last executing test programs: 18m39.672011549s ago: executing program 32 (id=1851): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 17m30.460050979s ago: executing program 33 (id=2609): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mknodat$null(r2, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) unshare(0x22020600) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1, 0x8) 11m48.250302757s ago: executing program 34 (id=3789): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) socket(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b030000000000000000000300"], 0x7c}}, 0x4814) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x21c) 11m1.365410833s ago: executing program 1 (id=3865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000280)=@abs={0x1}, 0x6e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x80, &(0x7f0000000400)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4a, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x4a, 0x0, @gue={{0x2, 0x1, 0x1, 0x2, 0x100, @val=0x80}, "2bac20af85b2dd7868321994735f732494e7431fbcf4fe9133a213660ac4ec73d7517f0bae9fa5df5f2001fb63e3f6b22d94ce9b99bf15f5de0f"}}}}}}}, 0x0) 10m58.319923962s ago: executing program 1 (id=3870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r0, r5}) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 10m36.686536841s ago: executing program 1 (id=3880): listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000005100)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="e05a5de397ee362f573ea834553caa1da54c10e2b1d5db38cac6689e", 0x1c}], 0x1, &(0x7f00000001c0), 0x0, 0x240000c5}], 0x1, 0x40180a0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) 10m33.528535306s ago: executing program 1 (id=3873): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 10m26.616612801s ago: executing program 1 (id=3877): syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150021cb700000010961b090000000000000109022d0001001000000904000201030b0100870000000000000000090581032000"], 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BLKTRACESTOP(r0, 0x1269, 0x604000000000000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10m26.606751142s ago: executing program 6 (id=3879): socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x80002, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4000, 0x8, 0xc1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 10m24.049449896s ago: executing program 6 (id=3886): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000005200587094cbb4a5000000000000f29e7aa29c00"]}, 0xa9) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5) ioctl$TCSETA(r5, 0x8925, &(0x7f0000000100)={0x2, 0xfffe, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) 10m22.619499009s ago: executing program 1 (id=3887): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = timerfd_create(0x7, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0xff, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbd8], 0xdddd0000, 0x140213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m22.348157489s ago: executing program 6 (id=3888): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r1 = memfd_create(0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xe4621000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x838, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5a, 0x1, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1}) 10m22.150186313s ago: executing program 6 (id=3889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82dfe970afdaab4a", 0x6c, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) ptrace$cont(0x1f, r4, 0x100, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000480)=0x1d, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 10m12.233169522s ago: executing program 6 (id=3900): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r2, 0x400, 0x0) mmap$snddsp(&(0x7f0000a72000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x1000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5d}}, 0x44) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, {0x0}}) socket$inet6_sctp(0xa, 0x1, 0x84) 10m10.108656526s ago: executing program 6 (id=3902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e0709090800c90002993d861bf242f5461be3dd9fd84b60945463297bc10325ee57e7c795788bf8a9a70086de60013ba3e370e9e5b23fe73b089ac64c315225400afde4ae3a67fd584e7b3db1ea78b7fcb0fc531d09c29cad8695faaa4200fb38d0915c19e9311ff9ae8ad262625973b000dfb431bd097b52365f4ad5b5d1308edd88cd4335f34fd8de44cb7d287863e4a854cb1b17368525ed03aac3af31b1cb49c793b2109e1045e7bf22"], 0xa) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x82, 0x0, 0x419}}}, 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) clock_settime(0xfffffffb, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10m1.847309201s ago: executing program 35 (id=3887): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = timerfd_create(0x7, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0xff, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbd8], 0xdddd0000, 0x140213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m54.624735073s ago: executing program 36 (id=3902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e0709090800c90002993d861bf242f5461be3dd9fd84b60945463297bc10325ee57e7c795788bf8a9a70086de60013ba3e370e9e5b23fe73b089ac64c315225400afde4ae3a67fd584e7b3db1ea78b7fcb0fc531d09c29cad8695faaa4200fb38d0915c19e9311ff9ae8ad262625973b000dfb431bd097b52365f4ad5b5d1308edd88cd4335f34fd8de44cb7d287863e4a854cb1b17368525ed03aac3af31b1cb49c793b2109e1045e7bf22"], 0xa) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x82, 0x0, 0x419}}}, 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) clock_settime(0xfffffffb, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8m37.580320484s ago: executing program 3 (id=4009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 8m37.243875368s ago: executing program 3 (id=4010): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) 8m31.379704071s ago: executing program 3 (id=4017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x341380, 0x0) preadv2(r4, 0x0, 0x0, 0x8000, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 8m29.821457316s ago: executing program 3 (id=4018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 8m29.036118496s ago: executing program 3 (id=4019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 8m27.837708974s ago: executing program 3 (id=4020): lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x406f413, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d4, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x2, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000f0601010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) execve(0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x4, 0x2, 0x6, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 8m11.570881507s ago: executing program 37 (id=4020): lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x406f413, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d4, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x2, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000f0601010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) execve(0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x4, 0x2, 0x6, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 2m11.61478059s ago: executing program 2 (id=5749): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 2m10.982044621s ago: executing program 2 (id=5757): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000c00)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x27, 0x10, 0xfe, r2}, [@IFA_LABEL={0x14, 0x3, 'dummy0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x88c0) 2m10.897602234s ago: executing program 9 (id=5759): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE]}]}, 0x28}}, 0x0) 2m10.715555195s ago: executing program 9 (id=5762): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], 0x0, 0x0, 0x0, 0x0, 0x8}) 2m10.679939314s ago: executing program 2 (id=5763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x28, r1, 0x421, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004880}, 0x48) 2m10.589435026s ago: executing program 9 (id=5766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000005002a000000000008000300", @ANYRES32=r2], 0x5c}}, 0x18) 2m10.387981827s ago: executing program 9 (id=5767): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1084804, 0x0) 2m10.317398448s ago: executing program 9 (id=5770): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2m10.267148858s ago: executing program 2 (id=5771): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000002100)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x12) 2m9.418624181s ago: executing program 2 (id=5778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m9.360093973s ago: executing program 2 (id=5779): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2m9.232668165s ago: executing program 9 (id=5782): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) 2m8.808008138s ago: executing program 38 (id=5782): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) 1m54.262595217s ago: executing program 39 (id=5779): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 11.643711128s ago: executing program 0 (id=6512): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 11.327422429s ago: executing program 0 (id=6515): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "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"}, 0x418, 0x6}) 9.962282645s ago: executing program 0 (id=6524): ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000500)="09d3740a6ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 9.79358699s ago: executing program 5 (id=6526): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 9.774172942s ago: executing program 0 (id=6527): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x1c9d, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) 9.53723452s ago: executing program 5 (id=6528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00"], 0x82) 8.743403981s ago: executing program 0 (id=6532): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={&(0x7f0000000180)="7ef35c8d", 0x0, 0x0, 0x0, 0x1, r0, 0x4}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) 7.978215314s ago: executing program 4 (id=6533): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x4, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) 6.897657081s ago: executing program 8 (id=6536): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 6.160240229s ago: executing program 7 (id=6540): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x2040400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x45, 0x4, 0x3, 0x4}}, 0x2e) 6.084699282s ago: executing program 7 (id=6541): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.903976007s ago: executing program 8 (id=6542): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000018000000000000001701000003000000010000000000000030000000000000001701000002000000170000000c2221dadd0605d98e3cf66fb9e782b6bad53d8f126b7900000000001800000000000000170100000400000000080000000000006800000000000000170100000200000051000000f26833fb8cd54c595040153763ed65d05b419052e2f55cd07c83154ef2b9c883a7ed6635ca9d770e0f1a5a8c54864e5b46c19b537b035fb30195eb98734b0a8387cd58546e8ea59854b251e491bc68cd0400000018"], 0xf8, 0x10}], 0x1, 0x4000011) 4.812118175s ago: executing program 4 (id=6543): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4c, &(0x7f0000000000)) 4.683345919s ago: executing program 8 (id=6544): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 4.341417521s ago: executing program 4 (id=6545): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f000000c680)={{0x12, 0x1, 0x110, 0xa, 0xb2, 0xca, 0x20, 0x1943, 0x2255, 0xd08f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0xfc, 0x10, 0x4, [{{0x9, 0x4, 0xab, 0xbb, 0x0, 0x4e, 0x1, 0x3b, 0xf1}}]}}]}}, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0xc0000) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 4.267296649s ago: executing program 5 (id=6546): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) copy_file_range(r0, 0x0, r0, 0x0, 0xb51, 0x0) 3.832305443s ago: executing program 7 (id=6547): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) inotify_rm_watch(r1, 0x0) 3.64754844s ago: executing program 8 (id=6548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4, r0}, 0x10) 3.644976101s ago: executing program 0 (id=6549): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x1, 0x2, 0x5, &(0x7f0000000300)={0x2, "ba56b4f76c1147713bbb79931987e92352124c3f58f98e3897d9f1948f4e2c833a"}}) 3.4958008s ago: executing program 7 (id=6550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 3.283561691s ago: executing program 8 (id=6551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f00000015c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x16, 0xd73, 0x67, 0x0, 0xa, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x9}, {"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"}}}}}}, 0x0) 2.133365207s ago: executing program 7 (id=6552): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x4008800) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 1.865301762s ago: executing program 5 (id=6553): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="f00000001300010029bd7000fedbdf2500000000", @ANYBLOB="200002000200000048001a802b0002"], 0xf0}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 1.539659195s ago: executing program 5 (id=6554): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x10) write(r0, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 888.234575ms ago: executing program 4 (id=6555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0xff}], 0x14b, 0x100, 0x0) 642.322545ms ago: executing program 8 (id=6556): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r0, r1, 0x0, 0x2) 619.963777ms ago: executing program 5 (id=6557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) syz_emit_ethernet(0x9f, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x91, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x40, 0x2, 0x0, 0xe7, {[@fastopen={0x22, 0x10, "859dc1ff1d6a90f05246eba0bf64"}, @timestamp={0x8, 0xa, 0xab4, 0x81}, @sack_perm]}}, {"e1899bc212c31540cd78d3f0b091d2b28e335c1fd88103ac2758002f1b6886c7502393e66f5ca44d635143a5b7a22b51b9342b5af635f220dc95ef3c92"}}}}}}, 0x0) 166.289057ms ago: executing program 4 (id=6558): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000500)=""/40, 0x5a) getdents64(r1, 0xfffffffffffffffe, 0x29) 65.057621ms ago: executing program 7 (id=6559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x2, 0x9, 0x40, 0x8, 0x5a, 0x0, 0x9, 0xa}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) 0s ago: executing program 4 (id=6560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.589991][ T37] audit: type=1326 audit(6291403750.815:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.591664][ T5885] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1241.649635][ T37] audit: type=1326 audit(6291403750.875:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.650204][ T37] audit: type=1326 audit(6291403750.875:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.650249][ T37] audit: type=1326 audit(6291403750.875:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.650812][ T37] audit: type=1326 audit(6291403750.875:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.691953][ T1198] usb 10-1: USB disconnect, device number 15 [ 1241.741531][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 1241.744347][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.744381][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.744420][ T5885] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1241.744445][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.805008][ T5885] usb 9-1: config 0 descriptor?? [ 1241.840551][ T37] audit: type=1326 audit(6291403751.055:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.864387][ T37] audit: type=1326 audit(6291403751.095:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.865314][ T37] audit: type=1326 audit(6291403751.095:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1241.865362][ T37] audit: type=1326 audit(6291403751.095:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20661 comm="syz.2.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daabff6c9 code=0x7ffc0000 [ 1242.203173][T20674] 9pnet_fd: Insufficient options for proto=fd [ 1242.438380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.453858][ T5885] savu 0003:1E7D:2D5A.001C: unbalanced collection at end of report description [ 1242.454714][ T5885] savu 0003:1E7D:2D5A.001C: parse failed [ 1242.454785][ T5885] savu 0003:1E7D:2D5A.001C: probe with driver savu failed with error -22 [ 1242.565534][T20685] hugetlbfs: syz.2.5521 (20685): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1242.701806][ T5942] usb 9-1: USB disconnect, device number 11 [ 1244.073678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.544431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.858510][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5528'. [ 1245.858589][T20723] netlink: 'syz.7.5528': attribute type 1 has an invalid length. [ 1245.858603][T20723] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5528'. [ 1247.207267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.323702][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.717472][ C1] vkms_vblank_simulate: vblank timer overrun [ 1248.906185][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.772780][T20789] netlink: 888 bytes leftover after parsing attributes in process `syz.0.5563'. [ 1249.961617][ T5885] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1250.121471][ T5885] usb 10-1: Using ep0 maxpacket: 32 [ 1250.124664][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.124698][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.124739][ T5885] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1250.124763][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.184911][ T5885] usb 10-1: config 0 descriptor?? [ 1250.196234][ T5885] hub 10-1:0.0: USB hub found [ 1250.411869][ T5885] hub 10-1:0.0: config failed, can't read hub descriptor (err -90) [ 1250.657750][T20808] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5573'. [ 1250.755518][T20814] program syz.8.5575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1251.076020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.125233][ T5885] hid-generic 0003:046D:C31C.001D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 1251.260293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.284054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.380804][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.480437][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.584713][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.788844][ C1] vkms_vblank_simulate: vblank timer overrun [ 1251.806734][ T5885] usb 10-1: USB disconnect, device number 16 [ 1251.832698][ T5942] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1251.985964][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1251.986004][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.986043][ T5942] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1251.986068][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.030014][ T5942] usb 8-1: config 0 descriptor?? [ 1252.048057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1252.478194][ T5942] lua 0003:1E7D:2C2E.001E: item fetching failed at offset 0/5 [ 1252.478690][ T5942] lua 0003:1E7D:2C2E.001E: parse failed [ 1252.478730][ T5942] lua 0003:1E7D:2C2E.001E: probe with driver lua failed with error -22 [ 1252.752530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1252.779927][ T5885] usb 8-1: USB disconnect, device number 17 [ 1252.917920][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.332278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.543225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.821371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.053092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.278361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.379612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.429228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.585530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.754818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.197805][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.344756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.397336][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.496002][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.866764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.144676][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.379074][T20958] program syz.0.5625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1257.541396][ T1198] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1257.555731][T20964] program syz.0.5628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1257.709915][ T1198] usb 10-1: config 171 has an invalid interface number: 109 but max is 0 [ 1257.709945][ T1198] usb 10-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.709969][ T1198] usb 10-1: config 171 has no interface number 0 [ 1257.710023][ T1198] usb 10-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1257.710051][ T1198] usb 10-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 2560, setting to 64 [ 1257.710078][ T1198] usb 10-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1257.713260][ T1198] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1257.713288][ T1198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.713308][ T1198] usb 10-1: Product: syz [ 1257.713322][ T1198] usb 10-1: Manufacturer: syz [ 1257.713336][ T1198] usb 10-1: SerialNumber: syz [ 1257.733858][T20953] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1257.949547][ T1198] ath6kl: Failed to submit usb control message: -71 [ 1257.949598][ T1198] ath6kl: unable to send the bmi data to the device: -71 [ 1257.949614][ T1198] ath6kl: Unable to send get target info: -71 [ 1257.961107][ T1198] ath6kl: Failed to init ath6kl core: -71 [ 1257.963429][ T1198] ath6kl_usb 10-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1258.052082][ T1198] usb 10-1: USB disconnect, device number 17 [ 1258.107342][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5634'. [ 1258.107367][T20979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5634'. [ 1258.286909][ C1] vkms_vblank_simulate: vblank timer overrun [ 1258.437816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1258.463857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1258.546549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1258.646191][ C1] vkms_vblank_simulate: vblank timer overrun [ 1259.075243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1259.249573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1259.731364][ T5942] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1259.891777][ T5942] usb 10-1: Using ep0 maxpacket: 16 [ 1259.928186][ T5942] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1259.928216][ T5942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.928237][ T5942] usb 10-1: Product: syz [ 1259.928252][ T5942] usb 10-1: Manufacturer: syz [ 1259.928267][ T5942] usb 10-1: SerialNumber: syz [ 1259.966499][ T5942] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1259.966524][ T5942] r8152-cfgselector 10-1: config 0 descriptor?? [ 1260.334122][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.360010][ T5942] r8152-cfgselector 10-1: Needed 2 retries to read version [ 1260.379634][T21012] tipc: Enabling not permitted [ 1260.379666][T21012] tipc: Enabling of bearer rejected, failed to enable media [ 1260.488792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.596304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.695983][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.796831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.046422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.160118][ T5942] r8152-cfgselector 10-1: USB disconnect, device number 18 [ 1261.281672][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.881747][ T5942] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1263.031031][ T5942] usb 10-1: Using ep0 maxpacket: 16 [ 1263.033319][ T5942] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.033349][ T5942] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.033372][ T5942] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1263.033413][ T5942] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1263.033436][ T5942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.101390][ T5942] usb 10-1: config 0 descriptor?? [ 1263.158351][T21072] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5672'. [ 1263.524574][T21061] random: crng reseeded on system resumption [ 1263.613544][T16452] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1263.619842][ T5942] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 1263.692484][T21088] netlink: 228 bytes leftover after parsing attributes in process `syz.8.5680'. [ 1263.698358][ T5942] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 1263.698853][ T5942] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1263.771460][T16452] usb 8-1: Using ep0 maxpacket: 8 [ 1263.773661][T16452] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.776856][T16452] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1263.776883][T16452] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.776900][T16452] usb 8-1: Product: syz [ 1263.776913][T16452] usb 8-1: Manufacturer: syz [ 1263.776927][T16452] usb 8-1: SerialNumber: syz [ 1263.789837][T16452] usb 8-1: config 0 descriptor?? [ 1263.964756][T14981] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1263.979647][T17122] usb 10-1: USB disconnect, device number 19 [ 1264.024689][T14981] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1264.024775][T14981] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1264.024847][T14981] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1264.094324][T16452] imon_raw 8-1:0.0: IR endpoint missing [ 1264.117372][T16452] usb 8-1: USB disconnect, device number 18 [ 1264.279021][T21102] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1264.679072][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5692'. [ 1264.747940][T21121] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1265.022446][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5701'. [ 1265.022474][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5701'. [ 1265.131966][T21140] netlink: 'syz.2.5700': attribute type 10 has an invalid length. [ 1265.141098][T14981] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1265.241915][T21140] team0: Port device netdevsim0 added [ 1265.245885][T21142] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1265.311223][T14981] usb 1-1: Using ep0 maxpacket: 8 [ 1265.313848][T14981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1265.313898][T14981] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1265.313922][T14981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.333038][T14981] usb 1-1: config 0 descriptor?? [ 1265.755111][T14981] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1265.967010][T16452] usb 1-1: USB disconnect, device number 24 [ 1266.071609][T17122] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1266.224688][T17122] usb 10-1: Using ep0 maxpacket: 16 [ 1266.237418][T17122] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.237469][T17122] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1266.237495][T17122] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.243543][T17122] usb 10-1: config 0 descriptor?? [ 1266.360876][T21180] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 1266.576761][T21185] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5724'. [ 1266.580162][T21185] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5724'. [ 1266.688984][T17122] hid_parser_main: 121 callbacks suppressed [ 1266.689010][T17122] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1266.689043][T17122] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1266.689071][T17122] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1266.689098][T17122] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1266.689126][T17122] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1266.748171][T17122] elan 0003:04F3:0755.0020: hidraw0: USB HID v0.05 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 1267.019202][T21202] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5732'. [ 1267.019232][T21202] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5732'. [ 1267.102019][T14981] usb 10-1: USB disconnect, device number 20 [ 1268.577077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1269.411768][T21258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.725902][T21272] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5766'. [ 1270.416556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1270.522614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1270.617080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1271.316911][T21303] netlink: 'syz.7.5783': attribute type 6 has an invalid length. [ 1271.796529][T21322] loop9: detected capacity change from 0 to 8 [ 1271.815667][T21322] Dev loop9: unable to read RDB block 8 [ 1271.815726][T21322] loop9: unable to read partition table [ 1271.815980][T21322] loop9: partition table beyond EOD, truncated [ 1271.815999][T21322] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1271.895384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.060704][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.424322][T21328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1272.452445][T21328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1272.454500][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.457361][T21328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1272.472923][T21328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1272.473695][T21328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1272.479216][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1272.480311][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1272.529355][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1272.530703][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1272.534937][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1272.657770][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5789'. [ 1273.205943][T21308] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.205984][T21308] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.206014][T21308] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1273.534954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.567353][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.692386][T21367] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5810'. [ 1274.002530][T21308] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1274.002573][T21308] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.002604][T21308] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1274.072560][T21367] team0: No ports can be present during mode change [ 1274.267691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.379093][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.416967][T21396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5823'. [ 1274.621004][ T5819] Bluetooth: hci2: command tx timeout [ 1274.815902][T21308] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1274.815939][T21308] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.815967][T21308] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1274.896730][T21325] lo speed is unknown, defaulting to 1000 [ 1274.989633][T21410] program syz.0.5829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1275.077116][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.114148][T21325] lo speed is unknown, defaulting to 1000 [ 1275.287185][ C1] vkms_vblank_simulate: vblank timer overrun [ 1275.360748][T21308] team0: Port device netdevsim0 removed [ 1275.408687][T21308] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.408725][T21308] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.408754][T21308] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1275.731317][ T5794] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1275.890895][ T5794] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1275.891729][T17122] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1275.898401][ T5794] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1275.898426][ T5794] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1275.898479][ T5794] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1275.898506][ T5794] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1275.925720][ T5794] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1275.925750][ T5794] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1275.925770][ T5794] usb 9-1: Product: syz [ 1275.925784][ T5794] usb 9-1: Manufacturer: syz [ 1275.957415][ T5794] cdc_wdm 9-1:1.0: skipping garbage [ 1275.957437][ T5794] cdc_wdm 9-1:1.0: skipping garbage [ 1275.971422][ T5794] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1275.971443][ T5794] cdc_wdm 9-1:1.0: Unknown control protocol [ 1276.053204][T17122] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1276.053253][T17122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.053275][T17122] usb 1-1: Product: syz [ 1276.053288][T17122] usb 1-1: Manufacturer: syz [ 1276.053303][T17122] usb 1-1: SerialNumber: syz [ 1276.069747][T21325] chnl_net:caif_netlink_parms(): no params data found [ 1276.104740][T17122] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1276.163929][ T58] bridge_slave_1: left allmulticast mode [ 1276.163957][ T58] bridge_slave_1: left promiscuous mode [ 1276.164716][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.243191][ T58] bridge_slave_0: left allmulticast mode [ 1276.243448][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.248322][ T31] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1276.691096][ T5819] Bluetooth: hci2: command tx timeout [ 1277.794780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.847214][ T31] usb 1-1: Service connection timeout for: 256 [ 1277.847472][ T31] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1278.281531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.331812][ T9] usb 1-1: USB disconnect, device number 25 [ 1278.364464][ T31] ath9k_htc: Failed to initialize the device [ 1278.367598][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 1278.433447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.513882][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.547117][ T5942] usb 9-1: USB disconnect, device number 12 [ 1278.654525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.727932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.804226][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.831506][ T5819] Bluetooth: hci2: command tx timeout [ 1278.977644][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.215890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.354290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.637628][ T1198] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1279.773823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.801505][ T1198] usb 1-1: Using ep0 maxpacket: 16 [ 1279.803652][ T1198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.803700][ T1198] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1279.803724][ T1198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.808967][ T1198] usb 1-1: config 0 descriptor?? [ 1279.996557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.211459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.250489][ T1198] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1280.501863][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.582769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.683296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.696366][ T5885] usb 1-1: USB disconnect, device number 26 [ 1280.768313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.814817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.868824][ T5819] Bluetooth: hci2: command tx timeout [ 1280.947700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.020476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.066918][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.114568][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.178058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.275779][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.331491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.413059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.445151][ T5885] kernel read not supported for file /rfkill (pid: 5885 comm: kworker/1:5) [ 1281.484955][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.552459][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.664718][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.710016][ T58] bond0 (unregistering): Released all slaves [ 1281.855083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.937676][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.092489][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.262755][T11226] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.262790][T11226] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1282.262814][T11226] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1282.612600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.939692][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.385194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.447869][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.860781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.155969][T11234] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.156003][T11234] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1284.156025][T11234] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1284.292297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.307287][T21325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.307425][T21325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.307705][T21325] bridge_slave_0: entered allmulticast mode [ 1284.321529][T21325] bridge_slave_0: entered promiscuous mode [ 1284.328571][T21325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.328705][T21325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.328925][T21325] bridge_slave_1: entered allmulticast mode [ 1284.335132][T21325] bridge_slave_1: entered promiscuous mode [ 1284.545614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.709561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.759337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1285.299170][ C1] vkms_vblank_simulate: vblank timer overrun [ 1285.796045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.311091][ T1198] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1286.481069][ T1198] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1286.481101][ T1198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1286.483639][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.527050][ T1198] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1286.527078][ T1198] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1286.527098][ T1198] usb 8-1: Product: syz [ 1286.527112][ T1198] usb 8-1: Manufacturer: syz [ 1286.527127][ T1198] usb 8-1: SerialNumber: syz [ 1286.668014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.169363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.367978][ T1198] usb 8-1: config 0 descriptor?? [ 1287.382675][T21328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1287.409180][T21328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1287.418899][T21328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1287.433885][T21328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1287.435006][T21328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1287.451856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.529094][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1287.529112][ T37] audit: type=1326 audit(6291403796.755:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21566 comm="syz.0.5893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f243e18f6c9 code=0x0 [ 1287.530316][ T1198] usb 8-1: selecting invalid altsetting 0 [ 1287.623211][ T7334] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1287.623244][ T7334] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1287.623268][ T7334] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1287.661638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.703799][ T1198] usb 8-1: USB disconnect, device number 19 [ 1287.735383][T21325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.901924][ T58] hsr_slave_0: left promiscuous mode [ 1287.921692][ T58] hsr_slave_1: left promiscuous mode [ 1287.922487][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.922504][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.962282][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.962303][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.044077][ T58] veth1_macvtap: left promiscuous mode [ 1288.044147][ T58] veth0_macvtap: left promiscuous mode [ 1288.044382][ T58] veth1_vlan: left promiscuous mode [ 1288.044519][ T58] veth0_vlan: left promiscuous mode [ 1288.360637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.482085][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.602037][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.778827][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.056160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.228484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.261983][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5898'. [ 1289.304778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.385420][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.463529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.491914][T21328] Bluetooth: hci4: command tx timeout [ 1289.538577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.705150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.772339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.892338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.034961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.101703][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.168599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.229862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.285355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.395354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.503832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.584356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.688242][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.735946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.800263][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.866271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.985384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.052082][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1291.092822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.156698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.256896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.302177][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1291.406505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.475084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.596956][T21328] Bluetooth: hci4: command tx timeout [ 1291.597141][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.665701][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.807389][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.930151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.001511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.052683][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.121568][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.186979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.254224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.315306][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.379079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.437750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.729823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.792058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.912816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.124304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.326944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.456241][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.566462][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.651369][T21328] Bluetooth: hci4: command tx timeout [ 1293.690043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.746654][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.906716][ C1] vkms_vblank_simulate: vblank timer overrun [ 1293.952514][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.016127][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.076426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.138511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.197973][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.394561][T21325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.417118][ T1198] lo speed is unknown, defaulting to 1000 [ 1294.417144][ T1198] infiniband syz2: ib_query_port failed (-19) [ 1294.602291][ T7334] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1294.602324][ T7334] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1294.602348][ T7334] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1294.766430][T21325] team0: Port device team_slave_0 added [ 1294.820067][T21325] team0: Port device team_slave_1 added [ 1294.828861][T21562] lo speed is unknown, defaulting to 1000 [ 1295.454660][T21325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.454678][T21325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.458695][T21325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.544579][T21325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.544596][T21325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.544622][T21325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.732111][T21328] Bluetooth: hci4: command tx timeout [ 1295.864325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.218548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.420177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.631138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.785218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.878841][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5924'. [ 1296.943512][T21325] hsr_slave_0: entered promiscuous mode [ 1296.945112][T21325] hsr_slave_1: entered promiscuous mode [ 1296.946345][T21325] debugfs: 'hsr0' already exists in 'hsr' [ 1296.946369][T21325] Cannot create hsr debugfs directory [ 1297.507996][T21662] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5935'. [ 1297.646823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.830175][T21672] netlink: 'syz.8.5939': attribute type 9 has an invalid length. [ 1297.830200][T21672] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5939'. [ 1298.326611][ T58] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.326647][ T58] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1298.326673][ T58] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1298.699254][ T58] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.699291][ T58] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1298.699317][ T58] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1298.945420][T21681] program syz.8.5942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1298.981997][T21562] chnl_net:caif_netlink_parms(): no params data found [ 1299.039110][ T58] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.039146][ T58] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1299.039173][ T58] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1299.383030][ T58] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.383067][ T58] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1299.383092][ T58] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1300.218823][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.218896][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.890882][T21562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.891852][T21562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.892118][T21562] bridge_slave_0: entered allmulticast mode [ 1300.894975][T21562] bridge_slave_0: entered promiscuous mode [ 1301.039250][T21562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.039492][T21562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.039772][T21562] bridge_slave_1: entered allmulticast mode [ 1301.066545][T21562] bridge_slave_1: entered promiscuous mode [ 1301.488970][T21727] Invalid ELF header magic: != ELF [ 1301.616258][T21562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.679247][T21562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.976778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.998418][ T5885] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1302.000708][ T58] bridge_slave_1: left allmulticast mode [ 1302.014540][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.077205][ T58] bridge_slave_0: left allmulticast mode [ 1302.077234][ T58] bridge_slave_0: left promiscuous mode [ 1302.077477][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.144669][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1302.144710][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.144737][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.144778][ T5885] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1302.144801][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.154248][ T5885] usb 1-1: config 0 descriptor?? [ 1302.570316][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570340][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570357][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570373][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570389][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570405][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570421][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570436][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570459][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.570475][ T5885] sony 0003:054C:024B.0022: unknown main item tag 0x0 [ 1302.573457][ T5885] sony 0003:054C:024B.0022: unexpected long global item [ 1302.574302][ T5885] sony 0003:054C:024B.0022: parse failed [ 1302.574403][ T5885] sony 0003:054C:024B.0022: probe with driver sony failed with error -22 [ 1302.777685][ T5794] usb 1-1: USB disconnect, device number 27 [ 1302.853498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.920634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.991488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.209862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.347950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.503490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1303.712815][ T58] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1303.861774][ T58] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1303.931932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1304.345802][ C1] vkms_vblank_simulate: vblank timer overrun [ 1304.550385][ C1] vkms_vblank_simulate: vblank timer overrun [ 1304.827732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1304.894052][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.005213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.064619][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.178114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.297788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.381458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.463989][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.557106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.630636][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.690674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.754586][ T58] bond0 (unregistering): Released all slaves [ 1305.800425][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.850659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.958229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.008838][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.097647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.409834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.595596][ T58] bond1 (unregistering): Released all slaves [ 1306.631843][ T58] bond2 (unregistering): (slave batadv1): Releasing active interface [ 1306.655089][ T58] bond2 (unregistering): Released all slaves [ 1306.667589][ T58] bond3 (unregistering): Released all slaves [ 1306.679851][ T58] bond4 (unregistering): Released all slaves [ 1306.742600][T21562] team0: Port device team_slave_0 added [ 1306.806054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.855955][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.910010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.980502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.993803][T21562] team0: Port device team_slave_1 added [ 1306.995941][ T58] tipc: Disabling bearer [ 1307.057555][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.101924][ T58] tipc: Disabling bearer [ 1307.102152][ T58] tipc: Left network mode [ 1307.146268][T21751] trusted_key: encrypted_key: key user:syz not found [ 1307.255785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.343552][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.489311][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.674915][T21562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.674931][T21562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.674955][T21562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.769994][T21562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.770011][T21562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.770049][T21562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.948888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.399326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.675558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.930764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.940081][T21562] hsr_slave_0: entered promiscuous mode [ 1308.943257][T21562] hsr_slave_1: entered promiscuous mode [ 1308.944238][T21562] debugfs: 'hsr0' already exists in 'hsr' [ 1308.944262][T21562] Cannot create hsr debugfs directory [ 1308.946135][T21325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1309.129121][T21325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1309.371580][ T58] hsr_slave_0: left promiscuous mode [ 1309.397790][T21792] netlink: 'syz.8.5990': attribute type 30 has an invalid length. [ 1309.411207][ T58] hsr_slave_1: left promiscuous mode [ 1309.411893][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.411913][ T58] batadv0: mtu less than device minimum [ 1309.440723][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.462824][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.485891][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.505698][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.524989][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.546124][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.573956][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.593579][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.613244][ T58] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1309.730302][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.744228][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.878789][T21804] program syz.0.5996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1309.973462][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.998296][ T58] batman_adv: batadv0: Interface deactivated: dummy0 [ 1309.998323][ T58] batman_adv: batadv0: Removing interface: dummy0 [ 1310.108286][ T58] veth1_macvtap: left promiscuous mode [ 1310.108351][ T58] veth0_macvtap: left promiscuous mode [ 1310.108451][ T58] veth1_vlan: left promiscuous mode [ 1310.108555][ T58] veth0_vlan: left promiscuous mode [ 1310.530086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.780699][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.847362][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.967842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.151742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.253221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.450065][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.569753][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.847759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.992882][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.114817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.255708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.371948][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.560120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.677589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.732912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.808906][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.932330][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.141724][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1313.300036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.359718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.422003][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1313.463873][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.537887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.611910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.667736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.788282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.841887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.977211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.057612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.132019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.455035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.569960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.678030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.738135][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.799763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.844921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.977464][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.041450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.167212][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.234411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.311754][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.369176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.416740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.534476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.617232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.685770][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.879433][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.944833][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.017810][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.126708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.176560][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.237071][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.365700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.502330][T21325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1316.642833][T21792] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1316.659798][T21325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1316.745001][T21819] loop6: detected capacity change from 0 to 524288000 [ 1316.803671][T21825] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6005'. [ 1316.831126][T21819] support for the xor transformation has been removed. [ 1316.976693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.084441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.157744][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.174416][T21837] bridge_slave_0: invalid flags given to default FDB implementation [ 1317.395205][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.574315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.651978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.841897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.929594][T21325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.984590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.991100][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1318.037992][T21325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.091726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.171330][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1318.173785][ T10] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1318.173813][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.216155][ T10] usb 8-1: config 0 descriptor?? [ 1318.264632][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.264831][T11234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.347483][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.347694][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.376383][ T58] IPVS: stop unused estimator thread 0... [ 1318.431480][ T5794] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1318.448675][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1318.471693][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1318.473487][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1318.473545][ T10] usb 8-1: media controller created [ 1318.557754][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1318.600204][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.600251][ T5794] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1318.600272][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.633680][ T5794] usb 1-1: config 0 descriptor?? [ 1318.647532][T21854] dib0700: tx buffer length is larger than 4. Not supported. [ 1318.717903][ T10] DVB: Unable to find symbol dib7000p_attach() [ 1318.717919][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1318.831273][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 1318.831295][ T10] Registered IR keymap rc-empty [ 1318.834669][ T10] dvb-usb: could not initialize remote control. [ 1318.834684][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1318.884705][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.957108][ T10] usb 8-1: USB disconnect, device number 20 [ 1319.112273][ T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1319.152603][ T5794] hid_parser_main: 201 callbacks suppressed [ 1319.152626][ T5794] dragonrise 0003:0079:0006.0023: unknown main item tag 0x0 [ 1319.152658][ T5794] dragonrise 0003:0079:0006.0023: unknown main item tag 0x0 [ 1319.152683][ T5794] dragonrise 0003:0079:0006.0023: unknown main item tag 0x0 [ 1319.152711][ T5794] dragonrise 0003:0079:0006.0023: unknown main item tag 0x0 [ 1319.152738][ T5794] dragonrise 0003:0079:0006.0023: unknown main item tag 0x0 [ 1319.156395][ T5794] dragonrise 0003:0079:0006.0023: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 1319.156427][ T5794] dragonrise 0003:0079:0006.0023: no inputs found [ 1319.156440][ T5794] dragonrise 0003:0079:0006.0023: force feedback init failed [ 1319.339692][ T31] usb 1-1: USB disconnect, device number 28 [ 1319.548769][T21325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.559168][T21562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1319.618297][T21562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1319.682741][T21562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1319.729771][T21562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1320.000948][ C1] vkms_vblank_simulate: vblank timer overrun [ 1320.440158][T21325] veth0_vlan: entered promiscuous mode [ 1320.662649][T21325] veth1_vlan: entered promiscuous mode [ 1320.761087][ T5942] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1320.775321][T21562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.908422][T21562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.917595][T21325] veth0_macvtap: entered promiscuous mode [ 1320.923374][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 1320.925650][ T5942] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1320.925679][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.962436][ T5942] usb 1-1: config 0 descriptor?? [ 1320.974537][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.974675][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.989564][T21325] veth1_macvtap: entered promiscuous mode [ 1321.032979][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.034585][T11234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.176973][T21325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.232649][ T5942] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1321.237931][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1321.239052][ T5942] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1321.239107][ T5942] usb 1-1: media controller created [ 1321.265771][T21325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.300565][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.335220][T11226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.349777][T11226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.363761][T11226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.396821][T11226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.435675][T21912] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 1321.437479][ T5942] az6027: usb out operation failed. (-71) [ 1321.437906][ T5942] az6027: usb out operation failed. (-71) [ 1321.437920][ T5942] stb0899_attach: Driver disabled by Kconfig [ 1321.437930][ T5942] az6027: no front-end attached [ 1321.437930][ T5942] [ 1321.438356][ T5942] az6027: usb out operation failed. (-71) [ 1321.438370][ T5942] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1321.488662][ T5942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 1321.514646][ T5942] dvb-usb: schedule remote query interval to 400 msecs. [ 1321.514669][ T5942] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1321.517585][ T5942] usb 1-1: USB disconnect, device number 29 [ 1321.757365][ T5942] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1322.054936][T11242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.054958][T11242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.165697][T17728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.165719][T17728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.265308][T21562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.588666][T21942] netlink: 'syz.7.6044': attribute type 83 has an invalid length. [ 1323.644060][ T5820] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1323.791637][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 1323.820453][ T5820] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1323.820481][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.820497][ T5820] usb 5-1: Product: syz [ 1323.820509][ T5820] usb 5-1: Manufacturer: syz [ 1323.820521][ T5820] usb 5-1: SerialNumber: syz [ 1323.829368][ T5820] usb 5-1: config 0 descriptor?? [ 1323.904704][ T5820] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1324.256756][T21973] batman_adv: batadv0: Adding interface: vlan3 [ 1324.256775][T21973] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.256803][T21973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.256819][T21973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.256830][T21973] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1324.477122][ C1] vkms_vblank_simulate: vblank timer overrun [ 1324.512054][ T5820] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1324.512604][ T5820] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1324.524079][ T5820] usb 5-1: USB disconnect, device number 16 [ 1324.783796][T21562] veth0_vlan: entered promiscuous mode [ 1324.808021][T21562] veth1_vlan: entered promiscuous mode [ 1324.898436][T21562] veth0_macvtap: entered promiscuous mode [ 1324.911677][T21562] veth1_macvtap: entered promiscuous mode [ 1324.941847][T21562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.974148][T21562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1325.000896][ T7334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.003216][ T7334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.003258][ T7334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.003293][ T7334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.107410][T21992] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1325.742583][T11234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.742603][T11234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.870196][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6074'. [ 1325.934204][T11252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.934225][T11252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.098772][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6077'. [ 1326.261634][T16452] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1326.415853][T16452] usb 5-1: Using ep0 maxpacket: 32 [ 1326.418070][T16452] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1326.418096][T16452] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.427158][T16452] usb 5-1: config 0 descriptor?? [ 1326.437469][T16452] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1327.171191][T21328] Bluetooth: hci0: command tx timeout [ 1327.276886][T16452] gspca_sunplus: reg_w_riv err -71 [ 1327.276989][T16452] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1327.290304][T16452] usb 5-1: USB disconnect, device number 17 [ 1327.387826][T22065] loop8: detected capacity change from 0 to 7 [ 1327.392235][T22065] Dev loop8: unable to read RDB block 7 [ 1327.392288][T22065] loop8: unable to read partition table [ 1327.392506][T22065] loop8: partition table beyond EOD, truncated [ 1327.392523][T22065] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1328.132058][T22093] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 1328.132697][T22093] macsec1: entered promiscuous mode [ 1328.150654][T22093] macsec1: entered allmulticast mode [ 1328.150684][T22093] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 1328.641047][ T1198] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1328.803683][ T1198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.803718][ T1198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.808422][ T1198] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1328.808441][ T1198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.808452][ T1198] usb 6-1: Product: syz [ 1328.808460][ T1198] usb 6-1: Manufacturer: syz [ 1328.808467][ T1198] usb 6-1: SerialNumber: syz [ 1329.732608][ T1198] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 1329.745487][ T1198] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 1329.761080][ T1198] cdc_ncm 6-1:1.0: bind() failure [ 1329.781471][ T1198] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1329.781517][ T1198] cdc_ncm 6-1:1.1: bind() failure [ 1329.790130][ T1198] usb 6-1: USB disconnect, device number 14 [ 1331.170412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.301314][ T5885] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 1331.464651][ T5885] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1331.464680][ T5885] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1331.464701][ T5885] usb 5-1: config 0 has no interface number 0 [ 1331.464749][ T5885] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1331.464772][ T5885] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1331.464811][ T5885] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1331.464834][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.478410][ T5885] usb 5-1: config 0 descriptor?? [ 1332.114158][ T5885] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input37 [ 1332.224136][ T5885] input: failed to attach handler kbd to device input37, error: -5 [ 1332.325747][ T5885] usb 5-1: USB disconnect, device number 18 [ 1332.658178][T22163] netlink: 'syz.5.6139': attribute type 1 has an invalid length. [ 1333.450286][T22182] loop4: detected capacity change from 0 to 524255232 [ 1333.550714][T22185] net_ratelimit: 30 callbacks suppressed [ 1333.550736][T22185] openvswitch: netlink: nsh attr 0 has unexpected len 29281 expected 0 [ 1333.550772][T22185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1333.805981][T22196] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6153'. [ 1333.806017][T22196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6153'. [ 1334.159961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.051643][T16452] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1335.142069][T22197] syz.8.6154 (22197): drop_caches: 2 [ 1335.216718][T16452] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1335.216750][T16452] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1335.216776][T16452] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1335.229488][T16452] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1335.229519][T16452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1335.229538][T16452] usb 6-1: Product: syz [ 1335.229552][T16452] usb 6-1: Manufacturer: syz [ 1335.229567][T16452] usb 6-1: SerialNumber: syz [ 1335.515875][T22224] overlayfs: conflicting lowerdir path [ 1335.520590][T16452] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1335.718584][T22232] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1335.728980][ T5820] usb 6-1: USB disconnect, device number 15 [ 1335.744107][ T5820] usblp0: removed [ 1336.071071][ T1198] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1336.221105][ T1198] usb 5-1: Using ep0 maxpacket: 32 [ 1336.223416][ T1198] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1336.223442][ T1198] usb 5-1: config 0 has no interface number 0 [ 1336.223493][ T1198] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1336.258758][ T1198] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1336.258787][ T1198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.258806][ T1198] usb 5-1: Product: syz [ 1336.258821][ T1198] usb 5-1: Manufacturer: syz [ 1336.258835][ T1198] usb 5-1: SerialNumber: syz [ 1336.299673][ T1198] usb 5-1: config 0 descriptor?? [ 1336.319909][ T1198] smsc75xx v1.0.0 [ 1337.139697][ T1198] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1337.139729][ T1198] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1337.140288][ T1198] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1337.140314][ T1198] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1337.140334][ T1198] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1337.140356][ T1198] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1337.140663][ T1198] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1337.234765][ T1198] usb 5-1: USB disconnect, device number 19 [ 1337.537114][ T37] audit: type=1326 audit(6291403846.775:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22277 comm="syz.5.6186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2c4f6c9 code=0x7ffc0000 [ 1337.565410][ T37] audit: type=1326 audit(6291403846.795:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22277 comm="syz.5.6186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2c4f6c9 code=0x7ffc0000 [ 1337.566020][ T37] audit: type=1326 audit(6291403846.795:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22277 comm="syz.5.6186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06c2c515e7 code=0x7ffc0000 [ 1337.566506][ T37] audit: type=1326 audit(6291403846.795:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22277 comm="syz.5.6186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2c4f6c9 code=0x7ffc0000 [ 1337.567358][ T37] audit: type=1326 audit(6291403846.795:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22277 comm="syz.5.6186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f06c2c4f6c9 code=0x7ffc0000 [ 1337.567410][ T37] audit: type=1326 audit(6291403846.795:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22277 comm="syz.5.6186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c2c4f6c9 code=0x7ffc0000 [ 1338.360640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.390719][T22300] program syz.7.6197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1338.991764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1339.174912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1339.205978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1339.924942][ C1] vkms_vblank_simulate: vblank timer overrun [ 1340.131083][ T5794] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1340.240777][T22336] netlink: 232 bytes leftover after parsing attributes in process `syz.7.6211'. [ 1340.240814][T22336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6211'. [ 1340.281173][ T5794] usb 6-1: Using ep0 maxpacket: 8 [ 1340.298042][ T5794] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1340.298075][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.298096][ T5794] usb 6-1: Product: syz [ 1340.298111][ T5794] usb 6-1: Manufacturer: syz [ 1340.298126][ T5794] usb 6-1: SerialNumber: syz [ 1340.336361][ T5794] usb 6-1: config 0 descriptor?? [ 1340.353958][ T5794] gspca_main: se401-2.14.0 probing 047d:5003 [ 1340.683318][T22347] netlink: 47 bytes leftover after parsing attributes in process `syz.4.6215'. [ 1340.683340][T22347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6215'. [ 1340.683361][T22347] netlink: 47 bytes leftover after parsing attributes in process `syz.4.6215'. [ 1340.769766][ T5794] gspca_se401: ExtraFeatures: 171 [ 1340.775406][T22349] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6217'. [ 1340.975889][ T5794] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 1341.031331][ T5794] usb 6-1: USB disconnect, device number 16 [ 1341.193603][T22355] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6220'. [ 1341.193627][T22355] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1342.067049][T22375] netpci0: tun_chr_ioctl cmd 2147767520 [ 1342.163837][ T5794] kernel write not supported for file bpf-prog (pid: 5794 comm: kworker/0:3) [ 1342.376731][T22388] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6233'. [ 1342.559389][T22396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1343.001109][ T5794] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1343.006988][ T37] audit: type=1326 audit(6291403852.225:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508643f6c9 code=0x7ffc0000 [ 1343.007046][ T37] audit: type=1326 audit(6291403852.225:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508643f6c9 code=0x7ffc0000 [ 1343.007087][ T37] audit: type=1326 audit(6291403852.235:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f508643f6c9 code=0x7ffc0000 [ 1343.089700][ T37] audit: type=1326 audit(6291403852.315:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1343.096961][ T37] audit: type=1326 audit(6291403852.315:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508643f6c9 code=0x7ffc0000 [ 1343.171139][ T1198] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1343.174550][ T5794] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1343.174583][ T5794] usb 1-1: config 0 has no interface number 0 [ 1343.174712][ T5794] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1343.174736][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.220491][ T5794] usb 1-1: config 0 descriptor?? [ 1343.234957][ T5794] cp210x 1-1:0.255: cp210x converter detected [ 1343.244118][T22426] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1343.331154][ T1198] usb 6-1: Using ep0 maxpacket: 32 [ 1343.335091][ T1198] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1343.335119][ T1198] usb 6-1: config 0 has no interface number 0 [ 1343.335232][ T1198] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1343.335261][ T1198] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1343.340699][ T1198] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1343.358915][ T1198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.358941][ T1198] usb 6-1: Product: syz [ 1343.358954][ T1198] usb 6-1: Manufacturer: syz [ 1343.358969][ T1198] usb 6-1: SerialNumber: syz [ 1343.441833][ T1198] usb 6-1: config 0 descriptor?? [ 1343.657457][ T5794] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -121 [ 1343.825870][T22441] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1343.876845][T22441] bond2 (unregistering): Released all slaves [ 1344.089472][ C1] vkms_vblank_simulate: vblank timer overrun [ 1344.107739][ T1198] appletouch 6-1:0.85: Geyser mode initialized. [ 1344.139244][ T5794] cp210x 1-1:0.255: failed to get vendor val 0x370c size 15: -71 [ 1344.139272][ T5794] cp210x 1-1:0.255: GPIO initialisation failed: -71 [ 1344.165319][ T1198] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input40 [ 1344.167079][ T5794] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1344.192480][ T5794] usb 1-1: USB disconnect, device number 30 [ 1344.231371][ T5794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1344.232115][ T5794] cp210x 1-1:0.255: device disconnected [ 1344.324157][T16452] usb 6-1: USB disconnect, device number 17 [ 1344.452891][T16452] appletouch 6-1:0.85: input: appletouch disconnected [ 1344.961522][T16452] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1345.074846][ T58] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1345.130784][T16452] usb 8-1: Using ep0 maxpacket: 32 [ 1345.169997][T16452] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.170025][T16452] usb 8-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1345.205157][T16452] usb 8-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=69.50 [ 1345.205189][T16452] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.205209][T16452] usb 8-1: Product: syz [ 1345.205224][T16452] usb 8-1: Manufacturer: syz [ 1345.205239][T16452] usb 8-1: SerialNumber: syz [ 1345.294456][ T58] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1345.861128][ T5942] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1346.023815][ T5942] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.027164][ T5942] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1346.027193][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.027213][ T5942] usb 5-1: Product: syz [ 1346.027227][ T5942] usb 5-1: Manufacturer: syz [ 1346.027242][ T5942] usb 5-1: SerialNumber: syz [ 1346.941612][T16452] usb 8-1: USB disconnect, device number 21 [ 1347.120540][ T5942] cdc_ncm 5-1:1.0: bind() failure [ 1347.163912][ T5942] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1347.164991][ T5942] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1347.166729][ T5942] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1347.205920][ T5942] usb 5-1: USB disconnect, device number 20 [ 1347.276455][ T37] audit: type=1326 audit(6291403856.505:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22514 comm="syz.8.6290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa81aef6c9 code=0x0 [ 1347.485630][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485666][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485694][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485721][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485747][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485773][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485800][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485827][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485854][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.485881][T22511] hid-generic 0003:80000004:0000.0024: unknown main item tag 0x0 [ 1347.520233][T22511] hid-generic 0003:80000004:0000.0024: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 1347.814702][T22530] vivid-001: disconnect [ 1347.864361][T22526] vivid-001: reconnect [ 1348.375162][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6306'. [ 1348.651935][T22511] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1348.801680][T22511] usb 9-1: Using ep0 maxpacket: 32 [ 1348.806043][T22511] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1348.806089][T22511] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1348.806130][T22511] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1348.806154][T22511] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1348.806183][T22511] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1348.821620][T22511] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1348.821651][T22511] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1348.821671][T22511] usb 9-1: Product: syz [ 1348.821686][T22511] usb 9-1: Manufacturer: syz [ 1348.821700][T22511] usb 9-1: SerialNumber: syz [ 1348.846939][T22511] usb 9-1: config 0 descriptor?? [ 1348.872747][T22511] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1348.894390][T22511] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1349.090178][ T10] usb 9-1: USB disconnect, device number 13 [ 1349.104639][ T10] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1349.605703][T22591] syzkaller1: entered promiscuous mode [ 1349.605728][T22591] syzkaller1: entered allmulticast mode [ 1350.004917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1350.257331][T22608] vivid-007: disconnect [ 1350.257967][T22607] vivid-007: reconnect [ 1351.314036][T22639] pim6reg1: entered promiscuous mode [ 1351.314065][T22639] pim6reg1: entered allmulticast mode [ 1351.491828][ C1] vkms_vblank_simulate: vblank timer overrun [ 1351.631074][ T5942] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1351.671092][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1351.785432][ T5942] usb 9-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.785467][ T5942] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1351.785500][ T5942] usb 9-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 1351.785525][ T5942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.790870][ T5942] usb 9-1: config 0 descriptor?? [ 1351.830099][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1351.830127][ T10] usb 5-1: config 0 has no interface number 0 [ 1351.830163][ T10] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1351.830207][ T10] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1351.830235][ T10] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1351.830271][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1351.830295][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.902643][ T10] usb 5-1: config 0 descriptor?? [ 1351.922127][ T10] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1352.192455][T16452] usb 5-1: USB disconnect, device number 21 [ 1352.201671][T22511] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1352.364760][T22511] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1352.364791][T22511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.369567][T22511] usb 1-1: config 0 descriptor?? [ 1352.387052][T22511] cp210x 1-1:0.0: cp210x converter detected [ 1352.421599][ T5942] asus 0003:0B05:1A30.0025: unexpected long global item [ 1352.422470][ T5942] asus 0003:0B05:1A30.0025: Asus hid parse failed: -22 [ 1352.422582][ T5942] asus 0003:0B05:1A30.0025: probe with driver asus failed with error -22 [ 1352.649287][T16452] usb 9-1: USB disconnect, device number 14 [ 1352.856637][T22511] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1353.076087][T22511] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1353.330880][T22511] usb 1-1: USB disconnect, device number 31 [ 1353.356114][T22511] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1353.438866][T22688] kvm: kvm [22684]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000100 [ 1353.473287][T22511] cp210x 1-1:0.0: device disconnected [ 1353.696782][T22692] netlink: 'syz.8.6364': attribute type 1 has an invalid length. [ 1353.696804][T22692] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.6364'. [ 1353.732880][T22694] loop9: detected capacity change from 0 to 7 [ 1353.736578][T22696] loop4: detected capacity change from 0 to 7 [ 1353.737572][T22696] Dev loop4: unable to read RDB block 7 [ 1353.737610][T22696] loop4: unable to read partition table [ 1353.737798][T22696] loop4: partition table beyond EOD, truncated [ 1353.737814][T22696] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1353.756651][T22694] Dev loop9: unable to read RDB block 7 [ 1353.756842][T22694] loop9: unable to read partition table [ 1353.757069][T22694] loop9: partition table beyond EOD, truncated [ 1353.757086][T22694] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1353.991558][T16452] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1354.174125][T16452] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1354.174159][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1354.174185][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1354.174207][T16452] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1354.174249][T16452] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1354.174273][T16452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.180487][T16452] usb 6-1: config 0 descriptor?? [ 1354.481664][T17122] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1354.634666][T17122] usb 8-1: Using ep0 maxpacket: 32 [ 1354.655372][T17122] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1354.655399][T17122] usb 8-1: config 0 has no interface number 0 [ 1354.655450][T17122] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1354.691960][T17122] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1354.691991][T17122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.692011][T17122] usb 8-1: Product: syz [ 1354.692025][T17122] usb 8-1: Manufacturer: syz [ 1354.692039][T17122] usb 8-1: SerialNumber: syz [ 1354.716117][T16452] hid_parser_main: 136 callbacks suppressed [ 1354.716141][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.716174][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.725123][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.725163][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.725191][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.725217][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.725245][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.725277][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.725304][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.725332][T16452] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1354.734842][T17122] usb 8-1: config 0 descriptor?? [ 1354.747698][T17122] smsc75xx v1.0.0 [ 1354.804932][T16452] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1354.990725][ T1198] usb 6-1: USB disconnect, device number 18 [ 1355.368555][T17122] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1355.368586][T17122] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1355.393545][T22721] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1355.393569][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1355.420506][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6379'. [ 1355.574558][T17122] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1355.574591][T17122] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1355.574611][T17122] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1355.574913][T17122] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1355.619793][T17122] usb 8-1: USB disconnect, device number 22 [ 1355.937124][T22744] program syz.5.6388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1356.011070][ T1198] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1356.186022][ T1198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.186057][ T1198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.186080][ T1198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1356.186124][ T1198] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1356.186147][ T1198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.187134][T22754] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1356.252259][ T1198] usb 5-1: config 0 descriptor?? [ 1356.737938][ T1198] plantronics 0003:047F:FFFF.0027: reserved main item tag 0xd [ 1356.788307][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.793191][ T1198] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1356.898576][T22799] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1356.898620][T22799] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1356.946034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.071602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.102383][ T1198] usb 5-1: USB disconnect, device number 22 [ 1357.121364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.172000][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.305155][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.372686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.438541][ T37] audit: type=1326 audit(6291403866.665:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22802 comm="syz.0.6403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243e18f6c9 code=0x0 [ 1357.477090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.622116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.772618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.807428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.872237][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.028152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.055195][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.172469][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.255140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.305456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.422428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.505209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.518941][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6408'. [ 1358.632349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.675776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.689151][T22812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.751354][T22812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.755149][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.804748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.904618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.727727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.827919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.854870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.971868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.138014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.245964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.477865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.521322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.555178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.611224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.740357][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.804583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.921472][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.037845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.127363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.205482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.324230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.456827][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.527214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.554381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.676452][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.681195][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.681267][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.752115][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.804478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.946928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.072137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.107185][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.171324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.421537][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.522251][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.558562][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.604562][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.677699][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.706192][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.792113][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.938452][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.155049][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.255484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.372159][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.504579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.557369][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.687858][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.784832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.842099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.006786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.104320][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.204821][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.258047][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.487526][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.604617][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.614354][T22864] syzkaller1: entered promiscuous mode [ 1364.614384][T22864] syzkaller1: entered allmulticast mode [ 1364.656530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.737630][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.802971][T22869] input: syz0 as /devices/virtual/input/input42 [ 1364.825028][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.061995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.084456][T22875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6431'. [ 1365.422957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.506558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.754839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.921686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.221283][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.728879][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.371209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.477869][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.554613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.757810][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.321651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.521716][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.628953][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.721730][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.757513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.838254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.927437][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.053901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.110285][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.171264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.207410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.328174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.394048][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.421687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.554190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.606916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.688118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.777481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.877100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.904122][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.004313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.037898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.154799][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.227499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.308061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.401815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.577094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.807673][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.871963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.907590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.988341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.172245][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.440794][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.005040][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.051365][ T5819] Bluetooth: hci4: command 0x0405 tx timeout [ 1372.620530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.955598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.022566][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.555070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.653785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.708323][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.753654][ C1] vkms_vblank_simulate: vblank timer overrun [ 1373.854738][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.105873][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.222200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.304280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.337438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.446920][T22924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1374.447262][T22924] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1374.485182][ C1] vkms_vblank_simulate: vblank timer overrun [ 1374.577265][T22924] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1374.714832][T22924] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1374.714920][T22924] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1375.070521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.223939][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.570258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.657882][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.746343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.754673][T22924] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1376.006291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.103841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.154413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.171165][ T1198] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1376.327842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.379124][ T1198] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.379153][ T1198] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1376.407368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.411489][ T1198] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1376.411519][ T1198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1376.411540][ T1198] usb 6-1: SerialNumber: syz [ 1376.463714][T21328] Bluetooth: hci2: command 0x0c1a tx timeout [ 1376.477105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.503438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.577137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.603659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.657366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.736289][ T1198] usb 6-1: 0:2 : does not exist [ 1376.771239][T21328] Bluetooth: hci4: command 0x0405 tx timeout [ 1376.782960][ T5942] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1376.803735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.836797][ T1198] usb 6-1: USB disconnect, device number 19 [ 1376.870353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.914511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.971684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.986779][ T5942] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1376.986811][ T5942] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.986832][ T5942] usb 8-1: Product: syz [ 1376.986847][ T5942] usb 8-1: Manufacturer: syz [ 1376.986862][ T5942] usb 8-1: SerialNumber: syz [ 1377.175306][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.205418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.286933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.347224][T22959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6467'. [ 1377.384185][T22959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1377.384204][T22959] IPv6: NLM_F_CREATE should be set when creating new route [ 1377.385187][T22959] IPv6: NLM_F_CREATE should be set when creating new route [ 1377.454194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.508470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.554140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.720020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.807105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.925331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.073722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.324495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.454089][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.485286][ T5942] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1378.485352][ T5942] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1378.506984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.541158][T21328] Bluetooth: hci2: command 0x0c1a tx timeout [ 1378.556023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.704834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.756498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.768221][T17122] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1378.788691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.851176][T21328] Bluetooth: hci4: command 0x0405 tx timeout [ 1378.991322][ T5794] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1379.013962][ T5942] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1379.014075][ T5942] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1379.035020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.061730][ T5942] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1379.087076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.170281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.234741][ T5794] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1379.234777][ T5794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1379.234804][ T5794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1379.234826][ T5794] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1379.234871][ T5794] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1379.234894][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.287150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.337350][ T5794] usb 6-1: config 0 descriptor?? [ 1379.425174][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.456838][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.606403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.656351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.727576][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.804166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.840805][ T5794] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1379.855192][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.068743][ T5942] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1380.101915][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.139309][ T5942] usb 8-1: USB disconnect, device number 23 [ 1380.228243][T22977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.270175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.471155][ T5942] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1380.611285][T21328] Bluetooth: hci2: command 0x0c1a tx timeout [ 1380.620501][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.643685][ T5942] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1380.643717][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.693159][ T5942] usb 8-1: config 0 descriptor?? [ 1380.708570][ T5942] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1380.942068][T21328] Bluetooth: hci4: command 0x0405 tx timeout [ 1381.106372][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.241678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.471182][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.577098][ T5942] gspca_sunplus: reg_w_riv err -71 [ 1381.577199][ T5942] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 1381.610663][ T5942] usb 8-1: USB disconnect, device number 24 [ 1381.750223][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.769943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.029336][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.160684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.462320][ T1198] usb 6-1: USB disconnect, device number 20 [ 1382.674121][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.926612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.953033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.103459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.137158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.208318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.277281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.303358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.421339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.507728][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.577807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.779056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.853234][T23027] netlink: 64535 bytes leftover after parsing attributes in process `syz.7.6493'. [ 1383.925861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1383.953545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.103354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.226884][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.267597][T23033] input: syz1 as /devices/virtual/input/input45 [ 1384.297747][T22511] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1384.370352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.476800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.604288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.657225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.703867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.858209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.003144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.056209][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.104732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.342384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.461077][ T1198] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1385.486675][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.602851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.611288][ T1198] usb 8-1: Using ep0 maxpacket: 32 [ 1385.619766][ T1198] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1385.619796][ T1198] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.662215][ T1198] usb 8-1: config 0 descriptor?? [ 1385.877853][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.929505][ T1198] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1385.955848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.963218][ T1198] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1385.964049][ T1198] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1385.964105][ T1198] usb 8-1: media controller created [ 1386.071720][ T1198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1386.086643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.156116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.206441][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.214510][ T1198] DVB: Unable to find symbol dib7000p_attach() [ 1386.214525][ T1198] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1386.304068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.331216][ T1198] rc_core: IR keymap rc-dib0700-rc5 not found [ 1386.331239][ T1198] Registered IR keymap rc-empty [ 1386.331545][ T1198] dvb-usb: could not initialize remote control. [ 1386.331554][ T1198] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1386.335697][ T1198] usb 8-1: USB disconnect, device number 25 [ 1386.353072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.485321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.508942][ T1198] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1386.555249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.703249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.837186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1386.926155][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.052750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.103288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.370703][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.430085][T17122] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1387.437919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.512413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.552244][T22511] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1387.552278][T22511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1387.552304][T22511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1387.552326][T22511] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1387.552366][T22511] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1387.552388][T22511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.686781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.757225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.837572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.887885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.003103][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.136526][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.203398][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.305017][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.353016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.438229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.500290][T22511] usb 1-1: config 0 descriptor?? [ 1388.506847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.577147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.657188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.736479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.807371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.852669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.887788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1388.915713][T22511] usb 1-1: can't set config #0, error -71 [ 1388.933959][T22511] usb 1-1: USB disconnect, device number 32 [ 1388.993353][T17122] usb 5-1: device descriptor read/64, error -71 [ 1389.157549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.219374][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.253064][T23083] sctp: [Deprecated]: syz.5.6518 (pid 23083) Use of int in maxseg socket option. [ 1389.253064][T23083] Use struct sctp_assoc_value instead [ 1389.377782][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.477530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.620751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.756669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.163721][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.236350][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.387035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.457491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.502977][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.537893][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.573589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.608395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.676860][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.720533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.875898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.903031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.938124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.053078][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.104344][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.105636][T17122] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1391.181870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.387724][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.070040][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.266965][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.307277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.355692][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.426766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.507354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.577889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.670467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.102730][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.282792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.327938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.527665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.654012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.753106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.785998][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.837691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.837725][T23135] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6539'. [ 1393.956949][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.036353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.107454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.233998][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.292194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.434860][ T5794] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1394.581086][ T5794] usb 8-1: Using ep0 maxpacket: 16 [ 1394.586580][ T5794] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1394.586607][ T5794] usb 8-1: config 0 has no interface number 0 [ 1394.590303][ T5794] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1394.590332][ T5794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.590354][ T5794] usb 8-1: Product: syz [ 1394.590369][ T5794] usb 8-1: Manufacturer: syz [ 1394.590385][ T5794] usb 8-1: SerialNumber: syz [ 1394.606543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.665525][ T5794] usb 8-1: config 0 descriptor?? [ 1394.684862][ T5794] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1394.885661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.224791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.269706][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.441568][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.623546][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.653016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.739859][ T5794] gspca_spca1528: reg_w err -71 [ 1395.739976][ T5794] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 1395.787424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.796410][ T5794] usb 8-1: USB disconnect, device number 26 [ 1395.902753][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.977642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.077919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.177410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.286615][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.386489][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.489299][T23118] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1396.489325][T23118] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1396.502110][T17122] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1396.510146][T17122] usb usb5-port1: attempt power cycle [ 1396.541938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.692049][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.855772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.925981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.931170][T14981] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1396.988360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.053032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.136841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.220510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.302561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.338688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.471897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.554355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.654095][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.718932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.795095][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.847172][T23159] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1397.941667][T14981] usb 1-1: Using ep0 maxpacket: 16 [ 1397.959420][T14981] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1397.959454][T14981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.959476][T14981] usb 1-1: Product: syz [ 1397.959491][T14981] usb 1-1: Manufacturer: syz [ 1397.959507][T14981] usb 1-1: SerialNumber: syz [ 1397.972513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.974196][T17122] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1397.992997][T17122] usb 5-1: Using ep0 maxpacket: 32 [ 1398.039076][T14981] usb 1-1: config 0 descriptor?? [ 1398.057259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.102256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.136878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.227739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.403088][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.511471][ T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1398.627468][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.676360][ T10] usb 8-1: config 0 has an invalid interface number: 103 but max is 0 [ 1398.676388][ T10] usb 8-1: config 0 has no interface number 0 [ 1398.676423][ T10] usb 8-1: too many endpoints for config 0 interface 103 altsetting 76: 53, using maximum allowed: 30 [ 1398.677183][ T10] usb 8-1: config 0 interface 103 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1398.677214][ T10] usb 8-1: config 0 interface 103 has no altsetting 0 [ 1398.677782][ T10] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1398.677809][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.807936][ T10] usb 8-1: config 0 descriptor?? [ 1398.837773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.857106][T14981] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1398.895911][T14981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1398.900146][T14981] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1398.900208][T14981] usb 1-1: media controller created [ 1398.907230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.011715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.255659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.306189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.306766][ T10] usb 8-1: string descriptor 0 read error: -71 [ 1399.356055][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.404653][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.435733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.469938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.480028][T17122] usb 5-1: unable to read config index 0 descriptor/all [ 1399.480081][T17122] usb 5-1: can't read configurations, error -71 [ 1399.634715][T14981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1399.675127][ T10] usb 8-1: USB disconnect, device number 27 [ 1399.685492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.804898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.856427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.861619][T14981] zl10353_read_register: readreg error (reg=127, ret==0) [ 1399.861684][T14981] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1399.861698][T14981] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1399.925974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.931654][T14981] usb 1-1: USB disconnect, device number 33 [ 1399.987195][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.064115][T14981] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1400.107085][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.169659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.273932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.302218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.341989][T23174] ------------[ cut here ]------------ [ 1400.342013][T23174] WARNING: CPU: 0 PID: 23174 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1400.342060][T23174] Modules linked in: [ 1400.342085][T23174] CPU: 0 UID: 0 PID: 23174 Comm: syz.7.6559 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1400.342110][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1400.342124][T23174] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1400.342155][T23174] Code: c7 c7 90 3e c5 8e 48 c7 c6 38 22 da 8c 48 c7 c2 17 f8 d8 8c 4c 89 f9 e8 a2 3b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 c4 0e 04 09 0f 1f 40 00 90 90 [ 1400.342175][T23174] RSP: 0018:ffffc90005b8fd00 EFLAGS: 00010206 [ 1400.342195][T23174] RAX: 8f947b1165c56a00 RBX: ffff88803d143600 RCX: 0000000000000000 [ 1400.342212][T23174] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: 00000000ffffffff [ 1400.342228][T23174] RBP: ffffc90005b8fe68 R08: 0000000000000000 R09: ffffffff8ac2bb41 [ 1400.342244][T23174] R10: dffffc0000000000 R11: fffffbfff1dac76f R12: 1ffff11005537e2d [ 1400.342262][T23174] R13: 0000000000000000 R14: ffff88803d143608 R15: ffff888038f6bc00 [ 1400.342279][T23174] FS: 000055557dcf8500(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 1400.342298][T23174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1400.342314][T23174] CR2: 000020000004c000 CR3: 0000000053aa0000 CR4: 00000000003526f0 [ 1400.342334][T23174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1400.342348][T23174] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1400.342362][T23174] Call Trace: [ 1400.342372][T23174] [ 1400.342384][T23174] do_exit+0x105/0x2300 [ 1400.342425][T23174] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1400.342456][T23174] ? __pfx_do_exit+0x10/0x10 [ 1400.342487][T23174] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1400.342522][T23174] ? rt_spin_unlock+0x161/0x200 [ 1400.342559][T23174] do_group_exit+0x21c/0x2d0 [ 1400.342587][T23174] __x64_sys_exit_group+0x3f/0x40 [ 1400.342607][T23174] x64_sys_call+0x21f7/0x2200 [ 1400.342631][T23174] do_syscall_64+0xfa/0xfa0 [ 1400.342660][T23174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1400.342691][T23174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.342714][T23174] ? clear_bhb_loop+0x60/0xb0 [ 1400.342741][T23174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.342762][T23174] RIP: 0033:0x7f508643f6c9 [ 1400.342783][T23174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1400.342802][T23174] RSP: 002b:00007ffecd64d2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1400.342824][T23174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f508643f6c9 [ 1400.342840][T23174] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.342855][T23174] RBP: 00007ffecd64d33c R08: 00000005cd64d3cf R09: 00000000000927c0 [ 1400.342871][T23174] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000028c [ 1400.342885][T23174] R13: 00000000000927c0 R14: 0000000000155c56 R15: 00007ffecd64d390 [ 1400.342922][T23174] [ 1400.342940][T23174] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1400.342956][T23174] CPU: 0 UID: 0 PID: 23174 Comm: syz.7.6559 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1400.342981][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1400.342995][T23174] Call Trace: [ 1400.343004][T23174] [ 1400.343013][T23174] dump_stack_lvl+0x99/0x250 [ 1400.343046][T23174] ? __asan_memcpy+0x40/0x70 [ 1400.343073][T23174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1400.343104][T23174] ? __pfx__printk+0x10/0x10 [ 1400.343146][T23174] vpanic+0x237/0x6d0 [ 1400.343168][T23174] ? __pfx_vpanic+0x10/0x10 [ 1400.343202][T23174] panic+0xb9/0xc0 [ 1400.343223][T23174] ? __pfx_panic+0x10/0x10 [ 1400.343261][T23174] __warn+0x31b/0x4b0 [ 1400.343280][T23174] ? kcov_task_exit+0x13c/0x150 [ 1400.343311][T23174] ? kcov_task_exit+0x13c/0x150 [ 1400.343339][T23174] report_bug+0x2be/0x4f0 [ 1400.343367][T23174] ? kcov_task_exit+0x13c/0x150 [ 1400.343397][T23174] ? kcov_task_exit+0x13c/0x150 [ 1400.343425][T23174] ? kcov_task_exit+0x13e/0x150 [ 1400.343453][T23174] handle_bug+0x84/0x160 [ 1400.343476][T23174] exc_invalid_op+0x1a/0x50 [ 1400.343497][T23174] asm_exc_invalid_op+0x1a/0x20 [ 1400.343518][T23174] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1400.343555][T23174] Code: c7 c7 90 3e c5 8e 48 c7 c6 38 22 da 8c 48 c7 c2 17 f8 d8 8c 4c 89 f9 e8 a2 3b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 c4 0e 04 09 0f 1f 40 00 90 90 [ 1400.343574][T23174] RSP: 0018:ffffc90005b8fd00 EFLAGS: 00010206 [ 1400.343593][T23174] RAX: 8f947b1165c56a00 RBX: ffff88803d143600 RCX: 0000000000000000 [ 1400.343610][T23174] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: 00000000ffffffff [ 1400.343626][T23174] RBP: ffffc90005b8fe68 R08: 0000000000000000 R09: ffffffff8ac2bb41 [ 1400.343642][T23174] R10: dffffc0000000000 R11: fffffbfff1dac76f R12: 1ffff11005537e2d [ 1400.343660][T23174] R13: 0000000000000000 R14: ffff88803d143608 R15: ffff888038f6bc00 [ 1400.343684][T23174] ? rt_spin_lock+0x1c1/0x3e0 [ 1400.343721][T23174] do_exit+0x105/0x2300 [ 1400.343761][T23174] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1400.343788][T23174] ? __pfx_do_exit+0x10/0x10 [ 1400.343817][T23174] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1400.343852][T23174] ? rt_spin_unlock+0x161/0x200 [ 1400.343880][T23174] do_group_exit+0x21c/0x2d0 [ 1400.343907][T23174] __x64_sys_exit_group+0x3f/0x40 [ 1400.343928][T23174] x64_sys_call+0x21f7/0x2200 [ 1400.343950][T23174] do_syscall_64+0xfa/0xfa0 [ 1400.343980][T23174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1400.344009][T23174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.344032][T23174] ? clear_bhb_loop+0x60/0xb0 [ 1400.344059][T23174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.344081][T23174] RIP: 0033:0x7f508643f6c9 [ 1400.344099][T23174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1400.344118][T23174] RSP: 002b:00007ffecd64d2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1400.344139][T23174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f508643f6c9 [ 1400.344156][T23174] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.344171][T23174] RBP: 00007ffecd64d33c R08: 00000005cd64d3cf R09: 00000000000927c0 [ 1400.344188][T23174] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000028c [ 1400.344203][T23174] R13: 00000000000927c0 R14: 0000000000155c56 R15: 00007ffecd64d390 [ 1400.344241][T23174] [ 1400.344509][T23174] Kernel Offset: disabled