last executing test programs: 5m29.128348845s ago: executing program 1 (id=464): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 5m28.714322506s ago: executing program 1 (id=466): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa000, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5m27.252266404s ago: executing program 1 (id=468): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='coredump_filter\x00') close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r0]) 5m27.113494928s ago: executing program 1 (id=469): socket$nl_route(0x10, 0x3, 0x0) r0 = eventfd(0x5) write$eventfd(r0, &(0x7f0000000440)=0xe2, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', 0x0, 0x1000080, 0x0) read$eventfd(r0, &(0x7f0000000200), 0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) 5m17.879415563s ago: executing program 1 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x10c) 5m17.375756785s ago: executing program 1 (id=496): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m2.236622962s ago: executing program 32 (id=496): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m39.121635057s ago: executing program 4 (id=599): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x1, 0x5}, 0x50) 4m38.881870295s ago: executing program 4 (id=600): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000780)="06000300020000000000209988a8e46688a849cc64bb61019504861a2a8d6eeba4640fb504894673fb769069ba934c4fcb4baa09ef1b1db1adb9caa1be1366705e62db895b13b4175ab9403679f1d5f4fa88475b1ab90543ebffea3662c49b102f736c624eaa35e05f5fbb5846c655d8eb0f6b8f04c16bd016cccf7b59df88b9992723c41f3150b4ac30b36b621ece0dcf848e3e98b2c88fb51e956bcee0abbbd27f39adb6158c5a1c808af0345cc486af0e23d5ba38a83b3d076d050000aa5a1e4928b0de275391cb659bfed78d58defc385da1b4586035a809e348ea7e5e55eb3fbadb2bde2612bf8a06c9ea605f2b9b73cefcc2f50626ac222bb1eef1603ab734f83601298f33d5d5e59a56d4e1fbd6d4f33d976228701c60360ce4150ce5156a09d2e95c19949ec128ce9cd77bd9785637eebc7011e5a60ee943d417e9a092aa9c698ef7ca39c1932a8905054c5680a93a65d5f6287fc6b7d97542e7efdd24d6ce1b58cf40ac77d24ced4b6107063b6831d48a525125429fba92d705b714b9ebfacd579f84e8d129", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x1a) 4m38.696172041s ago: executing program 4 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r5, r5, 0x1014, 0x5, 0x9}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 4m37.180751726s ago: executing program 4 (id=603): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 4m36.630550754s ago: executing program 4 (id=606): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000080)=0x40, 0x4) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000439c0)) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) modify_ldt$read(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, '$', 0x3a, '!-$M--', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x50, 0x43]}, 0x32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc4042, 0x1ff) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x700, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) 4m34.808336766s ago: executing program 4 (id=612): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00dd02", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x12, [0xd7a, 0xfc, 0xa0c, 0x6]}]}}}}}}}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98d58d3cff66a0dd97c360025022", 0xe}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x20048889) recvmsg$can_j1939(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket(0x6, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) bind$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10, 0x1, 0x40, 0x2, 0x9, 0x3, 0x0, 0x0, 0x1049, 0x5, 0xff, 0xcf, 0xfe, '\x00', 0x70}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006112790000000000a6000000000000009525000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 4m19.569896196s ago: executing program 33 (id=612): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00dd02", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x12, [0xd7a, 0xfc, 0xa0c, 0x6]}]}}}}}}}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98d58d3cff66a0dd97c360025022", 0xe}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x20048889) recvmsg$can_j1939(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket(0x6, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) bind$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10, 0x1, 0x40, 0x2, 0x9, 0x3, 0x0, 0x0, 0x1049, 0x5, 0xff, 0xcf, 0xfe, '\x00', 0x70}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006112790000000000a6000000000000009525000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 4m3.329915188s ago: executing program 2 (id=670): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x2a}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) ioctl$TCXONC(r8, 0x4b3a, 0x2) 4m1.21054634s ago: executing program 2 (id=673): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000002200)={0xfdc, 0x6, 0x10000, 0x2400, 0xe, "189f1b8fd61526b01f8bc23ddb5e3694c4003b"}) 4m1.020197824s ago: executing program 2 (id=676): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd700000f8000005000000080009000200000008000c00a80a0000060001000700000008000b000000000090faf65046ff2ecfdc2f7774f4fc37ba3f0ee648a0bbc26809758279a7f7905cbd29364109c1cd56803351170f79d65b14b1a88b73dc257097f6654c78637a61be31f7d436d8e60b1321bcb746d2425038abf08e48fb33d0d9f02cc537dd5814f27c62efe1f64b43ac5007000000af5c7a0f32f66eccb8a9309d6c7b68114dc8b4346ff1328328a2ca59daf5c33cbe93"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20) syz_io_uring_setup(0x2a37, 0x0, 0x0, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) 3m56.305653873s ago: executing program 2 (id=684): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000002200)={0xfdc, 0x6, 0x10000, 0x2400, 0xe, "189f1b8fd61526b01f8bc23ddb5e3694c4003b"}) 3m55.800170202s ago: executing program 2 (id=687): r0 = socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x80003519, 0x0, 0x0, 0x0, 0x0) 3m53.619539533s ago: executing program 2 (id=690): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 3m38.260915309s ago: executing program 34 (id=690): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 12.879531072s ago: executing program 0 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.926606721s ago: executing program 0 (id=1024): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11.34304634s ago: executing program 0 (id=1025): ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x48) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000140)=0x7) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000500)=""/152, 0x98}, {&(0x7f0000000300)=""/54, 0x36}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/81, 0xfffffffd}], 0x1, 0x0) 3.891413425s ago: executing program 3 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r5, r5, 0x1014, 0x5, 0x9}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.969801008s ago: executing program 3 (id=1040): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002080)="5ac4b9041d2191346cb13208bb36189538817a9e441fa1077b75cc724e14bf6f5ad61532903834ca8d4e744228dbfe4d317d5d68beb628b9e342f074a435b5288884bebde41c6542372bac6be931a4f9cf19f6d1c0e5d8502978b34e5175c8e5c22a6fe10027ecfcb7652a7b32760ecd7d33de9d3e6ac4c8eb661a2c4f2c1d17c854a50e2d00f562e1a14859189ea3a58e955df5845dab0a73595cc9d29268dc94ebff3b024b7fb06d6d8c86919baaf817efbb19143a6028b22ba865c22660909ec2bea6269814a3749f677aa0796e43873b42aca0788c34814b3c412b3556491de93e877c98290d8096cbdb4b1ae5b374473889c0a25435abd15738fa2125545b11f365284f72831569ba20ec4af8832fe2eacbee33aa56d7389ab435feaf38e026d073bcc439c9c83558e38b382b409278cf4ffd6da30153963149d8096461d30b2f88a1c2a40e1082ac1c801ea16a2a04c1e415003a968cdeb68658dae2434c7ac586f86f8ef224fd7dd322fe32cb981c0e5ba495d097289ef110e31bee85221ec73259dd28c0f202ed8043b8999c02379da4b34dc22856e8de413146ef0ffb6ce80531b9a4ca36db1a26712070a90a2d54a2d37fdac594e25456163fd1986fedcad572fddc0b12cd93af6a903320694495d46db105302b92205eaafc83f34f2f2efcce340f5d3e20e153247f85dbf54b60bade9ac390bcf5f9a8c514681774220cf2c91bb5c85e221ce3b63ebb161a6d2bf2cac8fbce1070be22fee1340d251008600c402a0b0a707114a4cb40ff623ee1af52e7ff25961c2a0fe03f151f103482f6bda2f8820c7fdda11339293e26d6a44b4ed9e23dd76f2073b6ce8afb2ee309df05a635a647bfe672bc71701bc4c7180aa599760968f070cce7e16d8da2ad4f9e93d85f5de69de119ece26820037f8686e881960b03e37691b5f9e12220c1f581c11990f9530254c773d63fbe28f23ea9eb0909cd42ea296c9c3a0532d47a0e55cac07b912abe5e87cd240c4ecc4d8a083f36c5c8712cf9e2dc88a7fc740f52c3d46314e6d273eb38fc4da21188ad24b259793f82b69be9b4e58d5b19c7f58762055e4a30fd487b8a43700d7f07303c212c294367f40788df0916ce59d9d813528bde6b6f6e77ea5f9b6c24bb4867bca9d89874ab5646b29d4afa145de8a1c65e487bf480bb62f7762ac5f2896748bd429912d7a45464b7d8c2398d84501a3bcc9ac05df8a7928f0cbdaf51bade18aff712b0fc0cdee1731b706ca95042943bd5cedf633e3ec0d4fc041322ff0572fc4d0c37d9b3f417e6b92350443c2c330828488d90a68eaffff7b057630b27e2a50a82fbaf1cd70a89ada256198c38ed78361879fc2dcbc0bd4c6ace069d4fe2d6b2ea9a58a3301bcf41a2bbaa2e6c9480e3e667f7b8ca5fac3c9a7624aa3412b40611968b6acfb0b51d7feb5c9e7e70b3556cfd43765ed1c15bd4553766471c975ae1e023df13529f92c914097d6cd105af1f0934563487b6f26f3d37389d6ead8103900f96018ed5955b1f5f74eb76638bdde8f5b3cc389ad71cd0d60aa9485ba5f80b0cb176b50bbd8b93dd67ac733b875e4eda36c671476d167d50a8f17b0c0695968f6d6866b58deef2bc76cae679bb383dbb077c50f618e6b06b0c8f23448dbdce04fa5b69d0b43b193232348868baef04bae632d2b9faf34c8f6b12d07e57012bcb6815ae23b6c53a5292ef30c1abb1b7a2f7dcbe7c451e1272dd5351f81ed08e82641e3c8da52dd75ba84b9f806a8b4af83e401135bb240adcaeaef31a68647c73fa9b41f062367c98456b2993751fa190df6d237829f3bea98590bc1a9e5f76cb8660883d5d96d9880be05571611b5d724e9e72d96cb7d563d5cbf6da44e5e5d1a6822d6a937a173aac48f03281e51777e10aedc7d2e2fd30e8210f29bc041c6aac4eb6ec7f6478ea9eff30ab6003433c0afaf13f4f2e9812e498e99568b1a2b6ce3d4e505184e4d7298005cd97e40105fee453c551f912ad04dd87905153ade9124d2fee4013fb0e54ad55828d09b14fc05d53dffb7a2ea3997bf2ca01ccc7a80e4be9aa7c3481d1df854e9d19185e2373faa4bae16516f530aa9e28d35baec380d94fd9ecb2c763b4728e27c6fe34cdc124f23891b84fd7611a48ec8da165fded5627cb580c684708e1b61b62f6f52302aa9b38a1b99987c02811341570cfbe68e9f6d01b800c4be27309f332175ba497471dd4a72c9c77d8edb6085cfc7300a2696db47b286104cf694bdac0acdd9d9c052f6a04099fc16ebefcf7431870814692c00a46be3f9baf59d46596b94892c97d1012c1d59bdf31ba978b8c402722505c9984086437157fb59d98b571e6f8eb56f441c08ebb1d74982e87d128f497078dbae820705987987b41126d3a4960b64be7060a10e905b79c08fa7b981563c57568116a8e5795500db6792950a6fd6f7f9357c1f98429c35b925432afa7cc8cd9af32a8d3228dbf172459611117b540d1cf68c09d1ed4f2d8b61ce495022f282af5a673abeb810be98302dc915b4c2fbf1022bea59cd35ad8600d1d8ec25d39b0ce51fddc0c2b76f1e9bce5cc12c79a26653cee2df2e99e336b28c3c09abfc2d3d4c3027f8844c3776d2194a6f5b141b49e29d8860410b2c384b43f3d20d739ddf692a081a2e52c98517216e5a950ee6a0beafe0568c42c6b7373c50c84cff352bb6ea89b5ea6bf862cf9a6eab275c1c236053bdec70ce0768fe27e9a438c7b19c087bbd7c9676565caaf6ce89fd5a2f5558ccb1ea142a9a8a5fd178aa4f5af6c37676a83fa8805e84869febfd51f5db7b4b73f03a13b2d39a31e2bcb07753bbed0e4dba6d0aeaac9292a3933b5a6b0e09e002bbb81266a47a776ad0efa2a036fbf107bbcac7282475a442696e4c38c7b0af120a14e85fdfdb485cfa43a6a97196a8c563f767b58a87679257bb23558dd6bafb714d13dd61519bc18939093a0ea0052eeb691a65c2d5a3226f88e5ce4b40c667b5256e95f0b64fac2f9a4e2086880f73540ce0df169dee7aa34602282d416984c3a08620d3ecc67e3e6a41139e43b266a0b504a38355ea58b20b11c161126629a45123693768f88f619ea55df2e77b22e9de396762c504f8f5c37e092ab83c5905b983725625c0ec8dd6ae66863ff9b4b0bba509c7e0e3bb75f1d6e73bf7ff93d05622b429c73d5aa26e2267cf63bbd1b761821f0cbd2588f11c4f2cc2fff917396c34546d850fa522dcbbd336bc8be7185431aa2ab5a15b0f76fb075eb76ca2165c1630f8a42d6dd3bf9aa38f48d747f77379f93b377ded675a2aaea2a712b85db6939d7ebfca829cd483e0e08101483d9a19154fa6f7ace2f49d0657052c0f00d8a837e124a3fc72927b686da5b801167d461d3e30e418c1e46d3a2188a3f9cd21428e65277fb756d9199d35026137458667f53f6fab234f6ad3f379f2129535cf4ef7ea35e226625e073efead428e1238ad6ae0197232febcb2b0a7e574f3832ad965afae08f8caf3471bd893d24463240c5d077d473f3712d5951734dfea1b3cfe6bb0ff1d3483c2e10c02e2e28949bab22b26f9519bf5d9ca3e9b2fc779ce283f9977fae51f2d39e400b8cb6ba683cfe29ab1088bde3f2036eb289f894dd12c8ecc247a9719f55ed1e1dac52e04d1bedc74b57f44195b25b5661edabcc7821b365d936d1a2aaddebdd68bb0e4cd156891303011536dcdf74f81ead083bd004000cd8fc701d89c8594c402580cd7d9c800ccbd95770d5acecb33291cb7c2160ecd15f8869dde6c789dded0ca4e17f134d6dd05ccc9d7727a2e9773e00dd2845953c946db31246c4894e2937f20fe0e502511cd9d5841af481c528fb51507a370deae213fc5a1dd3ced3948a768d9007409fff38e28bc4edd2b645d4228a5f4f944e039ddeb75a9783673e8c99b709f1fd071c19b57cf4fa584521e691c86da7d13f9842f88c33a9b37bd260642a148079fa25e8cf3ead2ab331eb8f5146150174248b081e509b4ed96bd1b224439f9763646ad18360d1bdc360de9da68fe6b0473063bf2c9e6778d9d84d9dabc7439143a331ab8f61b36ed0b70c674c82e3959ccfeb53fb6863a79ca864e76b7ac1131ea2b732112014f879ce37b6efa1333e0090970eaf34acce5625a8bf064bf459ff8084d7663f53887174075e382abde84d2558cd04f56bbf66b1f1875383b7c9d6ea3704e881428f95efbe7bf8e21d6b68816367189dad42ab089f847b62b74e99e0cdf054887963a771ec1fca135fa52f26f1773457f85586a5076ce796e2c5cee744fe4f13ad07d6bb075fb6ed14fee07bab7a3c1ca2d56e4730f60f72ecf87d7f4030652777fed5bdfa2aaf9d5dc216d3f506785beee19c71ba29b4977856c6449c5f7b12c2c8a72ade1eb0c5f66f7e1e745ca5cc9c00cd838f0cc53a2b92d2fa9ff9d8ebfc031bc28a4a1448a9c78adb23dffd823452afdb43c222b4bee2be47e07311df5a67154e315c7c498d8900e1ea61a4b1750116967b8a973dbd20064ce88c4f45e70825b812548c7e6da7bed9b7567a101c3e65d92f16aa0a8047fb50266e04e0d5dfb8855efac32488b7d5afe6a721714a9bdbd5143f49757f9d78335abbd7ed499af6dd996a009dc3a41ff96836ce3b500341947d90014926ad120082bd14ab7f9b3ffee4084910dc78016354f81196d7375500f3f96f96d2174ffd5580ff5710239a964381468aaaf9e25f933d8b83fb46d16a4870b740a49d61160cd7913c48c098e145ddb313e60da4cae27b16d6aa4530e5b778d6bab7f4779b3829d899c6f445ef6a20d533e1fcd16b3c97850b95af7fed22ef7429c823c1b0c4f21daaade8839a6b950838b63206494fffc4ac2d34d2e701569f1be0f0ee6bb26ec1756e3962f434211a7eed0550690b152bb6bdc0e07255be1bcf0fb04aef8446b72e7fecf671417b998e9f1d17e7a422d6688871881c6cca758537a75a8de1f8c83569c36a138c04e07db47f2e10420aef84bb9fbf9e9d9fb5f4f7c224a4d0cf7521c3", 0xde4}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x40841) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.890529367s ago: executing program 3 (id=1041): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c"], 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033"], 0xf8}}, 0x0) 2.826160332s ago: executing program 3 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) 1.504073411s ago: executing program 0 (id=1043): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x20000400) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0xd, 0x4000003a, r3, 0x0) socket$packet(0x11, 0x2, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) 1.500686352s ago: executing program 3 (id=1044): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) chroot(0x0) landlock_create_ruleset(0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) 954.645317ms ago: executing program 3 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000"], 0x50) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f0000000580)="3e6b942f49752e492443f7609b95cb2ab6c73c061233b736b94d95b3968eec28d464b1f42ea0e8d656775dc916105bb588953ac72084871e7f2ff62bae587bf81e11f2756e185ce7feaa4a00", 0x4c}], 0x2}, 0x64) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x1, 0x0, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x2000000000000000, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 668.721756ms ago: executing program 0 (id=1046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="0f01cb0f20e035200000000f22e0c4e2dd936cfc70f3360f011fb8010000000f01d966b8cd008ed00f00160f01df66b883008ec866baf80cb8c34dab8eef66bafc0cec", 0x43}], 0x1, 0x10, 0x0, 0x17) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=1047): r0 = syz_open_dev$video(&(0x7f0000000000), 0x488, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x103, 0x1, {0xff, 0x401, 0x6, 0x2}}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x82043, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r5 = memfd_create(&(0x7f00000010c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10}8\b\xdb\xb0\xa7a~\xbcg\x19>w\xed&q\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7-\xa7\x0eA\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x05\x00\xd4\x89\xef\x95T\x05G\xac\xb8\xc1\xe0\xb6\xe5\xbd\xd5\x14\xff\xe7h\xe6\x06\xd6\x9b: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\xa2\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOsp\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce<\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX@>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92J\x01ob\xa9!o\x9aXq\xf0-V\x14i.\\c\x8a\xdbN \xe4\xe4\xc5\xf4\xee\xda\xedg[\xb4\x11\x1a\x8a\xd7\xdd\xe2\xe4P\xd8X?\x17\xb0\xba6\x022\x04G<\x10/Z\xb4B\xfb@\xf2\xa5\x1b\xb1\x06\xa4^\x04^\xe8\x97\xf0s\x8a\xc2w\x0f+\xe8\x85\xb3\xb4\xe1\x8b\xe1T\x18\xcf\xcc=\xf4\x97\xd2\xe0\xa6\v5N\xda\tF\xa94\xca_\xa7\xd1\xce\x01\xc9n\x98@\x1a\xebg\x05\xaf,j\xe0\x1f\x9ao\xbc\x95\xf6K7\xc6\xbc\xa9\xf2\"\x96\x17\xbe\xe1\x95\x04jP\f z+\x9c\xb7Ue\xdaOO$3JEL1\xb1\x10\xc6\xaf*j\xfe\xc9\xcfA\x03\xba\x8d\x97\xeb\x1d\x8f/\am&\x10\xad\x87\xf9\xf3\x12\x85\x7fy\x1f\x8a\x01\xebeV\xdao\xac\x190\x83\xa1\xd5\xa28\xb8\xa9m\xac*\xfa/\xe9\xe4X\xb5s\x91(\bE N\x1a\xad\x01S<\xa7\xe7s\x13\xdc\xec\xc5\x10\x99\x80\x15\xb4m\x85\xb1`\xc2\xae?\xc3_\t\xee\xe2\xc68H\xb8\xfc\x06/\v,\x0f[\xe1\xee\\\xa3\xc3\xb6\b\x1eQ\x81\xfb\x10@\x8a\xf3\xed#\xe0\xc0\xc6LO\xfd\xaf4#\x85\x8f\'V%k~\xda\x14\x81\xaa\n\xd0y\xed\xe2]>?\xae\x83\xc48mE&CA\xed\xfb\xaa\x1d\x83U\x87_\x02\xd5\x1f\xf1\xe4\xe2\xbfB\xa7R\xaf\xbc\xe9+\xcb\xf6\x13\xe3?\xe5-\xb4x\x8ec\xc9\xea]u\xde&\xad %\x82\xa76}2\x92MR\xf7\xcf\xac\xa3\xfaP\xc6\x89\xdc9+\xbf\xf4\xb3t\xa2IX\xa0YQ\xcb\x1b\x96}\xd2k\n\x04\xfc\xe3\xe0\xb5!\xf9\xcc\xf5\x96\xbc\xe7;{\xe5t+\xc1\x1a\x9a\xe1\xf7\x98\xc4=\x1f\xf0\xb6\xa1\x13\xdb18xJ(}|\xbf\x9f^\x8cV\x04\fR\x9dG\xf0\x91\x18\x8bm\xe8\x0ez\x88\xe9\xde\nw\b\x86\xc5\x7f}K\xdeT\xf24\x1a\x15\xb2\x84\vO`\x0e\x80\x9b#\n6\xc7\x8f *6#\b\xdd\"P\xf0\x04T-\x8dfQl\xa1\x87i\x9c\xe0\xcc$\xf9\x06\xfc\xc2<\xa2#h\"\xef\x1fm\xbdM\x8d\xe6\x016\xd1\xd3i\x7f\xa1\xa3\xa8Z\xe3\xf3\xca\x94\x8b\r\xde\x0f\xd7\xc8\x8ahH\xcb\x87/\xe1\xb8\xdf\xafh\xb8\x11\xdeU\xe8\x01\xb6\xbe\xae\xad\xbd!\xf9\b\xce\"B\x13z\xea\xc0J\x1f2\xe2{*\'3\xbd\xc8\x97Q\x87z\x1c\x90\xfd\x9a\xbb\x1f\rE\x7f\xc7\x9c\x05$\xbd\x84@\xf1Q`\xc5\x1c&\x96\x8f\xb6\xab\xb0\xf6\x82\r\xb7\xab\x03\xc0A\x16\xda>\x1a\xaa\xf5\xecYz\x14\xd0\xd8\xce\xea\xea\xc6\xe7\xe9\xd3\x82\x8b\\\x1b\xf0\x88\xdf\xed\vj\xf0\x99\xbco6\xe0\n\xcfB\xa3AHP}\x8b\xb5\xbd-9\x9c\xdc\x01\xaa\xd1o\x1c\xd0Z\xe5\x9d,J\x17&\xaf\xa3-\x8c@\x14\xb7\xe7\xd9\x8d\'\x03\xbd\x8b@\xbc\x955\x1b\x85\xc9\xe2\xb0\xb3\xec\xf7?\xcd\x96\x9b~e\xfe\xedW\xc3\f\x83\x18\x85\xb9\x04\x1f\xb4\xdfN\x83WV\xc0\xe60\xa9\xfaL\x10-\xa8\xa5\x8c=!\xaa:\x8a\xb4\x9a\x12{\x0e\xfb\x83v\x97\x97\x9d\xf3W\xfeC\x8c\xce', 0x1) fcntl$addseals(r5, 0x409, 0x7) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0xc, @string={0xc, 0x3, "2061366ddd0ae48bb6ca"}}, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) kernel console output (not intermixed with test programs): fig 0 interface 0 has no altsetting 0 [ 150.763861][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.763890][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.763911][ T10] usb 3-1: Product: syz [ 150.763926][ T10] usb 3-1: Manufacturer: syz [ 150.763940][ T10] usb 3-1: SerialNumber: syz [ 150.774347][ T10] usb 3-1: config 0 descriptor?? [ 150.921584][ T1231] usb 5-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 150.921617][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.921639][ T1231] usb 5-1: Product: syz [ 150.921653][ T1231] usb 5-1: Manufacturer: syz [ 150.921667][ T1231] usb 5-1: SerialNumber: syz [ 151.005746][ T1231] usb 5-1: config 0 descriptor?? [ 151.013239][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 151.039651][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'. [ 151.039682][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'. [ 151.102415][ T10] usb 3-1: USB disconnect, device number 5 [ 151.436840][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.117'. [ 151.810542][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.931457][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.554864][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.716735][ T6329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.126'. [ 153.922437][ T6337] netlink: 'syz.0.127': attribute type 2 has an invalid length. [ 155.166874][ T1231] belkin_sa 5-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 155.623646][ T1231] usb 5-1: bcdDevice: 6636, bfc: 0 [ 155.651580][ T1231] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 155.659662][ T1231] usb 5-1: USB disconnect, device number 6 [ 155.751581][ T1231] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 155.752474][ T1231] belkin_sa 5-1:0.74: device disconnected [ 158.218091][ T6364] Invalid source name [ 158.218172][ T6364] UBIFS error (pid: 6364): cannot open "/dev/sg0", error -22 [ 158.603211][ T6367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.138'. [ 159.728634][ T1231] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.688034][ T1231] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.688058][ T1231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.711349][ T1231] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 160.711370][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 160.711380][ T1231] usb 5-1: Product: syz [ 160.711386][ T1231] usb 5-1: Manufacturer: syz [ 160.711393][ T1231] usb 5-1: SerialNumber: syz [ 160.715397][ T1231] usb 5-1: config 0 descriptor?? [ 161.074090][ T1231] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 161.118960][ T1231] usb 5-1: USB disconnect, device number 7 [ 161.247014][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.194394][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.222183][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.346563][ T6398] 9pnet_fd: Insufficient options for proto=fd [ 163.614906][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'. [ 164.019886][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.050304][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.928831][ T6419] mmap: syz.2.154 (6419) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.292248][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.322573][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.342320][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 166.342350][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 166.726649][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.142123][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.357613][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.456815][ T1231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.836563][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.010433][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.213024][ T1231] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.213063][ T1231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.269895][ T1231] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.269928][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 168.269950][ T1231] usb 3-1: Product: syz [ 168.269965][ T1231] usb 3-1: Manufacturer: syz [ 168.269979][ T1231] usb 3-1: SerialNumber: syz [ 168.291293][ T1231] usb 3-1: config 0 descriptor?? [ 168.512035][ T6446] 9pnet_fd: Insufficient options for proto=fd [ 168.517215][ T1231] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 168.589657][ T1231] usb 3-1: USB disconnect, device number 6 [ 168.895836][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.308747][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.804143][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.613240][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.756970][ T6476] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.213763][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.456657][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.905620][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'. [ 174.905641][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'. [ 175.037295][ T6507] netlink: 'syz.3.180': attribute type 2 has an invalid length. [ 177.998677][ T980] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.153152][ T980] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 178.153184][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.182776][ T980] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.182808][ T980] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.182830][ T980] usb 1-1: Product: syz [ 178.182844][ T980] usb 1-1: Manufacturer: syz [ 178.182858][ T980] usb 1-1: SerialNumber: syz [ 178.408671][ T980] usb 1-1: config 0 descriptor?? [ 179.201289][ T980] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 179.204658][ T980] usb 1-1: USB disconnect, device number 3 [ 179.561464][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.454581][ T6546] netlink: 'syz.3.191': attribute type 2 has an invalid length. [ 183.652112][ T6555] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.761618][ T6522] syz.4.185 (6522): drop_caches: 2 [ 184.123992][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 184.124022][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 185.859091][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.599698][ T980] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 186.599731][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.604503][ T980] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.604530][ T980] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 186.604551][ T980] usb 5-1: Product: syz [ 186.604566][ T980] usb 5-1: Manufacturer: syz [ 186.604581][ T980] usb 5-1: SerialNumber: syz [ 186.741964][ T980] usb 5-1: config 0 descriptor?? [ 186.886574][ T980] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 187.079528][ T10] usb 5-1: USB disconnect, device number 8 [ 187.172064][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.555175][ T6579] netlink: 'syz.0.205': attribute type 2 has an invalid length. [ 192.242088][ T6598] syz.4.208 (6598): drop_caches: 2 [ 194.107273][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.107371][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.651619][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.214'. [ 194.651652][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.214'. [ 196.978613][ T1231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.131511][ T1231] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 197.131545][ T1231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.136534][ T1231] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.136566][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.136587][ T1231] usb 3-1: Product: syz [ 197.136602][ T1231] usb 3-1: Manufacturer: syz [ 197.136616][ T1231] usb 3-1: SerialNumber: syz [ 197.233844][ T1231] usb 3-1: config 0 descriptor?? [ 197.512720][ T1231] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 197.544286][ T1231] usb 3-1: USB disconnect, device number 7 [ 197.741958][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.943893][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.063281][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.326328][ T6652] syz.3.227 (6652): drop_caches: 2 [ 199.464081][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.758113][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.943093][ T6662] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 199.943296][ T6662] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 200.690343][ T49] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.925241][ T49] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 200.925276][ T49] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.086468][ T49] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 201.086503][ T49] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 201.086525][ T49] usb 5-1: Product: syz [ 201.086540][ T49] usb 5-1: Manufacturer: syz [ 201.086554][ T49] usb 5-1: SerialNumber: syz [ 201.147510][ T49] usb 5-1: config 0 descriptor?? [ 201.233589][ T49] usb 5-1: selecting invalid altsetting 0 [ 201.475424][ T49] usb 5-1: USB disconnect, device number 9 [ 201.686198][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.838676][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.924057][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.990104][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.079570][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.195550][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.272295][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.889723][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.102660][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'. [ 204.102688][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'. [ 204.751155][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.781444][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.318644][ T980] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.536967][ T980] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 207.537045][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.629868][ T980] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.629912][ T980] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.629993][ T980] usb 5-1: Product: syz [ 207.630010][ T980] usb 5-1: Manufacturer: syz [ 207.630025][ T980] usb 5-1: SerialNumber: syz [ 207.796266][ T980] usb 5-1: config 0 descriptor?? [ 208.170298][ T980] usb 5-1: selecting invalid altsetting 0 [ 208.491617][ T980] usb 5-1: USB disconnect, device number 10 [ 208.668619][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 208.675221][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.272578][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 209.279468][ T49] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 209.287496][ T49] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 209.287524][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.287542][ T49] usb 4-1: Product: syz [ 209.287555][ T49] usb 4-1: Manufacturer: syz [ 209.287568][ T49] usb 4-1: SerialNumber: syz [ 209.478593][ T49] usb 4-1: config 0 descriptor?? [ 209.494255][ T49] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 210.553012][ T49] gspca_zc3xx: reg_w_i err -71 [ 210.786655][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.853817][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.015992][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.122606][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.148580][ T49] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 211.148694][ T49] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 211.179402][ T49] usb 4-1: USB disconnect, device number 2 [ 211.498842][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 211.498880][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 211.504148][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 211.505807][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 211.506590][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 212.816196][ T6779] input: syz1 as /devices/virtual/input/input6 [ 212.826557][ T6773] netdevsim netdevsim2: Direct firmware load for . [ 212.826557][ T6773] failed with error -2 [ 212.826581][ T6773] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 212.826581][ T6773] [ 213.135098][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.284016][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.844743][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.025630][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.388595][ T6016] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 214.566010][ T6016] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 214.566043][ T6016] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.579736][ T6802] Invalid source name [ 216.579748][ T6802] UBIFS error (pid: 6802): cannot open "/dev/sg0", error -22 [ 216.943878][ T6016] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.943914][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 216.943936][ T6016] usb 5-1: Product: syz [ 216.943951][ T6016] usb 5-1: Manufacturer: syz [ 217.752107][ T6016] usb 5-1: config 0 descriptor?? [ 217.752888][ T6016] usb 5-1: can't set config #0, error -71 [ 217.765166][ T6016] usb 5-1: USB disconnect, device number 11 [ 218.286995][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.553431][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.771925][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.282'. [ 219.296080][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.327819][ T6837] blktrace: Concurrent blktraces are not allowed on sg0 [ 221.458548][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 221.617359][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.617394][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.623030][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.623059][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.623077][ T10] usb 3-1: Product: syz [ 221.623090][ T10] usb 3-1: Manufacturer: syz [ 221.623103][ T10] usb 3-1: SerialNumber: syz [ 221.671501][ T10] usb 3-1: config 0 descriptor?? [ 221.696005][ T10] usb 3-1: selecting invalid altsetting 0 [ 222.049253][ T10] usb 3-1: USB disconnect, device number 8 [ 222.805488][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.860357][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 223.234759][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 223.323683][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 225.209528][ T980] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 225.438824][ T980] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 225.438868][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.038239][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 226.038257][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 226.038267][ T980] usb 2-1: Product: syz [ 226.038274][ T980] usb 2-1: Manufacturer: syz [ 226.038280][ T980] usb 2-1: SerialNumber: syz [ 226.091440][ T980] usb 2-1: config 0 descriptor?? [ 226.156202][ T980] usb 2-1: selecting invalid altsetting 0 [ 226.381842][ T980] usb 2-1: USB disconnect, device number 3 [ 227.534100][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.710431][ T37] audit: type=1326 audit(1760716396.352:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710493][ T37] audit: type=1326 audit(1760716396.352:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710540][ T37] audit: type=1326 audit(1760716396.362:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710594][ T37] audit: type=1326 audit(1760716396.362:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710639][ T37] audit: type=1326 audit(1760716396.362:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710685][ T37] audit: type=1326 audit(1760716396.362:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710730][ T37] audit: type=1326 audit(1760716396.362:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710777][ T37] audit: type=1326 audit(1760716396.362:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710821][ T37] audit: type=1326 audit(1760716396.362:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 227.710865][ T37] audit: type=1326 audit(1760716396.362:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6903 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9921aefc9 code=0x7ffc0000 [ 228.528547][ T6913] netlink: 'syz.3.317': attribute type 10 has an invalid length. [ 228.932764][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.934892][ T6913] bond0: (slave team0): Enslaving as an active interface with an up link [ 230.450044][ T6929] Bluetooth: MGMT ver 1.23 [ 230.976735][ T6933] syzkaller1: entered promiscuous mode [ 230.976750][ T6933] syzkaller1: entered allmulticast mode [ 231.199832][ T6899] syz.4.312 (6899): drop_caches: 2 [ 231.230015][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.861014][ T6940] netlink: 'syz.2.325': attribute type 6 has an invalid length. [ 232.429479][ T6949] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 233.088565][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.123524][ T6949] bond0: (slave team0): Enslaving as an active interface with an up link [ 234.025214][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.230865][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.231565][ T6958] Invalid source name [ 234.231642][ T6958] UBIFS error (pid: 6958): cannot open "/dev/sg0", error -22 [ 235.193941][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.474294][ T6975] syz.0.337 (6975): drop_caches: 2 [ 236.214189][ T6981] blktrace: Concurrent blktraces are not allowed on sg0 [ 238.074298][ T6995] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 238.195727][ T6995] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.219843][ T6995] bond0: (slave team0): Enslaving as an active interface with an up link [ 238.961152][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.140890][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.291122][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.325566][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.751618][ T7008] Invalid source name [ 239.751629][ T7008] UBIFS error (pid: 7008): cannot open "/dev/sg0", error -22 [ 240.614856][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.660153][ T7017] blktrace: Concurrent blktraces are not allowed on sg0 [ 241.228799][ T7029] netlink: 'syz.1.355': attribute type 10 has an invalid length. [ 242.229345][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.710709][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.090763][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.116083][ T7049] blktrace: Concurrent blktraces are not allowed on sg0 [ 244.167275][ T7059] syz.3.367 (7059): drop_caches: 2 [ 245.444923][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.587470][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.686777][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.199551][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.424746][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.607657][ T7093] Invalid source name [ 247.607669][ T7093] UBIFS error (pid: 7093): cannot open "/dev/sg0", error -22 [ 247.804134][ T7095] syz.1.380 (7095): drop_caches: 2 [ 248.367856][ T7110] syz.4.389 (7110): drop_caches: 2 [ 248.841038][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.309557][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.116934][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.449211][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.727014][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.170792][ T7146] input: syz1 as /devices/virtual/input/input7 [ 254.367137][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.114501][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.577217][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.621137][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.621220][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.201858][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.404'. [ 256.206580][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.658561][ T49] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 258.820980][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 258.844330][ T49] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 258.844359][ T49] usb 2-1: config 0 has no interface number 0 [ 258.844393][ T49] usb 2-1: config 0 interface 74 has no altsetting 0 [ 258.875005][ T49] usb 2-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 258.875024][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.875033][ T49] usb 2-1: Product: syz [ 258.875039][ T49] usb 2-1: Manufacturer: syz [ 258.875046][ T49] usb 2-1: SerialNumber: syz [ 258.915670][ T49] usb 2-1: config 0 descriptor?? [ 259.349000][ T7206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.412'. [ 259.458655][ T5803] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 259.702416][ T5803] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 259.702468][ T5803] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.706197][ T5803] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.706212][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.706221][ T5803] usb 3-1: Product: syz [ 259.706228][ T5803] usb 3-1: Manufacturer: syz [ 259.706234][ T5803] usb 3-1: SerialNumber: syz [ 259.835981][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.416'. [ 259.841620][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.614841][ T5803] usb 3-1: config 0 descriptor?? [ 260.736909][ T5803] usb 3-1: selecting invalid altsetting 0 [ 260.934805][ T5803] usb 3-1: USB disconnect, device number 9 [ 261.338274][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.369210][ T5855] udevd[5855]: setting owner of /dev/bus/usb/003/009 to uid=0, gid=0 failed: No such file or directory [ 262.272042][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.289093][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.600788][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.672472][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.767776][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.842806][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.955234][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.323636][ T49] belkin_sa 2-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 263.324581][ T49] usb 2-1: bcdDevice: 6636, bfc: 0 [ 263.365437][ T49] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 263.393106][ T49] usb 2-1: USB disconnect, device number 4 [ 263.415142][ T49] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 263.416610][ T49] belkin_sa 2-1:0.74: device disconnected [ 267.872211][ T1231] kernel read not supported for file /sysvipc/msg (pid: 1231 comm: kworker/1:2) [ 268.047744][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.118750][ T1231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 268.219917][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.308619][ T1231] usb 1-1: Using ep0 maxpacket: 16 [ 268.313199][ T1231] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 268.313229][ T1231] usb 1-1: config 0 has no interface number 0 [ 268.313265][ T1231] usb 1-1: config 0 interface 74 has no altsetting 0 [ 268.346138][ T1231] usb 1-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 268.346155][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.346164][ T1231] usb 1-1: Product: syz [ 268.346170][ T1231] usb 1-1: Manufacturer: syz [ 268.346177][ T1231] usb 1-1: SerialNumber: syz [ 268.380737][ T1231] usb 1-1: config 0 descriptor?? [ 268.705112][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.786676][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.940025][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.049874][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.131084][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.443265][ T7286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.433'. [ 269.679203][ T1231] belkin_sa 1-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 269.681708][ T1231] usb 1-1: bcdDevice: 6636, bfc: 0 [ 269.702390][ T1231] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 269.739677][ T1231] usb 1-1: USB disconnect, device number 4 [ 269.779080][ T1231] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 269.779533][ T1231] belkin_sa 1-1:0.74: device disconnected [ 270.284027][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.345096][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.545474][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.642129][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.672648][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.441267][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.925872][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.116032][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.297245][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.680562][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.328610][ T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 277.641303][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 277.944432][ T49] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 277.944448][ T49] usb 2-1: config 0 has no interface number 0 [ 277.944468][ T49] usb 2-1: config 0 interface 74 has no altsetting 0 [ 277.981106][ T49] usb 2-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 277.981132][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.981144][ T49] usb 2-1: Product: syz [ 277.981152][ T49] usb 2-1: Manufacturer: syz [ 277.981167][ T49] usb 2-1: SerialNumber: syz [ 278.078761][ T49] usb 2-1: config 0 descriptor?? [ 278.632722][ T7352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.455'. [ 278.996601][ T49] belkin_sa 2-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 279.014711][ T49] usb 2-1: bcdDevice: 6636, bfc: 0 [ 279.028125][ T49] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 279.059979][ T49] usb 2-1: USB disconnect, device number 5 [ 279.091876][ T49] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 279.092276][ T49] belkin_sa 2-1:0.74: device disconnected [ 280.357541][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.453'. [ 282.213536][ T7381] 9pnet_fd: Insufficient options for proto=fd [ 284.699910][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.897448][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.114683][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.460733][ T7419] 9pnet_fd: Insufficient options for proto=fd [ 286.535460][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.567675][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.479'. [ 287.964541][ T7422] overlayfs: missing 'lowerdir' [ 288.115540][ T7426] 9pnet_fd: Insufficient options for proto=fd [ 288.383430][ T7428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 291.520413][ T7454] 9pnet_fd: Insufficient options for proto=fd [ 292.019645][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.155896][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.495'. [ 292.362563][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.655941][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.068799][ T7468] input: syz1 as /devices/virtual/input/input8 [ 293.482563][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.724212][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.886090][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.044806][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.545447][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.671025][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.687187][ T7490] 9pnet_fd: Insufficient options for proto=fd [ 296.255748][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 298.441864][ T7517] input: syz1 as /devices/virtual/input/input9 [ 298.989780][ T7531] 9pnet_fd: Insufficient options for proto=fd [ 302.791646][ T5943] kernel read not supported for file /sysvipc/msg (pid: 5943 comm: kworker/0:6) [ 303.163141][ T7568] input: syz1 as /devices/virtual/input/input10 [ 304.225631][ T7582] Invalid source name [ 304.225650][ T7582] UBIFS error (pid: 7582): cannot open "/dev/sg0", error -22 [ 305.694749][ T5803] kernel read not supported for file /sysvipc/msg (pid: 5803 comm: kworker/1:4) [ 305.961528][ T7603] input: syz1 as /devices/virtual/input/input11 [ 309.629601][ T5943] kernel read not supported for file /sysvipc/msg (pid: 5943 comm: kworker/0:6) [ 309.882519][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.900011][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.901393][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.902924][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.904297][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.379432][ T7645] Invalid source name [ 311.379450][ T7645] UBIFS error (pid: 7645): cannot open "/dev/sg0", error -22 [ 311.988994][ T5811] Bluetooth: hci5: command tx timeout [ 312.744786][ T7666] binder: 7664:7666 ioctl c0306201 200000000040 returned -14 [ 314.069054][ T5811] Bluetooth: hci5: command tx timeout [ 315.762503][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.142479][ T5811] Bluetooth: hci5: command tx timeout [ 316.373509][ T7706] Invalid source name [ 316.373521][ T7706] UBIFS error (pid: 7706): cannot open "/dev/sg0", error -22 [ 316.417377][ T6586] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.729203][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.045110][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.046543][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.321645][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.833359][ T6586] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.218562][ T5811] Bluetooth: hci5: command tx timeout [ 318.611397][ T6586] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.802898][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.633036][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.825370][ T6586] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.323636][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 325.574890][ T7777] Invalid source name [ 325.574903][ T7777] UBIFS error (pid: 7777): cannot open "/dev/sg0", error -22 [ 330.009158][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.009321][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.009567][ T7637] bridge_slave_0: entered allmulticast mode [ 330.012884][ T7637] bridge_slave_0: entered promiscuous mode [ 330.098087][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.098254][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.103318][ T7637] bridge_slave_1: entered allmulticast mode [ 330.136375][ T7637] bridge_slave_1: entered promiscuous mode [ 331.335829][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.303357][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.322457][ T7805] block device autoloading is deprecated and will be removed. [ 332.602691][ T6586] bridge_slave_1: left allmulticast mode [ 332.602856][ T6586] bridge_slave_1: left promiscuous mode [ 332.605232][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.771793][ T6586] bridge_slave_0: left allmulticast mode [ 332.771827][ T6586] bridge_slave_0: left promiscuous mode [ 332.772103][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.192385][ T7855] Invalid source name [ 337.192411][ T7855] UBIFS error (pid: 7855): cannot open "/dev/sg0", error -22 [ 342.751883][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.625'. [ 346.936637][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.174709][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.212888][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.279196][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.783090][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.709121][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.909455][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.001202][ T6586] bond0 (unregistering): (slave team0): Releasing backup interface [ 350.030098][ T6586] bond0 (unregistering): Released all slaves [ 350.128962][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.790454][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.627067][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.918068][ T7838] netlink: 'syz.4.612': attribute type 15 has an invalid length. [ 351.918084][ T7838] netlink: 666 bytes leftover after parsing attributes in process `syz.4.612'. [ 352.735312][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.777084][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.826610][ T7637] team0: Port device team_slave_0 added [ 352.918858][ T7637] team0: Port device team_slave_1 added [ 353.078219][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.119532][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.827647][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.045729][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.278669][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.288656][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.322294][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.336356][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.337318][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.247207][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.552565][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.552584][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.552612][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.627009][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.627027][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.627053][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.882285][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.015319][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.114190][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.622339][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.774936][ T5118] Bluetooth: hci0: command tx timeout [ 358.052935][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.296262][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.833515][ T5118] Bluetooth: hci0: command tx timeout [ 359.253181][ T7989] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 360.858851][ T5118] Bluetooth: hci0: command tx timeout [ 362.470868][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.484613][ T7989] bond0: (slave team0): Enslaving as an active interface with an up link [ 362.532163][ T7637] hsr_slave_0: entered promiscuous mode [ 362.540894][ T7637] hsr_slave_1: entered promiscuous mode [ 362.541869][ T7637] debugfs: 'hsr0' already exists in 'hsr' [ 362.541892][ T7637] Cannot create hsr debugfs directory [ 362.961891][ T5118] Bluetooth: hci0: command tx timeout [ 367.446226][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.291554][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.701112][ T8079] blktrace: Concurrent blktraces are not allowed on sg0 [ 370.152281][ T6586] hsr_slave_0: left promiscuous mode [ 371.662210][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.749947][ T6586] hsr_slave_1: left promiscuous mode [ 371.753116][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.753258][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.910489][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.910517][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.921309][ T8090] 9pnet_fd: Insufficient options for proto=fd [ 372.053716][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.056608][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.061517][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.065718][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.074792][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.286620][ T6586] veth1_macvtap: left promiscuous mode [ 372.286783][ T6586] veth0_macvtap: left promiscuous mode [ 372.286961][ T6586] veth1_vlan: left promiscuous mode [ 372.287133][ T6586] veth0_vlan: left promiscuous mode [ 375.278630][ T5811] Bluetooth: hci4: command tx timeout [ 375.689882][ T8119] blktrace: Concurrent blktraces are not allowed on sg0 [ 377.451620][ T5811] Bluetooth: hci4: command tx timeout [ 378.399410][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.399497][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.540983][ T5811] Bluetooth: hci4: command tx timeout [ 380.649365][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 381.107003][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 381.341828][ T8155] blktrace: Concurrent blktraces are not allowed on sg0 [ 381.578584][ T5811] Bluetooth: hci4: command tx timeout [ 382.474371][ T5943] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 382.659454][ T5943] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.659484][ T5943] usb 4-1: config 0 has no interface number 0 [ 382.659537][ T5943] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 382.659558][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.663231][ T5943] usb 4-1: config 0 descriptor?? [ 382.847755][ T5943] usb 4-1: selecting invalid altsetting 1 [ 382.864533][ T5943] dvb_ttusb_budget: ttusb_init_controller: error [ 382.864822][ T5943] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 383.234058][ T5943] DVB: Unable to find symbol cx22700_attach() [ 383.332690][ T5943] DVB: Unable to find symbol tda10046_attach() [ 383.332708][ T5943] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 383.461771][ T5943] usb 4-1: USB disconnect, device number 3 [ 393.403801][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.414438][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.428491][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.454596][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.457678][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.939857][ T7948] chnl_net:caif_netlink_parms(): no params data found [ 394.615641][ T8248] netdevsim netdevsim3: Direct firmware load for . [ 394.615641][ T8248] failed with error -2 [ 394.615677][ T8248] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 394.615677][ T8248] [ 395.145586][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 395.578489][ T5811] Bluetooth: hci5: command tx timeout [ 397.365138][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.365688][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.365933][ T7948] bridge_slave_0: entered allmulticast mode [ 397.369693][ T7948] bridge_slave_0: entered promiscuous mode [ 397.453869][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.454033][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.454261][ T7948] bridge_slave_1: entered allmulticast mode [ 397.457353][ T7948] bridge_slave_1: entered promiscuous mode [ 397.659230][ T5811] Bluetooth: hci5: command tx timeout [ 400.040386][ T5811] Bluetooth: hci5: command tx timeout [ 400.075212][ T7948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.490118][ T49] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 400.526425][ T7948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.526795][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.526872][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.526995][ T8091] bridge_slave_0: entered allmulticast mode [ 400.533037][ T8091] bridge_slave_0: entered promiscuous mode [ 400.651799][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.652193][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.652901][ T8091] bridge_slave_1: entered allmulticast mode [ 400.653359][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 400.653386][ T49] usb 4-1: config 0 has no interface number 0 [ 400.653441][ T49] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 400.653464][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.666534][ T8091] bridge_slave_1: entered promiscuous mode [ 400.727400][ T49] usb 4-1: config 0 descriptor?? [ 400.747708][ T49] usb 4-1: selecting invalid altsetting 1 [ 400.748197][ T49] dvb_ttusb_budget: ttusb_init_controller: error [ 400.748214][ T49] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 400.875202][ T49] DVB: Unable to find symbol cx22700_attach() [ 400.910639][ T49] DVB: Unable to find symbol tda10046_attach() [ 400.910654][ T49] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 400.968207][ T49] usb 4-1: USB disconnect, device number 4 [ 401.003924][ T6586] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.241371][ T7948] team0: Port device team_slave_0 added [ 401.491362][ T6586] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.542377][ T7948] team0: Port device team_slave_1 added [ 401.573199][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.753394][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.059088][ T5118] Bluetooth: hci5: command tx timeout [ 402.312705][ T6586] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.371513][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.371527][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.371547][ T7948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.915220][ T8311] netdevsim netdevsim3: Direct firmware load for . [ 402.915220][ T8311] failed with error -2 [ 402.915249][ T8311] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 402.915249][ T8311] [ 403.041585][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.041600][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.041684][ T7948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.045171][ T8091] team0: Port device team_slave_0 added [ 403.162379][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.254668][ T6586] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.393732][ T8091] team0: Port device team_slave_1 added [ 403.589420][ T8232] chnl_net:caif_netlink_parms(): no params data found [ 404.269426][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.367764][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.367793][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.367817][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.507798][ T7948] hsr_slave_0: entered promiscuous mode [ 404.522603][ T7948] hsr_slave_1: entered promiscuous mode [ 404.525014][ T7948] debugfs: 'hsr0' already exists in 'hsr' [ 404.525043][ T7948] Cannot create hsr debugfs directory [ 404.548642][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.548659][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.548684][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.930937][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.306034][ T5943] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 406.350449][ T8091] hsr_slave_0: entered promiscuous mode [ 406.353734][ T8091] hsr_slave_1: entered promiscuous mode [ 406.354442][ T8091] debugfs: 'hsr0' already exists in 'hsr' [ 406.354458][ T8091] Cannot create hsr debugfs directory [ 406.461882][ T5943] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.461912][ T5943] usb 4-1: config 0 has no interface number 0 [ 406.461967][ T5943] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 406.461991][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.502489][ T5943] usb 4-1: config 0 descriptor?? [ 406.522089][ T5943] usb 4-1: selecting invalid altsetting 1 [ 406.538992][ T5943] dvb_ttusb_budget: ttusb_init_controller: error [ 406.539012][ T5943] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 406.782378][ T5943] DVB: Unable to find symbol cx22700_attach() [ 406.864765][ T5943] DVB: Unable to find symbol tda10046_attach() [ 406.864792][ T5943] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 406.893899][ T5943] usb 4-1: USB disconnect, device number 5 [ 406.950037][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 406.950056][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 407.043180][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.043389][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.043657][ T8232] bridge_slave_0: entered allmulticast mode [ 407.047179][ T8232] bridge_slave_0: entered promiscuous mode [ 407.099461][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.099646][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.099863][ T8232] bridge_slave_1: entered allmulticast mode [ 407.103191][ T8232] bridge_slave_1: entered promiscuous mode [ 407.944896][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.297518][ T6586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.405134][ T8369] netdevsim netdevsim0: Direct firmware load for . [ 408.405134][ T8369] failed with error -2 [ 408.405164][ T8369] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 408.405164][ T8369] [ 408.694928][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.034288][ T6586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.108032][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.578291][ T6586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.650056][ T8232] team0: Port device team_slave_0 added [ 409.772604][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.874232][ T8232] team0: Port device team_slave_1 added [ 409.988551][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.415077][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.448482][ T49] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 410.611996][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.629225][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.630776][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.632913][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.635105][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.939414][ T8395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.744'. [ 410.939439][ T8395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.744'. [ 410.991124][ T49] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.991155][ T49] usb 1-1: config 0 has no interface number 0 [ 410.991210][ T49] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 410.991234][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.009074][ T49] usb 1-1: config 0 descriptor?? [ 411.016266][ T49] usb 1-1: selecting invalid altsetting 1 [ 411.016474][ T49] dvb_ttusb_budget: ttusb_init_controller: error [ 411.016488][ T49] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 411.088372][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.211238][ T49] DVB: Unable to find symbol cx22700_attach() [ 411.340952][ T49] DVB: Unable to find symbol tda10046_attach() [ 411.340969][ T49] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 411.361028][ T49] usb 1-1: USB disconnect, device number 5 [ 411.395416][ T8400] syz.3.746 (8400): drop_caches: 2 [ 411.563023][ T6586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.600362][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.600382][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.600411][ T8232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.687090][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.687103][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.687116][ T8232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.317678][ T8232] hsr_slave_0: entered promiscuous mode [ 412.354836][ T8232] hsr_slave_1: entered promiscuous mode [ 412.356897][ T8232] debugfs: 'hsr0' already exists in 'hsr' [ 412.356924][ T8232] Cannot create hsr debugfs directory [ 412.698942][ T5811] Bluetooth: hci3: command tx timeout [ 413.404788][ T8407] netdevsim netdevsim3: Direct firmware load for . [ 413.404788][ T8407] failed with error -2 [ 413.404818][ T8407] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 413.404818][ T8407] [ 414.778981][ T5811] Bluetooth: hci3: command tx timeout [ 415.536863][ T8423] veth0_to_team: entered promiscuous mode [ 415.710467][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.189224][ T8091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.279181][ T6586] bridge_slave_1: left allmulticast mode [ 416.279203][ T6586] bridge_slave_1: left promiscuous mode [ 416.279376][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.331025][ T6586] bridge_slave_0: left allmulticast mode [ 416.331057][ T6586] bridge_slave_0: left promiscuous mode [ 416.331242][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.411006][ T6586] bridge_slave_1: left allmulticast mode [ 416.411027][ T6586] bridge_slave_1: left promiscuous mode [ 416.411587][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.464232][ T6586] bridge_slave_0: left allmulticast mode [ 416.464250][ T6586] bridge_slave_0: left promiscuous mode [ 416.464400][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.518477][ T49] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 416.521099][ T6586] bridge_slave_1: left allmulticast mode [ 416.521116][ T6586] bridge_slave_1: left promiscuous mode [ 416.521275][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.579350][ T6586] bridge_slave_0: left allmulticast mode [ 416.579368][ T6586] bridge_slave_0: left promiscuous mode [ 416.579515][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.670063][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 416.675161][ T49] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 416.675185][ T49] usb 1-1: config 0 has no interface number 0 [ 416.675214][ T49] usb 1-1: config 0 interface 74 has no altsetting 0 [ 416.677802][ T49] usb 1-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 416.677834][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.677854][ T49] usb 1-1: Product: syz [ 416.677869][ T49] usb 1-1: Manufacturer: syz [ 416.677884][ T49] usb 1-1: SerialNumber: syz [ 416.684954][ T49] usb 1-1: config 0 descriptor?? [ 416.860699][ T5811] Bluetooth: hci3: command tx timeout [ 417.073680][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.077711][ T8440] netlink: 32 bytes leftover after parsing attributes in process `syz.0.755'. [ 417.125355][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.175439][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.227694][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.444867][ T49] belkin_sa 1-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 417.452325][ T49] usb 1-1: bcdDevice: 6636, bfc: 0 [ 417.455257][ T49] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 417.466843][ T49] usb 1-1: USB disconnect, device number 6 [ 417.491291][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.505206][ T49] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 417.511305][ T49] belkin_sa 1-1:0.74: device disconnected [ 418.459438][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.499292][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.544030][ T6586] bond0 (unregistering): (slave team0): Releasing backup interface [ 418.571184][ T6586] bond0 (unregistering): Released all slaves [ 418.645070][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.710201][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.809400][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.879613][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.920881][ T6586] bond0 (unregistering): Released all slaves [ 418.952771][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.954447][ T5811] Bluetooth: hci3: command tx timeout [ 419.000016][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.047876][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.097194][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.182217][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.229103][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.277062][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.375279][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.418210][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.311062][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.368978][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.390529][ T6586] bond0 (unregistering): Released all slaves [ 420.408795][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 420.408821][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 420.498576][ T8091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.876777][ T8451] netdevsim netdevsim0: Direct firmware load for . [ 420.876777][ T8451] failed with error -2 [ 420.876807][ T8451] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 420.876807][ T8451] [ 420.905522][ T8091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 421.122581][ T8091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.193333][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.231075][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.951791][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.096149][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.254505][ T8480] blktrace: Concurrent blktraces are not allowed on sg0 [ 423.360244][ T8396] chnl_net:caif_netlink_parms(): no params data found [ 423.574419][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.779557][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 423.779585][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 424.025277][ T8232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 424.366030][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.529790][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.616511][ T5877] kworker/0:5 (5877) used greatest stack depth: 17520 bytes left [ 424.795249][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.502705][ T8232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 425.604591][ T8232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 425.632053][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.970159][ T8506] blktrace: Concurrent blktraces are not allowed on sg0 [ 426.031462][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.441574][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.678899][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.731827][ T8232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 428.888895][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.894423][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.774'. [ 428.894453][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.774'. [ 429.086746][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.104634][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.106195][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.116013][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.117557][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.245198][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.523713][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.778317][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.925217][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.252580][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.310731][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.310962][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.311221][ T8396] bridge_slave_0: entered allmulticast mode [ 430.314639][ T8396] bridge_slave_0: entered promiscuous mode [ 430.364729][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.364892][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.365158][ T8396] bridge_slave_1: entered allmulticast mode [ 430.389681][ T5943] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 430.392861][ T8396] bridge_slave_1: entered promiscuous mode [ 430.606536][ T5943] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 430.606567][ T5943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.606587][ T5943] usb 4-1: config 0 has no interface number 0 [ 430.606638][ T5943] usb 4-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=82.63 [ 430.606661][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.650946][ T5943] usb 4-1: config 0 descriptor?? [ 430.694434][ T5943] gspca_main: spca501-2.14.0 probing 1776:501c [ 430.978754][ T5943] gspca_spca501: reg write: error -71 [ 430.978766][ T5943] spca501 4-1:0.176: Reg write failed for 0x02,0x07,0x05 [ 430.978816][ T5943] spca501 4-1:0.176: probe with driver spca501 failed with error -22 [ 430.998311][ T5943] usb 4-1: USB disconnect, device number 6 [ 431.131532][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.180236][ T5118] Bluetooth: hci0: command tx timeout [ 431.300246][ T6586] hsr_slave_0: left promiscuous mode [ 431.338605][ T6586] hsr_slave_1: left promiscuous mode [ 431.339313][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.339327][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.474830][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.474848][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.597091][ T6586] hsr_slave_0: left promiscuous mode [ 431.681688][ T6586] hsr_slave_1: left promiscuous mode [ 431.682334][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.705337][ T8553] blktrace: Concurrent blktraces are not allowed on sg0 [ 431.751884][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.239248][ T6586] hsr_slave_0: left promiscuous mode [ 433.258497][ T5118] Bluetooth: hci0: command tx timeout [ 433.278490][ T6586] hsr_slave_1: left promiscuous mode [ 433.282779][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.282803][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.339060][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.339085][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.605173][ T6586] veth1_macvtap: left promiscuous mode [ 433.605305][ T6586] veth0_macvtap: left promiscuous mode [ 433.605632][ T6586] veth1_vlan: left promiscuous mode [ 433.605846][ T6586] veth0_vlan: left promiscuous mode [ 433.928815][ T6586] veth1_macvtap: left promiscuous mode [ 433.928888][ T6586] veth0_macvtap: left promiscuous mode [ 433.929052][ T6586] veth1_vlan: left promiscuous mode [ 433.929164][ T6586] veth0_vlan: left promiscuous mode [ 435.338601][ T5811] Bluetooth: hci0: command tx timeout [ 436.099184][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 436.269105][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 437.428668][ T5118] Bluetooth: hci0: command tx timeout [ 438.669078][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 438.779379][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 439.825520][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.825619][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.020047][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 441.199003][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 443.350577][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.783'. [ 443.350602][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.783'. [ 443.367305][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.130838][ T8585] blktrace: Concurrent blktraces are not allowed on sg0 [ 447.211304][ T8396] team0: Port device team_slave_0 added [ 447.327753][ T8396] team0: Port device team_slave_1 added [ 448.886126][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'. [ 448.886158][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'. [ 448.888764][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.888781][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.888808][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.030895][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.030905][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.030917][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.042675][ T8396] hsr_slave_0: entered promiscuous mode [ 451.043383][ T8396] hsr_slave_1: entered promiscuous mode [ 451.043857][ T8396] debugfs: 'hsr0' already exists in 'hsr' [ 451.043870][ T8396] Cannot create hsr debugfs directory [ 452.120740][ T8619] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 453.402612][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.413348][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.420622][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.426985][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.427907][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 453.548516][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 453.737524][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 453.740214][ T9] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 453.740239][ T9] usb 1-1: config 0 has no interface number 0 [ 453.740270][ T9] usb 1-1: config 0 interface 74 has no altsetting 0 [ 453.743374][ T9] usb 1-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 453.743398][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.743416][ T9] usb 1-1: Product: syz [ 453.743436][ T9] usb 1-1: Manufacturer: syz [ 453.743449][ T9] usb 1-1: SerialNumber: syz [ 453.761339][ T9] usb 1-1: config 0 descriptor?? [ 454.129465][ T8640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.798'. [ 454.303307][ T8519] chnl_net:caif_netlink_parms(): no params data found [ 454.919006][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.799'. [ 454.919036][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.799'. [ 455.276887][ T9] belkin_sa 1-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 455.307376][ T9] usb 1-1: bcdDevice: 6636, bfc: 0 [ 455.313331][ T9] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 455.325167][ T9] usb 1-1: USB disconnect, device number 7 [ 455.345134][ T9] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 455.352195][ T9] belkin_sa 1-1:0.74: device disconnected [ 455.386007][ T8580] udevd[8580]: setting mode of /dev/bus/usb/001/007 to 020664 failed: No such file or directory [ 455.386237][ T8580] udevd[8580]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory [ 455.500261][ T5811] Bluetooth: hci4: command tx timeout [ 459.333396][ T5811] Bluetooth: hci4: command tx timeout [ 460.182320][ T8672] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 460.694701][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.694909][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.695194][ T8519] bridge_slave_0: entered allmulticast mode [ 460.699535][ T8519] bridge_slave_0: entered promiscuous mode [ 460.785415][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.155108][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.968695][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.629025][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.637111][ T5811] Bluetooth: hci4: command tx timeout [ 463.829783][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.191629][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.807'. [ 464.191661][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.807'. [ 464.263717][ T8519] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.263870][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.264154][ T8519] bridge_slave_1: entered allmulticast mode [ 464.267025][ T8519] bridge_slave_1: entered promiscuous mode [ 464.775055][ T5943] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 466.322063][ T5811] Bluetooth: hci4: command tx timeout [ 466.808821][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 466.811538][ T5943] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 466.811559][ T5943] usb 4-1: config 0 has no interface number 0 [ 466.811587][ T5943] usb 4-1: config 0 interface 74 has no altsetting 0 [ 466.813976][ T5943] usb 4-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 466.814001][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.814012][ T5943] usb 4-1: Product: syz [ 466.814020][ T5943] usb 4-1: Manufacturer: syz [ 466.814029][ T5943] usb 4-1: SerialNumber: syz [ 466.816990][ T5943] usb 4-1: config 0 descriptor?? [ 467.828820][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.809'. [ 467.863583][ T8519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.121895][ T8519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.237164][ T5943] belkin_sa 4-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 468.260085][ T5943] usb 4-1: bcdDevice: 6636, bfc: 0 [ 468.264442][ T5943] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 468.296024][ T5943] usb 4-1: USB disconnect, device number 7 [ 468.317835][ T5943] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 468.333561][ T5943] belkin_sa 4-1:0.74: device disconnected [ 468.927534][ T8709] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 470.055857][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.093373][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.152324][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.283286][ T8519] team0: Port device team_slave_0 added [ 470.454193][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.617977][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.218398][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.594726][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.373120][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.457876][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.519551][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.817'. [ 472.519581][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.817'. [ 472.561045][ T8519] team0: Port device team_slave_1 added [ 472.626140][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.825618][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.981205][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.646952][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.819404][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.756813][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.876020][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 474.892099][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 474.895020][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 474.900377][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 474.902181][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.388501][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.505746][ T8519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.505766][ T8519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.505793][ T8519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.663271][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.785328][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.345587][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.346911][ T5811] Bluetooth: hci5: command tx timeout [ 477.705688][ T8519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.705706][ T8519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.705735][ T8519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.712731][ T8630] chnl_net:caif_netlink_parms(): no params data found [ 477.906264][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.103203][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.166816][ T8783] Invalid source name [ 479.166934][ T8783] UBIFS error (pid: 8783): cannot open "/dev/sg0", error -22 [ 479.210530][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 479.210550][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 479.428452][ T5811] Bluetooth: hci5: command tx timeout [ 480.148965][ T8519] hsr_slave_0: entered promiscuous mode [ 480.149999][ T8519] hsr_slave_1: entered promiscuous mode [ 480.150717][ T8519] debugfs: 'hsr0' already exists in 'hsr' [ 480.150731][ T8519] Cannot create hsr debugfs directory [ 481.501398][ T5811] Bluetooth: hci5: command tx timeout [ 482.207637][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 482.267325][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.267559][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.267781][ T8630] bridge_slave_0: entered allmulticast mode [ 482.271988][ T8630] bridge_slave_0: entered promiscuous mode [ 482.500713][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.500816][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.500950][ T8630] bridge_slave_1: entered allmulticast mode [ 482.503546][ T8630] bridge_slave_1: entered promiscuous mode [ 483.528853][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 483.579104][ T5811] Bluetooth: hci5: command tx timeout [ 483.680475][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 483.693329][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 483.708170][ T9] usb 4-1: config 5 has an invalid interface number: 61 but max is 0 [ 483.708197][ T9] usb 4-1: config 5 has no interface number 0 [ 483.708246][ T9] usb 4-1: config 5 interface 61 has no altsetting 0 [ 483.752964][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 483.752997][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.753017][ T9] usb 4-1: Product: syz [ 483.753031][ T9] usb 4-1: Manufacturer: syz [ 483.753045][ T9] usb 4-1: SerialNumber: syz [ 484.124526][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.650903][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.722238][ T9] ath6kl: Failed to submit usb control message: -71 [ 485.722300][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 485.722315][ T9] ath6kl: Unable to send get target info: -71 [ 485.776446][ T9] ath6kl: Failed to init ath6kl core: -71 [ 485.777637][ T9] ath6kl_usb 4-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 485.782866][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.818007][ T9] usb 4-1: USB disconnect, device number 8 [ 487.112981][ T8630] team0: Port device team_slave_0 added [ 487.287297][ T8630] team0: Port device team_slave_1 added [ 488.145480][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.145498][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.145568][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.365373][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.365391][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.365420][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.419110][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 489.426917][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 489.445267][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 489.451877][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 489.454420][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 489.455327][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 489.885414][ T8630] hsr_slave_0: entered promiscuous mode [ 489.896422][ T8630] hsr_slave_1: entered promiscuous mode [ 489.897622][ T8630] debugfs: 'hsr0' already exists in 'hsr' [ 489.897650][ T8630] Cannot create hsr debugfs directory [ 490.242259][ T8866] netdevsim netdevsim3: Direct firmware load for . [ 490.242259][ T8866] failed with error -2 [ 490.242290][ T8866] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 490.242290][ T8866] [ 491.498522][ T5811] Bluetooth: hci3: command tx timeout [ 491.575872][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.576128][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.576375][ T8744] bridge_slave_0: entered allmulticast mode [ 491.610283][ T8744] bridge_slave_0: entered promiscuous mode [ 491.709551][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.709724][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.709962][ T8744] bridge_slave_1: entered allmulticast mode [ 491.713161][ T8744] bridge_slave_1: entered promiscuous mode [ 491.847354][ T8881] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 492.484269][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.579361][ T5811] Bluetooth: hci3: command tx timeout [ 493.728008][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.748594][ T68] bridge_slave_1: left allmulticast mode [ 493.748628][ T68] bridge_slave_1: left promiscuous mode [ 493.748935][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.939424][ T68] bridge_slave_0: left allmulticast mode [ 493.939443][ T68] bridge_slave_0: left promiscuous mode [ 493.945281][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.041421][ T68] bridge_slave_1: left allmulticast mode [ 494.041440][ T68] bridge_slave_1: left promiscuous mode [ 494.041657][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.110209][ T68] bridge_slave_0: left allmulticast mode [ 494.110228][ T68] bridge_slave_0: left promiscuous mode [ 494.113301][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.186921][ T68] bridge_slave_1: left allmulticast mode [ 494.186946][ T68] bridge_slave_1: left promiscuous mode [ 494.187089][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.260191][ T68] bridge_slave_0: left allmulticast mode [ 494.260214][ T68] bridge_slave_0: left promiscuous mode [ 494.260416][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.357024][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.529297][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.659159][ T5811] Bluetooth: hci3: command tx timeout [ 495.893968][ T68] bond0 (unregistering): Released all slaves [ 495.996369][ T8911] netlink: 'syz.3.854': attribute type 10 has an invalid length. [ 496.965215][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.202744][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.320467][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.385134][ T68] bond0 (unregistering): Released all slaves [ 497.609201][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.689559][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.738498][ T5811] Bluetooth: hci3: command tx timeout [ 497.764266][ T68] bond0 (unregistering): Released all slaves [ 498.216500][ T8924] netdevsim netdevsim0: Direct firmware load for . [ 498.216500][ T8924] failed with error -2 [ 498.216528][ T8924] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 498.216528][ T8924] [ 498.516470][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.673940][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.681851][ T8931] Invalid source name [ 498.681864][ T8931] UBIFS error (pid: 8931): cannot open "/dev/sg0", error -22 [ 498.737809][ T8932] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 498.792073][ T8744] team0: Port device team_slave_0 added [ 498.830034][ T8744] team0: Port device team_slave_1 added [ 499.354995][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.621724][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.621739][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.621758][ T8744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.808755][ T68] hsr_slave_0: left promiscuous mode [ 499.958923][ T68] hsr_slave_1: left promiscuous mode [ 499.962548][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.001029][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.189431][ T68] hsr_slave_0: left promiscuous mode [ 500.208731][ T68] hsr_slave_1: left promiscuous mode [ 500.209778][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.249990][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.419362][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.626626][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.113943][ T68] hsr_slave_0: left promiscuous mode [ 501.150242][ T68] hsr_slave_1: left promiscuous mode [ 501.150952][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.199302][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.265954][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.266047][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.130442][ T68] team0 (unregistering): Port device team_slave_1 removed [ 502.359185][ T68] team0 (unregistering): Port device team_slave_0 removed [ 503.429398][ T68] team0 (unregistering): Port device team_slave_1 removed [ 503.571391][ T68] team0 (unregistering): Port device team_slave_0 removed [ 504.689135][ T68] team0 (unregistering): Port device team_slave_1 removed [ 504.809018][ T68] team0 (unregistering): Port device team_slave_0 removed [ 505.284985][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.284996][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.285010][ T8744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.288003][ T8955] netdevsim netdevsim0: Direct firmware load for . [ 505.288003][ T8955] failed with error -2 [ 505.288019][ T8955] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 505.288019][ T8955] [ 506.709950][ T8744] hsr_slave_0: entered promiscuous mode [ 506.725115][ T8744] hsr_slave_1: entered promiscuous mode [ 506.728671][ T8744] debugfs: 'hsr0' already exists in 'hsr' [ 506.728701][ T8744] Cannot create hsr debugfs directory [ 507.938924][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 508.125739][ T31] usb 4-1: no configurations [ 508.125757][ T31] usb 4-1: can't read configurations, error -22 [ 508.381246][ T31] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 508.511421][ T8858] chnl_net:caif_netlink_parms(): no params data found [ 508.599324][ T31] usb 4-1: no configurations [ 508.599348][ T31] usb 4-1: can't read configurations, error -22 [ 508.602512][ T31] usb usb4-port1: attempt power cycle [ 508.938597][ T31] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 508.971392][ T31] usb 4-1: no configurations [ 508.971414][ T31] usb 4-1: can't read configurations, error -22 [ 509.118509][ T31] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 509.164737][ T31] usb 4-1: no configurations [ 509.164758][ T31] usb 4-1: can't read configurations, error -22 [ 509.165588][ T31] usb usb4-port1: unable to enumerate USB device [ 509.716998][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.717073][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.717195][ T8858] bridge_slave_0: entered allmulticast mode [ 509.735072][ T8858] bridge_slave_0: entered promiscuous mode [ 509.774870][ T8994] netdevsim netdevsim0: Direct firmware load for . [ 509.774870][ T8994] failed with error -2 [ 509.777970][ T8994] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 509.777970][ T8994] [ 509.861034][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.861164][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.861390][ T8858] bridge_slave_1: entered allmulticast mode [ 509.901442][ T8858] bridge_slave_1: entered promiscuous mode [ 510.304458][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.366950][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.583624][ T8858] team0: Port device team_slave_0 added [ 510.607158][ T8858] team0: Port device team_slave_1 added [ 510.903479][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.903498][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.903525][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.906545][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.906567][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.906592][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.946230][ T8630] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 511.035872][ T8630] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 511.194516][ T8630] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 511.474720][ T8630] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 511.881217][ T8858] hsr_slave_0: entered promiscuous mode [ 511.886698][ T8858] hsr_slave_1: entered promiscuous mode [ 511.893919][ T8858] debugfs: 'hsr0' already exists in 'hsr' [ 511.893947][ T8858] Cannot create hsr debugfs directory [ 512.526433][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.543052][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.544925][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.547759][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.571458][ T9018] netlink: 'syz.3.884': attribute type 10 has an invalid length. [ 512.578003][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 514.618664][ T5811] Bluetooth: hci0: command tx timeout [ 515.715166][ T9061] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 516.708451][ T5811] Bluetooth: hci0: command tx timeout [ 516.957013][ T8744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 517.434283][ T8744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 517.474110][ T8744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 517.567293][ T8744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 518.778442][ T5811] Bluetooth: hci0: command tx timeout [ 519.405197][ T9023] chnl_net:caif_netlink_parms(): no params data found [ 519.752883][ T8858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 519.863170][ T8858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 519.995322][ T8858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 520.102432][ T8858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 520.841613][ T68] bridge_slave_1: left allmulticast mode [ 520.841646][ T68] bridge_slave_1: left promiscuous mode [ 520.841958][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.858454][ T5811] Bluetooth: hci0: command tx timeout [ 520.942587][ T68] bridge_slave_0: left allmulticast mode [ 520.942609][ T68] bridge_slave_0: left promiscuous mode [ 520.942805][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.061774][ T68] bridge_slave_1: left allmulticast mode [ 521.061808][ T68] bridge_slave_1: left promiscuous mode [ 521.062089][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.121546][ T68] bridge_slave_0: left allmulticast mode [ 521.121579][ T68] bridge_slave_0: left promiscuous mode [ 521.121829][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.216604][ T68] bridge_slave_1: left allmulticast mode [ 521.216622][ T68] bridge_slave_1: left promiscuous mode [ 521.233086][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.311401][ T68] bridge_slave_0: left allmulticast mode [ 521.311437][ T68] bridge_slave_0: left promiscuous mode [ 521.311714][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.533252][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.738993][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.826466][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.925999][ T68] bond0 (unregistering): Released all slaves [ 522.154249][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.239829][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.302128][ T68] bond0 (unregistering): Released all slaves [ 522.509042][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.591316][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.650400][ T68] bond0 (unregistering): Released all slaves [ 523.016289][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.016500][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.016759][ T9023] bridge_slave_0: entered allmulticast mode [ 523.048465][ T9023] bridge_slave_0: entered promiscuous mode [ 523.074473][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.074634][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.074906][ T9023] bridge_slave_1: entered allmulticast mode [ 523.100895][ T9023] bridge_slave_1: entered promiscuous mode [ 523.447521][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.467163][ T9023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.497607][ T9023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.776596][ T9023] team0: Port device team_slave_0 added [ 523.908762][ T68] hsr_slave_0: left promiscuous mode [ 523.940195][ T68] hsr_slave_1: left promiscuous mode [ 523.941387][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.981664][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.151845][ T68] hsr_slave_0: left promiscuous mode [ 524.188535][ T68] hsr_slave_1: left promiscuous mode [ 524.189510][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.239397][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.449159][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.709949][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.849128][ T68] hsr_slave_0: left promiscuous mode [ 524.888495][ T68] hsr_slave_1: left promiscuous mode [ 524.889056][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.931103][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.358745][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.620031][ T68] team0 (unregistering): Port device team_slave_1 removed [ 525.759589][ T68] team0 (unregistering): Port device team_slave_0 removed [ 525.789841][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.120552][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.380981][ T9169] blktrace: Concurrent blktraces are not allowed on sg0 [ 527.090841][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.212585][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.444023][ T68] team0 (unregistering): Port device team_slave_1 removed [ 527.491620][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.589515][ T68] team0 (unregistering): Port device team_slave_0 removed [ 529.557324][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.879291][ T68] team0 (unregistering): Port device team_slave_1 removed [ 529.906005][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.009987][ T68] team0 (unregistering): Port device team_slave_0 removed [ 530.528434][ T49] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 530.656345][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.670813][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.680951][ T49] usb 4-1: no configurations [ 530.680970][ T49] usb 4-1: can't read configurations, error -22 [ 530.698122][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.702480][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.703578][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.808591][ T49] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 530.817398][ T9023] team0: Port device team_slave_1 added [ 530.980018][ T49] usb 4-1: no configurations [ 530.980040][ T49] usb 4-1: can't read configurations, error -22 [ 530.980431][ T49] usb usb4-port1: attempt power cycle [ 531.202892][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.202909][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.202921][ T9023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.207460][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.207470][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.207482][ T9023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.331247][ T49] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 531.357537][ T49] usb 4-1: no configurations [ 531.357560][ T49] usb 4-1: can't read configurations, error -22 [ 531.488469][ T49] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 531.510183][ T49] usb 4-1: no configurations [ 531.510205][ T49] usb 4-1: can't read configurations, error -22 [ 531.510856][ T49] usb usb4-port1: unable to enumerate USB device [ 531.845112][ T9023] hsr_slave_0: entered promiscuous mode [ 531.845888][ T9023] hsr_slave_1: entered promiscuous mode [ 531.846438][ T9023] debugfs: 'hsr0' already exists in 'hsr' [ 531.846455][ T9023] Cannot create hsr debugfs directory [ 532.778521][ T5118] Bluetooth: hci4: command tx timeout [ 532.884470][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.002700][ T9194] chnl_net:caif_netlink_parms(): no params data found [ 533.291763][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.431799][ T9220] blktrace: Concurrent blktraces are not allowed on sg0 [ 533.840237][ T9194] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.840373][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.840598][ T9194] bridge_slave_0: entered allmulticast mode [ 533.869900][ T9194] bridge_slave_0: entered promiscuous mode [ 533.883362][ T1922] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.884410][ T1922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.032984][ T9194] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.033239][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.033385][ T9194] bridge_slave_1: entered allmulticast mode [ 534.040764][ T9194] bridge_slave_1: entered promiscuous mode [ 534.270359][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.270595][ T6586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.351334][ T9194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.407468][ T9194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.860724][ T5118] Bluetooth: hci4: command tx timeout [ 535.454623][ T9194] team0: Port device team_slave_0 added [ 535.555381][ T9194] team0: Port device team_slave_1 added [ 536.895347][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.895367][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.895396][ T9194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.938566][ T5118] Bluetooth: hci4: command tx timeout [ 536.960786][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.960802][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.960823][ T9194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.035873][ T9023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 537.091187][ T9023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 537.132235][ T9023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 537.350459][ T9023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 537.626749][ T9194] hsr_slave_0: entered promiscuous mode [ 537.627601][ T9194] hsr_slave_1: entered promiscuous mode [ 537.628156][ T9194] debugfs: 'hsr0' already exists in 'hsr' [ 537.628169][ T9194] Cannot create hsr debugfs directory [ 538.098465][ T5803] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 538.251116][ T5803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.251145][ T5803] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.251186][ T5803] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 538.251211][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.260479][ T5803] usb 4-1: config 0 descriptor?? [ 538.525514][ T49] usb 4-1: USB disconnect, device number 17 [ 539.018528][ T5118] Bluetooth: hci4: command tx timeout [ 540.208913][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 540.389882][ T9] usb 4-1: no configurations [ 540.389905][ T9] usb 4-1: can't read configurations, error -22 [ 540.523260][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 540.756137][ T9] usb 4-1: no configurations [ 540.756158][ T9] usb 4-1: can't read configurations, error -22 [ 540.757511][ T9] usb usb4-port1: attempt power cycle [ 540.987110][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.112996][ T68] bridge_slave_1: left allmulticast mode [ 541.113031][ T68] bridge_slave_1: left promiscuous mode [ 541.113315][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.138503][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 541.170043][ T9] usb 4-1: no configurations [ 541.170065][ T9] usb 4-1: can't read configurations, error -22 [ 541.263704][ T68] bridge_slave_0: left allmulticast mode [ 541.263739][ T68] bridge_slave_0: left promiscuous mode [ 541.264069][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.308504][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 541.329987][ T9] usb 4-1: no configurations [ 541.330009][ T9] usb 4-1: can't read configurations, error -22 [ 541.330427][ T9] usb usb4-port1: unable to enumerate USB device [ 542.330166][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.411861][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.475891][ T68] bond0 (unregistering): Released all slaves [ 543.118602][ T68] hsr_slave_0: left promiscuous mode [ 543.158507][ T68] hsr_slave_1: left promiscuous mode [ 543.159036][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.201332][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.438434][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 544.591414][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.591443][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.591484][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 544.591509][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.643604][ T10] usb 4-1: config 0 descriptor?? [ 544.934035][ T10] usb 4-1: USB disconnect, device number 22 [ 545.118498][ T68] team0 (unregistering): Port device team_slave_1 removed [ 545.293612][ T68] team0 (unregistering): Port device team_slave_0 removed [ 545.898772][ T5803] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 546.062167][ T5803] usb 4-1: no configurations [ 546.062190][ T5803] usb 4-1: can't read configurations, error -22 [ 546.228533][ T5803] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 546.399405][ T5803] usb 4-1: no configurations [ 546.399426][ T5803] usb 4-1: can't read configurations, error -22 [ 546.399895][ T5803] usb usb4-port1: attempt power cycle [ 546.740817][ T5803] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 546.852435][ T5803] usb 4-1: no configurations [ 546.852531][ T5803] usb 4-1: can't read configurations, error -22 [ 547.298664][ T5803] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 547.321919][ T5803] usb 4-1: no configurations [ 547.321940][ T5803] usb 4-1: can't read configurations, error -22 [ 547.322415][ T5803] usb usb4-port1: unable to enumerate USB device [ 547.437863][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.644440][ T9023] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.663469][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.663727][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.674563][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.674710][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.884131][ T8858] veth0_vlan: entered promiscuous mode [ 548.144943][ T8858] veth1_vlan: entered promiscuous mode [ 548.881371][ T9194] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 548.968372][ T9194] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 549.034460][ T9194] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 549.079458][ T9194] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 549.385919][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.812850][ T9194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.977121][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.007997][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.025208][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.042907][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.045496][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.586571][ T9194] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.042873][ T9396] netlink: 'syz.3.955': attribute type 10 has an invalid length. [ 553.792477][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.792612][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.141063][ T5811] Bluetooth: hci3: command tx timeout [ 554.144125][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.144311][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.181607][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 554.307137][ T9023] veth0_vlan: entered promiscuous mode [ 554.346977][ T10] usb 4-1: no configurations [ 554.346996][ T10] usb 4-1: can't read configurations, error -22 [ 554.488650][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 554.536897][ T9023] veth1_vlan: entered promiscuous mode [ 554.639449][ T10] usb 4-1: no configurations [ 554.639470][ T10] usb 4-1: can't read configurations, error -22 [ 554.640561][ T10] usb usb4-port1: attempt power cycle [ 554.972221][ T9391] chnl_net:caif_netlink_parms(): no params data found [ 554.978753][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 555.000174][ T10] usb 4-1: no configurations [ 555.000194][ T10] usb 4-1: can't read configurations, error -22 [ 555.022826][ T70] bridge_slave_1: left allmulticast mode [ 555.022847][ T70] bridge_slave_1: left promiscuous mode [ 555.023023][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.099858][ T70] bridge_slave_0: left allmulticast mode [ 555.099877][ T70] bridge_slave_0: left promiscuous mode [ 555.100039][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.128513][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 555.150634][ T10] usb 4-1: no configurations [ 555.150658][ T10] usb 4-1: can't read configurations, error -22 [ 555.151447][ T10] usb usb4-port1: unable to enumerate USB device [ 556.218472][ T5811] Bluetooth: hci3: command tx timeout [ 556.688972][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.749610][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.774207][ T70] bond0 (unregistering): Released all slaves [ 558.528826][ T5811] Bluetooth: hci3: command tx timeout [ 558.646622][ T9434] blktrace: Concurrent blktraces are not allowed on sg0 [ 558.789598][ T70] hsr_slave_0: left promiscuous mode [ 558.829113][ T70] hsr_slave_1: left promiscuous mode [ 558.830226][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.862770][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.932300][ T70] veth1_vlan: left promiscuous mode [ 558.932438][ T70] veth0_vlan: left promiscuous mode [ 560.541790][ T5811] Bluetooth: hci3: command tx timeout [ 560.599555][ T70] team0 (unregistering): Port device team_slave_1 removed [ 560.911529][ T70] team0 (unregistering): Port device team_slave_0 removed [ 561.978502][ T5803] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 562.133634][ T5803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.133664][ T5803] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.133704][ T5803] usb 1-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=82.63 [ 562.133728][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.177448][ T5803] usb 1-1: config 0 descriptor?? [ 562.382920][ T980] usb 1-1: USB disconnect, device number 8 [ 562.724928][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.725012][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.497537][ T9023] veth0_macvtap: entered promiscuous mode [ 564.855259][ T9460] netlink: 'syz.3.971': attribute type 10 has an invalid length. [ 566.908622][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.908939][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.909212][ T9391] bridge_slave_0: entered allmulticast mode [ 566.944657][ T9391] bridge_slave_0: entered promiscuous mode [ 566.954094][ T9023] veth1_macvtap: entered promiscuous mode [ 566.992467][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.015478][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.015737][ T9391] bridge_slave_1: entered allmulticast mode [ 567.035681][ T9391] bridge_slave_1: entered promiscuous mode [ 568.214271][ T9473] Invalid source name [ 568.214290][ T9473] UBIFS error (pid: 9473): cannot open "/dev/sg0", error -22 [ 569.360119][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.387090][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.894108][ T9391] team0: Port device team_slave_0 added [ 569.934846][ T9391] team0: Port device team_slave_1 added [ 569.946423][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.415060][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.598939][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.842842][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.921010][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.921022][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.921034][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.011435][ T9194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.385608][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.700130][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.700150][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.700179][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.853767][ T1017] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.804490][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 572.829784][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.831230][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.832994][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.836552][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.444243][ T1017] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.732842][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.915262][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.120684][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.373557][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.596731][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.787077][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.787161][ T1017] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.969420][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.995692][ T9523] Invalid source name [ 574.995773][ T9523] UBIFS error (pid: 9523): cannot open "/dev/sg0", error -22 [ 575.010801][ T5811] Bluetooth: hci5: command tx timeout [ 575.155254][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.248637][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.329445][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.471041][ T6463] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.592000][ T9391] hsr_slave_0: entered promiscuous mode [ 575.593621][ T9391] hsr_slave_1: entered promiscuous mode [ 575.594697][ T9391] debugfs: 'hsr0' already exists in 'hsr' [ 575.594723][ T9391] Cannot create hsr debugfs directory [ 576.278624][ T49] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 576.438546][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 576.447182][ T49] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 576.447207][ T49] usb 4-1: config 0 has no interface number 0 [ 576.447235][ T49] usb 4-1: config 0 interface 74 has no altsetting 0 [ 576.478498][ T49] usb 4-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 576.478555][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.478576][ T49] usb 4-1: Product: syz [ 576.478590][ T49] usb 4-1: Manufacturer: syz [ 576.478605][ T49] usb 4-1: SerialNumber: syz [ 576.524448][ T49] usb 4-1: config 0 descriptor?? [ 576.923489][ T9545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.986'. [ 577.067939][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.098469][ T5811] Bluetooth: hci5: command tx timeout [ 577.315562][ T49] belkin_sa 4-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 577.334559][ T49] usb 4-1: bcdDevice: 6636, bfc: 0 [ 577.350724][ T49] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 577.371729][ T49] usb 4-1: USB disconnect, device number 31 [ 577.376059][ T49] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 577.376721][ T49] belkin_sa 4-1:0.74: device disconnected [ 577.620737][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.366740][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.898557][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.047296][ T9559] Invalid source name [ 579.047340][ T9559] UBIFS error (pid: 9559): cannot open "/dev/sg0", error -22 [ 579.189173][ T5811] Bluetooth: hci5: command tx timeout [ 579.408231][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.296053][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.713725][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.738983][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.259310][ T5811] Bluetooth: hci5: command tx timeout [ 581.447278][ T9194] veth0_vlan: entered promiscuous mode [ 582.361740][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.395816][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.226540][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.245472][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.594416][ T9514] chnl_net:caif_netlink_parms(): no params data found [ 583.647510][ T9194] veth1_vlan: entered promiscuous mode [ 584.035382][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.514209][ T9605] Invalid source name [ 584.514253][ T9605] UBIFS error (pid: 9605): cannot open "/dev/sg0", error -22 [ 585.029987][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.967389][ T13] bridge_slave_1: left allmulticast mode [ 586.967420][ T13] bridge_slave_1: left promiscuous mode [ 586.967731][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.162346][ T13] bridge_slave_0: left allmulticast mode [ 588.162380][ T13] bridge_slave_0: left promiscuous mode [ 588.162678][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.435413][ T9630] random: crng reseeded on system resumption [ 590.185319][ T9642] Invalid source name [ 590.185339][ T9642] UBIFS error (pid: 9642): cannot open "/dev/sg0", error -22 [ 592.764939][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.772483][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.779351][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.785380][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.969242][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.018746][ T5811] Bluetooth: hci0: command tx timeout [ 595.814706][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.889733][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.472878][ T13] bond0 (unregistering): Released all slaves [ 597.183023][ T5811] Bluetooth: hci0: command tx timeout [ 598.148225][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.148882][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.149168][ T9514] bridge_slave_0: entered allmulticast mode [ 598.152514][ T9514] bridge_slave_0: entered promiscuous mode [ 598.256626][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.256814][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.257075][ T9514] bridge_slave_1: entered allmulticast mode [ 598.285155][ T9514] bridge_slave_1: entered promiscuous mode [ 598.488436][ T13] hsr_slave_0: left promiscuous mode [ 598.531338][ T13] hsr_slave_1: left promiscuous mode [ 598.531950][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.531965][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.571942][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.571964][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.684400][ T13] veth1_macvtap: left promiscuous mode [ 598.684454][ T13] veth0_macvtap: left promiscuous mode [ 598.684583][ T13] veth1_vlan: left promiscuous mode [ 598.684673][ T13] veth0_vlan: left promiscuous mode [ 599.258808][ T5811] Bluetooth: hci0: command tx timeout [ 601.390257][ T5811] Bluetooth: hci0: command tx timeout [ 603.212526][ T13] team0 (unregistering): Port device team_slave_1 removed [ 603.549044][ T13] team0 (unregistering): Port device team_slave_0 removed [ 608.595461][ T9514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.646882][ T9514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.251663][ T9391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 609.308037][ T9514] team0: Port device team_slave_0 added [ 609.417454][ T9391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 609.712129][ T9514] team0: Port device team_slave_1 added [ 610.447510][ T9774] ------------[ cut here ]------------ [ 610.447530][ T9774] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 610.448198][ T9774] WARNING: CPU: 1 PID: 9774 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0 [ 610.448300][ T9774] Modules linked in: [ 610.448323][ T9774] CPU: 1 UID: 0 PID: 9774 Comm: syz.0.1047 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 610.448350][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 610.448364][ T9774] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 610.448401][ T9774] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 e9 f2 f3 fc 4d 8b 2c 24 48 c7 c7 00 c4 52 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 50 89 56 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 610.448422][ T9774] RSP: 0018:ffffc90003f67ac0 EFLAGS: 00010246 [ 610.448442][ T9774] RAX: da365356c591be00 RBX: 1ffff11004887401 RCX: 0000000000080000 [ 610.448459][ T9774] RDX: ffffc90010112000 RSI: 0000000000000a2f RDI: 0000000000000a30 [ 610.448475][ T9774] RBP: ffffc90003f67bc0 R08: 0000000000000000 R09: 0000000000000000 [ 610.448490][ T9774] R10: dffffc0000000000 R11: ffffed101712487b R12: ffff888024430000 [ 610.448508][ T9774] R13: ffffffff8b567440 R14: 0000000000000000 R15: ffffffff8b581160 [ 610.448522][ T9774] FS: 00007f575296c6c0(0000) GS:ffff888126cc6000(0000) knlGS:0000000000000000 [ 610.448542][ T9774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.448558][ T9774] CR2: 0000001b2f418ff8 CR3: 00000000361e4000 CR4: 00000000003526f0 [ 610.448579][ T9774] Call Trace: [ 610.448590][ T9774] [ 610.448606][ T9774] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 610.448644][ T9774] ? __pfx_autoremove_wake_function+0x10/0x10 [ 610.448686][ T9774] ? rt_spin_unlock+0x161/0x200 [ 610.448720][ T9774] ? drm_vblank_get+0x148/0x260 [ 610.448754][ T9774] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 610.448793][ T9774] drm_fb_helper_ioctl+0x116/0x140 [ 610.448833][ T9774] do_fb_ioctl+0x45c/0x750 [ 610.448865][ T9774] ? __pfx_do_fb_ioctl+0x10/0x10 [ 610.448889][ T9774] ? smack_log+0xef/0x3f0 [ 610.448954][ T9774] ? smk_tskacc+0x2fc/0x370 [ 610.448988][ T9774] ? __pfx_smack_file_ioctl+0x10/0x10 [ 610.449029][ T9774] ? __fget_files+0x3a6/0x420 [ 610.449054][ T9774] ? __fget_files+0x2a/0x420 [ 610.449083][ T9774] ? bpf_lsm_file_ioctl+0x9/0x20 [ 610.449112][ T9774] ? __pfx_fb_ioctl+0x10/0x10 [ 610.449139][ T9774] __se_sys_ioctl+0xff/0x170 [ 610.449175][ T9774] do_syscall_64+0xfa/0xfa0 [ 610.449220][ T9774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.449249][ T9774] ? asm_sysvec_call_function_single+0x1a/0x20 [ 610.449273][ T9774] ? clear_bhb_loop+0x60/0xb0 [ 610.449301][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.449324][ T9774] RIP: 0033:0x7f575474efc9 [ 610.449344][ T9774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.449364][ T9774] RSP: 002b:00007f575296c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.449388][ T9774] RAX: ffffffffffffffda RBX: 00007f57549a6180 RCX: 00007f575474efc9 [ 610.449404][ T9774] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 610.449419][ T9774] RBP: 00007f57547d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.449434][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.449449][ T9774] R13: 00007f57549a6218 R14: 00007f57549a6180 R15: 00007ffe43374d68 [ 610.449489][ T9774] [ 610.449501][ T9774] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 610.449517][ T9774] CPU: 1 UID: 0 PID: 9774 Comm: syz.0.1047 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 610.449542][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 610.449555][ T9774] Call Trace: [ 610.449564][ T9774] [ 610.449574][ T9774] dump_stack_lvl+0x99/0x250 [ 610.449602][ T9774] ? __asan_memcpy+0x40/0x70 [ 610.449636][ T9774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.449665][ T9774] ? __pfx__printk+0x10/0x10 [ 610.449716][ T9774] vpanic+0x237/0x6d0 [ 610.449739][ T9774] ? __pfx_vpanic+0x10/0x10 [ 610.449775][ T9774] panic+0xb9/0xc0 [ 610.449805][ T9774] ? __pfx_panic+0x10/0x10 [ 610.449871][ T9774] __warn+0x31b/0x4b0 [ 610.449891][ T9774] ? drm_wait_one_vblank+0x571/0x5b0 [ 610.449930][ T9774] ? drm_wait_one_vblank+0x571/0x5b0 [ 610.449965][ T9774] report_bug+0x2be/0x4f0 [ 610.450006][ T9774] ? drm_wait_one_vblank+0x571/0x5b0 [ 610.450042][ T9774] ? drm_wait_one_vblank+0x571/0x5b0 [ 610.450076][ T9774] ? drm_wait_one_vblank+0x573/0x5b0 [ 610.450110][ T9774] handle_bug+0x84/0x160 [ 610.450134][ T9774] exc_invalid_op+0x1a/0x50 [ 610.450159][ T9774] asm_exc_invalid_op+0x1a/0x20 [ 610.450180][ T9774] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 610.450221][ T9774] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 e9 f2 f3 fc 4d 8b 2c 24 48 c7 c7 00 c4 52 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 50 89 56 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 610.450240][ T9774] RSP: 0018:ffffc90003f67ac0 EFLAGS: 00010246 [ 610.450259][ T9774] RAX: da365356c591be00 RBX: 1ffff11004887401 RCX: 0000000000080000 [ 610.450275][ T9774] RDX: ffffc90010112000 RSI: 0000000000000a2f RDI: 0000000000000a30 [ 610.450290][ T9774] RBP: ffffc90003f67bc0 R08: 0000000000000000 R09: 0000000000000000 [ 610.450305][ T9774] R10: dffffc0000000000 R11: ffffed101712487b R12: ffff888024430000 [ 610.450322][ T9774] R13: ffffffff8b567440 R14: 0000000000000000 R15: ffffffff8b581160 [ 610.450366][ T9774] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 610.450400][ T9774] ? __pfx_autoremove_wake_function+0x10/0x10 [ 610.450443][ T9774] ? rt_spin_unlock+0x161/0x200 [ 610.450474][ T9774] ? drm_vblank_get+0x148/0x260 [ 610.450508][ T9774] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 610.450545][ T9774] drm_fb_helper_ioctl+0x116/0x140 [ 610.450584][ T9774] do_fb_ioctl+0x45c/0x750 [ 610.450614][ T9774] ? __pfx_do_fb_ioctl+0x10/0x10 [ 610.450644][ T9774] ? smack_log+0xef/0x3f0 [ 610.450699][ T9774] ? smk_tskacc+0x2fc/0x370 [ 610.450736][ T9774] ? __pfx_smack_file_ioctl+0x10/0x10 [ 610.450775][ T9774] ? __fget_files+0x3a6/0x420 [ 610.450799][ T9774] ? __fget_files+0x2a/0x420 [ 610.450828][ T9774] ? bpf_lsm_file_ioctl+0x9/0x20 [ 610.450857][ T9774] ? __pfx_fb_ioctl+0x10/0x10 [ 610.450882][ T9774] __se_sys_ioctl+0xff/0x170 [ 610.450919][ T9774] do_syscall_64+0xfa/0xfa0 [ 610.450955][ T9774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.450976][ T9774] ? asm_sysvec_call_function_single+0x1a/0x20 [ 610.451000][ T9774] ? clear_bhb_loop+0x60/0xb0 [ 610.451029][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.451052][ T9774] RIP: 0033:0x7f575474efc9 [ 610.451076][ T9774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.451095][ T9774] RSP: 002b:00007f575296c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.451116][ T9774] RAX: ffffffffffffffda RBX: 00007f57549a6180 RCX: 00007f575474efc9 [ 610.451133][ T9774] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 610.451147][ T9774] RBP: 00007f57547d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.451161][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.451175][ T9774] R13: 00007f57549a6218 R14: 00007f57549a6180 R15: 00007ffe43374d68 [ 610.451222][ T9774] [ 610.451487][ T9774] Kernel Offset: disabled