last executing test programs: 14m1.571856257s ago: executing program 4 (id=146): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) 13m50.963110372s ago: executing program 4 (id=164): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/64, &(0x7f0000000080)=0x40) mknod(0x0, 0x8001420, 0x0) r2 = open$dir(0x0, 0x149800, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x80}], 0x1, 0x101) creat(&(0x7f0000000080)='./file0\x00', 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000002c0), &(0x7f0000000080)=""/46}, 0x20) syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r5, 0x1ad72f7) 13m48.622400119s ago: executing program 4 (id=165): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)=0xd8ec) 13m48.403695954s ago: executing program 4 (id=167): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socket(0x2c, 0x3, 0x800005) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0xa000000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x8000, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) 13m46.840113545s ago: executing program 4 (id=170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 13m46.063640191s ago: executing program 4 (id=173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0)=0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, 0x0, 0x166) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000000c0)={0x0, 0x14, 0x0}, 0x20048c00) r6 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x101b, 0x0, 0x0, 0x6, 0x2, 0x1}}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r7 = socket$inet6(0xa, 0x80000, 0x7) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2b0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) 13m30.684605074s ago: executing program 32 (id=173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0)=0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, 0x0, 0x166) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000000c0)={0x0, 0x14, 0x0}, 0x20048c00) r6 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x101b, 0x0, 0x0, 0x6, 0x2, 0x1}}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r7 = socket$inet6(0xa, 0x80000, 0x7) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2b0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) 8.456827129s ago: executing program 2 (id=1555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 8.309698034s ago: executing program 2 (id=1557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 7.968518965s ago: executing program 2 (id=1561): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x36de, 0x7c11, 0x0, 0x0}], 0x1}) 6.953313817s ago: executing program 3 (id=1564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbdd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008018) 6.862489268s ago: executing program 0 (id=1565): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'aio_aio12_8\x00', [0xe1da, 0x5, 0xd097, 0xffffffff, 0x10000003, 0xfffffbfe, 0x20000004, 0x6, 0xffe, 0x9, 0x2, 0x1, 0x7fff, 0x4, 0x7, 0x6, 0x5, 0x7, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x1000fd, 0x2, 0xffffffff, 0x7, 0x3, 0x7, 0x5, 0x8070f]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) open$dir(0x0, 0x80040, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 6.806673019s ago: executing program 3 (id=1566): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 6.797516875s ago: executing program 5 (id=1567): mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x7, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001ba00)=""/102400, 0x19000) sendfile(r1, r2, 0x0, 0x20000023896) 6.421363605s ago: executing program 0 (id=1568): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=@generic={0x5, 0x2, 0x0, "73d73602"}) 5.836633355s ago: executing program 1 (id=1569): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x800000004, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = open$dir(0x0, 0x418000, 0x88) name_to_handle_at(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x6, 0x100, 0xc, 0x6d71d0c1}, {0x33e, 0xb86, 0x800, 0x80}}}, &(0x7f0000000240), 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x101200, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000480)) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a00140800000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.735879731s ago: executing program 5 (id=1570): socket$can_raw(0x1d, 0x3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) process_mrelease(r0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x1}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_setup(0x2a32, &(0x7f00000000c0)={0x0, 0xeaf0, 0x1000, 0x1, 0x114}, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x40}) sendfile(r2, r2, 0x0, 0x40008) pipe(&(0x7f0000000280)) 3.889407504s ago: executing program 2 (id=1571): r0 = socket$igmp(0x2, 0x3, 0x2) unshare(0x2c020400) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syncfs(r0) 3.678109595s ago: executing program 1 (id=1572): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.596710859s ago: executing program 5 (id=1573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100, 0xb38dcf3f7bb4b8a7, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) statx(0xffffffffffffffff, 0x0, 0x1000, 0x10, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001180)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lchown(0x0, 0x0, 0x0) chdir(0x0) r1 = open(0x0, 0x64842, 0x0) creat(0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno', 0xa) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) 3.484445078s ago: executing program 3 (id=1574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket(0x2a, 0x2, 0x2) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15e16}]}}]}, 0x3c}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.142525795s ago: executing program 0 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.094859929s ago: executing program 3 (id=1576): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7fd, 0xdddd0000, 0x0, r2}) 2.913593906s ago: executing program 0 (id=1577): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.912898048s ago: executing program 5 (id=1578): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(0x4) 2.696847332s ago: executing program 2 (id=1579): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="340000003d00078dd7aff80000000000017c00000400fc800c0001802e000600800a00000800028004001780080009"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.380043137s ago: executing program 2 (id=1580): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) 2.343661051s ago: executing program 3 (id=1581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setpriority(0x0, 0x0, 0x3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x5, 0x400000000000000, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x1e9, "0ff21b52771d", @short="d05be06e44b625b0"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.292891277s ago: executing program 0 (id=1582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004500)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}], {0x14}}, 0x68}}, 0x0) 2.279976996s ago: executing program 1 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x13, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.256637792s ago: executing program 5 (id=1584): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0xc, 0x0, 0x4f, 0x0, 0x4}, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r2, 0x0, 0x0) 2.116846889s ago: executing program 1 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2d, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x10) 2.116318425s ago: executing program 0 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000000feffffff18acb600", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000010000008520000003000000bf91000000000000b7020000010000008500000085000000b7"], 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df0", @ANYBLOB=',ro', @ANYBLOB=',gro']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.067949602s ago: executing program 1 (id=1587): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) getgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) 1.851692486s ago: executing program 3 (id=1588): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 820.554748ms ago: executing program 1 (id=1589): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x25d, 0xdd7fcced10e30d14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x203}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48041}, 0x40040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 5 (id=1590): syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000c5aa6d08cd0c380003990102030109021200010000c7000904"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) kernel console output (not intermixed with test programs): 395.671958][ T43] Bluetooth: Error in BCSP hdr checksum [ 396.596026][ T5796] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 397.924886][ T5882] usb 4-1: USB disconnect, device number 17 [ 401.119836][ T7979] input: syz1 as /devices/virtual/input/input26 [ 401.288549][ T7982] ufs: You didn't specify the type of your ufs filesystem [ 401.288549][ T7982] [ 401.288549][ T7982] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 401.288549][ T7982] [ 401.288549][ T7982] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 401.288587][ T7982] ufs: ufstype=old is supported read-only [ 403.036011][ T7595] hsr_slave_0: entered promiscuous mode [ 403.062782][ T7595] hsr_slave_1: entered promiscuous mode [ 403.064074][ T7595] debugfs: 'hsr0' already exists in 'hsr' [ 403.064094][ T7595] Cannot create hsr debugfs directory [ 403.554426][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 403.708143][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.708168][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 403.708202][ T31] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 403.708221][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.752390][ T31] usb 1-1: config 0 descriptor?? [ 403.764436][ T7996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.478'. [ 407.530707][ T6649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.543245][ T6649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.553438][ T6649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.554615][ T5868] usb 1-1: USB disconnect, device number 16 [ 407.573458][ T6649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.582145][ T6649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.939170][ T8049] input: syz1 as /devices/virtual/input/input27 [ 409.218566][ T5923] bridge_slave_1: left allmulticast mode [ 409.218585][ T5923] bridge_slave_1: left promiscuous mode [ 409.218731][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.265286][ T5923] bridge_slave_0: left allmulticast mode [ 409.265305][ T5923] bridge_slave_0: left promiscuous mode [ 409.265477][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.507293][ T8059] ufs: You didn't specify the type of your ufs filesystem [ 409.507293][ T8059] [ 409.507293][ T8059] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 409.507293][ T8059] [ 409.507293][ T8059] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 409.507331][ T8059] ufs: ufstype=old is supported read-only [ 409.635596][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.644936][ T5796] Bluetooth: hci5: command tx timeout [ 409.745208][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.833221][ T5923] bond0 (unregistering): Released all slaves [ 410.356256][ T5923] hsr_slave_0: left promiscuous mode [ 410.429953][ T5923] hsr_slave_1: left promiscuous mode [ 410.430934][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.536904][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.702676][ T8074] netlink: 68 bytes leftover after parsing attributes in process `syz.3.492'. [ 410.703443][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'. [ 410.784413][ T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 410.845167][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 410.937272][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.937304][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.937340][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 410.937361][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.013416][ T31] usb 3-1: config 0 descriptor?? [ 411.072566][ T31] hub 3-1:0.0: USB hub found [ 411.254022][ T31] hub 3-1:0.0: 2 ports detected [ 411.716857][ T5796] Bluetooth: hci5: command tx timeout [ 414.616430][ T5796] Bluetooth: hci5: command tx timeout [ 414.618064][ T31] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 414.618118][ T31] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 417.131020][ T6649] Bluetooth: hci5: command tx timeout [ 417.253305][ T31] usbhid 3-1:0.0: can't add hid device: -32 [ 417.253682][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 417.499304][ T31] usb 3-1: USB disconnect, device number 14 [ 418.741050][ T5881] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 419.083004][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 419.134708][ T5881] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 419.134793][ T5881] usb 2-1: config 0 has no interface number 0 [ 419.135849][ T5881] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 419.204315][ T5881] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 419.204342][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.204368][ T5881] usb 2-1: Product: syz [ 419.204381][ T5881] usb 2-1: Manufacturer: syz [ 419.204394][ T5881] usb 2-1: SerialNumber: syz [ 419.307971][ T5881] usb 2-1: config 0 descriptor?? [ 419.497467][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 420.179301][ T8108] netlink: 68 bytes leftover after parsing attributes in process `syz.0.499'. [ 420.183387][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 420.528450][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 420.798693][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 424.590467][ T5881] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 424.611567][ T5881] usb 2-1: USB disconnect, device number 14 [ 426.271340][ T8024] chnl_net:caif_netlink_parms(): no params data found [ 427.041349][ T8144] ufs: You didn't specify the type of your ufs filesystem [ 427.041349][ T8144] [ 427.041349][ T8144] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 427.041349][ T8144] [ 427.041349][ T8144] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 427.043190][ T8144] ufs: ufstype=old is supported read-only [ 431.375644][ T991] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 431.534491][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 431.547073][ T991] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 431.547148][ T991] usb 4-1: config 0 has no interface number 0 [ 431.651622][ T991] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 431.734100][ T991] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 431.801787][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.802721][ T991] usb 4-1: Product: syz [ 431.803446][ T991] usb 4-1: Manufacturer: syz [ 431.803818][ T991] usb 4-1: SerialNumber: syz [ 432.341386][ T991] usb 4-1: config 0 descriptor?? [ 432.977111][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.977303][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.978221][ T8024] bridge_slave_0: entered allmulticast mode [ 433.015605][ T8024] bridge_slave_0: entered promiscuous mode [ 433.040781][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.041181][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.042025][ T8024] bridge_slave_1: entered allmulticast mode [ 433.072841][ T8024] bridge_slave_1: entered promiscuous mode [ 433.161071][ T5881] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 433.306773][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.306798][ T5881] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.306831][ T5881] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 433.306853][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.313260][ T5881] usb 1-1: config 0 descriptor?? [ 433.808032][ T8024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.846044][ T8024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.575569][ T8024] team0: Port device team_slave_0 added [ 434.608895][ T8024] team0: Port device team_slave_1 added [ 435.012928][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.012945][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.012969][ T8024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.075467][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.075479][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.075498][ T8024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.722907][ T8024] hsr_slave_0: entered promiscuous mode [ 435.750547][ T8024] hsr_slave_1: entered promiscuous mode [ 435.754440][ T8024] debugfs: 'hsr0' already exists in 'hsr' [ 435.754466][ T8024] Cannot create hsr debugfs directory [ 435.863881][ T5804] usb 1-1: USB disconnect, device number 17 [ 436.550799][ T8234] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 438.364703][ T991] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -110 [ 439.282832][ T5881] usb 4-1: USB disconnect, device number 18 [ 439.404272][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 439.571246][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.571271][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.571306][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 439.571329][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.621653][ T31] usb 3-1: config 0 descriptor?? [ 439.934309][ T5881] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 440.891912][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.891987][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.150912][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.150975][ T5881] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 441.150998][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.172978][ T5881] usb 1-1: config 0 descriptor?? [ 441.208884][ T5881] pwc: Askey VC010 type 2 USB webcam detected. [ 441.825814][ T5881] pwc: recv_control_msg error -32 req 02 val 2b00 [ 441.827226][ T5881] pwc: recv_control_msg error -32 req 02 val 2700 [ 441.827897][ T5881] pwc: recv_control_msg error -32 req 02 val 2c00 [ 441.828876][ T5881] pwc: recv_control_msg error -32 req 04 val 1000 [ 441.829527][ T5881] pwc: recv_control_msg error -32 req 04 val 1300 [ 441.834626][ T5881] pwc: recv_control_msg error -71 req 04 val 1400 [ 441.837034][ T5881] pwc: recv_control_msg error -71 req 02 val 2000 [ 441.846441][ T5881] pwc: recv_control_msg error -71 req 02 val 2100 [ 441.846934][ T5881] pwc: recv_control_msg error -71 req 04 val 1500 [ 441.847410][ T5881] pwc: recv_control_msg error -71 req 02 val 2500 [ 441.847881][ T5881] pwc: recv_control_msg error -71 req 02 val 2400 [ 441.848357][ T5881] pwc: recv_control_msg error -71 req 02 val 2600 [ 441.848957][ T5881] pwc: recv_control_msg error -71 req 02 val 2900 [ 441.849839][ T5881] pwc: recv_control_msg error -71 req 02 val 2800 [ 441.850513][ T5881] pwc: recv_control_msg error -71 req 04 val 1100 [ 441.851326][ T5881] pwc: recv_control_msg error -71 req 04 val 1200 [ 441.868052][ T5881] pwc: Registered as video103. [ 441.871720][ T5881] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 443.040788][ T31] usb 3-1: USB disconnect, device number 15 [ 443.053658][ T5881] usb 1-1: USB disconnect, device number 18 [ 444.904310][ T5881] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 445.808985][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 445.811231][ T5881] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 445.811255][ T5881] usb 1-1: config 0 has no interface number 0 [ 445.811303][ T5881] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 445.814085][ T5881] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 445.815008][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.815028][ T5881] usb 1-1: Product: syz [ 445.815041][ T5881] usb 1-1: Manufacturer: syz [ 445.815054][ T5881] usb 1-1: SerialNumber: syz [ 445.872618][ T5881] usb 1-1: config 0 descriptor?? [ 450.719394][ T8362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'. [ 451.653624][ T8024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 451.737317][ T8024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 451.795062][ T5881] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -110 [ 451.820647][ T8024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 451.834282][ T6391] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 451.860565][ T8024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 451.990313][ T6391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.990372][ T6391] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 451.990394][ T6391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.027438][ T6391] usb 4-1: config 0 descriptor?? [ 452.074374][ T6391] pwc: Askey VC010 type 2 USB webcam detected. [ 452.442539][ T6391] pwc: recv_control_msg error -32 req 02 val 2b00 [ 452.443971][ T6391] pwc: recv_control_msg error -32 req 02 val 2700 [ 452.479964][ T6391] pwc: recv_control_msg error -32 req 02 val 2c00 [ 452.480855][ T6391] pwc: recv_control_msg error -32 req 04 val 1000 [ 452.500288][ T6391] pwc: recv_control_msg error -32 req 04 val 1300 [ 452.500775][ T6391] pwc: recv_control_msg error -71 req 04 val 1400 [ 452.501257][ T6391] pwc: recv_control_msg error -71 req 02 val 2000 [ 452.503546][ T6391] pwc: recv_control_msg error -71 req 02 val 2100 [ 452.534009][ T6391] pwc: recv_control_msg error -71 req 04 val 1500 [ 452.559103][ T6391] pwc: recv_control_msg error -71 req 02 val 2500 [ 452.603210][ T6391] pwc: recv_control_msg error -71 req 02 val 2400 [ 452.624991][ T6391] pwc: recv_control_msg error -71 req 02 val 2600 [ 452.661949][ T6391] pwc: recv_control_msg error -71 req 02 val 2900 [ 452.692972][ T6391] pwc: recv_control_msg error -71 req 02 val 2800 [ 452.725240][ T6391] pwc: recv_control_msg error -71 req 04 val 1100 [ 452.752606][ T6391] pwc: recv_control_msg error -71 req 04 val 1200 [ 453.218196][ T8024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.307418][ T6391] pwc: Registered as video103. [ 453.331388][ T8024] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.350296][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.359075][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.382581][ T6391] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 453.389912][ T5903] usb 1-1: USB disconnect, device number 19 [ 453.412197][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.412723][ T6664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.784344][ T6391] usb 4-1: USB disconnect, device number 19 [ 456.283432][ T8416] netlink: 68 bytes leftover after parsing attributes in process `syz.1.555'. [ 456.288462][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 456.486940][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 461.186292][ T8416] syz.1.555 (8416) used greatest stack depth: 18728 bytes left [ 461.444769][ T8024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.119420][ T5985] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 462.287509][ T5985] usb 4-1: Using ep0 maxpacket: 32 [ 462.290295][ T5985] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 462.290324][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.321493][ T5985] usb 4-1: config 0 descriptor?? [ 462.823343][ T5985] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 462.855535][ T5985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.856619][ T5985] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 462.856678][ T5985] usb 4-1: media controller created [ 462.949485][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.544275][ T6391] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 464.902227][ T6391] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.902278][ T6391] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 464.902300][ T6391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.921795][ T6391] usb 2-1: config 0 descriptor?? [ 464.997035][ T6391] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 464.998177][ T5985] az6027: usb out operation failed. (-110) [ 465.000792][ T5985] az6027: usb out operation failed. (-32) [ 465.000803][ T5985] stb0899_attach: Driver disabled by Kconfig [ 465.000809][ T5985] az6027: no front-end attached [ 465.000809][ T5985] [ 465.001110][ T5985] az6027: usb out operation failed. (-32) [ 465.001117][ T5985] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 465.003542][ T5985] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 465.115402][ T5985] dvb-usb: schedule remote query interval to 400 msecs. [ 465.115424][ T5985] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 465.445883][ T6391] usb 4-1: USB disconnect, device number 20 [ 466.652452][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.652996][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.044263][ T5804] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 467.829221][ T5804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.829279][ T5804] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 467.829302][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.058657][ T5804] usb 1-1: config 0 descriptor?? [ 468.068645][ T6391] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 468.086263][ T5804] pwc: Askey VC010 type 2 USB webcam detected. [ 468.492401][ T5804] pwc: recv_control_msg error -32 req 02 val 2b00 [ 468.511759][ T5804] pwc: recv_control_msg error -32 req 02 val 2700 [ 468.512644][ T5804] pwc: recv_control_msg error -32 req 02 val 2c00 [ 468.534285][ T5804] pwc: recv_control_msg error -32 req 04 val 1000 [ 468.540948][ T5804] pwc: recv_control_msg error -32 req 04 val 1300 [ 468.541329][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 468.541464][ T5804] pwc: recv_control_msg error -32 req 04 val 1400 [ 468.541861][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 468.543416][ T5804] pwc: recv_control_msg error -32 req 02 val 2000 [ 468.543900][ T5804] pwc: recv_control_msg error -71 req 02 val 2100 [ 468.599398][ T5804] pwc: recv_control_msg error -71 req 04 val 1500 [ 468.599952][ T5804] pwc: recv_control_msg error -71 req 02 val 2500 [ 468.600420][ T5804] pwc: recv_control_msg error -71 req 02 val 2400 [ 468.602251][ T5804] pwc: recv_control_msg error -71 req 02 val 2600 [ 468.602742][ T5804] pwc: recv_control_msg error -71 req 02 val 2900 [ 468.603215][ T5804] pwc: recv_control_msg error -71 req 02 val 2800 [ 468.603893][ T5804] pwc: recv_control_msg error -71 req 04 val 1100 [ 468.644367][ T5804] pwc: recv_control_msg error -71 req 04 val 1200 [ 468.681830][ T5804] pwc: Registered as video103. [ 468.700891][ T5804] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 468.746963][ T5804] usb 1-1: USB disconnect, device number 20 [ 468.977426][ T6391] usb 2-1: USB disconnect, device number 15 [ 469.363454][ T6649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.374519][ T6649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.386170][ T6649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.387646][ T6649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.389343][ T6649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.526963][ T8517] ufs: You didn't specify the type of your ufs filesystem [ 472.526963][ T8517] [ 472.526963][ T8517] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 472.526963][ T8517] [ 472.526963][ T8517] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 472.527258][ T8517] ufs: ufstype=old is supported read-only [ 472.674668][ T6649] Bluetooth: hci4: command tx timeout [ 474.847265][ T6649] Bluetooth: hci4: command tx timeout [ 477.448360][ T5796] Bluetooth: hci4: command tx timeout [ 477.727484][ T8555] input: syz1 as /devices/virtual/input/input37 [ 478.124269][ T5985] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 478.916791][ T5985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.916859][ T5985] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 478.916882][ T5985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.977427][ T5985] usb 1-1: config 0 descriptor?? [ 479.005646][ T5985] pwc: Askey VC010 type 2 USB webcam detected. [ 479.643686][ T5796] Bluetooth: hci4: command tx timeout [ 480.198353][ T5985] pwc: recv_control_msg error -32 req 02 val 2b00 [ 480.395042][ T5985] pwc: recv_control_msg error -32 req 02 val 2700 [ 480.396063][ T5985] pwc: recv_control_msg error -32 req 02 val 2c00 [ 480.401093][ T5985] pwc: recv_control_msg error -32 req 04 val 1000 [ 480.518108][ T5985] pwc: recv_control_msg error -32 req 04 val 1300 [ 480.518588][ T5985] pwc: recv_control_msg error -71 req 04 val 1400 [ 480.519031][ T5985] pwc: recv_control_msg error -71 req 02 val 2000 [ 480.519487][ T5985] pwc: recv_control_msg error -71 req 02 val 2100 [ 480.519951][ T5985] pwc: recv_control_msg error -71 req 04 val 1500 [ 480.520449][ T5985] pwc: recv_control_msg error -71 req 02 val 2500 [ 480.520907][ T5985] pwc: recv_control_msg error -71 req 02 val 2400 [ 480.521356][ T5985] pwc: recv_control_msg error -71 req 02 val 2600 [ 480.521813][ T5985] pwc: recv_control_msg error -71 req 02 val 2900 [ 480.522287][ T5985] pwc: recv_control_msg error -71 req 02 val 2800 [ 480.522944][ T5985] pwc: recv_control_msg error -71 req 04 val 1100 [ 480.523416][ T5985] pwc: recv_control_msg error -71 req 04 val 1200 [ 480.718268][ T5985] pwc: Registered as video103. [ 480.769610][ T5985] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 480.829249][ T5985] usb 1-1: USB disconnect, device number 21 [ 485.575421][ T43] Bluetooth: Error in BCSP hdr checksum [ 486.486083][ T5796] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 486.505078][ T69] Bluetooth: Error in BCSP hdr checksum [ 489.951323][ T8494] chnl_net:caif_netlink_parms(): no params data found [ 491.806841][ T6664] bridge_slave_1: left allmulticast mode [ 491.806867][ T6664] bridge_slave_1: left promiscuous mode [ 491.809098][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.006509][ T6664] bridge_slave_0: left allmulticast mode [ 492.006541][ T6664] bridge_slave_0: left promiscuous mode [ 492.006778][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.840020][ T8684] ufs: You didn't specify the type of your ufs filesystem [ 495.840020][ T8684] [ 495.840020][ T8684] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 495.840020][ T8684] [ 495.840020][ T8684] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 495.840225][ T8684] ufs: ufstype=old is supported read-only [ 496.944258][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 497.166467][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.166527][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 497.166548][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.173867][ T31] usb 3-1: config 0 descriptor?? [ 497.217623][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 497.936455][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 497.943288][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 497.957830][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 498.162203][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 498.181041][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 498.182073][ T31] pwc: recv_control_msg error -71 req 04 val 1400 [ 498.194303][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 498.205419][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 498.205782][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 498.206103][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 498.206428][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 498.206743][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 498.207066][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 498.207455][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 498.208835][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 498.209298][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 498.212246][ T31] pwc: Registered as video103. [ 499.100993][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 499.129758][ T31] usb 3-1: USB disconnect, device number 16 [ 499.364377][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 499.534291][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 499.546746][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 499.546774][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.577080][ T9] usb 1-1: config 0 descriptor?? [ 499.785472][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 500.747271][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 500.793262][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 500.793326][ T9] usb 1-1: media controller created [ 500.841218][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.659542][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.659630][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.914985][ T6664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.021739][ T6664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.051015][ T6664] bond0 (unregistering): Released all slaves [ 502.218181][ T9] az6027: usb out operation failed. (-71) [ 502.218487][ T9] az6027: usb out operation failed. (-71) [ 502.218495][ T9] stb0899_attach: Driver disabled by Kconfig [ 502.218501][ T9] az6027: no front-end attached [ 502.218501][ T9] [ 502.218782][ T9] az6027: usb out operation failed. (-71) [ 502.218790][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 502.375605][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 502.403779][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 502.403802][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 502.426384][ T9] usb 1-1: USB disconnect, device number 22 [ 502.884176][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.058151][ T8727] ufs: You didn't specify the type of your ufs filesystem [ 503.058151][ T8727] [ 503.058151][ T8727] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 503.058151][ T8727] [ 503.058151][ T8727] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 503.058418][ T8727] ufs: ufstype=old is supported read-only [ 503.079896][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.462241][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.672441][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.725989][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 504.223212][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.385111][ T6391] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 504.445856][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.617607][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.023101][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.326602][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.344538][ T6664] hsr_slave_0: left promiscuous mode [ 505.388955][ T6664] hsr_slave_1: left promiscuous mode [ 505.389934][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.460113][ T6391] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.460169][ T6391] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 505.460190][ T6391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.502889][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.514803][ T6391] usb 3-1: config 0 descriptor?? [ 505.537984][ T6391] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 506.187928][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.205921][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.206471][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.474853][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.587794][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.758184][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.354020][ T8746] netlink: 48 bytes leftover after parsing attributes in process `syz.3.620'. [ 507.745540][ T6391] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 508.014278][ T6391] usb 4-1: Using ep0 maxpacket: 32 [ 508.016616][ T6391] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 508.016641][ T6391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.020603][ T6391] usb 4-1: config 0 descriptor?? [ 508.329563][ T6391] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 508.334893][ T6391] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.335733][ T6391] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 508.335766][ T6391] usb 4-1: media controller created [ 508.390433][ T6391] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.306477][ T6664] team0 (unregistering): Port device team_slave_1 removed [ 510.516545][ T6391] az6027: usb out operation failed. (-110) [ 510.517045][ T6391] az6027: usb out operation failed. (-32) [ 510.517058][ T6391] stb0899_attach: Driver disabled by Kconfig [ 510.517067][ T6391] az6027: no front-end attached [ 510.517067][ T6391] [ 510.517448][ T6391] az6027: usb out operation failed. (-32) [ 510.517457][ T6391] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 510.519472][ T6391] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 510.521373][ T6391] dvb-usb: schedule remote query interval to 400 msecs. [ 510.521385][ T6391] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 510.695367][ T6391] usb 4-1: USB disconnect, device number 21 [ 510.783170][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.934560][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.069340][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.244042][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.718778][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.059850][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.164990][ T6664] team0 (unregistering): Port device team_slave_0 removed [ 512.274218][ T6391] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 515.551574][ T37] audit: type=1326 audit(1760330031.418:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8793 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 516.461247][ T8805] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 516.461290][ T8805] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 516.804297][ T5985] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 516.974488][ T5985] usb 2-1: Using ep0 maxpacket: 32 [ 516.976732][ T5985] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 516.976760][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.980089][ T5985] usb 2-1: config 0 descriptor?? [ 517.126875][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.127088][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.127309][ T8494] bridge_slave_0: entered allmulticast mode [ 517.129666][ T8494] bridge_slave_0: entered promiscuous mode [ 517.191226][ T5985] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 517.200789][ T5985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.201884][ T5985] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 517.201935][ T5985] usb 2-1: media controller created [ 517.242844][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.242979][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.243198][ T8494] bridge_slave_1: entered allmulticast mode [ 517.276520][ T8494] bridge_slave_1: entered promiscuous mode [ 517.300046][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.353295][ T44] usb 3-1: USB disconnect, device number 17 [ 519.477832][ T5985] az6027: usb out operation failed. (-110) [ 519.478190][ T5985] az6027: usb out operation failed. (-32) [ 519.478198][ T5985] stb0899_attach: Driver disabled by Kconfig [ 519.478203][ T5985] az6027: no front-end attached [ 519.478203][ T5985] [ 519.478557][ T5985] az6027: usb out operation failed. (-32) [ 519.478568][ T5985] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 519.483850][ T5985] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 519.495705][ T5985] dvb-usb: schedule remote query interval to 400 msecs. [ 519.495727][ T5985] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 519.715564][ T5985] usb 2-1: USB disconnect, device number 16 [ 521.796190][ T5985] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 522.213216][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.241556][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.095669][ T8494] team0: Port device team_slave_0 added [ 524.099207][ T8494] team0: Port device team_slave_1 added [ 524.700920][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.700932][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.700946][ T8494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.702867][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.702876][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.702889][ T8494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.194220][ T991] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 529.326758][ T5796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.337235][ T5796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.338416][ T5796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.340512][ T5796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.341250][ T5796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 529.374195][ T991] usb 1-1: Using ep0 maxpacket: 32 [ 530.294226][ T991] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 530.294255][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.451530][ T991] usb 1-1: config 0 descriptor?? [ 530.702400][ T991] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 530.737966][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 530.739082][ T991] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 530.739133][ T991] usb 1-1: media controller created [ 530.791662][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.394667][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 531.395253][ T6649] Bluetooth: hci5: command tx timeout [ 532.186985][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.187011][ T44] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.187047][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 532.187069][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.196240][ T44] usb 4-1: config 0 descriptor?? [ 532.307746][ T991] az6027: usb out operation failed. (-71) [ 532.308220][ T991] az6027: usb out operation failed. (-71) [ 532.308233][ T991] stb0899_attach: Driver disabled by Kconfig [ 532.308242][ T991] az6027: no front-end attached [ 532.308242][ T991] [ 532.308674][ T991] az6027: usb out operation failed. (-71) [ 532.308687][ T991] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 532.312289][ T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 532.382317][ T991] dvb-usb: schedule remote query interval to 400 msecs. [ 532.382341][ T991] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 532.469263][ T991] usb 1-1: USB disconnect, device number 23 [ 532.766427][ T8925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.657'. [ 532.767573][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 532.802290][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 533.521717][ T6649] Bluetooth: hci5: command tx timeout [ 534.124911][ T44] usb 4-1: USB disconnect, device number 22 [ 535.112529][ T991] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 535.554316][ T6649] Bluetooth: hci5: command tx timeout [ 536.091700][ T58] bridge_slave_1: left allmulticast mode [ 536.091726][ T58] bridge_slave_1: left promiscuous mode [ 536.091933][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.267440][ T58] bridge_slave_0: left allmulticast mode [ 536.268828][ T58] bridge_slave_0: left promiscuous mode [ 536.269088][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.634318][ T6649] Bluetooth: hci5: command tx timeout [ 539.632493][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.776327][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.871323][ T58] bond0 (unregistering): Released all slaves [ 542.377133][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.718034][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.353948][ T58] team0 (unregistering): Port device team_slave_1 removed [ 545.608501][ T58] team0 (unregistering): Port device team_slave_0 removed [ 551.473461][ T8891] chnl_net:caif_netlink_parms(): no params data found [ 553.303582][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.303773][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.304012][ T8891] bridge_slave_0: entered allmulticast mode [ 554.278011][ T8891] bridge_slave_0: entered promiscuous mode [ 554.353509][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.353689][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.353925][ T8891] bridge_slave_1: entered allmulticast mode [ 554.360839][ T8891] bridge_slave_1: entered promiscuous mode [ 556.239597][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.275593][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.198579][ T8891] team0: Port device team_slave_0 added [ 557.239221][ T8891] team0: Port device team_slave_1 added [ 559.714636][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.714652][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.714678][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.724430][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.724446][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.724470][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.637636][ T8891] hsr_slave_0: entered promiscuous mode [ 560.639730][ T8891] hsr_slave_1: entered promiscuous mode [ 560.640678][ T8891] debugfs: 'hsr0' already exists in 'hsr' [ 560.640701][ T8891] Cannot create hsr debugfs directory [ 560.724251][ T5881] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 561.030062][ T5881] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 561.030149][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.030224][ T5881] usb 1-1: config 0 has no interface number 0 [ 561.030689][ T5881] usb 1-1: config 0 interface 255 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 561.030712][ T5881] usb 1-1: config 0 interface 255 has no altsetting 0 [ 561.030739][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 561.030758][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.338863][ T5881] usb 1-1: config 0 descriptor?? [ 561.528510][ T5881] usbhid 1-1:0.255: couldn't find an input interrupt endpoint [ 563.117908][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.117980][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.674157][ T9] usb 1-1: USB disconnect, device number 24 [ 565.726808][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 576.167867][ T9266] netlink: 48 bytes leftover after parsing attributes in process `syz.2.726'. [ 576.899553][ T8891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 577.021580][ T8891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 577.079990][ T8891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 577.229362][ T8891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 578.811992][ T9288] block device autoloading is deprecated and will be removed. [ 578.812153][ T9288] ufs: You didn't specify the type of your ufs filesystem [ 578.812153][ T9288] [ 578.812153][ T9288] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 578.812153][ T9288] [ 578.812153][ T9288] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 578.812188][ T9288] ufs: ufstype=old is supported read-only [ 578.933952][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.072807][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.112066][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.112271][ T6664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.166892][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.170583][ T6664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.419481][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.972049][ T9386] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.255064][ T9386] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.258403][ T9386] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.282028][ T9386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 589.290056][ T9386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 592.122506][ T6649] Bluetooth: hci4: command tx timeout [ 594.095303][ T5985] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 594.137935][ T6649] Bluetooth: hci3: unexpected subevent 0x12 length: 11 > 5 [ 594.774197][ T6649] Bluetooth: hci4: command tx timeout [ 595.122236][ T5985] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.122272][ T5985] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 595.122284][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.152751][ T5985] usb 2-1: config 0 descriptor?? [ 595.163543][ T5985] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 596.362545][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.363583][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.834215][ T6649] Bluetooth: hci4: command tx timeout [ 597.992969][ T9459] EXT4-fs (nbd1): unable to read superblock [ 598.916655][ T6649] Bluetooth: hci4: command tx timeout [ 598.992362][ T31] usb 2-1: USB disconnect, device number 17 [ 601.916980][ T9385] chnl_net:caif_netlink_parms(): no params data found [ 602.526162][ T9504] netlink: 68 bytes leftover after parsing attributes in process `syz.3.762'. [ 602.745049][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 602.872014][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 603.638599][ T6649] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 603.666625][ T6649] Bluetooth: hci1: Injecting HCI hardware error event [ 603.672922][ T9386] Bluetooth: hci1: hardware error 0x00 [ 606.640082][ T9386] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 609.160606][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.160683][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.160852][ T9385] bridge_slave_0: entered allmulticast mode [ 609.186416][ T9385] bridge_slave_0: entered promiscuous mode [ 611.171982][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.173802][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.173979][ T9385] bridge_slave_1: entered allmulticast mode [ 611.223663][ T9385] bridge_slave_1: entered promiscuous mode [ 612.218466][ T9583] ufs: You didn't specify the type of your ufs filesystem [ 612.218466][ T9583] [ 612.218466][ T9583] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 612.218466][ T9583] [ 612.218466][ T9583] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 612.220217][ T9583] ufs: ufstype=old is supported read-only [ 613.527496][ T69] Bluetooth: Error in BCSP hdr checksum [ 613.888239][ T69] Bluetooth: Error in BCSP hdr checksum [ 614.230336][ T141] Bluetooth: Error in BCSP hdr checksum [ 614.387996][ T9385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.692397][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 615.281749][ T6649] Bluetooth: hci5: command 0x1003 tx timeout [ 615.288208][ T9386] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 615.631432][ T9385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.704482][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 615.707641][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 615.707670][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.765685][ T9] usb 2-1: config 0 descriptor?? [ 615.871118][ T12] bridge_slave_1: left allmulticast mode [ 615.871147][ T12] bridge_slave_1: left promiscuous mode [ 615.871583][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.363618][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 616.386080][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 616.390697][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 616.390759][ T9] usb 2-1: media controller created [ 616.458816][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.510548][ T12] bridge_slave_0: left allmulticast mode [ 616.510577][ T12] bridge_slave_0: left promiscuous mode [ 616.510849][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.572723][ T9] az6027: usb out operation failed. (-71) [ 616.573136][ T9] az6027: usb out operation failed. (-71) [ 616.573148][ T9] stb0899_attach: Driver disabled by Kconfig [ 616.573158][ T9] az6027: no front-end attached [ 616.573158][ T9] [ 616.573534][ T9] az6027: usb out operation failed. (-71) [ 616.573546][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 616.630030][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 616.654738][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 616.654760][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 616.685200][ T9] usb 2-1: USB disconnect, device number 18 [ 617.862174][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 623.894209][ T991] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 624.073050][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 624.077615][ T991] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 624.077643][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.082866][ T991] usb 2-1: config 0 descriptor?? [ 624.306285][ T991] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 624.309051][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 624.310064][ T991] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 624.310122][ T991] usb 2-1: media controller created [ 624.335946][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.354608][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.414934][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.457857][ T12] bond0 (unregistering): Released all slaves [ 624.529788][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.530743][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.541861][ T991] az6027: usb out operation failed. (-71) [ 624.542275][ T991] az6027: usb out operation failed. (-71) [ 624.542288][ T991] stb0899_attach: Driver disabled by Kconfig [ 624.542297][ T991] az6027: no front-end attached [ 624.542297][ T991] [ 624.542671][ T991] az6027: usb out operation failed. (-71) [ 624.542683][ T991] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 624.555700][ T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 624.567572][ T991] dvb-usb: schedule remote query interval to 400 msecs. [ 624.567593][ T991] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 624.611231][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.624229][ T991] usb 2-1: USB disconnect, device number 19 [ 624.767792][ T9385] team0: Port device team_slave_0 added [ 624.807648][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.844353][ T991] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 625.369598][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.410626][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.531915][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.574911][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.607414][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.922911][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.246177][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.655869][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.142546][ T9385] team0: Port device team_slave_1 added [ 628.614169][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.958139][ T9724] block device autoloading is deprecated and will be removed. [ 630.958279][ T9724] ufs: You didn't specify the type of your ufs filesystem [ 630.958279][ T9724] [ 630.958279][ T9724] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 630.958279][ T9724] [ 630.958279][ T9724] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 630.958314][ T9724] ufs: ufstype=old is supported read-only [ 631.296078][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 631.973470][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.973530][ T9] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 631.973554][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.980594][ T9] usb 3-1: config 0 descriptor?? [ 631.995937][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 633.523130][ T6391] usb 3-1: USB disconnect, device number 18 [ 636.872867][ T12] hsr_slave_0: left promiscuous mode [ 637.864342][ T12] hsr_slave_1: left promiscuous mode [ 637.865045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.889686][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.282328][ T9832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.834'. [ 650.802646][ T6649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 650.815153][ T6649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 650.818066][ T6649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 650.820427][ T6649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.821732][ T6649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 650.856218][ T12] team0 (unregistering): Port device team_slave_1 removed [ 652.066582][ T12] team0 (unregistering): Port device team_slave_0 removed [ 653.314305][ T6649] Bluetooth: hci5: command tx timeout [ 653.836694][ T9869] kAFS: No cell specified [ 655.394364][ T6649] Bluetooth: hci5: command tx timeout [ 657.476477][ T6649] Bluetooth: hci5: command tx timeout [ 659.554724][ T6649] Bluetooth: hci5: command tx timeout [ 662.958948][ T58] Bluetooth: Error in BCSP hdr checksum [ 663.358624][ T1172] Bluetooth: Error in BCSP hdr checksum [ 663.517851][ T9957] ufs: You didn't specify the type of your ufs filesystem [ 663.517851][ T9957] [ 663.517851][ T9957] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 663.517851][ T9957] [ 663.517851][ T9957] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 663.518114][ T9957] ufs: ufstype=old is supported read-only [ 664.215181][ T1172] Bluetooth: Error in BCSP hdr checksum [ 664.524216][ T6649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 667.144123][ T37] audit: type=1326 audit(1760330183.018:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144174][ T37] audit: type=1326 audit(1760330183.018:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144213][ T37] audit: type=1326 audit(1760330183.018:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144250][ T37] audit: type=1326 audit(1760330183.018:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144288][ T37] audit: type=1326 audit(1760330183.018:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144325][ T37] audit: type=1326 audit(1760330183.018:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144359][ T37] audit: type=1326 audit(1760330183.018:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144401][ T37] audit: type=1326 audit(1760330183.018:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144441][ T37] audit: type=1326 audit(1760330183.018:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 667.144483][ T37] audit: type=1326 audit(1760330183.018:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.0.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65ceceec9 code=0x7fc00000 [ 671.127604][T10016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.873'. [ 672.008940][ T9842] chnl_net:caif_netlink_parms(): no params data found [ 672.386482][ T12] bridge_slave_1: left allmulticast mode [ 672.386510][ T12] bridge_slave_1: left promiscuous mode [ 672.386749][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.609749][ T12] bridge_slave_0: left allmulticast mode [ 672.609777][ T12] bridge_slave_0: left promiscuous mode [ 672.610027][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.326996][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.894883][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.003487][ T12] bond0 (unregistering): Released all slaves [ 675.364158][ T9386] Bluetooth: hci4: command 0x1003 tx timeout [ 675.364415][ T6649] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 676.564772][ T12] team0 (unregistering): Port device team_slave_1 removed [ 678.719898][T10090] netlink: 64 bytes leftover after parsing attributes in process `syz.2.889'. [ 678.750558][ T12] team0 (unregistering): Port device team_slave_0 removed [ 685.609102][T10126] EXT4-fs (nbd2): unable to read superblock [ 685.961746][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.961817][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.498533][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.498667][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.498994][ T9842] bridge_slave_0: entered allmulticast mode [ 687.524529][ T9842] bridge_slave_0: entered promiscuous mode [ 687.567345][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.567472][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.567723][ T9842] bridge_slave_1: entered allmulticast mode [ 687.583607][ T9842] bridge_slave_1: entered promiscuous mode [ 688.017119][ T5868] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 688.466765][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.466823][ T5868] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 688.466846][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.504747][ T5868] usb 3-1: config 0 descriptor?? [ 688.535070][ T5868] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 690.140091][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.140460][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.642317][ T9842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.514507][ T9842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.536730][T10173] EXT4-fs (nbd2): unable to read superblock [ 693.084776][T10190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.913'. [ 693.308687][ T9842] team0: Port device team_slave_0 added [ 693.337341][ T9842] team0: Port device team_slave_1 added [ 693.429661][T10195] EXT4-fs (nbd3): unable to read superblock [ 693.853892][ T6391] usb 3-1: USB disconnect, device number 19 [ 694.765288][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.765305][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.765330][ T9842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.885371][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.885388][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.885414][ T9842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.294539][ T9842] hsr_slave_0: entered promiscuous mode [ 696.295620][ T9842] hsr_slave_1: entered promiscuous mode [ 696.296151][ T9842] debugfs: 'hsr0' already exists in 'hsr' [ 696.296166][ T9842] Cannot create hsr debugfs directory [ 697.924672][T10244] netlink: 52 bytes leftover after parsing attributes in process `syz.1.925'. [ 701.536487][T10277] ufs: You didn't specify the type of your ufs filesystem [ 701.536487][T10277] [ 701.536487][T10277] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 701.536487][T10277] [ 701.536487][T10277] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 701.536690][T10277] ufs: ufstype=old is supported read-only [ 704.777017][T10301] netlink: 52 bytes leftover after parsing attributes in process `syz.3.936'. [ 705.664250][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.938'. [ 707.801771][T10334] ufs: You didn't specify the type of your ufs filesystem [ 707.801771][T10334] [ 707.801771][T10334] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 707.801771][T10334] [ 707.801771][T10334] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 707.801980][T10334] ufs: ufstype=old is supported read-only [ 708.683829][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 710.219465][T10353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.947'. [ 713.940665][ T9386] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 714.084209][ T9386] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 714.086938][ T9386] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 714.088638][ T9386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 714.089865][ T9386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 716.372903][ T9386] Bluetooth: hci4: command tx timeout [ 718.994716][ T9386] Bluetooth: hci4: command tx timeout [ 721.556405][ T9386] Bluetooth: hci4: command tx timeout [ 721.997264][T10440] ufs: You didn't specify the type of your ufs filesystem [ 721.997264][T10440] [ 721.997264][T10440] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 721.997264][T10440] [ 721.997264][T10440] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 721.997473][T10440] ufs: ufstype=old is supported read-only [ 723.689276][ T9386] Bluetooth: hci4: command tx timeout [ 727.525984][T10373] chnl_net:caif_netlink_parms(): no params data found [ 728.018245][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 728.425409][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.425468][ T31] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 728.425490][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.419349][ T31] usb 4-1: config 0 descriptor?? [ 729.500523][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 730.749527][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.750046][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.559497][T10537] EXT4-fs (nbd3): unable to read superblock [ 735.045859][ T31] usb 4-1: USB disconnect, device number 23 [ 735.071578][T10373] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.071721][T10373] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.071975][T10373] bridge_slave_0: entered allmulticast mode [ 735.078484][T10373] bridge_slave_0: entered promiscuous mode [ 735.148554][T10373] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.148684][T10373] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.148936][T10373] bridge_slave_1: entered allmulticast mode [ 735.151730][T10373] bridge_slave_1: entered promiscuous mode [ 740.468728][T10373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.128303][T10373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.494919][ T5903] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 742.083415][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 742.396692][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 742.396725][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.396765][ T5903] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 742.396786][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.470970][ T5903] usb 3-1: config 0 descriptor?? [ 742.487518][ T5903] hub 3-1:0.0: USB hub found [ 742.660970][ T5903] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 743.355416][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 743.355557][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 743.379606][ T5903] usb 3-1: USB disconnect, device number 20 [ 745.992142][T10373] team0: Port device team_slave_0 added [ 746.017232][T10373] team0: Port device team_slave_1 added [ 746.518715][ T3646] bridge_slave_1: left allmulticast mode [ 746.518735][ T3646] bridge_slave_1: left promiscuous mode [ 746.518889][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.639051][ T3646] bridge_slave_0: left allmulticast mode [ 746.639080][ T3646] bridge_slave_0: left promiscuous mode [ 746.639402][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.399846][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.399890][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.498753][ T3646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.745805][ T3646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.431928][ T3646] bond0 (unregistering): Released all slaves [ 752.750270][T10373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.750289][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.750313][T10373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.803093][T10373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.803111][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.803138][T10373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.886434][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 752.917857][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 753.894261][ T3646] hsr_slave_0: left promiscuous mode [ 753.964297][ T3646] hsr_slave_1: left promiscuous mode [ 753.965238][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.998141][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.753047][T10739] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1034'. [ 759.751052][ T3646] team0 (unregistering): Port device team_slave_1 removed [ 760.070404][ T3646] team0 (unregistering): Port device team_slave_0 removed [ 761.970859][T10373] hsr_slave_0: entered promiscuous mode [ 761.971733][T10373] hsr_slave_1: entered promiscuous mode [ 761.972425][T10373] debugfs: 'hsr0' already exists in 'hsr' [ 761.972441][T10373] Cannot create hsr debugfs directory [ 763.493884][T10023] Bluetooth: Error in BCSP hdr checksum [ 764.450201][ T9386] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 764.522197][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 764.539301][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 764.558956][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 764.579204][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 769.630201][T10866] netlink: 'syz.3.1057': attribute type 10 has an invalid length. [ 770.243252][T10866] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 775.845625][ T6649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 775.859310][ T6649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 775.862821][ T6649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 775.871269][ T6649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 775.872027][ T6649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 776.316051][T10934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'. [ 776.318211][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 777.766178][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 777.954219][ T9386] Bluetooth: hci5: command tx timeout [ 778.676410][T10966] netlink: 'syz.2.1073': attribute type 10 has an invalid length. [ 780.271876][ T9386] Bluetooth: hci5: command tx timeout [ 782.274384][ T9386] Bluetooth: hci5: command tx timeout [ 782.903033][T10926] chnl_net:caif_netlink_parms(): no params data found [ 782.948009][ T8737] bridge_slave_1: left allmulticast mode [ 782.948028][ T8737] bridge_slave_1: left promiscuous mode [ 782.948215][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.335092][T10996] EXT4-fs (nbd0): unable to read superblock [ 783.979052][ T8737] bridge_slave_0: left allmulticast mode [ 783.979082][ T8737] bridge_slave_0: left promiscuous mode [ 783.979349][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.354238][ T9386] Bluetooth: hci5: command tx timeout [ 790.097432][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.244236][T11055] ufs: You didn't specify the type of your ufs filesystem [ 790.244236][T11055] [ 790.244236][T11055] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 790.244236][T11055] [ 790.244236][T11055] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 790.244441][T11055] ufs: ufstype=old is supported read-only [ 792.461168][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.889672][ T8737] bond0 (unregistering): Released all slaves [ 795.435112][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 795.435132][ T37] audit: type=1326 audit(1760330311.298:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 795.435171][ T37] audit: type=1326 audit(1760330311.298:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 795.435201][ T37] audit: type=1326 audit(1760330311.298:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 795.435231][ T37] audit: type=1326 audit(1760330311.298:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 795.435264][ T37] audit: type=1326 audit(1760330311.298:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 795.435300][ T37] audit: type=1326 audit(1760330311.298:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 795.435336][ T37] audit: type=1326 audit(1760330311.298:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 795.464110][ T5868] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 796.564341][ T1172] Bluetooth: Error in BCSP hdr checksum [ 796.587613][ T37] audit: type=1326 audit(1760330311.298:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11067 comm="syz.3.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x7fc00000 [ 796.756749][ T5868] usb 2-1: device descriptor read/all, error -71 [ 797.476594][ T9386] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 799.834105][ T8737] hsr_slave_0: left promiscuous mode [ 799.888006][ T8737] hsr_slave_1: left promiscuous mode [ 799.888947][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.045124][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.302976][T11123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1110'. [ 800.304262][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 800.425194][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 802.331917][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 802.474877][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 803.094121][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 803.164955][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1112'. [ 803.326543][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.331351][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 803.331381][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 803.331400][ T9] usb 4-1: Product: syz [ 803.331414][ T9] usb 4-1: Manufacturer: syz [ 803.331427][ T9] usb 4-1: SerialNumber: syz [ 803.341868][ T9] usb 4-1: config 0 descriptor?? [ 803.937983][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 803.963226][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.963544][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.144759][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.245878][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.246101][T10926] bridge_slave_0: entered allmulticast mode [ 804.272611][T10926] bridge_slave_0: entered promiscuous mode [ 804.327085][T11137] udevd[11137]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.333465][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.333591][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.333817][T10926] bridge_slave_1: entered allmulticast mode [ 804.379307][T10926] bridge_slave_1: entered promiscuous mode [ 806.579902][ T9] usb 4-1: USB disconnect, device number 24 [ 808.434473][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1121'. [ 808.568416][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.810642][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.024765][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.024840][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.107600][T11173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1122'. [ 810.583277][T10926] team0: Port device team_slave_0 added [ 810.656693][T10926] team0: Port device team_slave_1 added [ 813.465212][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.465229][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.465255][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.473100][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.473115][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.473141][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.970903][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1133'. [ 813.977396][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 814.174898][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 817.030127][T10926] hsr_slave_0: entered promiscuous mode [ 817.031524][T10926] hsr_slave_1: entered promiscuous mode [ 817.032460][T10926] debugfs: 'hsr0' already exists in 'hsr' [ 817.032483][T10926] Cannot create hsr debugfs directory [ 819.285275][T10926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 819.370406][T10926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 819.393701][T10926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 819.711102][T10926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 820.290145][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.453281][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.525014][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.529458][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.609840][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.612458][ T8737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.194228][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 821.356998][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 821.358920][ T9] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 821.358946][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 821.361151][ T9] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 821.361167][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.361179][ T9] usb 1-1: Product: syz [ 821.361186][ T9] usb 1-1: Manufacturer: syz [ 821.361193][ T9] usb 1-1: SerialNumber: syz [ 821.376267][ T9] usb 1-1: config 0 descriptor?? [ 821.607760][ T9] usb 1-1: USB disconnect, device number 25 [ 821.691479][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.157110][T10926] veth0_vlan: entered promiscuous mode [ 822.172682][T10926] veth1_vlan: entered promiscuous mode [ 822.212202][T10926] veth0_macvtap: entered promiscuous mode [ 822.225006][T10926] veth1_macvtap: entered promiscuous mode [ 822.250094][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.263152][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.242400][T10023] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.169071][T10023] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.290838][T10023] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.374077][T10023] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.231736][ T1514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.231756][ T1514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.696068][ T37] audit: type=1326 audit(1760330342.568:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702631][ T37] audit: type=1326 audit(1760330342.578:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702685][ T37] audit: type=1326 audit(1760330342.578:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702726][ T37] audit: type=1326 audit(1760330342.578:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702766][ T37] audit: type=1326 audit(1760330342.578:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702806][ T37] audit: type=1326 audit(1760330342.578:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702844][ T37] audit: type=1326 audit(1760330342.578:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702889][ T37] audit: type=1326 audit(1760330342.578:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702929][ T37] audit: type=1326 audit(1760330342.578:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 826.702970][ T37] audit: type=1326 audit(1760330342.578:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11295 comm="syz.1.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd53eeec9 code=0x7fc00000 [ 827.657724][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.657744][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.482473][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 828.786492][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 830.597710][T11348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1162'. [ 834.131490][ T1172] Bluetooth: Error in BCSP hdr checksum [ 834.384454][ T6549] Bluetooth: Error in BCSP hdr checksum [ 834.768355][ T1172] Bluetooth: Error in BCSP hdr checksum [ 834.967931][ T13] Bluetooth: Error in BCSP hdr checksum [ 835.876415][ T9386] Bluetooth: hci4: command 0x1003 tx timeout [ 835.876678][ T6649] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 836.684761][T11399] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 837.011948][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1176'. [ 838.685020][T11399] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 839.124444][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1179'. [ 839.148669][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1179'. [ 848.029229][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.110890][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.609598][ C1] vkms_vblank_simulate: vblank timer overrun [ 849.163768][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.668346][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.990505][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.063121][T11510] netlink: 'syz.1.1204': attribute type 10 has an invalid length. [ 855.109182][ C1] vkms_vblank_simulate: vblank timer overrun [ 855.461917][T11538] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1212'. [ 855.890260][ C1] vkms_vblank_simulate: vblank timer overrun [ 855.938643][T11544] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1213'. [ 855.941197][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 856.462969][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.556849][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 856.800240][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.087726][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.870051][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.298018][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.385151][ T5868] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 859.015667][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.015726][ T5868] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 859.015751][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.137054][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.172354][ T5868] usb 3-1: config 0 descriptor?? [ 859.223275][ T5868] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 859.408222][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.988645][T11577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.990018][T11577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.360116][T11578] EXT4-fs (nbd2): unable to read superblock [ 861.996845][ T5903] usb 3-1: USB disconnect, device number 21 [ 864.090188][ T5903] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 864.644080][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 864.650176][ T5903] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 864.650205][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.659433][ T5903] usb 4-1: config 0 descriptor?? [ 864.905459][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 864.912962][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 864.919704][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 864.919759][ T5903] usb 4-1: media controller created [ 865.061456][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.361051][ T5903] az6027: usb out operation failed. (-71) [ 865.361452][ T5903] az6027: usb out operation failed. (-71) [ 865.361465][ T5903] stb0899_attach: Driver disabled by Kconfig [ 865.361474][ T5903] az6027: no front-end attached [ 865.361474][ T5903] [ 865.361874][ T5903] az6027: usb out operation failed. (-71) [ 865.361887][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 865.365836][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 865.376522][ T5903] dvb-usb: schedule remote query interval to 400 msecs. [ 865.376543][ T5903] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 865.383150][ T5903] usb 4-1: USB disconnect, device number 25 [ 865.751653][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.453288][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.527055][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.783312][ T5903] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 868.492687][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.584152][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.839862][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.851495][T11568] udevd[11568]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 869.569003][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.992818][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.288206][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.288302][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.461965][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.629657][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.866292][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.195591][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.683589][T11658] netlink: 'syz.2.1240': attribute type 10 has an invalid length. [ 879.074200][ T5868] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 879.224045][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 879.226584][ T5868] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 879.251267][ T5868] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 879.251286][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.251296][ T5868] usb 2-1: Product: syz [ 879.251304][ T5868] usb 2-1: Manufacturer: syz [ 879.251311][ T5868] usb 2-1: SerialNumber: syz [ 879.263619][ T5868] usb 2-1: config 0 descriptor?? [ 879.663264][ T5868] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 879.663341][ T5868] usb 2-1: setting power ON [ 879.663361][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 879.671655][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 879.673498][ T5868] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 879.673554][ T5868] usb 2-1: media controller created [ 879.893555][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.963385][ T5868] usb 2-1: selecting invalid altsetting 6 [ 880.963399][ T5868] usb 2-1: digital interface selection failed (-22) [ 880.963408][ T5868] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 880.969400][ T5868] usb 2-1: setting power OFF [ 880.969426][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 880.969443][ T5868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 880.969455][ T5868] (NULL device *): no alternate interface [ 881.798047][ T5868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 881.812261][ T5868] usb 2-1: USB disconnect, device number 22 [ 894.136356][T11821] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 896.861507][T11836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1288'. [ 897.906553][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1291'. [ 897.941350][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 898.355404][ T5804] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 898.687949][T11858] netlink: 'syz.3.1290': attribute type 10 has an invalid length. [ 898.706028][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 898.719169][ T5804] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 898.719199][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.738176][ T5804] usb 6-1: config 0 descriptor?? [ 899.399396][ T5804] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 899.478925][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 899.503317][ T5804] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 899.503375][ T5804] usb 6-1: media controller created [ 900.241413][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.307881][ T5804] az6027: usb out operation failed. (-71) [ 900.308401][ T5804] az6027: usb out operation failed. (-71) [ 900.308414][ T5804] stb0899_attach: Driver disabled by Kconfig [ 900.308424][ T5804] az6027: no front-end attached [ 900.308424][ T5804] [ 900.308827][ T5804] az6027: usb out operation failed. (-71) [ 900.308839][ T5804] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 900.312285][ T5804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input55 [ 900.399355][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.520790][ T5804] dvb-usb: schedule remote query interval to 400 msecs. [ 900.520865][ T5804] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 901.133909][ T5804] usb 6-1: USB disconnect, device number 2 [ 901.268768][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.667990][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.859431][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.785055][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.494072][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.507118][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1299'. [ 903.802653][T11870] Bluetooth: hci5: command 0x0406 tx timeout [ 903.892721][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.931089][ T5804] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 904.123669][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.265989][T11892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1298'. [ 904.280429][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.428773][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.948938][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.695427][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.874384][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.090259][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.179276][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.044939][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.635397][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.192027][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.341253][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.487758][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.007769][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.987160][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.014281][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.514778][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.619641][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1310'. [ 910.674796][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.393358][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.637720][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.680064][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.714080][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.819219][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.956317][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.351415][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.439823][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.645057][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.125108][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.404666][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.572383][T11967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1317'. [ 914.874261][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.918058][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.165649][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.241977][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.861507][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.495568][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.832397][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.946504][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.984514][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.208582][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.546636][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.594349][ T6549] Bluetooth: Error in BCSP hdr checksum [ 917.960185][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.609241][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.644219][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.108311][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.358354][ T6649] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 919.858875][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.484581][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 920.485837][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 920.683309][ T5881] usb 6-1: device descriptor read/64, error -32 [ 920.953896][ T5881] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 921.519424][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.741358][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.136669][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.207078][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.207122][ T5881] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 922.207141][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.954994][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.256459][ T5881] usb 6-1: config 0 descriptor?? [ 924.499365][ T5881] usb 6-1: can't set config #0, error -71 [ 924.524044][ T5881] usb 6-1: USB disconnect, device number 4 [ 925.604624][ C0] vkms_vblank_simulate: vblank timer overrun [ 925.754148][ T5868] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 926.276316][ T5868] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 926.276335][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 926.278289][ T5868] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 926.278306][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 926.278316][ T5868] usb 6-1: Product: syz [ 926.278323][ T5868] usb 6-1: Manufacturer: syz [ 926.278330][ T5868] usb 6-1: SerialNumber: syz [ 926.281628][ T5868] usb 6-1: config 0 descriptor?? [ 926.290298][ T5868] usb 6-1: selecting invalid altsetting 0 [ 926.901252][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.235620][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.838079][ C0] vkms_vblank_simulate: vblank timer overrun [ 928.249972][ C0] vkms_vblank_simulate: vblank timer overrun [ 928.267033][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.273448][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.660486][ C0] vkms_vblank_simulate: vblank timer overrun [ 928.816608][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1346'. [ 928.955759][ C0] vkms_vblank_simulate: vblank timer overrun [ 929.257828][ C0] vkms_vblank_simulate: vblank timer overrun [ 929.600707][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 929.735412][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.019873][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.126640][ T5868] usb 6-1: USB disconnect, device number 5 [ 931.244783][T12092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1350'. [ 931.812004][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.812076][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.469588][ T5868] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 932.616362][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.616422][ T5868] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 932.616445][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.798838][ T5868] usb 6-1: config 0 descriptor?? [ 933.095154][ T5868] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 933.514430][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.514980][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.045364][T12110] EXT4-fs (nbd5): unable to read superblock [ 935.698276][ T5868] usb 6-1: USB disconnect, device number 6 [ 936.921948][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.446841][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.053061][T11870] Bluetooth: hci4: command 0x1003 tx timeout [ 938.053205][ T6649] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 938.131311][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.536174][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.526886][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.863274][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.496606][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.534409][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.972696][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1368'. [ 941.205245][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.264137][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.598828][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.005481][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.056096][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.498842][ C1] vkms_vblank_simulate: vblank timer overrun [ 945.350745][ C1] vkms_vblank_simulate: vblank timer overrun [ 945.849624][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 946.023738][ C1] vkms_vblank_simulate: vblank timer overrun [ 946.362272][ C1] vkms_vblank_simulate: vblank timer overrun [ 946.676969][ C1] vkms_vblank_simulate: vblank timer overrun [ 947.243363][ T1514] Bluetooth: Error in BCSP hdr checksum [ 947.261138][ T2219] Bluetooth: Error in BCSP hdr checksum [ 947.337551][ C1] vkms_vblank_simulate: vblank timer overrun [ 947.899445][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.194592][ T6649] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 949.855159][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.195805][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.525880][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.986226][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.918880][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.266020][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.881602][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.168745][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.307797][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.597974][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.690948][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.796772][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.883186][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.944918][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.263327][T12256] block device autoloading is deprecated and will be removed. [ 954.263467][T12256] ufs: You didn't specify the type of your ufs filesystem [ 954.263467][T12256] [ 954.263467][T12256] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 954.263467][T12256] [ 954.263467][T12256] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 954.263500][T12256] ufs: ufstype=old is supported read-only [ 954.418969][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.223076][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.387528][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.731552][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.640619][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.025787][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.204644][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.494725][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.066274][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.106938][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.353633][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.088404][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.393176][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.905015][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.168774][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.914038][ T5804] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 968.408671][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.430097][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 968.432373][ T5804] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 968.432812][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.515435][ T5804] usb 2-1: config 0 descriptor?? [ 968.535888][ T5804] hub 2-1:0.0: bad descriptor, ignoring hub [ 968.535929][ T5804] hub 2-1:0.0: probe with driver hub failed with error -5 [ 968.539334][ T5804] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 969.034564][ T991] usb 2-1: USB disconnect, device number 23 [ 975.777917][ C0] vkms_vblank_simulate: vblank timer overrun [ 976.502647][ C0] vkms_vblank_simulate: vblank timer overrun [ 976.951330][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.099262][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.417634][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.539780][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.613760][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.644457][T12440] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1436'. [ 977.742250][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.951420][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.046910][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.396923][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 979.413319][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 979.601565][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.342217][T12472] Sensor B: ================= START STATUS ================= [ 982.342244][T12472] Sensor B: Test Pattern: 75% Colorbar [ 982.342267][T12472] Sensor B: Show Information: All [ 982.342277][T12472] Sensor B: Vertical Flip: false [ 982.342287][T12472] Sensor B: Horizontal Flip: false [ 982.342295][T12472] Sensor B: Brightness: 128 [ 982.342305][T12472] Sensor B: Contrast: 128 [ 982.342314][T12472] Sensor B: Hue: 0 [ 982.342322][T12472] Sensor B: Saturation: 128 [ 982.342332][T12472] Sensor B: ================== END STATUS ================== [ 986.104149][ T6391] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 988.698670][ T6391] usb 1-1: device not accepting address 26, error -71 [ 988.906147][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.543970][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.790187][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.901511][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.367291][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.717259][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.813214][T12530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1459'. [ 991.280932][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.462604][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.691469][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.882702][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.969364][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.229495][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.783430][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.282632][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.282704][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.212595][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1471'. [ 999.436774][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.693349][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.866653][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.957170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.164015][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.384580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.498230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.739883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.817350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.986531][ C0] vkms_vblank_simulate: vblank timer overrun [ 1001.425453][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.042475][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.819297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.854086][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.108142][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.282224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.819222][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.545661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.941681][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 1009.395103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1010.426683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.160599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.437612][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.623711][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.074161][ T5804] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1012.224056][ T5804] usb 2-1: Using ep0 maxpacket: 8 [ 1012.226784][ T5804] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1012.230810][ T5804] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1012.230837][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.230857][ T5804] usb 2-1: Product: syz [ 1012.230871][ T5804] usb 2-1: Manufacturer: syz [ 1012.230884][ T5804] usb 2-1: SerialNumber: syz [ 1012.286296][ T5804] usb 2-1: config 0 descriptor?? [ 1012.312576][ T5804] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1012.312635][ T5804] usb 2-1: setting power ON [ 1012.312656][ T5804] dvb-usb: bulk message failed: -22 (2/0) [ 1012.339781][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1012.342930][ T5804] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1012.342991][ T5804] usb 2-1: media controller created [ 1012.405286][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.436509][ T5804] usb 2-1: selecting invalid altsetting 6 [ 1012.436536][ T5804] usb 2-1: digital interface selection failed (-22) [ 1012.436552][ T5804] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1012.465800][ T5804] usb 2-1: setting power OFF [ 1012.465824][ T5804] dvb-usb: bulk message failed: -22 (2/0) [ 1012.465920][ T5804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1012.465934][ T5804] (NULL device *): no alternate interface [ 1012.513225][T12688] dvb-usb: bulk message failed: -22 (3/0) [ 1012.513252][T12688] dvb-usb: bulk message failed: -22 (4/0) [ 1012.513266][T12688] cxusb: i2c read failed [ 1012.623236][ T5804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1013.055774][ T5804] usb 2-1: USB disconnect, device number 24 [ 1013.566541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.949256][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.763277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.410346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.782383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.355045][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.869766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1017.583745][T12723] block device autoloading is deprecated and will be removed. [ 1017.583932][T12723] ufs: You didn't specify the type of your ufs filesystem [ 1017.583932][T12723] [ 1017.583932][T12723] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1017.583932][T12723] [ 1017.583932][T12723] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1017.583981][T12723] ufs: ufstype=old is supported read-only [ 1017.850706][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.114415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.403590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1019.513553][T12752] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 1019.611779][T12757] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1019.611804][T12757] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1019.623620][T12757] bond1: (slave vcan1): making interface the new active one [ 1019.625091][T12757] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1019.627363][T12752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1019.716523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.331107][T12770] geneve2: entered allmulticast mode [ 1020.346759][T12770] bridge0: port 3(geneve2) entered blocking state [ 1020.347653][T12770] bridge0: port 3(geneve2) entered disabled state [ 1020.353592][T12770] geneve2: entered promiscuous mode [ 1020.386596][T12770] bridge0: port 3(geneve2) entered blocking state [ 1020.386809][T12770] bridge0: port 3(geneve2) entered forwarding state [ 1020.670549][T12774] bridge0: port 4(syz_tun) entered blocking state [ 1020.670703][T12774] bridge0: port 4(syz_tun) entered disabled state [ 1020.671344][T12774] syz_tun: entered allmulticast mode [ 1020.681803][T12774] syz_tun: entered promiscuous mode [ 1020.683852][T12774] bridge0: port 4(syz_tun) entered blocking state [ 1020.691281][T12774] bridge0: port 4(syz_tun) entered forwarding state [ 1020.977879][T12789] bridge0: port 3(syz_tun) entered blocking state [ 1020.980177][T12789] bridge0: port 3(syz_tun) entered disabled state [ 1020.980408][T12789] syz_tun: entered allmulticast mode [ 1020.983303][T12789] syz_tun: entered promiscuous mode [ 1020.993131][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.033321][T12789] bridge0: port 3(syz_tun) entered blocking state [ 1021.033454][T12789] bridge0: port 3(syz_tun) entered forwarding state [ 1021.422696][T12813] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1541'. [ 1021.649041][T12818] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 1021.686579][T12813] syz.2.1541 (12813) used greatest stack depth: 17800 bytes left [ 1022.044354][ T991] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1022.184253][ T5868] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1022.204326][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 1022.206577][ T991] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1022.206600][ T991] usb 3-1: config 0 has no interface number 0 [ 1022.206660][ T991] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1022.206687][ T991] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1022.209873][ T991] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1022.209901][ T991] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1022.209919][ T991] usb 3-1: Product: syz [ 1022.209933][ T991] usb 3-1: SerialNumber: syz [ 1022.226310][ T991] usb 3-1: config 0 descriptor?? [ 1022.246841][ T991] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1022.271530][ T991] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input58 [ 1022.336235][ T5868] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1022.336255][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.470550][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.472636][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.472892][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.473130][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.473528][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.473768][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.474461][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.474706][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.474946][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.475182][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1022.840187][ T5868] usb 2-1: config 0 descriptor?? [ 1022.875049][ T5868] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1022.879210][ T991] usb 3-1: USB disconnect, device number 22 [ 1022.879302][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1022.990401][ T991] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1023.049746][ T5868] gspca_spca508: reg_read err -32 [ 1023.236758][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 1023.236811][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 1023.251882][ T5868] gspca_spca508: reg_read err -32 [ 1023.254575][ T5868] gspca_spca508: reg_read err -32 [ 1023.255022][ T5868] gspca_spca508: reg_read err -71 [ 1023.262032][ T5868] gspca_spca508: reg write: error -71 [ 1023.262123][ T5868] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1023.270055][ T5868] usb 2-1: USB disconnect, device number 25 [ 1023.862798][T12838] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1550'. [ 1024.188724][T12848] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 1025.117193][T12856] binder: 12855:12856 unknown command 0 [ 1025.117217][T12856] binder: 12855:12856 ioctl c0306201 200000000080 returned -22 [ 1025.122797][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 1025.127597][T12856] binder: BINDER_SET_CONTEXT_MGR already set [ 1025.127610][T12856] binder: 12855:12856 ioctl 4018620d 200000000040 returned -16 [ 1025.352809][T12852] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1025.352834][T12852] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1025.386901][T12852] bond1: (slave vcan1): making interface the new active one [ 1025.387683][T12852] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1025.387768][T12854] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1026.424655][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1026.714009][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1026.716289][ T31] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1026.742721][ T31] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1026.742750][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.742768][ T31] usb 3-1: Product: syz [ 1026.742782][ T31] usb 3-1: Manufacturer: syz [ 1026.742795][ T31] usb 3-1: SerialNumber: syz [ 1026.782485][ T31] usb 3-1: config 0 descriptor?? [ 1026.822703][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1026.822755][ T31] usb 3-1: setting power ON [ 1026.822774][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 1027.426403][ T6391] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1027.524222][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1027.525031][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1027.525092][ T31] usb 3-1: media controller created [ 1027.612244][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1027.657626][ T6391] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1027.657662][ T6391] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1027.657702][ T6391] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1027.657724][ T6391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.674118][ T5903] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1027.674392][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1027.814044][ T5903] usb 1-1: device descriptor read/64, error -32 [ 1028.054025][ T5903] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1028.210833][ T5903] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1028.210864][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.210882][ T5903] usb 1-1: Product: syz [ 1028.210896][ T5903] usb 1-1: Manufacturer: syz [ 1028.210910][ T5903] usb 1-1: SerialNumber: syz [ 1029.157902][T12891] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1029.186927][ T6391] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1029.204573][ T31] usb 3-1: selecting invalid altsetting 6 [ 1029.204594][ T31] usb 3-1: digital interface selection failed (-22) [ 1029.204607][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1029.206669][ T31] usb 3-1: setting power OFF [ 1029.206690][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 1029.206704][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1029.206716][ T31] (NULL device *): no alternate interface [ 1029.334691][T12905] process 'syz.1.1569' launched './file0' with NULL argv: empty string added [ 1029.551384][ T37] kauditd_printk_skb: 390 callbacks suppressed [ 1029.551403][ T37] audit: type=1326 audit(1760330545.428:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12890 comm="syz.3.1566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18249feec9 code=0x0 [ 1029.872512][ T5903] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1030.195960][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1030.260049][ T31] usb 3-1: USB disconnect, device number 23 [ 1030.315860][ T5868] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1030.434552][ T6391] usb 4-1: USB disconnect, device number 26 [ 1030.794782][ T5868] usb 1-1: ath9k_htc: USB layer deinitialized [ 1030.970096][ T5903] usb 1-1: USB disconnect, device number 29 [ 1031.674393][ T31] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1032.693343][T12962] random: crng reseeded on system resumption [ 1032.785538][T12965] mmap: syz.1.1589 (12965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1033.462393][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1033.462411][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.462422][ T31] usb 3-1: Product: syz [ 1033.462436][ T31] usb 3-1: Manufacturer: syz [ 1033.462444][ T31] usb 3-1: SerialNumber: syz [ 1033.721588][T12967] ================================================================== [ 1033.721608][T12967] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 1033.721738][T12967] Read of size 8 at addr ffff888019bb0408 by task syz.1.1589/12967 [ 1033.721755][T12967] [ 1033.721778][T12967] CPU: 0 UID: 0 PID: 12967 Comm: syz.1.1589 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1033.721801][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1033.721821][T12967] Call Trace: [ 1033.721832][T12967] [ 1033.721842][T12967] dump_stack_lvl+0x189/0x250 [ 1033.721890][T12967] ? __kasan_check_byte+0x12/0x40 [ 1033.721938][T12967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.721961][T12967] ? lock_release+0x4b/0x3e0 [ 1033.721995][T12967] ? __virt_addr_valid+0x4a5/0x5c0 [ 1033.722019][T12967] print_report+0xca/0x240 [ 1033.722046][T12967] ? change_page_attr_set_clr+0x625/0xfc0 [ 1033.722072][T12967] kasan_report+0x118/0x150 [ 1033.722094][T12967] ? change_page_attr_set_clr+0x625/0xfc0 [ 1033.722125][T12967] change_page_attr_set_clr+0x625/0xfc0 [ 1033.722155][T12967] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1033.722182][T12967] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1033.722208][T12967] ? memtype_reserve+0x874/0xb30 [ 1033.722240][T12967] _set_pages_array+0x145/0x270 [ 1033.722261][T12967] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1033.722382][T12967] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1033.722498][T12967] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1033.722527][T12967] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1033.722550][T12967] ? drm_gem_map_attach+0x13e/0x1e0 [ 1033.722619][T12967] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1033.722643][T12967] ? __kasan_kmalloc+0x93/0xb0 [ 1033.722665][T12967] drm_gem_map_attach+0x19c/0x1e0 [ 1033.722692][T12967] dma_buf_dynamic_attach+0x1ea/0x3c0 [ 1033.722763][T12967] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1033.722788][T12967] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1033.722813][T12967] ? drm_gem_prime_fd_to_handle+0x188/0x4d0 [ 1033.722840][T12967] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1033.722865][T12967] drm_gem_prime_fd_to_handle+0x199/0x4d0 [ 1033.722892][T12967] drm_ioctl_kernel+0x2d2/0x3a0 [ 1033.722939][T12967] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1033.722965][T12967] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1033.722991][T12967] drm_ioctl+0x685/0xb20 [ 1033.723014][T12967] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1033.723042][T12967] ? __pfx_drm_ioctl+0x10/0x10 [ 1033.723068][T12967] ? __fget_files+0x3a6/0x420 [ 1033.723098][T12967] ? __fget_files+0x2a/0x420 [ 1033.723120][T12967] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1033.723158][T12967] ? __pfx_drm_ioctl+0x10/0x10 [ 1033.723177][T12967] __se_sys_ioctl+0xff/0x170 [ 1033.723204][T12967] do_syscall_64+0xfa/0xfa0 [ 1033.723281][T12967] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.723332][T12967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.723404][T12967] ? clear_bhb_loop+0x60/0xb0 [ 1033.723427][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.723444][T12967] RIP: 0033:0x7fcfd53eeec9 [ 1033.723466][T12967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.723481][T12967] RSP: 002b:00007fcfd3635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.723501][T12967] RAX: ffffffffffffffda RBX: 00007fcfd5646090 RCX: 00007fcfd53eeec9 [ 1033.723517][T12967] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000008 [ 1033.723531][T12967] RBP: 00007fcfd5471f91 R08: 0000000000000000 R09: 0000000000000000 [ 1033.723544][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.723556][T12967] R13: 00007fcfd5646128 R14: 00007fcfd5646090 R15: 00007ffcb017ff78 [ 1033.723589][T12967] [ 1033.723597][T12967] [ 1033.723606][T12967] Allocated by task 12967: [ 1033.723616][T12967] kasan_save_track+0x3e/0x80 [ 1033.723633][T12967] __kasan_kmalloc+0x93/0xb0 [ 1033.723649][T12967] __kvmalloc_node_noprof+0x3fd/0x920 [ 1033.723669][T12967] drm_gem_get_pages+0x169/0xa30 [ 1033.723724][T12967] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 1033.723746][T12967] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1033.723765][T12967] drm_gem_map_attach+0x19c/0x1e0 [ 1033.723787][T12967] dma_buf_dynamic_attach+0x1ea/0x3c0 [ 1033.723809][T12967] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1033.723831][T12967] drm_gem_prime_fd_to_handle+0x199/0x4d0 [ 1033.723853][T12967] drm_ioctl_kernel+0x2d2/0x3a0 [ 1033.723874][T12967] drm_ioctl+0x685/0xb20 [ 1033.723888][T12967] __se_sys_ioctl+0xff/0x170 [ 1033.723907][T12967] do_syscall_64+0xfa/0xfa0 [ 1033.723932][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.723950][T12967] [ 1033.723954][T12967] The buggy address belongs to the object at ffff888019bb0000 [ 1033.723954][T12967] which belongs to the cache kmalloc-2k of size 2048 [ 1033.723971][T12967] The buggy address is located 0 bytes to the right of [ 1033.723971][T12967] allocated 1032-byte region [ffff888019bb0000, ffff888019bb0408) [ 1033.723992][T12967] [ 1033.723997][T12967] The buggy address belongs to the physical page: [ 1033.724015][T12967] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19bb0 [ 1033.724033][T12967] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1033.724049][T12967] flags: 0x80000000000040(head|node=0|zone=1) [ 1033.724069][T12967] page_type: f5(slab) [ 1033.724086][T12967] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1033.724103][T12967] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1033.724122][T12967] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1033.724138][T12967] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1033.724156][T12967] head: 0080000000000003 ffffea000066ec01 00000000ffffffff 00000000ffffffff [ 1033.724171][T12967] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1033.724181][T12967] page dumped because: kasan: bad access detected [ 1033.724194][T12967] page_owner tracks the page as allocated [ 1033.724200][T12967] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4223977196, free_ts 0 [ 1033.724233][T12967] post_alloc_hook+0x240/0x2a0 [ 1033.724259][T12967] get_page_from_freelist+0x28c0/0x2960 [ 1033.724281][T12967] __alloc_frozen_pages_noprof+0x181/0x370 [ 1033.724300][T12967] alloc_pages_mpol+0xd1/0x380 [ 1033.724318][T12967] allocate_slab+0x96/0x3a0 [ 1033.724340][T12967] ___slab_alloc+0xb12/0x13f0 [ 1033.724359][T12967] __slab_alloc+0xc6/0x1f0 [ 1033.724377][T12967] __kmalloc_cache_noprof+0xec/0x6c0 [ 1033.724393][T12967] acpi_ds_create_walk_state+0xf6/0x310 [ 1033.724491][T12967] acpi_ps_execute_method+0x348/0xa60 [ 1033.724575][T12967] acpi_ns_evaluate+0xc49/0x1230 [ 1033.724590][T12967] acpi_ut_evaluate_object+0x140/0x630 [ 1033.724636][T12967] acpi_ut_execute_STA+0x64/0x2b0 [ 1033.724652][T12967] acpi_ns_get_device_callback+0x1f7/0x490 [ 1033.724674][T12967] acpi_ns_walk_namespace+0x2ce/0x760 [ 1033.724696][T12967] acpi_get_devices+0x13d/0x1c0 [ 1033.724716][T12967] page_owner free stack trace missing [ 1033.724723][T12967] [ 1033.724727][T12967] Memory state around the buggy address: [ 1033.724738][T12967] ffff888019bb0300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.724752][T12967] ffff888019bb0380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.724765][T12967] >ffff888019bb0400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1033.724775][T12967] ^ [ 1033.724785][T12967] ffff888019bb0480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1033.724798][T12967] ffff888019bb0500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1033.724808][T12967] ================================================================== [ 1033.724914][T12967] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1033.724932][T12967] CPU: 0 UID: 0 PID: 12967 Comm: syz.1.1589 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1033.724955][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1033.724967][T12967] Call Trace: [ 1033.724975][T12967] [ 1033.724984][T12967] dump_stack_lvl+0x99/0x250 [ 1033.725008][T12967] ? __asan_memcpy+0x40/0x70 [ 1033.725036][T12967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.725059][T12967] ? __pfx__printk+0x10/0x10 [ 1033.725088][T12967] vpanic+0x237/0x6d0 [ 1033.725116][T12967] ? __pfx_vpanic+0x10/0x10 [ 1033.725132][T12967] ? preempt_schedule+0xae/0xc0 [ 1033.725159][T12967] ? __pfx_preempt_schedule+0x10/0x10 [ 1033.725190][T12967] panic+0xb9/0xc0 [ 1033.725207][T12967] ? __pfx_panic+0x10/0x10 [ 1033.725227][T12967] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1033.725260][T12967] ? change_page_attr_set_clr+0x625/0xfc0 [ 1033.725288][T12967] check_panic_on_warn+0x89/0xb0 [ 1033.725310][T12967] ? change_page_attr_set_clr+0x625/0xfc0 [ 1033.725336][T12967] end_report+0x78/0x160 [ 1033.725356][T12967] kasan_report+0x129/0x150 [ 1033.725378][T12967] ? change_page_attr_set_clr+0x625/0xfc0 [ 1033.725410][T12967] change_page_attr_set_clr+0x625/0xfc0 [ 1033.725440][T12967] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1033.725466][T12967] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1033.725490][T12967] ? memtype_reserve+0x874/0xb30 [ 1033.725523][T12967] _set_pages_array+0x145/0x270 [ 1033.725544][T12967] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1033.725575][T12967] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1033.725604][T12967] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1033.725634][T12967] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1033.725655][T12967] ? drm_gem_map_attach+0x13e/0x1e0 [ 1033.725681][T12967] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1033.725706][T12967] ? __kasan_kmalloc+0x93/0xb0 [ 1033.725728][T12967] drm_gem_map_attach+0x19c/0x1e0 [ 1033.725754][T12967] dma_buf_dynamic_attach+0x1ea/0x3c0 [ 1033.725780][T12967] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1033.725805][T12967] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1033.725829][T12967] ? drm_gem_prime_fd_to_handle+0x188/0x4d0 [ 1033.725855][T12967] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1033.725879][T12967] drm_gem_prime_fd_to_handle+0x199/0x4d0 [ 1033.725907][T12967] drm_ioctl_kernel+0x2d2/0x3a0 [ 1033.725928][T12967] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1033.725953][T12967] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1033.725979][T12967] drm_ioctl+0x685/0xb20 [ 1033.726001][T12967] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1033.726029][T12967] ? __pfx_drm_ioctl+0x10/0x10 [ 1033.726056][T12967] ? __fget_files+0x3a6/0x420 [ 1033.726093][T12967] ? __fget_files+0x2a/0x420 [ 1033.726116][T12967] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1033.726139][T12967] ? __pfx_drm_ioctl+0x10/0x10 [ 1033.726160][T12967] __se_sys_ioctl+0xff/0x170 [ 1033.726186][T12967] do_syscall_64+0xfa/0xfa0 [ 1033.726213][T12967] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.726240][T12967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.726260][T12967] ? clear_bhb_loop+0x60/0xb0 [ 1033.726281][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.726300][T12967] RIP: 0033:0x7fcfd53eeec9 [ 1033.726316][T12967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.726333][T12967] RSP: 002b:00007fcfd3635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.726354][T12967] RAX: ffffffffffffffda RBX: 00007fcfd5646090 RCX: 00007fcfd53eeec9 [ 1033.726370][T12967] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000008 [ 1033.726384][T12967] RBP: 00007fcfd5471f91 R08: 0000000000000000 R09: 0000000000000000 [ 1033.726397][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.726410][T12967] R13: 00007fcfd5646128 R14: 00007fcfd5646090 R15: 00007ffcb017ff78 [ 1033.726435][T12967] [ 1033.726696][T12967] Kernel Offset: disabled