promiscuous mode [ 1690.063942][T30164] hsr_slave_1: entered promiscuous mode [ 1690.065863][T30164] debugfs: 'hsr0' already exists in 'hsr' [ 1690.065890][T30164] Cannot create hsr debugfs directory [ 1690.103970][T30203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.390892][T30453] tipc: Enabling of bearer rejected, failed to enable media [ 1690.880136][ C1] vkms_vblank_simulate: vblank timer overrun [ 1691.819498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1691.973546][ C1] vkms_vblank_simulate: vblank timer overrun [ 1692.039565][T30203] team0: Port device team_slave_0 added [ 1692.371483][T30203] team0: Port device team_slave_1 added [ 1693.685526][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.485429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.704005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.827322][T30203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.827348][T30203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.827377][T30203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.034062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.062446][T30203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.062467][T30203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.062498][T30203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.346418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.785817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1696.093327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.059433][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.493061][T30538] input: syz0 as /devices/virtual/input/input18 [ 1698.581322][T30203] hsr_slave_0: entered promiscuous mode [ 1698.582742][T30203] hsr_slave_1: entered promiscuous mode [ 1698.584550][T30203] debugfs: 'hsr0' already exists in 'hsr' [ 1698.584578][T30203] Cannot create hsr debugfs directory [ 1698.974677][T30549] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9524'. [ 1701.606408][T30164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1701.748477][T30164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1701.834334][T11765] bridge_slave_1: left allmulticast mode [ 1701.834365][T11765] bridge_slave_1: left promiscuous mode [ 1701.834669][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.924787][T11765] bridge_slave_0: left allmulticast mode [ 1701.924820][T11765] bridge_slave_0: left promiscuous mode [ 1701.925097][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.025834][T11765] bridge_slave_1: left allmulticast mode [ 1702.025867][T11765] bridge_slave_1: left promiscuous mode [ 1702.026114][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.104699][T11765] bridge_slave_0: left allmulticast mode [ 1702.104843][T11765] bridge_slave_0: left promiscuous mode [ 1702.106029][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.480570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1703.341966][T11765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.471618][T11765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.533063][T11765] bond0 (unregistering): Released all slaves [ 1703.610243][ C0] vkms_vblank_simulate: vblank timer overrun [ 1703.831571][T11765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.931500][T11765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.938168][T30599] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9536'. [ 1703.980763][T22730] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1704.026297][T11765] bond0 (unregistering): Released all slaves [ 1704.081153][T30164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1704.135780][ C0] vkms_vblank_simulate: vblank timer overrun [ 1704.135935][T22730] usb 7-1: device descriptor read/64, error -71 [ 1704.173670][T30164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1704.260334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1704.340268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1704.420975][T22730] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1704.550629][T22730] usb 7-1: device descriptor read/64, error -71 [ 1704.622721][ C0] vkms_vblank_simulate: vblank timer overrun [ 1704.675942][T22730] usb usb7-port1: attempt power cycle [ 1704.752836][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.432130][T30617] overlayfs: failed to clone upperpath [ 1705.516280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.659219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.765798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.856881][T22730] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1705.871322][T22730] usb 7-1: device descriptor read/8, error -71 [ 1706.122316][T22730] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1706.147035][T22730] usb 7-1: device descriptor read/8, error -71 [ 1706.266828][T22730] usb usb7-port1: unable to enumerate USB device [ 1706.492350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1706.618602][T11765] hsr_slave_0: left promiscuous mode [ 1706.664026][T11765] hsr_slave_1: left promiscuous mode [ 1706.665048][T11765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.701462][T11765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.910550][T11765] hsr_slave_0: left promiscuous mode [ 1706.950888][T11765] hsr_slave_1: left promiscuous mode [ 1706.952829][T11765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.981455][T11765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.150944][T22730] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1707.280591][T22730] usb 7-1: device descriptor read/64, error -71 [ 1707.405568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1707.506065][ C0] vkms_vblank_simulate: vblank timer overrun [ 1707.570343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1707.570931][T22730] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1707.711639][ C0] vkms_vblank_simulate: vblank timer overrun [ 1707.718545][T22730] usb 7-1: device descriptor read/64, error -71 [ 1707.821190][T22730] usb usb7-port1: attempt power cycle [ 1708.761317][T11765] team0 (unregistering): Port device team_slave_1 removed [ 1708.786719][T30657] overlayfs: failed to clone upperpath [ 1708.790622][T22730] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1708.811311][T22730] usb 7-1: device descriptor read/8, error -71 [ 1709.110986][T22730] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1709.130094][T11765] team0 (unregistering): Port device team_slave_0 removed [ 1709.131512][T22730] usb 7-1: device descriptor read/8, error -71 [ 1709.242687][T22730] usb usb7-port1: unable to enumerate USB device [ 1711.808557][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1711.813372][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1711.826230][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1711.829429][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1711.830307][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1713.163050][T30688] overlayfs: failed to clone upperpath [ 1713.166359][T11765] team0 (unregistering): Port device team_slave_1 removed [ 1713.351111][T11765] team0 (unregistering): Port device team_slave_0 removed [ 1713.988647][ T5813] Bluetooth: hci0: command tx timeout [ 1715.370992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.630129][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.720518][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.988464][T30211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1716.015714][T30211] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1716.017750][T30211] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1716.019473][T30211] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1716.020345][T30211] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1716.030690][T10471] Bluetooth: hci0: command tx timeout [ 1716.466351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1716.762484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1716.994488][T30719] overlayfs: failed to clone upperpath [ 1717.098690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.182393][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.292332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.406577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.484758][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.553325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.768890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.882074][ C1] vkms_vblank_simulate: vblank timer overrun [ 1718.020644][T23353] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1718.042897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1718.100697][ T5813] Bluetooth: hci6: command tx timeout [ 1718.101383][T30211] Bluetooth: hci0: command tx timeout [ 1718.158376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1718.265604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1718.280549][T23353] usb 7-1: Using ep0 maxpacket: 16 [ 1718.281557][T23353] usb 7-1: no configurations [ 1718.281575][T23353] usb 7-1: can't read configurations, error -22 [ 1718.640530][T23353] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1718.655970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1719.041182][T23353] usb 7-1: Using ep0 maxpacket: 16 [ 1719.505837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1719.600263][T23353] usb 7-1: no configurations [ 1719.600291][T23353] usb 7-1: can't read configurations, error -22 [ 1719.600774][T23353] usb usb7-port1: attempt power cycle [ 1719.763582][T30678] chnl_net:caif_netlink_parms(): no params data found [ 1719.867258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.034420][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.100557][T23353] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1720.109263][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.180463][ T5813] Bluetooth: hci6: command tx timeout [ 1720.309785][ T5813] Bluetooth: hci0: command tx timeout [ 1720.326434][T23353] usb 7-1: Using ep0 maxpacket: 16 [ 1720.327301][T23353] usb 7-1: no configurations [ 1720.327319][T23353] usb 7-1: can't read configurations, error -22 [ 1720.450630][T23353] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1720.503364][T23353] usb 7-1: Using ep0 maxpacket: 16 [ 1720.504428][T23353] usb 7-1: no configurations [ 1720.504445][T23353] usb 7-1: can't read configurations, error -22 [ 1720.505048][T23353] usb usb7-port1: unable to enumerate USB device [ 1720.576578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.764846][T30764] overlayfs: failed to clone upperpath [ 1721.263459][T30703] chnl_net:caif_netlink_parms(): no params data found [ 1721.605020][T30678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.607321][T30678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.607591][T30678] bridge_slave_0: entered allmulticast mode [ 1721.622428][T30678] bridge_slave_0: entered promiscuous mode [ 1721.668193][T30678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.668361][T30678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.668856][T30678] bridge_slave_1: entered allmulticast mode [ 1721.675976][T30678] bridge_slave_1: entered promiscuous mode [ 1721.795916][T30784] loop7: detected capacity change from 0 to 7 [ 1721.866567][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.866840][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.868018][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.868051][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.880120][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.880161][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.884430][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.884470][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.884935][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.884970][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.886436][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.886491][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.887119][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.887154][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.887265][T30664] ldm_validate_partition_table(): Disk read failed. [ 1721.888750][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.888786][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.889103][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.889135][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.889437][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1721.889468][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1721.893919][T30664] Dev loop7: unable to read RDB block 0 [ 1721.918400][T30664] loop7: unable to read partition table [ 1721.918719][T30664] loop7: partition table beyond EOD, truncated [ 1722.014350][T30784] ldm_validate_partition_table(): Disk read failed. [ 1722.020034][T30784] Dev loop7: unable to read RDB block 0 [ 1722.036388][T30784] loop7: unable to read partition table [ 1722.036686][T30784] loop7: partition table beyond EOD, truncated [ 1722.036740][T30784] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 1722.260757][ T5813] Bluetooth: hci6: command tx timeout [ 1722.522954][T30678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.530313][T30703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.549172][T30703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.549452][T30703] bridge_slave_0: entered allmulticast mode [ 1722.572766][T30703] bridge_slave_0: entered promiscuous mode [ 1722.604019][T30678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.621741][T30703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.621868][T30703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.645500][T30703] bridge_slave_1: entered allmulticast mode [ 1722.659643][T30703] bridge_slave_1: entered promiscuous mode [ 1723.290349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1723.808447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1724.268001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1724.341024][ T5813] Bluetooth: hci6: command tx timeout [ 1724.917304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1725.012422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1725.044590][T30807] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 1725.044621][T30807] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0/file1 [ 1725.045037][T30678] team0: Port device team_slave_0 added [ 1725.108686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1725.124948][T20652] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1725.258683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1725.280761][T20652] usb 7-1: Using ep0 maxpacket: 16 [ 1725.281880][T20652] usb 7-1: no configurations [ 1725.281901][T20652] usb 7-1: can't read configurations, error -22 [ 1725.436417][T20652] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1725.920757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1726.308505][ C0] vkms_vblank_simulate: vblank timer overrun [ 1726.340124][T30678] team0: Port device team_slave_1 added [ 1726.348694][T30703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.461571][T20652] usb 7-1: Using ep0 maxpacket: 16 [ 1726.463534][T20652] usb 7-1: no configurations [ 1726.463554][T20652] usb 7-1: can't read configurations, error -22 [ 1726.464209][T20652] usb usb7-port1: attempt power cycle [ 1726.804549][T30703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.860651][T20652] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1726.881331][T20652] usb 7-1: Using ep0 maxpacket: 16 [ 1726.882269][T20652] usb 7-1: no configurations [ 1726.882287][T20652] usb 7-1: can't read configurations, error -22 [ 1727.010613][T20652] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1727.041301][T20652] usb 7-1: Using ep0 maxpacket: 16 [ 1727.041989][T20652] usb 7-1: no configurations [ 1727.042009][T20652] usb 7-1: can't read configurations, error -22 [ 1727.042414][T20652] usb usb7-port1: unable to enumerate USB device [ 1727.154620][T30678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.154635][T30678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.154656][T30678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.273503][T30678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.273523][T30678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.273552][T30678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.292312][T30703] team0: Port device team_slave_0 added [ 1728.492533][T30703] team0: Port device team_slave_1 added [ 1729.390236][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.632531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.796101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.972003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.996026][T30844] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 1730.996056][T30844] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0/file1 [ 1731.222800][T30703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1731.222819][T30703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.222845][T30703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1731.387019][T30703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.387038][T30703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.387068][T30703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.433394][T30678] hsr_slave_0: entered promiscuous mode [ 1731.435312][T30678] hsr_slave_1: entered promiscuous mode [ 1731.436787][T30678] debugfs: 'hsr0' already exists in 'hsr' [ 1731.436818][T30678] Cannot create hsr debugfs directory [ 1732.050758][ C1] vkms_vblank_simulate: vblank timer overrun [ 1732.984831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1733.069437][T30862] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1733.104733][T30703] hsr_slave_0: entered promiscuous mode [ 1733.107146][T30703] hsr_slave_1: entered promiscuous mode [ 1733.125837][T30703] debugfs: 'hsr0' already exists in 'hsr' [ 1733.125869][T30703] Cannot create hsr debugfs directory [ 1733.365047][T30871] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 1733.365128][T30871] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0/file1 [ 1733.474050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.059978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.706674][T11765] bridge_slave_1: left allmulticast mode [ 1734.706706][T11765] bridge_slave_1: left promiscuous mode [ 1734.707035][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.792432][T11765] bridge_slave_0: left allmulticast mode [ 1734.792463][T11765] bridge_slave_0: left promiscuous mode [ 1734.792810][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.976878][T11765] bridge_slave_1: left allmulticast mode [ 1734.976909][T11765] bridge_slave_1: left promiscuous mode [ 1734.977158][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.052417][T11765] bridge_slave_0: left allmulticast mode [ 1735.052447][T11765] bridge_slave_0: left promiscuous mode [ 1735.052695][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.242305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.308795][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.308868][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.423853][T11765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1735.521273][T11765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1735.583006][T11765] bond0 (unregistering): Released all slaves [ 1735.655933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.802249][T11765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1735.921289][T11765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1735.986710][T11765] bond0 (unregistering): Released all slaves [ 1737.850573][T11765] hsr_slave_0: left promiscuous mode [ 1737.900662][T11765] hsr_slave_1: left promiscuous mode [ 1737.901680][T11765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.941593][T11765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.110578][T23353] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1738.141617][T11765] hsr_slave_0: left promiscuous mode [ 1738.180872][T11765] hsr_slave_1: left promiscuous mode [ 1738.181832][T11765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1738.221478][T11765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.260558][T23353] usb 7-1: Using ep0 maxpacket: 16 [ 1738.265454][T23353] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1738.265547][T23353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.265570][T23353] usb 7-1: Product: syz [ 1738.265586][T23353] usb 7-1: Manufacturer: syz [ 1738.265601][T23353] usb 7-1: SerialNumber: syz [ 1738.270212][T23353] usb 7-1: config 0 descriptor?? [ 1740.654539][T11765] team0 (unregistering): Port device team_slave_1 removed [ 1740.974887][T11765] team0 (unregistering): Port device team_slave_0 removed [ 1742.759063][T30988] Bluetooth: MGMT ver 1.23 [ 1742.759106][T30988] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1742.866703][T30992] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1744.241162][T11765] team0 (unregistering): Port device team_slave_1 removed [ 1744.392244][T11765] team0 (unregistering): Port device team_slave_0 removed [ 1745.404982][T31002] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 1745.405015][T31002] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0/file1 [ 1746.165824][ T31] usb 7-1: USB disconnect, device number 88 [ 1746.225797][T31021] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1748.872147][T31059] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 1748.872179][T31059] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0/file1 [ 1750.131488][T31068] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1750.209121][T30678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1750.344095][T30678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1750.413057][T31081] binder: 31079:31081 ioctl c018620c 0 returned -14 [ 1750.536145][T30678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1750.711256][ T5990] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1750.756031][T30678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1751.350519][ T5990] usb 7-1: Using ep0 maxpacket: 16 [ 1751.355941][ T5990] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.355968][ T5990] usb 7-1: config 0 has no interfaces? [ 1751.356000][ T5990] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1751.356027][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.393253][ T5990] usb 7-1: config 0 descriptor?? [ 1752.558586][T30703] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1752.907198][T30703] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1753.006616][T30703] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1753.144498][T30703] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1753.487829][T23354] usb 7-1: USB disconnect, device number 89 [ 1754.872299][T30678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.920615][T31135] binder: 31134:31135 ioctl c018620c 0 returned -14 [ 1755.083324][T30678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.170842][T24775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.170986][T24775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.243775][T15088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.243927][T15088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.432320][T30703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.658876][T30703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.739967][T24777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.740194][T24777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.109635][T24777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.109794][T24777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.675586][T31163] 8021q: VLANs not supported on sit0 [ 1758.243463][T30678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1759.238102][T30678] veth0_vlan: entered promiscuous mode [ 1759.350086][T30678] veth1_vlan: entered promiscuous mode [ 1759.419973][T30703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1759.509120][T30678] veth0_macvtap: entered promiscuous mode [ 1759.524399][T30678] veth1_macvtap: entered promiscuous mode [ 1759.555744][T30678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.574087][T30678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1759.619085][T15088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.619372][T15088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.619603][T15088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.619644][T15088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.060218][T13389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.060240][T13389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.218756][T22607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.218781][T22607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.492859][T30703] veth0_vlan: entered promiscuous mode [ 1762.507174][T30703] veth1_vlan: entered promiscuous mode [ 1762.556659][T30703] veth0_macvtap: entered promiscuous mode [ 1762.562858][T30703] veth1_macvtap: entered promiscuous mode [ 1762.584149][T30703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1762.656740][T30703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1762.698025][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.698335][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.721480][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.746853][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.839102][T31237] 9pnet: Could not find request transport: fd00000000000000000000005 [ 1763.228221][T24777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.228246][T24777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.393232][T21760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.393256][T21760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.927080][T30211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1767.957585][T30211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1767.961117][T30211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1767.970927][T30211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1767.990699][T30211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1770.126542][T31323] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 1770.128981][T31323] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0/file1 [ 1770.267819][ T5813] Bluetooth: hci1: command tx timeout [ 1770.455580][T31321] binder: 31319:31321 ioctl c0306201 0 returned -14 [ 1771.298014][T31304] chnl_net:caif_netlink_parms(): no params data found [ 1772.858203][T30211] Bluetooth: hci1: command tx timeout [ 1773.797928][T31304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.798206][T31304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.798452][T31304] bridge_slave_0: entered allmulticast mode [ 1773.841790][T31304] bridge_slave_0: entered promiscuous mode [ 1773.845582][T31304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.849843][T31304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.850020][T31304] bridge_slave_1: entered allmulticast mode [ 1773.853937][T31304] bridge_slave_1: entered promiscuous mode [ 1774.901022][T30211] Bluetooth: hci1: command tx timeout [ 1775.072605][T31379] 9pnet_fd: Insufficient options for proto=fd [ 1775.165282][T31304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.169840][T31304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.231223][T31385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9746'. [ 1775.435969][T23353] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1775.581917][T23353] usb 9-1: Using ep0 maxpacket: 16 [ 1775.584570][T23353] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.584594][T23353] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1775.584629][T23353] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1775.584652][T23353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.646702][T23353] usb 9-1: config 0 descriptor?? [ 1775.665031][T31304] team0: Port device team_slave_0 added [ 1775.669281][T31304] team0: Port device team_slave_1 added [ 1776.124494][T31304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.124508][T31304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.124529][T31304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.126521][T31304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.126534][T31304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.126553][T31304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.672583][T31304] hsr_slave_0: entered promiscuous mode [ 1776.673957][T31304] hsr_slave_1: entered promiscuous mode [ 1776.674903][T31304] debugfs: 'hsr0' already exists in 'hsr' [ 1776.674928][T31304] Cannot create hsr debugfs directory [ 1776.982694][T30211] Bluetooth: hci1: command tx timeout [ 1777.870671][T31426] 9pnet_fd: Insufficient options for proto=fd [ 1779.231817][T23353] usb 9-1: USB disconnect, device number 2 [ 1779.321143][T31436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9758'. [ 1780.155386][T31304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.230630][T23353] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1780.381445][T23353] usb 9-1: Using ep0 maxpacket: 16 [ 1780.403747][T23353] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1780.406686][T23353] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 1780.406716][T23353] usb 9-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.406737][T23353] usb 9-1: config 13 has no interface number 0 [ 1780.406794][T23353] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1780.406822][T23353] usb 9-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1780.406852][T23353] usb 9-1: config 13 interface 50 has no altsetting 0 [ 1780.494353][T23353] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1780.494383][T23353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.494403][T23353] usb 9-1: Product: syz [ 1780.494418][T23353] usb 9-1: Manufacturer: syz [ 1780.494433][T23353] usb 9-1: SerialNumber: syz [ 1780.597206][T31455] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1780.654355][T31304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.532004][T23353] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1781.532065][T23353] usb 9-1: MIDIStreaming interface descriptor not found [ 1781.719400][T23353] usb 9-1: USB disconnect, device number 3 [ 1781.810331][T31478] udevd[31478]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1782.099147][T31304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.110458][T22730] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1782.260803][T22730] usb 1-1: Using ep0 maxpacket: 32 [ 1782.263193][T22730] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1782.263219][T22730] usb 1-1: config 0 has no interface number 0 [ 1782.266280][T22730] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1782.266310][T22730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.266331][T22730] usb 1-1: Product: syz [ 1782.266346][T22730] usb 1-1: Manufacturer: syz [ 1782.266362][T22730] usb 1-1: SerialNumber: syz [ 1782.327318][T31496] netdevsim netdevsim8: Direct firmware load for ./file0/file1 failed with error -2 [ 1782.327349][T31496] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0/file1 [ 1782.352509][T22730] usb 1-1: config 0 descriptor?? [ 1782.374863][T22730] smsc95xx v2.0.0 [ 1782.610673][T19159] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1782.699105][T31304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.760862][T19159] usb 7-1: Using ep0 maxpacket: 16 [ 1782.770808][T19159] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1782.770850][T19159] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1782.770872][T19159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.791444][T19159] usb 7-1: config 0 descriptor?? [ 1782.821937][T22730] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1782.821968][T22730] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1783.470399][T22730] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1783.470698][T22730] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1783.482520][T22730] usb 1-1: USB disconnect, device number 85 [ 1783.554833][T30664] udevd[30664]: setting owner of /dev/bus/usb/001/085 to uid=0, gid=0 failed: No such file or directory [ 1784.323346][T31304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1784.361102][T31304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1784.394583][T31304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1784.439044][T31304] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1784.921840][T31304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1784.984504][T31304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1785.005351][T21760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.005604][T21760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1785.024241][ T1524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.024555][ T1524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1785.384418][ T990] usb 7-1: USB disconnect, device number 90 [ 1785.634957][T31304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1786.795364][T31548] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 1786.795394][T31548] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0/file1 [ 1786.853197][T31549] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1787.864781][T31304] veth0_vlan: entered promiscuous mode [ 1787.934281][T31304] veth1_vlan: entered promiscuous mode [ 1788.011925][T31304] veth0_macvtap: entered promiscuous mode [ 1788.033757][T31304] veth1_macvtap: entered promiscuous mode [ 1788.064123][T31304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.108805][T31304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.264760][T24775] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.285776][T24775] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.289965][T24775] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.331622][T24775] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.067005][T11765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.067027][T11765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.304139][T11765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.304161][T11765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.109528][T31586] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1790.171866][T31588] netlink: 'syz.5.9794': attribute type 2 has an invalid length. [ 1790.171887][T31588] netlink: 244 bytes leftover after parsing attributes in process `syz.5.9794'. [ 1790.612513][T31599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9800'. [ 1791.445639][T31598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1791.468072][T31615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9805'. [ 1791.618320][T31615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1791.692030][T31618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1791.694695][T31618] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1793.232649][T31641] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9815'. [ 1793.867168][T31650] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9819'. [ 1794.430169][T31663] serio: Serial port ptm0 [ 1794.621930][T31649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1794.639571][T31672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9829'. [ 1794.768626][T31674] ------------[ cut here ]------------ [ 1794.768653][T31674] WARNING: CPU: 0 PID: 31674 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1794.768706][T31674] Modules linked in: [ 1794.768734][T31674] CPU: 0 UID: 0 PID: 31674 Comm: syz.0.9830 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1794.768802][T31674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1794.768820][T31674] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1794.768852][T31674] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 0b 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1794.768872][T31674] RSP: 0018:ffffc90004b1f8e0 EFLAGS: 00010287 [ 1794.768920][T31674] RAX: ffffffff81b74039 RBX: 0000000000000000 RCX: 0000000000080000 [ 1794.768935][T31674] RDX: ffffc90010461000 RSI: 00000000000000ae RDI: 00000000000000af [ 1794.768951][T31674] RBP: ffffc90004b1fa70 R08: 0000000000000000 R09: 0000000000000000 [ 1794.768965][T31674] R10: dffffc0000000000 R11: fffffbfff1d6bcef R12: dffffc0000000000 [ 1794.768982][T31674] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880374d0791 [ 1794.768997][T31674] FS: 00007f0c715c66c0(0000) GS:ffff88812701c000(0000) knlGS:0000000000000000 [ 1794.769022][T31674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1794.769037][T31674] CR2: 0000001b31d1eff8 CR3: 00000000316f0000 CR4: 00000000003526f0 [ 1794.769056][T31674] Call Trace: [ 1794.769064][T31674] [ 1794.769084][T31674] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1794.769243][T31674] ? __pfx_cgroup_freeze+0x10/0x10 [ 1794.769274][T31674] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1794.769311][T31674] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1794.769345][T31674] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1794.769394][T31674] ? mutex_lock_nested+0x154/0x1d0 [ 1794.769419][T31674] ? cgroup_kn_lock_live+0x13c/0x230 [ 1794.769450][T31674] cgroup_freeze_write+0x156/0x1c0 [ 1794.769476][T31674] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1794.769498][T31674] ? kernfs_root+0x1c/0x230 [ 1794.769545][T31674] ? kernfs_root+0x1c/0x230 [ 1794.769573][T31674] ? kernfs_root+0x1ea/0x230 [ 1794.769598][T31674] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1794.769623][T31674] cgroup_file_write+0x39e/0x740 [ 1794.769663][T31674] ? __pfx_cgroup_file_write+0x10/0x10 [ 1794.769710][T31674] ? __pfx_cgroup_file_write+0x10/0x10 [ 1794.769741][T31674] kernfs_fop_write_iter+0x3b0/0x540 [ 1794.769783][T31674] vfs_write+0x5d2/0xb40 [ 1794.769839][T31674] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1794.769875][T31674] ? __pfx_vfs_write+0x10/0x10 [ 1794.769902][T31674] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1794.769939][T31674] ? mutex_lock_nested+0x154/0x1d0 [ 1794.769963][T31674] ? fdget_pos+0x253/0x320 [ 1794.770000][T31674] ksys_write+0x14b/0x260 [ 1794.770039][T31674] ? __pfx_ksys_write+0x10/0x10 [ 1794.770067][T31674] ? rcu_is_watching+0x15/0xb0 [ 1794.770099][T31674] ? do_syscall_64+0xbe/0x3b0 [ 1794.770148][T31674] do_syscall_64+0xfa/0x3b0 [ 1794.770167][T31674] ? lockdep_hardirqs_on+0x9c/0x150 [ 1794.770199][T31674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.770240][T31674] ? clear_bhb_loop+0x60/0xb0 [ 1794.770266][T31674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.770287][T31674] RIP: 0033:0x7f0c7335eec9 [ 1794.770310][T31674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.770378][T31674] RSP: 002b:00007f0c715c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1794.770402][T31674] RAX: ffffffffffffffda RBX: 00007f0c735b5fa0 RCX: 00007f0c7335eec9 [ 1794.770418][T31674] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 1794.770431][T31674] RBP: 00007f0c733e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1794.770445][T31674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1794.770457][T31674] R13: 00007f0c735b6038 R14: 00007f0c735b5fa0 R15: 00007ffe8422da18 [ 1794.770490][T31674] [ 1794.770506][T31674] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1794.770523][T31674] CPU: 0 UID: 0 PID: 31674 Comm: syz.0.9830 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1794.770546][T31674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1794.770560][T31674] Call Trace: [ 1794.770570][T31674] [ 1794.770579][T31674] dump_stack_lvl+0x99/0x250 [ 1794.770633][T31674] ? __asan_memcpy+0x40/0x70 [ 1794.770667][T31674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1794.770700][T31674] ? __pfx__printk+0x10/0x10 [ 1794.770739][T31674] vpanic+0x237/0x6d0 [ 1794.770757][T31674] ? __pfx_vpanic+0x10/0x10 [ 1794.770788][T31674] panic+0xb9/0xc0 [ 1794.770807][T31674] ? __pfx_panic+0x10/0x10 [ 1794.770841][T31674] __warn+0x31b/0x4b0 [ 1794.770859][T31674] ? cgroup_freeze+0x80a/0xf90 [ 1794.770891][T31674] ? cgroup_freeze+0x80a/0xf90 [ 1794.770922][T31674] report_bug+0x2be/0x4f0 [ 1794.770999][T31674] ? cgroup_freeze+0x80a/0xf90 [ 1794.771028][T31674] ? cgroup_freeze+0x80a/0xf90 [ 1794.771050][T31674] ? cgroup_freeze+0x80c/0xf90 [ 1794.771071][T31674] handle_bug+0x84/0x160 [ 1794.771088][T31674] exc_invalid_op+0x1a/0x50 [ 1794.771105][T31674] asm_exc_invalid_op+0x1a/0x20 [ 1794.771119][T31674] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1794.771141][T31674] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 0b 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1794.771155][T31674] RSP: 0018:ffffc90004b1f8e0 EFLAGS: 00010287 [ 1794.771168][T31674] RAX: ffffffff81b74039 RBX: 0000000000000000 RCX: 0000000000080000 [ 1794.771179][T31674] RDX: ffffc90010461000 RSI: 00000000000000ae RDI: 00000000000000af [ 1794.771189][T31674] RBP: ffffc90004b1fa70 R08: 0000000000000000 R09: 0000000000000000 [ 1794.771199][T31674] R10: dffffc0000000000 R11: fffffbfff1d6bcef R12: dffffc0000000000 [ 1794.771211][T31674] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880374d0791 [ 1794.771227][T31674] ? cgroup_freeze+0x809/0xf90 [ 1794.771258][T31674] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1794.771284][T31674] ? __pfx_cgroup_freeze+0x10/0x10 [ 1794.771305][T31674] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1794.771329][T31674] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1794.771351][T31674] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1794.771376][T31674] ? mutex_lock_nested+0x154/0x1d0 [ 1794.771394][T31674] ? cgroup_kn_lock_live+0x13c/0x230 [ 1794.771415][T31674] cgroup_freeze_write+0x156/0x1c0 [ 1794.771434][T31674] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1794.771449][T31674] ? kernfs_root+0x1c/0x230 [ 1794.771466][T31674] ? kernfs_root+0x1c/0x230 [ 1794.771485][T31674] ? kernfs_root+0x1ea/0x230 [ 1794.771502][T31674] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1794.771519][T31674] cgroup_file_write+0x39e/0x740 [ 1794.771548][T31674] ? __pfx_cgroup_file_write+0x10/0x10 [ 1794.771581][T31674] ? __pfx_cgroup_file_write+0x10/0x10 [ 1794.771603][T31674] kernfs_fop_write_iter+0x3b0/0x540 [ 1794.771632][T31674] vfs_write+0x5d2/0xb40 [ 1794.771657][T31674] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1794.771682][T31674] ? __pfx_vfs_write+0x10/0x10 [ 1794.771701][T31674] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1794.771727][T31674] ? mutex_lock_nested+0x154/0x1d0 [ 1794.771745][T31674] ? fdget_pos+0x253/0x320 [ 1794.771765][T31674] ksys_write+0x14b/0x260 [ 1794.771789][T31674] ? __pfx_ksys_write+0x10/0x10 [ 1794.771809][T31674] ? rcu_is_watching+0x15/0xb0 [ 1794.771832][T31674] ? do_syscall_64+0xbe/0x3b0 [ 1794.771849][T31674] do_syscall_64+0xfa/0x3b0 [ 1794.771881][T31674] ? lockdep_hardirqs_on+0x9c/0x150 [ 1794.771907][T31674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.771923][T31674] ? clear_bhb_loop+0x60/0xb0 [ 1794.771942][T31674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.771957][T31674] RIP: 0033:0x7f0c7335eec9 [ 1794.771971][T31674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.771984][T31674] RSP: 002b:00007f0c715c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1794.771999][T31674] RAX: ffffffffffffffda RBX: 00007f0c735b5fa0 RCX: 00007f0c7335eec9 [ 1794.772024][T31674] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 1794.772034][T31674] RBP: 00007f0c733e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1794.772044][T31674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1794.772054][T31674] R13: 00007f0c735b6038 R14: 00007f0c735b5fa0 R15: 00007ffe8422da18 [ 1794.772078][T31674] [ 1794.772439][T31674] Kernel Offset: disabled