last executing test programs: 5.568230797s ago: executing program 3 (id=527): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010226bd7000feffffff030026f807000400ac14143114000600736974300000000000000000000000001400070000000000000000000000ffff7f000001080005"], 0x4c}, 0x8, 0x3000000000002}, 0x844) r3 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0x40, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xffff, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x42}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x8, 0x4}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x5, &(0x7f00000008c0)={0x5, 0xf, 0x5}}) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x90d03, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x6) ioctl$TCSBRKP(r4, 0x5425, 0x80000000) (async) fcntl$notify(r0, 0x402, 0x8000001f) (async) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r5, 0x402, 0x80000024) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000100)=0x1) (async) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) 4.518874018s ago: executing program 2 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x4c, r3, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x6, 0x0, {0x5, 0x9, 0x0, 0x22f, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x2, 0x3}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) fsync(r1) sendto$packet(r6, &(0x7f0000000240)="f257", 0x22, 0x20008814, &(0x7f0000000200)={0x11, 0x88f7, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x81, 0x5, {{0xa, 0x4, 0x0, 0x14, 0x28, 0x68, 0x6, 0x10, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@end, @timestamp={0x44, 0xc, 0x7a, 0x0, 0x5, [0x8, 0xff]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@broadcast, @initdev, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x4, 0xc1f, 0x21, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x8000, 0x800}}) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) r15 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="a3420696087b37a88aa6611cc6ea9dfd47e9a19e6d18e5edc35c612096ad073e11c3de1b64b719f5aaab4d16f86b08e926d4931edece7b0e84cd7c7bebd83492459fcc22924f53db187ee83c67659c73218432860ff97232623e88610f467d2c4aedc9d86b2e3aa5d2949874f1a1c43b7a4d", @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r16, @ANYBLOB="3c000280380001"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, r5, 0x304, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x20000050) 4.324305975s ago: executing program 2 (id=540): prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={'blake2b-384-generic\x00'}, 0x0, 0x300}) 3.785263387s ago: executing program 2 (id=545): syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400000) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0xa, @pix_mp={0xd, 0x401, 0x56544943, 0x8, 0xa, [{0x3, 0xca}, {0xa, 0x7}, {0x80000000, 0xd4}, {0x6, 0xfffffffa}, {0x39, 0x2}, {0x5, 0xa}, {0xd, 0xfa8}, {0x4, 0x3}], 0x1, 0x0, 0x8, 0x2, 0x2}}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_usbip_server_init(0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000580)) r7 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x1, r7, 0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) read$FUSE(r10, &(0x7f0000000d40)={0x2020}, 0x2020) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000014c0)="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", 0x1a1}, 0x68) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00228fbadf80851f82e9ffb1401c2918908b1a41d35a62600f47c4fc"], 0x0}, 0x0) 2.826198899s ago: executing program 1 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000012000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.608909607s ago: executing program 1 (id=551): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xe1, 0x9, 0x14, @empty, @empty, 0x70, 0x40, 0x5, 0x8}}) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x2) r2 = socket(0x11, 0x3, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '*)+'}, {0x20, 'gre0\x00'}], 0xa, "f9f7bf0ee34e7ca905eea79b5750614af7c0d90903a3957bff6e88da66f356f951b32c261ec4806c4f86cc348b26d51ec739db2540f79daaca2a761587f6492286bb43fd5a77707177ccc86f56c1bb86ba4421e332efa302e29d87703ce8aaaad8373adb189923a666977bd90512ccfdf3fe641ce2db0e66e7ae249cda1adecd0847d0c4259a05409d3f38c5ae00d2bfe02841aa3ccd2217cf12e1b79a55780850de5d14f6370aafcea927f5947f92f017870513aa"}, 0xca) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x71) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000240)=0x7, 0x4) sendmsg$netlink(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYRESOCT=r6], 0xdd12}], 0x1, 0x0, 0x0, 0x2004c008}, 0x400c004) sendmmsg$inet6(r2, &(0x7f0000000140), 0x0, 0x4008800) 2.488403134s ago: executing program 1 (id=552): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0xe02c2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'pimreg\x00', {0x2, 0x4e21, @local}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x0, 0x7, 0x3, 0x30000000}, 0x4, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0xc4, 0xa, 0x1, 0x100000a0}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000580)=""/61, 0x3d}, {&(0x7f00000005c0)=""/222, 0xde}], 0x5, 0x6, 0x9) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)=ANY=[]) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) 2.415461942s ago: executing program 3 (id=553): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x1) 2.406354789s ago: executing program 1 (id=554): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040c50f80b000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x80ff, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x40000) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480d4}, 0x0) close(r1) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000076c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) accept$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="180000089ef9c60619031a3366bf03f12e54078ab18eb3e337d8b43202338f9acd8aa0799763ed23f2907d1385201d00cfc923ba01462fb9492e20e87173c2f3a7b1334a773282f6ed5d04492398d6598d736f205be4f5ad8b7a2a0ce4ea79215ed5b39205763047355bb1f514b8db", 0xd5}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f019a42a20fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="40110a0000000000008c4956811ddf52645e6ef3ce931cf63ef6d349990b4ccd716f08ca8100"/51], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in6=@mcast1, 0x4e23, 0x973e, 0x4e22, 0x8001, 0x2, 0x80, 0x20, 0x2b, r6, r5}, {0x0, 0x3, 0x9, 0x1c, 0xa, 0x7, 0x400, 0xfffffffffffff3ba}, {0x6, 0xd283, 0x3, 0x7}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x4d6, 0x33}, 0xa, @in=@local, 0x0, 0x3, 0x3437f3e155975ec3, 0x6e, 0x7, 0x6, 0x2}}, 0xe8) 2.187174052s ago: executing program 0 (id=555): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x1) 2.104172831s ago: executing program 3 (id=556): setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) (fail_nth: 2) 1.899614752s ago: executing program 0 (id=557): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mknod$loop(&(0x7f0000000000)='./file0/../file0\x00', 0x2, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.640859629s ago: executing program 0 (id=558): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x30, 0x0, @ib={0x1b, 0x7, 0xfffffffd, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x1, 0x7e1f, 0x5}, @ib={0x1b, 0xd160, 0x387d, {"382f8d5866dc8450ea081437b9de2da3"}, 0x7fffffff, 0x0, 0x742}}}, 0x118) 1.631865512s ago: executing program 3 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="84ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000005ac0000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}, {&(0x7f0000000140)="6011daff", 0x4}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.444181952s ago: executing program 3 (id=560): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001200010300000000ffffffff00c20b0000000000002c028f31ea16714e224e2300000000058000000000000000000004010000000000f3ffff3021fb02ff00009f634b06e88637dd63b42fd8e0a5e546daaec737eb94c643960fb4ed06f859d749ad"], 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000180)={'bond0\x00', @ifru_data=0x0}) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x800) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000100)=0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f00000002c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x10, 0x1, 0xf}]}}}], 0x18}, 0x4840) 1.426140086s ago: executing program 0 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000007000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}, {&(0x7f0000000140)="6011daffb3", 0x5}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.320829629s ago: executing program 0 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0xf5ffffff, 0x0, {0x7}}}, 0x54}}, 0x0) 1.224031157s ago: executing program 3 (id=563): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_usb_connect$uac1(0x0, 0x8b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmmsg$sock(r2, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)="254cc2", 0x3}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x3d, 0x0, &(0x7f00000003c0)) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f00000000c0)={0x13fdf6d31a11c3e9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x121400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf5, r3, 0x1, 0xec, 0x6, @remote}, 0x14) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r10, 0x89e2, &(0x7f0000000400)=@null) r11 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {0x8381, 0x3, 0xff1e, 0x401}, 0x16, [0x8, 0x80000001, 0x81, 0x4, 0x10, 0x9c71, 0xe, 0xc, 0xfffffffc, 0x0, 0x8, 0x46e, 0x7fffffff, 0x7, 0xc, 0x3, 0x0, 0xac, 0x4, 0x3, 0x0, 0x2e8, 0x8, 0x41, 0x2, 0x80, 0x2, 0x1, 0x8, 0x0, 0x229b, 0x8, 0x6, 0x4, 0x80, 0x6a5f, 0x5, 0x81, 0x5, 0x7dbf, 0x8, 0x81, 0x6, 0x8, 0x8, 0x8001, 0x6, 0x3, 0x2, 0xfffffeff, 0xd0, 0x5, 0x9, 0x0, 0x90e, 0x8, 0x4507, 0x7, 0x2, 0x7, 0x8, 0x7f, 0xe, 0x4], [0x1, 0x0, 0x8, 0x3, 0xd, 0x4, 0x4, 0xfffff923, 0x4, 0x7f, 0x4, 0x80000000, 0x9, 0x0, 0x9, 0x81, 0x80, 0xf7, 0x8, 0x7, 0x2, 0xc440, 0x7f, 0x9, 0x5, 0x6, 0x3ff, 0x10, 0x80, 0x1, 0x7, 0xffffffff, 0x80000001, 0x3, 0x2, 0xc, 0xfffffc00, 0x65b2, 0x4, 0x7, 0xfff, 0x3, 0x5, 0x7, 0x7, 0x0, 0xf72, 0x7fffffff, 0x8001, 0x9, 0x3, 0x22e, 0x6, 0x90000000, 0x4, 0xd91b, 0x8, 0x0, 0x1, 0xf, 0x9, 0x6, 0x1, 0xfffffff7], [0x400, 0x2, 0xdcf, 0x9, 0x92, 0x7d, 0x9, 0x2, 0x7, 0x80000000, 0x5, 0x7c, 0x6, 0x6, 0x3, 0x457, 0x983f, 0x8, 0x0, 0x7, 0x4, 0x4, 0x1, 0x8, 0x8, 0xfff, 0x5, 0x0, 0x2, 0x6, 0x3, 0x6, 0x7, 0x5, 0x8, 0x101, 0x0, 0x6, 0x4, 0xb33, 0xfae0, 0xfffffffb, 0x8, 0x68a2, 0x8, 0x35bd, 0x9b, 0x4, 0x9, 0x2, 0x802, 0x20005, 0x7, 0x4, 0x0, 0x4, 0x0, 0x4, 0x2, 0x6, 0x401, 0x2, 0x1, 0xfffffffc], [0x4, 0x6, 0x4, 0x8, 0x6, 0x4f83, 0x3ff, 0x7, 0x0, 0x9, 0x8, 0xffff, 0x1, 0x5, 0x6, 0x1, 0x108, 0x4, 0x7, 0x3, 0xa07, 0x2, 0xa, 0xeb13, 0x3ff, 0x7fff, 0x468, 0x6, 0x2, 0x2b2, 0x4, 0x3ff, 0x7f, 0x6c, 0x80000001, 0xd, 0x0, 0xc, 0xfffffc00, 0x3, 0x6, 0x7fff, 0x3, 0x2, 0x5, 0xff000000, 0x0, 0x3, 0x0, 0x4, 0x67, 0x6, 0x10041, 0x5, 0x9, 0x8, 0x10, 0x1, 0x7, 0x7, 0x8000, 0x10, 0x1000, 0x5]}, 0x45c) 1.156411115s ago: executing program 0 (id=564): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x23, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe9, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448a") 564.754794ms ago: executing program 2 (id=565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x1900, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "7a7721427b16add9e6b50c9917d0e0684cb2e6"}}]}, 0x150}}, 0x804) 448.249987ms ago: executing program 2 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="88ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01a80500000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 426.187297ms ago: executing program 2 (id=567): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700000000000030000005800018044000400200001000a00000000000000ff12000000000000000000000000000100000002200002000a004e20f4fffffffe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000000)=0xff, 0x4) (async) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000000)=0xff, 0x4) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) (async) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_usb_connect(0x2, 0x440, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_connect(0x2, 0x440, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 119.372577ms ago: executing program 1 (id=568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000b20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) 0s ago: executing program 1 (id=569): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x3) r5 = eventfd(0x80000000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x8000000, 0x0, r5}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r4, 0x4}) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003c80)=@newtaction={0xc34, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0x9f4, 0x1, [@m_ipt={0x334, 0x17, 0x0, 0x0, {{0x8}, {0x278, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TARG={0xdf, 0x6, {0x3, 'nat\x00', 0xff, 0x3, "f92c07dc28a3d14bc65d29bfdb376aed2e66d32de4835d77100511b99d0b3aa4224e90f5a119498779a1c611c56ecd7431383a1a0f4172b062ca197b2c5ffdedd773367f2ce8b3ce17954cad619ace0210bcbebced595d445be6ea96cb86224b6c1707b49600fdcc52799fec03b17767026a597d2e1ff39eaa16b4eeadc9301b79f9064a8191ea8515072afff13fad0e047b1d7aefd69a9a1e3ea0f56b171a781a1a95c4099a865a2c1747a1e4f9cef0f0fc9d6d31"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x17c, 0x11, 0x0, 0x0, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb5, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3b1fc1ef49873f24bd44137256bfd0a27e100d2162e3f7b17"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x154, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x89, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d1d5431371c66f76842e2571bf73ce597"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x130, 0x3, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x14c, 0x11, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x2, 'mangle\x00', 0x5, 0x1, "26b28bee405c084d7d3004660f6902208128531e54ab5a1819783607be3e2e463fc401b2d641a72c11f6aea69efbc1dac1e8f34f762cbc8ee0231ffeebcb773de1e20df7f65c7029200a9570577fe540733523b10491dc5fda6c0091603360fb1b6019648c7b5ef50f8741b6670963cc5d8533f50c4a2cfbeda3e0ed5070ab41e44997bdda4c34c11413cb846041ef4060b9cb71e527a7dd8e4efb7877f6f37b7cd8648d2d22911f9fbfdd95b69e14"}}]}, {0x45, 0x6, "e7ba22f1ebc93a7960461c2acdaf1da6af842571f14f3b0700806b225899f9ba581b6cc401693affa591693a24cad555ae47eb61507e3df51e30376dbb9780ecc9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x64, 0x24, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0x7, 'nat\x00', 0x4, 0x4c2d, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x79, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a8038897bb9fd967f32f04f15a8596894786759dc20093ddbffb2158f5c0591205638b11d518d45"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0xb8, 0x1, [@m_ipt={0xb4, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x80, 0x100, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a387605ebd024be5895e6659813581fe54a8998e1ca"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x174, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x78, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7b9f1648e75347ab9c4c22c5a146387bd1cec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xc34}}, 0x4000) recvmmsg$unix(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc038563b, &(0x7f0000000280)={0x0, 0x4}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r6) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x108, r8, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb15}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008850}, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xb, 0x6, "0d98f14f74a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="4013b9"], 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r11, 0xae71, &(0x7f00000002c0)={[{0x3}]}) sendmmsg$inet6(r6, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21eaef60964", 0x7}], 0x1}}], 0x1, 0x10) write(r0, &(0x7f0000000280), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x504a, 0x9, 0x33424752, 0x2, 0x157c, 0x5, 0x4, 0x3, 0x1, 0x1, 0x0, 0x6}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 82.955244][ T5851] cgroup: Unknown subsys name 'net' [ 83.042694][ T5851] cgroup: Unknown subsys name 'cpuset' [ 83.051885][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.704401][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.385509][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.394564][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.402805][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.421591][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.430431][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.438222][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.453978][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.461747][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.462732][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.469272][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.485031][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.494795][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.495460][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.510919][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.530230][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.539480][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.547733][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.556145][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.573069][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.580769][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.186101][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 88.207660][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 88.409400][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 88.457967][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 88.541957][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.549331][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.556873][ T5861] bridge_slave_0: entered allmulticast mode [ 88.564635][ T5861] bridge_slave_0: entered promiscuous mode [ 88.573848][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.581112][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.588819][ T5861] bridge_slave_1: entered allmulticast mode [ 88.596497][ T5861] bridge_slave_1: entered promiscuous mode [ 88.614154][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.621416][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.628768][ T5860] bridge_slave_0: entered allmulticast mode [ 88.636139][ T5860] bridge_slave_0: entered promiscuous mode [ 88.682448][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.689672][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.697228][ T5860] bridge_slave_1: entered allmulticast mode [ 88.704829][ T5860] bridge_slave_1: entered promiscuous mode [ 88.782376][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.801253][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.827118][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.844855][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.854372][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.862119][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.869503][ T5867] bridge_slave_0: entered allmulticast mode [ 88.876905][ T5867] bridge_slave_0: entered promiscuous mode [ 88.925906][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.933246][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.940955][ T5867] bridge_slave_1: entered allmulticast mode [ 88.949684][ T5867] bridge_slave_1: entered promiscuous mode [ 89.014253][ T5861] team0: Port device team_slave_0 added [ 89.023359][ T5861] team0: Port device team_slave_1 added [ 89.029722][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.036891][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.044587][ T5873] bridge_slave_0: entered allmulticast mode [ 89.052266][ T5873] bridge_slave_0: entered promiscuous mode [ 89.061883][ T5860] team0: Port device team_slave_0 added [ 89.115900][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.123487][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.131098][ T5873] bridge_slave_1: entered allmulticast mode [ 89.138799][ T5873] bridge_slave_1: entered promiscuous mode [ 89.147298][ T5860] team0: Port device team_slave_1 added [ 89.156821][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.168067][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.175167][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.201212][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.244912][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.255264][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.262372][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.288691][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.351353][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.362007][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.369161][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.395939][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.409525][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.416527][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.442655][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.469900][ T5867] team0: Port device team_slave_0 added [ 89.478976][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.511675][ T5867] team0: Port device team_slave_1 added [ 89.549950][ T5872] Bluetooth: hci0: command tx timeout [ 89.584006][ T5861] hsr_slave_0: entered promiscuous mode [ 89.590736][ T5861] hsr_slave_1: entered promiscuous mode [ 89.611998][ T5873] team0: Port device team_slave_0 added [ 89.628685][ T5868] Bluetooth: hci1: command tx timeout [ 89.628831][ T5865] Bluetooth: hci3: command tx timeout [ 89.634514][ T5872] Bluetooth: hci2: command tx timeout [ 89.662249][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.669466][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.696298][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.709780][ T5873] team0: Port device team_slave_1 added [ 89.716767][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.723927][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.750041][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.766976][ T5860] hsr_slave_0: entered promiscuous mode [ 89.773916][ T5860] hsr_slave_1: entered promiscuous mode [ 89.780444][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 89.786301][ T5860] Cannot create hsr debugfs directory [ 89.850037][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.857027][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.883040][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.929927][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.937069][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.963284][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.063904][ T5867] hsr_slave_0: entered promiscuous mode [ 90.070712][ T5867] hsr_slave_1: entered promiscuous mode [ 90.076995][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 90.083439][ T5867] Cannot create hsr debugfs directory [ 90.170800][ T5873] hsr_slave_0: entered promiscuous mode [ 90.177424][ T5873] hsr_slave_1: entered promiscuous mode [ 90.183913][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 90.189828][ T5873] Cannot create hsr debugfs directory [ 90.523346][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.556592][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.582729][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.594300][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.662919][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.683550][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.694633][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.705673][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.820930][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.834715][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.845598][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.871228][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.969605][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.996989][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.012026][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.024515][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.059607][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.150508][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.162960][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.200907][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.208215][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.251513][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.258759][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.282177][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.299562][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.316107][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.323352][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.354529][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.361721][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.391566][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.443318][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.450609][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.492236][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.504532][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.511823][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.601500][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.632886][ T5872] Bluetooth: hci0: command tx timeout [ 91.677293][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.684597][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.699039][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.706583][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.715337][ T5872] Bluetooth: hci2: command tx timeout [ 91.715347][ T5865] Bluetooth: hci1: command tx timeout [ 91.721422][ T5872] Bluetooth: hci3: command tx timeout [ 91.723543][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.943270][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.080074][ T5861] veth0_vlan: entered promiscuous mode [ 92.098880][ T5861] veth1_vlan: entered promiscuous mode [ 92.183615][ T5861] veth0_macvtap: entered promiscuous mode [ 92.231796][ T5861] veth1_macvtap: entered promiscuous mode [ 92.273659][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.334153][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.351997][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.374633][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.395691][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.417158][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.426797][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.447979][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.473658][ T5867] veth0_vlan: entered promiscuous mode [ 92.484206][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.510216][ T5867] veth1_vlan: entered promiscuous mode [ 92.567720][ T5860] veth0_vlan: entered promiscuous mode [ 92.630436][ T5867] veth0_macvtap: entered promiscuous mode [ 92.646486][ T5860] veth1_vlan: entered promiscuous mode [ 92.662148][ T5867] veth1_macvtap: entered promiscuous mode [ 92.683411][ T576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.692663][ T576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.743422][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.766204][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.774042][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.804602][ T5873] veth0_vlan: entered promiscuous mode [ 92.816100][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.843562][ T5860] veth0_macvtap: entered promiscuous mode [ 92.868017][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.882345][ T5860] veth1_macvtap: entered promiscuous mode [ 92.897472][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.905089][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.907758][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.944947][ T5873] veth1_vlan: entered promiscuous mode [ 92.996400][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.090677][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.104334][ T5957] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 93.111059][ T5957] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.124084][ T5957] vhci_hcd vhci_hcd.0: Device attached [ 93.124194][ T5873] veth0_macvtap: entered promiscuous mode [ 93.147577][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.167407][ T5873] veth1_macvtap: entered promiscuous mode [ 93.193975][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.222518][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.233559][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.251957][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.265824][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.276025][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.286318][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.311315][ T89] vhci_hcd: vhci_device speed not set [ 93.314711][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.359879][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.369721][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.379920][ T89] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 93.398751][ T5915] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 93.404282][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.406890][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.418336][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.437899][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.582969][ T5915] usb 2-1: config 0 has no interfaces? [ 93.597082][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.597102][ T5915] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.632177][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.638593][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.686286][ T5915] usb 2-1: config 0 descriptor?? [ 93.691228][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.711743][ T5865] Bluetooth: hci0: command tx timeout [ 93.729630][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.791051][ T5865] Bluetooth: hci3: command tx timeout [ 93.791073][ T5872] Bluetooth: hci2: command tx timeout [ 93.796643][ T5865] Bluetooth: hci1: command tx timeout [ 93.820792][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.837679][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.901264][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.938277][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.980719][ T5930] usb 2-1: USB disconnect, device number 2 [ 94.008951][ T89] vhci_hcd: vhci_device speed not set [ 94.014651][ T5959] vhci_hcd: connection closed [ 94.015758][ T12] vhci_hcd: stop threads [ 94.044676][ T12] vhci_hcd: release socket [ 94.073198][ T12] vhci_hcd: disconnect device [ 94.089198][ T89] usb 35-1: device descriptor read/64, error -71 [ 94.261953][ T5976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9'. [ 94.282983][ T89] vhci_hcd: vhci_device speed not set [ 94.541949][ T5930] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.711972][ T5994] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 94.730470][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.751916][ T5930] usb 4-1: not running at top speed; connect to a high speed hub [ 94.784405][ T5930] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.795985][ T30] audit: type=1326 audit(1759347630.477:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.0.17" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1d258eec9 code=0x0 [ 94.835060][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.869428][ T5930] usb 4-1: string descriptor 0 read error: -22 [ 94.875928][ T5930] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.888704][ T30] audit: type=1326 audit(1759347630.547:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.0.17" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1d258eec9 code=0x0 [ 94.912267][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.939396][ T5930] usb 4-1: 0:2 : does not exist [ 95.008722][ T986] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.169290][ T986] usb 3-1: Using ep0 maxpacket: 16 [ 95.176317][ T986] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 95.184735][ T986] usb 3-1: config 0 has no interface number 0 [ 95.196961][ T986] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=da.32 [ 95.207244][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.215374][ T986] usb 3-1: Product: syz [ 95.220669][ T986] usb 3-1: Manufacturer: syz [ 95.225352][ T986] usb 3-1: SerialNumber: syz [ 95.232990][ T986] usb 3-1: config 0 descriptor?? [ 95.247629][ T986] usb_ehset_test 3-1:0.255: probe with driver usb_ehset_test failed with error -32 [ 95.298501][ T815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.344382][ T5930] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 95.356238][ T5930] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 95.367637][ T5930] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 95.417606][ T5930] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 95.431201][ T5930] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 95.448185][ T5930] usb 4-1: USB disconnect, device number 2 [ 95.462487][ T815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.474814][ T815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.496524][ T5996] sctp: [Deprecated]: syz.2.16 (pid 5996) Use of int in max_burst socket option deprecated. [ 95.496524][ T5996] Use struct sctp_assoc_value instead [ 95.501190][ T815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.521516][ T5996] sctp: [Deprecated]: syz.2.16 (pid 5996) Use of int in maxseg socket option. [ 95.521516][ T5996] Use struct sctp_assoc_value instead [ 95.550005][ T815] usb 2-1: config 0 descriptor?? [ 95.559006][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.573636][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.609485][ T5996] Zero length message leads to an empty skb [ 95.869136][ T5865] Bluetooth: hci2: command tx timeout [ 95.869195][ T5872] Bluetooth: hci3: command tx timeout [ 95.874731][ T5865] Bluetooth: hci1: command tx timeout [ 95.981257][ T815] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 95.999074][ T815] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 96.063144][ T6024] process 'syz.0.26' launched './file0' with NULL argv: empty string added [ 96.167662][ T815] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 96.289901][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 96.383437][ T5973] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.409549][ T815] usb 2-1: USB disconnect, device number 3 [ 96.548592][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 96.557630][ T5973] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 96.567863][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.576017][ T5973] usb 1-1: Product: syz [ 96.580297][ T5973] usb 1-1: Manufacturer: syz [ 96.584946][ T5973] usb 1-1: SerialNumber: syz [ 96.595880][ T5973] usb 1-1: config 0 descriptor?? [ 96.606899][ T5973] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 96.648696][ T5950] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.800637][ T5950] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.809423][ T5950] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 96.820164][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.820765][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.832695][ T5950] usb 4-1: config 0 has no interface number 0 [ 96.843460][ T5950] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 96.845719][ T5973] gspca_sn9c2028: read1 error -71 [ 96.857045][ T5950] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 96.867376][ T5973] gspca_sn9c2028: read1 error -71 [ 96.877285][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.880766][ T5973] gspca_sn9c2028: read1 error -71 [ 96.889017][ T5950] usb 4-1: config 0 descriptor?? [ 96.897378][ T5973] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 96.935265][ T5973] usb 1-1: USB disconnect, device number 2 [ 96.986373][ T6034] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.024587][ T6034] netlink: 14 bytes leftover after parsing attributes in process `syz.1.30'. [ 97.311157][ T9] cfg80211: failed to load regulatory.db [ 97.673193][ T5915] usb 3-1: USB disconnect, device number 2 [ 97.881758][ T5973] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.943794][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 98.048912][ T5973] usb 1-1: Using ep0 maxpacket: 8 [ 98.059773][ T5973] usb 1-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 98.075634][ T5973] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 98.090727][ T5973] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 98.102803][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.112212][ T5973] usb 1-1: Product: syz [ 98.116599][ T5973] usb 1-1: Manufacturer: syz [ 98.122418][ T5973] usb 1-1: SerialNumber: syz [ 98.236148][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.249619][ T6063] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 98.309781][ T5950] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.347094][ T5973] usb 1-1: USB disconnect, device number 3 [ 98.350183][ T5872] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 98.350262][ T5872] Bluetooth: hci0: Injecting HCI hardware error event [ 98.351321][ T5872] Bluetooth: hci0: hardware error 0x00 [ 98.467279][ T6067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.43'. [ 98.479826][ T5868] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 98.493228][ T5950] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 98.501869][ T5950] usb 2-1: config 0 has no interface number 0 [ 98.508028][ T5950] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.522410][ T5950] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.533943][ T5950] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.543765][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.569539][ T5950] usb 2-1: config 0 descriptor?? [ 98.585045][ T6069] FAULT_INJECTION: forcing a failure. [ 98.585045][ T6069] name failslab, interval 1, probability 0, space 0, times 1 [ 98.600824][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.2.44 Not tainted syzkaller #0 PREEMPT(full) [ 98.600853][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.600875][ T6069] Call Trace: [ 98.600883][ T6069] [ 98.600892][ T6069] dump_stack_lvl+0x189/0x250 [ 98.600941][ T6069] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.600969][ T6069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.601019][ T6069] should_fail_ex+0x414/0x560 [ 98.601060][ T6069] should_failslab+0xa8/0x100 [ 98.601086][ T6069] __kmalloc_noprof+0xcb/0x7f0 [ 98.601116][ T6069] ? __phys_addr+0xd3/0x180 [ 98.601147][ T6069] ? __keyctl_dh_compute+0x648/0xca0 [ 98.601175][ T6069] ? sg_init_one+0xf5/0x1c0 [ 98.601198][ T6069] __keyctl_dh_compute+0x648/0xca0 [ 98.601235][ T6069] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 98.601262][ T6069] ? __lock_acquire+0xab9/0xd20 [ 98.601296][ T6069] ? __might_fault+0xb0/0x130 [ 98.601352][ T6069] keyctl_dh_compute+0x109/0x160 [ 98.601383][ T6069] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 98.601436][ T6069] __se_sys_keyctl+0x423/0x910 [ 98.601461][ T6069] ? __pfx___se_sys_keyctl+0x10/0x10 [ 98.601486][ T6069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.601517][ T6069] ? __fget_files+0x3a0/0x420 [ 98.601550][ T6069] ? fput+0xa0/0xd0 [ 98.601580][ T6069] ? ksys_write+0x22a/0x250 [ 98.601605][ T6069] ? __pfx_ksys_write+0x10/0x10 [ 98.601631][ T6069] ? do_syscall_64+0xbe/0xfa0 [ 98.601655][ T6069] ? __x64_sys_keyctl+0x20/0xc0 [ 98.601677][ T6069] do_syscall_64+0xfa/0xfa0 [ 98.601701][ T6069] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.601724][ T6069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.601746][ T6069] ? clear_bhb_loop+0x60/0xb0 [ 98.601771][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.601792][ T6069] RIP: 0033:0x7ff67c38eec9 [ 98.601818][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.601836][ T6069] RSP: 002b:00007ff67d16c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 98.601859][ T6069] RAX: ffffffffffffffda RBX: 00007ff67c5e5fa0 RCX: 00007ff67c38eec9 [ 98.601875][ T6069] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000017 [ 98.601888][ T6069] RBP: 00007ff67d16c090 R08: 00002000000000c0 R09: 0000000000000000 [ 98.601902][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.601915][ T6069] R13: 00007ff67c5e6038 R14: 00007ff67c5e5fa0 R15: 00007fff03181a98 [ 98.601949][ T6069] [ 99.069042][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.078006][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.094648][ T5950] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 99.220359][ T6071] netlink: 'syz.0.45': attribute type 2 has an invalid length. [ 99.227986][ T6071] netlink: 'syz.0.45': attribute type 8 has an invalid length. [ 99.236087][ T6071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.45'. [ 99.310217][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.330700][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.372453][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 99.414263][ T5973] usb 2-1: USB disconnect, device number 4 [ 99.487211][ T24] usb 4-1: USB disconnect, device number 3 [ 99.550534][ T6085] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.48'. [ 99.739111][ T6093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.52'. [ 100.094113][ T6109] netlink: 'syz.1.59': attribute type 4 has an invalid length. [ 100.305400][ T6116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.62'. [ 100.428703][ T5872] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 100.568820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.239331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.249037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.258078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.482565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.790170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.849472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.912318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.925272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.934078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.214260][ T30] audit: type=1326 audit(1759347638.907:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.336936][ T30] audit: type=1326 audit(1759347638.907:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.358829][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.444979][ T30] audit: type=1326 audit(1759347638.907:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.490714][ T30] audit: type=1326 audit(1759347638.907:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.514210][ T30] audit: type=1326 audit(1759347638.907:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.537411][ T30] audit: type=1326 audit(1759347638.907:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.599913][ T30] audit: type=1326 audit(1759347638.907:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.646220][ T30] audit: type=1326 audit(1759347638.907:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.673370][ T30] audit: type=1326 audit(1759347638.907:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.740417][ T30] audit: type=1326 audit(1759347638.907:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff67c32af79 code=0x7ffc0000 [ 103.789207][ T5872] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 103.799134][ T5872] Bluetooth: hci1: Injecting HCI hardware error event [ 103.806920][ T5872] Bluetooth: hci1: hardware error 0x00 [ 103.908467][ T5915] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 104.150478][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.166160][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 104.298427][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.331323][ T5915] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 104.351155][ T5868] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 104.352499][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.360859][ T5868] Bluetooth: hci2: Injecting HCI hardware error event [ 104.370653][ T5915] usb 2-1: Product: syz [ 104.376147][ T5868] Bluetooth: hci2: hardware error 0x00 [ 104.391680][ T5915] usb 2-1: Manufacturer: syz [ 104.397236][ T5915] usb 2-1: SerialNumber: syz [ 104.432001][ T5915] usb 2-1: config 0 descriptor?? [ 104.473559][ T5915] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 104.657513][ T5915] usb 2-1: USB disconnect, device number 5 [ 106.151790][ T5872] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 106.428578][ T5868] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 107.080386][ T6226] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 107.104720][ T6226] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.582439][ T6245] bridge0: port 3(gretap0) entered blocking state [ 110.602102][ T6245] bridge0: port 3(gretap0) entered disabled state [ 110.616880][ T6245] gretap0: entered allmulticast mode [ 110.679739][ T6245] gretap0: entered promiscuous mode [ 110.698181][ T6245] bridge0: port 3(gretap0) entered blocking state [ 110.705160][ T6245] bridge0: port 3(gretap0) entered forwarding state [ 110.921811][ T6253] loop9: detected capacity change from 0 to 7 [ 110.940874][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.020863][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.042988][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.073363][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.103839][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.148640][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.203529][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.212899][ T6253] ldm_validate_partition_table(): Disk read failed. [ 111.237711][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.277900][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.326089][ T6253] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.364936][ T6253] Dev loop9: unable to read RDB block 0 [ 111.394551][ T6253] loop9: unable to read partition table [ 111.427618][ T6253] loop9: partition table beyond EOD, truncated [ 111.460796][ T6253] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 111.460796][ T6253] ) failed (rc=-5) [ 113.438860][ T6338] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.353370][ T5950] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.561981][ T5950] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 114.572344][ T5950] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.584810][ T5950] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.598565][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.618700][ T5950] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.639340][ T5950] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.653343][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.664366][ T5950] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.673989][ T5950] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.692753][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.702264][ T5950] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.721245][ T5950] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.746337][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.758547][ T5950] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.767676][ T5950] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.780743][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.788971][ T5950] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.798249][ T5950] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.810065][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.822892][ T5950] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.832900][ T5950] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.863650][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.873815][ T5950] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.888523][ T5950] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.901352][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.978767][ T5950] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 114.988189][ T5950] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 114.996993][ T5950] usb 2-1: Product: syz [ 115.001716][ T5950] usb 2-1: Manufacturer: syz [ 115.018427][ T5950] usb 2-1: SerialNumber: syz [ 115.039534][ T5950] usb 2-1: config 0 descriptor?? [ 115.079499][ T5950] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 115.615159][ T9] usb 2-1: USB disconnect, device number 6 [ 115.633074][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 116.031250][ T5973] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.194384][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.226378][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.247158][ T5973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.261742][ T5973] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 116.271332][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.291941][ T5973] usb 1-1: config 0 descriptor?? [ 116.610442][ T44] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 116.740369][ T5973] elecom 0003:056E:00E6.0003: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 116.959768][ T5973] usb 1-1: USB disconnect, device number 4 [ 116.972461][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.987341][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.011944][ T44] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 117.026713][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.048674][ T44] usb 2-1: Product: syz [ 117.054356][ T44] usb 2-1: Manufacturer: syz [ 117.063936][ T44] usb 2-1: SerialNumber: syz [ 117.079513][ T44] usb 2-1: config 0 descriptor?? [ 117.297603][ T5950] usb 2-1: USB disconnect, device number 7 [ 117.888462][ T5973] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 120.796691][ T5973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.806288][ T5973] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 120.828511][ T5973] usb 1-1: can't read configurations, error -71 [ 120.865629][ T6428] netlink: 304 bytes leftover after parsing attributes in process `syz.2.136'. [ 120.879439][ T6428] netlink: 304 bytes leftover after parsing attributes in process `syz.2.136'. [ 121.412613][ T6443] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 122.775829][ T6455] fuse: Unknown parameter '' [ 122.792630][ T6455] binder: 6451:6455 ioctl c0306201 0 returned -14 [ 124.050023][ T5950] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.208442][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 124.226273][ T5950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.272936][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.342772][ T5950] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.395555][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.414918][ T5950] usb 1-1: Product: syz [ 124.420939][ T5950] usb 1-1: Manufacturer: syz [ 124.426182][ T5950] usb 1-1: SerialNumber: syz [ 124.693870][ T5950] usb 1-1: config 0 descriptor?? [ 125.432075][ T5973] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.810713][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 125.921353][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.938595][ T5973] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 125.961039][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.977339][ T5973] usb 3-1: config 0 descriptor?? [ 126.400740][ T5973] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 126.523894][ T6512] netlink: 56 bytes leftover after parsing attributes in process `syz.1.166'. [ 127.096843][ T89] usb 1-1: USB disconnect, device number 7 [ 127.209545][ T5973] usb 3-1: USB disconnect, device number 3 [ 129.158513][ T89] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.737270][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 129.884378][ T89] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 129.893764][ T89] usb 4-1: config 0 has no interface number 0 [ 130.014502][ T89] usb 4-1: config 0 interface 184 has no altsetting 0 [ 130.088169][ T89] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.098177][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.106967][ T89] usb 4-1: Product: syz [ 130.114600][ T89] usb 4-1: Manufacturer: syz [ 130.128276][ T89] usb 4-1: SerialNumber: syz [ 130.228427][ T89] usb 4-1: config 0 descriptor?? [ 130.246788][ T89] smsc75xx v1.0.0 [ 130.739129][ T5868] Bluetooth: hci3: hcon ffff888065be4000 sent 1 < count 58349 [ 130.797096][ T5868] Bluetooth: hci3: hcon ffff8880795e0000 sent 1 < count 7 [ 130.842249][ T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 130.854725][ T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.708897][ T5868] Bluetooth: hci3: command tx timeout [ 131.791781][ T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 131.802964][ T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 131.813071][ T89] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 131.834389][ T89] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 131.863981][ T89] usb 4-1: USB disconnect, device number 4 [ 136.728457][ T815] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 136.881418][ T89] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.894484][ T815] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.908282][ T815] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 136.922872][ T815] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.933610][ T815] usb 2-1: config 220 has no interface number 2 [ 136.940399][ T815] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.953687][ T815] usb 2-1: config 220 interface 0 has no altsetting 0 [ 136.972196][ T815] usb 2-1: config 220 interface 76 has no altsetting 0 [ 136.994880][ T815] usb 2-1: config 220 interface 1 has no altsetting 0 [ 137.021375][ T815] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 137.030591][ T815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.038718][ T815] usb 2-1: Product: syz [ 137.042923][ T815] usb 2-1: Manufacturer: syz [ 137.058501][ T89] usb 3-1: Using ep0 maxpacket: 8 [ 137.122724][ T89] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.209717][ T89] usb 3-1: config 4 interface 0 has no altsetting 0 [ 137.329480][ T89] usb 3-1: string descriptor 0 read error: -22 [ 137.386866][ T89] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 137.490537][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.656312][ T89] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 137.707524][ T815] usb 2-1: SerialNumber: syz [ 137.727717][ T89] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.741011][ T89] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 137.751426][ T89] usb 3-1: media controller created [ 137.778875][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.049791][ T815] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 138.057233][ T815] uvcvideo 2-1:220.0: No valid video chain found. [ 138.064918][ T815] usb 2-1: selecting invalid altsetting 0 [ 138.094980][ T815] usb 2-1: selecting invalid altsetting 0 [ 138.103056][ T815] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 138.116186][ T815] usb 2-1: USB disconnect, device number 8 [ 138.277721][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.294404][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.879776][ T89] zl10353_read_register: readreg error (reg=127, ret==0) [ 139.006908][ T89] usb 3-1: USB disconnect, device number 4 [ 139.464371][ T6693] evm: overlay not supported [ 142.938513][ T89] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.102872][ T89] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.123631][ T89] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.133639][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.142273][ T89] usb 4-1: Product: syz [ 143.146946][ T89] usb 4-1: Manufacturer: syz [ 143.154076][ T89] usb 4-1: SerialNumber: syz [ 143.428586][ T815] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.578432][ T815] usb 2-1: Using ep0 maxpacket: 8 [ 143.590701][ T815] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.598917][ T815] usb 2-1: config 0 has no interface number 0 [ 143.605550][ T815] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.618545][ T815] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.630036][ T815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.656605][ T815] usb 2-1: config 0 descriptor?? [ 143.678127][ T815] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 143.900819][ T815] usb 2-1: USB disconnect, device number 9 [ 144.857858][ T89] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 144.866888][ T89] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 144.880839][ T89] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 144.887056][ T89] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 144.917213][ T89] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 144.965530][ T89] usb 4-1: USB disconnect, device number 5 [ 144.983515][ T89] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 146.472810][ T6821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.191469][ T6327] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 151.325428][ T6896] KVM: debugfs: duplicate directory 6896-5 [ 151.368884][ T89] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.548567][ T89] usb 2-1: Using ep0 maxpacket: 32 [ 151.620446][ T89] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 151.699385][ T89] usb 2-1: config 0 has no interface number 0 [ 151.839640][ T89] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.958815][ T89] usb 2-1: config 0 interface 85 has no altsetting 0 [ 152.068576][ T89] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 152.115162][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.138471][ T89] usb 2-1: Product: syz [ 152.144645][ T89] usb 2-1: Manufacturer: syz [ 152.149478][ T89] usb 2-1: SerialNumber: syz [ 152.157305][ T89] usb 2-1: config 0 descriptor?? [ 152.168308][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 152.181544][ T30] audit: type=1326 audit(1759347687.857:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d258eec9 code=0x7ffc0000 [ 152.239421][ T30] audit: type=1326 audit(1759347687.857:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d258eec9 code=0x7ffc0000 [ 152.297105][ T30] audit: type=1326 audit(1759347687.867:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fa1d258eec9 code=0x7ffc0000 [ 152.332250][ T30] audit: type=1326 audit(1759347687.867:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d258eec9 code=0x7ffc0000 [ 152.358120][ T30] audit: type=1326 audit(1759347687.867:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d258eec9 code=0x7ffc0000 [ 152.611880][ T89] appletouch 2-1:0.85: Geyser mode initialized. [ 152.629054][ T89] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input6 [ 152.856407][ T89] usb 2-1: USB disconnect, device number 10 [ 152.932320][ T89] appletouch 2-1:0.85: input: appletouch disconnected [ 153.524939][ T30] audit: type=1326 audit(1759347689.207:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9b38eec9 code=0x7ffc0000 [ 154.524525][ T30] audit: type=1326 audit(1759347689.207:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9b38eec9 code=0x7ffc0000 [ 154.559959][ T30] audit: type=1326 audit(1759347689.207:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbe9b38eec9 code=0x7ffc0000 [ 154.706681][ T30] audit: type=1326 audit(1759347689.207:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9b38eec9 code=0x7ffc0000 [ 154.729685][ T30] audit: type=1326 audit(1759347689.207:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9b38eec9 code=0x7ffc0000 [ 155.788492][ T6958] hub 1-0:1.0: USB hub found [ 155.795257][ T6958] hub 1-0:1.0: 1 port detected [ 156.144793][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.313'. [ 156.331064][ T6967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.161779][ T6987] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.183959][ T6988] bridge0: entered allmulticast mode [ 157.197467][ T6987] block device autoloading is deprecated and will be removed. [ 157.202670][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 157.234871][ T6983] bridge_slave_1: left allmulticast mode [ 157.241217][ T6983] bridge_slave_1: left promiscuous mode [ 157.249287][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.307651][ T6983] bridge_slave_0: left allmulticast mode [ 157.336213][ T6983] bridge_slave_0: left promiscuous mode [ 157.361924][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.431057][ T6983] bridge0 (unregistering): left allmulticast mode [ 159.258502][ T5950] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.286947][ T7032] trusted_key: encrypted_key: insufficient parameters specified [ 159.300449][ T7032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.311939][ T7032] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 160.280758][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 160.309238][ T5950] usb 2-1: config 251 has an invalid interface number: 229 but max is 0 [ 160.317658][ T5950] usb 2-1: config 251 has no interface number 0 [ 160.339576][ T5950] usb 2-1: config 251 interface 229 altsetting 218 bulk endpoint 0xF has invalid maxpacket 8 [ 160.358415][ T5950] usb 2-1: config 251 interface 229 altsetting 218 bulk endpoint 0x1 has invalid maxpacket 32 [ 160.374002][ T5950] usb 2-1: config 251 interface 229 has no altsetting 0 [ 160.390461][ T5950] usb 2-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=72.c3 [ 160.400169][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.415473][ T5950] usb 2-1: Product: syz [ 160.436162][ T5950] usb 2-1: Manufacturer: syz [ 160.442292][ T5950] usb 2-1: SerialNumber: syz [ 160.462645][ T7027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.484675][ T7027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.727422][ T5950] kvaser_usb 2-1:251.229: error -ENODEV: Cannot get usb endpoint(s) [ 160.785095][ T5950] usb 2-1: USB disconnect, device number 11 [ 160.888973][ T5915] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.999188][ T5973] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.051381][ T5915] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 161.062123][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.076923][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 161.087523][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 161.097662][ T5915] usb 3-1: Product: syz [ 161.102955][ T5915] usb 3-1: Manufacturer: syz [ 161.107932][ T5915] usb 3-1: SerialNumber: syz [ 161.127483][ T5915] usb 3-1: config 0 descriptor?? [ 161.152577][ T5915] usb 3-1: selecting invalid altsetting 0 [ 161.161584][ T5973] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.174995][ T5973] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.186130][ T5973] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.195550][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.208003][ T7055] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.403356][ T5973] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.407391][ T5915] usb 3-1: USB disconnect, device number 5 [ 161.570405][ T5973] usb 4-1: USB disconnect, device number 6 [ 161.686206][ T7064] udevd[7064]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.935022][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 161.935041][ T30] audit: type=1326 audit(1759347697.627:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c38eec9 code=0x7ffc0000 [ 161.968242][ T30] audit: type=1326 audit(1759347697.627:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c38eec9 code=0x7ffc0000 [ 161.990959][ T30] audit: type=1326 audit(1759347697.627:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff67c38eec9 code=0x7ffc0000 [ 162.023960][ T30] audit: type=1326 audit(1759347697.627:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c38eec9 code=0x7ffc0000 [ 162.088444][ T30] audit: type=1326 audit(1759347697.637:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c38eec9 code=0x7ffc0000 [ 162.115198][ T30] audit: type=1326 audit(1759347697.637:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7ff67c38eec9 code=0x7ffc0000 [ 162.125741][ T7072] netlink: 'syz.3.352': attribute type 2 has an invalid length. [ 162.138325][ T30] audit: type=1326 audit(1759347697.637:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c38eec9 code=0x7ffc0000 [ 162.167635][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.176783][ T30] audit: type=1326 audit(1759347697.637:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c38eec9 code=0x7ffc0000 [ 162.199144][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.338493][ T5973] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.501254][ T5973] usb 3-1: Using ep0 maxpacket: 32 [ 162.511869][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.523210][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.544869][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.558150][ T5973] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 162.567853][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.587847][ T5973] usb 3-1: config 0 descriptor?? [ 163.020126][ T5973] steelseries 0003:1038:1410.0005: ignoring exceeding usage max [ 163.033076][ T5973] steelseries 0003:1038:1410.0005: missing HID_OUTPUT_REPORT 0 [ 163.233597][ T5915] usb 3-1: USB disconnect, device number 6 [ 164.378453][ T5950] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.530394][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.550148][ T5950] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 164.562678][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.582753][ T5950] usb 3-1: config 0 descriptor?? [ 164.602246][ T5950] pwc: Askey VC010 type 2 USB webcam detected. [ 165.004152][ T5950] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.013219][ T5950] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.023084][ T5950] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.039482][ T5950] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.047163][ T5950] pwc: recv_control_msg error -32 req 04 val 1300 [ 165.078290][ T5950] pwc: recv_control_msg error -32 req 04 val 1400 [ 165.105514][ T5950] pwc: recv_control_msg error -32 req 02 val 2000 [ 165.134954][ T5915] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.144439][ T5950] pwc: recv_control_msg error -32 req 02 val 2100 [ 165.157363][ T5950] pwc: recv_control_msg error -32 req 04 val 1500 [ 165.298443][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 165.315986][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.330514][ T5915] usb 1-1: config 4 interface 0 has no altsetting 0 [ 165.354520][ T5915] usb 1-1: string descriptor 0 read error: -22 [ 165.385629][ T5950] pwc: recv_control_msg error -71 req 02 val 2400 [ 165.399604][ T5915] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 165.422573][ T5950] pwc: recv_control_msg error -71 req 02 val 2600 [ 165.451542][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.460594][ T5950] pwc: recv_control_msg error -71 req 02 val 2900 [ 165.480332][ T5950] pwc: recv_control_msg error -71 req 02 val 2800 [ 165.504187][ T5950] pwc: recv_control_msg error -71 req 04 val 1100 [ 165.513571][ T5915] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 165.541945][ T5950] pwc: recv_control_msg error -71 req 04 val 1200 [ 165.571866][ T5915] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.592925][ T5950] pwc: Registered as video103. [ 165.621889][ T5915] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 165.636177][ T5950] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 165.667369][ T5915] usb 1-1: media controller created [ 165.668547][ T815] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.729860][ T5950] usb 3-1: USB disconnect, device number 7 [ 165.809116][ T7113] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 165.832248][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.886230][ T815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.902608][ T815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.990506][ T815] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 166.017378][ T815] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 166.020607][ T5915] zl10353_read_register: readreg error (reg=127, ret==0) [ 166.048836][ T815] usb 4-1: Manufacturer: syz [ 166.090056][ T815] usb 4-1: config 0 descriptor?? [ 166.117624][ T7126] warning: `syz.2.373' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 166.223765][ T5915] usb 1-1: USB disconnect, device number 8 [ 167.539102][ T815] uclogic 0003:256C:006D.0006: v1 frame probing failed: -71 [ 167.551262][ T815] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 167.567031][ T815] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 167.581323][ T815] usb 4-1: USB disconnect, device number 7 [ 168.713464][ T815] IPVS: starting estimator thread 0... [ 169.118900][ T7160] IPVS: using max 30 ests per chain, 72000 per kthread [ 169.135395][ T7165] input: syz1 as /devices/virtual/input/input8 [ 170.128716][ T5915] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.299624][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 170.313761][ T5915] usb 4-1: config 7 has an invalid interface number: 246 but max is 1 [ 170.336446][ T5915] usb 4-1: config 7 has an invalid interface number: 3 but max is 1 [ 170.355461][ T5915] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 170.376291][ T5915] usb 4-1: config 7 has no interface number 0 [ 170.389363][ T5915] usb 4-1: config 7 has no interface number 1 [ 170.402324][ T5915] usb 4-1: config 7 interface 246 altsetting 128 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 170.429334][ T5915] usb 4-1: config 7 interface 246 altsetting 128 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 170.459840][ T5915] usb 4-1: config 7 interface 246 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 170.479400][ T5915] usb 4-1: config 7 interface 246 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 7 [ 170.505307][ T5915] usb 4-1: config 7 interface 246 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 170.537680][ T5915] usb 4-1: config 7 interface 3 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 170.568445][ T5915] usb 4-1: config 7 interface 3 altsetting 8 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 170.589407][ T5915] usb 4-1: config 7 interface 246 has no altsetting 0 [ 170.606472][ T5915] usb 4-1: config 7 interface 3 has no altsetting 0 [ 170.620433][ T5915] usb 4-1: string descriptor 0 read error: -22 [ 170.628903][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice= 8.30 [ 170.648283][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.699311][ T5915] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 170.709661][ T5915] usb 4-1: selecting invalid altsetting 0 [ 170.717218][ T2347] pvrusb2: Invalid write control endpoint [ 170.735672][ T5915] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 170.746220][ T5915] usb 4-1: selecting invalid altsetting 0 [ 170.755851][ T2347] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 170.773648][ T2347] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 170.798739][ T89] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.959670][ T89] usb 3-1: Using ep0 maxpacket: 16 [ 170.973363][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.994813][ T89] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 171.009892][ T815] usb 4-1: USB disconnect, device number 8 [ 171.017409][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.039669][ T89] usb 3-1: config 0 descriptor?? [ 171.260182][ T89] usbhid 3-1:0.0: can't add hid device: -71 [ 171.266276][ T89] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.311271][ T89] usb 3-1: USB disconnect, device number 8 [ 172.241905][ T7223] fuse: Bad value for 'fd' [ 172.468822][ T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 172.738970][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 172.790331][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.803069][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.822980][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.835405][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.859724][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.933529][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.168708][ T5915] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.171366][ T44] usb 2-1: GET_CAPABILITIES returned 0 [ 173.183390][ T44] usbtmc 2-1:16.0: can't read capabilities [ 173.660792][ T5915] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.679219][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.683699][ T44] usb 2-1: USB disconnect, device number 12 [ 173.687514][ T5915] usb 3-1: Product: syz [ 173.699606][ T5915] usb 3-1: Manufacturer: syz [ 173.704385][ T5915] usb 3-1: SerialNumber: syz [ 173.735915][ T5915] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.765796][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.570251][ T89] usb 3-1: USB disconnect, device number 9 [ 174.982959][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 174.995713][ T10] ath9k_htc: Failed to initialize the device [ 175.016320][ T89] usb 3-1: ath9k_htc: USB layer deinitialized [ 175.026380][ T7250] fuse: Bad value for 'fd' [ 177.450882][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 177.544076][ T7270] syz.2.425(7270): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 177.626492][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.695891][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 177.779241][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.822539][ T10] usb 1-1: config 0 descriptor?? [ 177.843144][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 177.878502][ T5964] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 178.060883][ T5964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.081440][ T5964] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.108010][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.131242][ T5964] usb 2-1: config 0 descriptor?? [ 178.161435][ T5964] pwc: Askey VC010 type 2 USB webcam detected. [ 178.250898][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 178.268771][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 178.286653][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 178.296181][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 178.326492][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 178.347057][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 178.359333][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 178.373732][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 178.401734][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 178.430883][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 178.448647][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 178.472051][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 178.486278][ T7285] fuse: Bad value for 'fd' [ 178.486347][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 178.528839][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 178.539413][ T10] pwc: recv_control_msg error -32 req 04 val 1100 [ 178.557208][ T5964] pwc: recv_control_msg error -32 req 02 val 2b00 [ 178.578635][ T10] pwc: Registered as video103. [ 178.618276][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 178.771525][ T5964] pwc: recv_control_msg error -71 req 02 val 2c00 [ 178.778515][ T89] usb 1-1: USB disconnect, device number 9 [ 178.790259][ T5964] pwc: recv_control_msg error -71 req 04 val 1000 [ 178.819842][ T5964] pwc: recv_control_msg error -71 req 04 val 1300 [ 178.861708][ T5964] pwc: recv_control_msg error -71 req 04 val 1400 [ 178.877593][ T5964] pwc: recv_control_msg error -71 req 02 val 2000 [ 178.898110][ T5964] pwc: recv_control_msg error -71 req 02 val 2100 [ 178.947505][ T5964] pwc: recv_control_msg error -71 req 04 val 1500 [ 178.966394][ T5964] pwc: recv_control_msg error -71 req 02 val 2500 [ 178.975217][ T5964] pwc: recv_control_msg error -71 req 02 val 2400 [ 178.985314][ T5964] pwc: recv_control_msg error -71 req 02 val 2600 [ 179.001060][ T5964] pwc: recv_control_msg error -71 req 02 val 2900 [ 179.008091][ T5964] pwc: recv_control_msg error -71 req 02 val 2800 [ 179.016843][ T5964] pwc: recv_control_msg error -71 req 04 val 1100 [ 179.025391][ T5964] pwc: recv_control_msg error -71 req 04 val 1200 [ 179.047881][ T5964] pwc: Registered as video103. [ 179.069504][ T5964] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 179.121373][ T5964] usb 2-1: USB disconnect, device number 13 [ 179.695324][ T7302] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 180.400769][ T5964] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 180.632436][ T5964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.688082][ T5964] usb 2-1: not running at top speed; connect to a high speed hub [ 180.843703][ T5964] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.016484][ T5964] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.122495][ T5964] usb 2-1: string descriptor 0 read error: -22 [ 181.159915][ T5964] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.190534][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.287485][ T5964] usb 2-1: 0:2 : does not exist [ 182.355562][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 182.365529][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 184.681595][ T5964] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 184.713009][ T5964] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 184.774653][ T5964] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 184.811903][ T5964] usb 2-1: USB disconnect, device number 14 [ 186.338500][ T5950] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 186.488432][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 186.509855][ T5950] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 186.529017][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.550947][ T5950] usb 1-1: Product: syz [ 186.560484][ T5950] usb 1-1: Manufacturer: syz [ 186.570449][ T5950] usb 1-1: SerialNumber: syz [ 186.594672][ T5950] r8152-cfgselector 1-1: Unknown version 0x0000 [ 186.601140][ T5950] r8152-cfgselector 1-1: config 0 descriptor?? [ 187.026241][ T5950] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 187.079631][ T7347] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 188.143688][ T7379] Invalid option length (65058) for dns_resolver key [ 188.422354][ T89] libceph: connect (1)[c::]:6789 error -101 [ 188.430452][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 188.438056][ T89] libceph: connect (1)[c::]:6789 error -101 [ 188.445280][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 188.461542][ T7393] ceph: No mds server is up or the cluster is laggy [ 189.188574][ T5964] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 189.382560][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 189.395751][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 189.421268][ T5964] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 189.431746][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.444471][ T5964] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 189.470317][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.488406][ T5964] usb 3-1: Product: syz [ 189.494933][ T5964] usb 3-1: Manufacturer: syz [ 189.513544][ T5964] usb 3-1: SerialNumber: syz [ 189.534516][ T5964] usb 3-1: config 0 descriptor?? [ 189.549580][ T7408] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 189.562782][ T5964] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 189.784694][ T7408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.837289][ T30] audit: type=1326 audit(1759347725.527:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.1.476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fbe9b38eec9 code=0x0 [ 189.866986][ T5964] usb 3-1: USB disconnect, device number 10 [ 190.025083][ T7440] FAULT_INJECTION: forcing a failure. [ 190.025083][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 190.038867][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.1.478 Not tainted syzkaller #0 PREEMPT(full) [ 190.038898][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.038912][ T7440] Call Trace: [ 190.038921][ T7440] [ 190.038930][ T7440] dump_stack_lvl+0x189/0x250 [ 190.038983][ T7440] ? __pfx____ratelimit+0x10/0x10 [ 190.039009][ T7440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.039043][ T7440] ? __pfx__printk+0x10/0x10 [ 190.039079][ T7440] ? __pfx___might_resched+0x10/0x10 [ 190.039106][ T7440] ? fs_reclaim_acquire+0x7d/0x100 [ 190.039132][ T7440] should_fail_ex+0x414/0x560 [ 190.039172][ T7440] should_failslab+0xa8/0x100 [ 190.039197][ T7440] __kmalloc_cache_noprof+0x6f/0x6f0 [ 190.039240][ T7440] ? mpi_alloc+0x52/0x140 [ 190.039269][ T7440] mpi_alloc+0x52/0x140 [ 190.039293][ T7440] dh_compute_value+0x95/0x380 [ 190.039335][ T7440] ? __pfx_dh_compute_value+0x10/0x10 [ 190.039366][ T7440] ? trace_kmalloc+0x1f/0xd0 [ 190.039401][ T7440] ? __kmalloc_noprof+0x432/0x7f0 [ 190.039431][ T7440] ? __phys_addr+0xd3/0x180 [ 190.039471][ T7440] __keyctl_dh_compute+0x7f1/0xca0 [ 190.039510][ T7440] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 190.039539][ T7440] ? __lock_acquire+0xab9/0xd20 [ 190.039576][ T7440] ? __might_fault+0xb0/0x130 [ 190.039633][ T7440] keyctl_dh_compute+0x109/0x160 [ 190.039665][ T7440] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 190.039713][ T7440] __se_sys_keyctl+0x423/0x910 [ 190.039738][ T7440] ? __pfx___se_sys_keyctl+0x10/0x10 [ 190.039763][ T7440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.039796][ T7440] ? __fget_files+0x3a0/0x420 [ 190.039831][ T7440] ? fput+0xa0/0xd0 [ 190.039862][ T7440] ? ksys_write+0x22a/0x250 [ 190.039887][ T7440] ? __pfx_ksys_write+0x10/0x10 [ 190.039914][ T7440] ? do_syscall_64+0xbe/0xfa0 [ 190.039939][ T7440] ? __x64_sys_keyctl+0x20/0xc0 [ 190.039962][ T7440] do_syscall_64+0xfa/0xfa0 [ 190.039987][ T7440] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.040012][ T7440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.040034][ T7440] ? clear_bhb_loop+0x60/0xb0 [ 190.040060][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.040081][ T7440] RIP: 0033:0x7fbe9b38eec9 [ 190.040107][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.040124][ T7440] RSP: 002b:00007fbe9c2eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 190.040155][ T7440] RAX: ffffffffffffffda RBX: 00007fbe9b5e5fa0 RCX: 00007fbe9b38eec9 [ 190.040172][ T7440] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000017 [ 190.040186][ T7440] RBP: 00007fbe9c2eb090 R08: 00002000000000c0 R09: 0000000000000000 [ 190.040201][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.040213][ T7440] R13: 00007fbe9b5e6038 R14: 00007fbe9b5e5fa0 R15: 00007ffcafabbb38 [ 190.040249][ T7440] [ 190.843247][ T7447] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.481'. [ 190.941404][ T5950] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.100526][ T5950] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 191.113588][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.129537][ T5950] usb 3-1: config 0 descriptor?? [ 191.318606][ T89] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 191.339229][ T5950] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 191.339480][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.365994][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.471447][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.482562][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.492493][ T89] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 191.501700][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.512546][ T89] usb 2-1: config 0 descriptor?? [ 191.539880][ T5950] [drm:udl_init] *ERROR* Selecting channel failed [ 191.565605][ T5950] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 191.573323][ T5950] [drm] Initialized udl on minor 2 [ 191.582624][ T5950] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 191.595633][ T5950] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 191.609802][ T5950] usb 3-1: USB disconnect, device number 11 [ 191.615951][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 191.636920][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 192.358783][ T5950] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.526576][ T7476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.534221][ T7476] IPv6: NLM_F_CREATE should be set when creating new route [ 192.541620][ T7476] IPv6: NLM_F_CREATE should be set when creating new route [ 192.548944][ T7476] IPv6: NLM_F_CREATE should be set when creating new route [ 192.551419][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.570253][ T5950] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.582894][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.609919][ T5950] usb 1-1: config 0 descriptor?? [ 192.757969][ T7480] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 192.765858][ T7480] netlink: 2 bytes leftover after parsing attributes in process `syz.2.493'. [ 192.778387][ T7480] bond0: entered promiscuous mode [ 192.785313][ T7480] bond_slave_0: entered promiscuous mode [ 192.791411][ T7480] bond_slave_1: entered promiscuous mode [ 192.797633][ T7480] bridge0: port 3(bond0) entered blocking state [ 192.804449][ T7480] bridge0: port 3(bond0) entered disabled state [ 192.812013][ T7480] bond0: entered allmulticast mode [ 192.817253][ T7480] bond_slave_0: entered allmulticast mode [ 192.823273][ T7480] bond_slave_1: entered allmulticast mode [ 192.832956][ T7480] bridge0: port 3(bond0) entered blocking state [ 192.839533][ T7480] bridge0: port 3(bond0) entered forwarding state [ 193.053299][ T5950] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 193.076338][ T5950] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input11 [ 193.199569][ T5950] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 193.363379][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 193.393018][ C0] Mem-Info: [ 193.396467][ C0] active_anon:22262 inactive_anon:0 isolated_anon:0 [ 193.396467][ C0] active_file:13458 inactive_file:40343 isolated_file:0 [ 193.396467][ C0] unevictable:768 dirty:32 writeback:0 [ 193.396467][ C0] slab_reclaimable:10459 slab_unreclaimable:91981 [ 193.396467][ C0] mapped:24862 shmem:17757 pagetables:1178 [ 193.396467][ C0] sec_pagetables:0 bounce:0 [ 193.396467][ C0] kernel_misc_reclaimable:0 [ 193.396467][ C0] free:1314792 free_pcp:14834 free_cma:0 [ 193.441865][ C0] Node 0 active_anon:88848kB inactive_anon:0kB active_file:53832kB inactive_file:161172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99448kB dirty:128kB writeback:0kB shmem:69492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12400kB pagetables:4564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 193.473638][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 193.503542][ C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.533397][ C0] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 193.539207][ C0] Node 0 DMA32 free:1353536kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88848kB inactive_anon:0kB active_file:53832kB inactive_file:161172kB unevictable:1536kB writepending:28kB zspages:0kB present:3129332kB managed:2549276kB mlocked:0kB bounce:0kB free_pcp:37452kB local_pcp:20256kB free_cma:0kB [ 193.572439][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 193.577183][ C0] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.606395][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 193.611139][ C0] Node 1 Normal free:3890272kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21732kB local_pcp:7296kB free_cma:0kB [ 193.643319][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 193.648056][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.660765][ C0] Node 0 DMA32: 473*4kB (UME) 312*8kB (ME) 278*16kB (UME) 186*32kB (UM) 71*64kB (UME) 31*128kB (UME) 22*256kB (M) 3*512kB (M) 2*1024kB (ME) 1*2048kB (U) 322*4096kB (M) = 1353476kB [ 193.678851][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 193.690368][ C0] Node 1 Normal: 220*4kB (UE) 54*8kB (UME) 42*16kB (UME) 57*32kB (UME) 22*64kB (UME) 8*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890272kB [ 193.708488][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.718059][ C0] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 193.727359][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.736943][ C0] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 193.746262][ C0] 71554 total pagecache pages [ 193.750959][ C0] 0 pages in swap cache [ 193.755129][ C0] Free swap = 124996kB [ 193.759290][ C0] Total swap = 124996kB [ 193.763454][ C0] 2097051 pages RAM [ 193.767272][ C0] 0 pages HighMem/MovableOnly [ 193.771956][ C0] 428026 pages reserved [ 193.776119][ C0] 0 pages cma reserved [ 193.780734][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.830527][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.841665][ T44] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.850954][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.873835][ T44] usb 3-1: config 0 descriptor?? [ 194.146933][ T89] usbhid 2-1:0.0: can't add hid device: -71 [ 194.168513][ T89] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 194.200395][ T89] usb 2-1: USB disconnect, device number 15 [ 194.269436][ T5973] usb 1-1: USB disconnect, device number 11 [ 194.313111][ T44] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 194.353985][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input12 [ 194.563145][ T7496] dvmrp1: entered allmulticast mode [ 194.567491][ T44] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 194.582771][ T7496] netlink: 'syz.1.498': attribute type 16 has an invalid length. [ 194.616111][ T7496] netlink: 'syz.1.498': attribute type 25 has an invalid length. [ 194.638057][ T7498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.499'. [ 194.658898][ T7496] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.498'. [ 194.734170][ T44] usb 3-1: USB disconnect, device number 12 [ 194.848898][ T7499] fido_id[7499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory Stopping sshd: [ 195.075393][ T7515] netlink: 'syz.0.503': attribute type 10 has an invalid length. stopped /usr/sbin/sshd (pid 5623) OK [ 195.338474][ T5973] usb 2-1: new high-speed USB device number 16 using dummy_hcd Stopping crond: [ 195.514713][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 stopped /usr/sbi[ 195.526201][ T5973] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 n/crond (pid 5607) [ 195.540476][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 OK [ 195.556307][ T5973] usb 2-1: config 0 descriptor?? [ 195.598437][ T5950] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 195.678756][ T89] usb 1-1: new high-speed USB device number 12 using dummy_hcd Stopping dhcpcd... [ 195.768460][ T5950] usb 3-1: Using ep0 maxpacket: 32 stopped /sbin/dhcpcd (pid 5528)[ 195.782630][ T5950] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 195.802032][ T5950] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 195.814207][ T5950] usb 3-1: config 0 has no interface number 0 [ 195.822929][ T5950] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 195.831226][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 195.839187][ T5950] usb 3-1: config 0 has no interface number 0 [ 195.853013][ T89] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 195.869209][ T89] usb 1-1: config 0 has no interface number 0 [ 195.875645][ T5950] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 195.895211][ T89] usb 1-1: config 0 interface 184 has no altsetting 0 [ 195.902189][ T5950] usb 3-1: config 0 has no interface number 0 [ 195.910958][ T5950] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 195.925252][ T89] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 195.938426][ T5950] usb 3-1: config 0 has no interface number 0 [ 195.948647][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.957580][ T89] usb 1-1: Product: syz [ 195.969405][ T5950] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 195.977475][ T5950] usb 3-1: config 0 has no interface number 0 [ 195.988574][ T89] usb 1-1: Manufacturer: syz [ 195.993269][ T89] usb 1-1: SerialNumber: syz [ 196.010460][ T5950] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.019857][ T5950] usb 3-1: config 0 has no interface number 0 [ 196.027175][ T5973] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 196.039897][ T89] usb 1-1: config 0 descriptor?? [ 196.046651][ T5950] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.054421][ T5973] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input13 [ 196.059971][ T89] smsc75xx v1.0.0 [ 196.084829][ T5950] usb 3-1: config 0 has no interface number 0 Stopping network: [ 196.100056][ T5950] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.108158][ T5950] usb 3-1: config 0 has no interface number 0 [ 196.128929][ T5950] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 196.138113][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.161106][ T5950] usb 3-1: Product: syz [ 196.167736][ T5950] usb 3-1: Manufacturer: syz [ 196.172456][ T5950] usb 3-1: SerialNumber: syz [ 196.187125][ T5950] usb 3-1: config 0 descriptor?? [ 196.197816][ T5973] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 196.225594][ T5950] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 196.256427][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.288898][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.298144][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.365141][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.410616][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.432790][ T7526] netlink: 'syz.2.507': attribute type 3 has an invalid length. [ 196.451490][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.459416][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.507'. [ 196.488630][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.502845][ T5950] etas_es58x 3-1:0.2: could not parse product info: '' [ 196.523252][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.560418][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.566840][ T5973] usb 2-1: USB disconnect, device number 16 [ 196.594645][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.748493][ T89] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 196.800549][ T89] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 196.821627][ T89] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 196.849698][ T89] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 196.869872][ T89] usb 1-1: USB disconnect, device number 12 [ 196.908489][ T30] audit: type=1326 audit(1759347732.597:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.0.510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1d258eec9 code=0x0 [ 196.967159][ T7555] mmap: syz.0.510 (7555) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. OK Stopping iptables: modprobe: can't change directory to 'syzkaller': No such file or directory iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL Stopping system message bus: [ 197.825836][ T7585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.839030][ T7585] block device autoloading is deprecated and will be removed. [ 197.908481][ T44] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 197.944114][ T7588] FAULT_INJECTION: forcing a failure. [ 197.944114][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 197.963746][ T7588] CPU: 1 UID: 0 PID: 7588 Comm: syz.0.518 Not tainted syzkaller #0 PREEMPT(full) [ 197.963777][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.963791][ T7588] Call Trace: [ 197.963799][ T7588] [ 197.963808][ T7588] dump_stack_lvl+0x189/0x250 [ 197.963847][ T7588] ? __pfx____ratelimit+0x10/0x10 [ 197.963872][ T7588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.963906][ T7588] ? __pfx__printk+0x10/0x10 [ 197.963942][ T7588] ? __pfx___might_resched+0x10/0x10 [ 197.963975][ T7588] should_fail_ex+0x414/0x560 [ 197.964014][ T7588] should_failslab+0xa8/0x100 [ 197.964039][ T7588] __kmalloc_noprof+0xcb/0x7f0 [ 197.964072][ T7588] ? mpi_powm+0x1a1/0x23c0 [ 197.964100][ T7588] mpi_powm+0x1a1/0x23c0 [ 197.964146][ T7588] ? __pfx_mpi_powm+0x10/0x10 [ 197.964172][ T7588] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 197.964204][ T7588] ? mpi_alloc+0x52/0x140 [ 197.964227][ T7588] ? __asan_memset+0x22/0x50 [ 197.964263][ T7588] dh_compute_value+0x1cf/0x380 [ 197.964300][ T7588] ? __pfx_dh_compute_value+0x10/0x10 [ 197.964329][ T7588] ? trace_kmalloc+0x1f/0xd0 [ 197.964357][ T7588] ? __kmalloc_noprof+0x432/0x7f0 [ 197.964387][ T7588] ? __phys_addr+0xd3/0x180 [ 197.964425][ T7588] __keyctl_dh_compute+0x7f1/0xca0 [ 197.964464][ T7588] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 197.964492][ T7588] ? __lock_acquire+0xab9/0xd20 [ 197.964527][ T7588] ? __might_fault+0xb0/0x130 [ 197.964584][ T7588] keyctl_dh_compute+0x109/0x160 [ 197.964615][ T7588] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 197.964662][ T7588] __se_sys_keyctl+0x423/0x910 [ 197.964694][ T7588] ? __pfx___se_sys_keyctl+0x10/0x10 [ 197.964719][ T7588] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.964751][ T7588] ? __fget_files+0x3a0/0x420 [ 197.964784][ T7588] ? fput+0xa0/0xd0 [ 197.964814][ T7588] ? ksys_write+0x22a/0x250 [ 197.964839][ T7588] ? __pfx_ksys_write+0x10/0x10 [ 197.964865][ T7588] ? do_syscall_64+0xbe/0xfa0 [ 197.964889][ T7588] ? __x64_sys_keyctl+0x20/0xc0 [ 197.964912][ T7588] do_syscall_64+0xfa/0xfa0 [ 197.964936][ T7588] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.964962][ T7588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.964983][ T7588] ? clear_bhb_loop+0x60/0xb0 [ 197.965010][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.965030][ T7588] RIP: 0033:0x7fa1d258eec9 [ 197.965050][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.965068][ T7588] RSP: 002b:00007fa1d34bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 197.965091][ T7588] RAX: ffffffffffffffda RBX: 00007fa1d27e5fa0 RCX: 00007fa1d258eec9 [ 197.965107][ T7588] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000017 [ 197.965121][ T7588] RBP: 00007fa1d34bf090 R08: 00002000000000c0 R09: 0000000000000000 [ 197.965135][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.965148][ T7588] R13: 00007fa1d27e6038 R14: 00007fa1d27e5fa0 R15: 00007ffc8f13da68 [ 197.965183][ T7588] done [ 198.402773][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.416171][ T44] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.425382][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.461405][ T44] usb 2-1: config 0 descriptor?? [ 198.495313][ T89] usb 3-1: USB disconnect, device number 13 [ 198.528007][ T89] etas_es58x 3-1:0.2: Disconnecting syz syz [ 198.537774][ T7596] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.521'. [ 198.879164][ T44] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 198.899630][ T7607] FAULT_INJECTION: forcing a failure. [ 198.899630][ T7607] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 198.950094][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input14 [ 198.978627][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.0.525 Not tainted syzkaller #0 PREEMPT(full) [ 198.978656][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.978670][ T7607] Call Trace: [ 198.978678][ T7607] [ 198.978687][ T7607] dump_stack_lvl+0x189/0x250 [ 198.978727][ T7607] ? __pfx____ratelimit+0x10/0x10 [ 198.978752][ T7607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.978784][ T7607] ? __pfx__printk+0x10/0x10 [ 198.978812][ T7607] ? __might_fault+0xb0/0x130 [ 198.978853][ T7607] should_fail_ex+0x414/0x560 [ 198.978893][ T7607] _copy_from_user+0x2d/0xb0 [ 198.978923][ T7607] ___sys_sendmsg+0x158/0x2a0 [ 198.978954][ T7607] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.979024][ T7607] ? __fget_files+0x2a/0x420 [ 198.979050][ T7607] ? __fget_files+0x3a0/0x420 [ 198.979088][ T7607] __x64_sys_sendmsg+0x19b/0x260 [ 198.979119][ T7607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.979157][ T7607] ? __pfx_ksys_write+0x10/0x10 [ 198.979184][ T7607] ? do_syscall_64+0xbe/0xfa0 [ 198.979212][ T7607] do_syscall_64+0xfa/0xfa0 [ 198.979237][ T7607] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.979262][ T7607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.979282][ T7607] ? clear_bhb_loop+0x60/0xb0 [ 198.979315][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.979335][ T7607] RIP: 0033:0x7fa1d258eec9 [ 198.979354][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.979372][ T7607] RSP: 002b:00007fa1d34bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.979394][ T7607] RAX: ffffffffffffffda RBX: 00007fa1d27e5fa0 RCX: 00007fa1d258eec9 [ 198.979409][ T7607] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 198.979423][ T7607] RBP: 00007fa1d34bf090 R08: 0000000000000000 R09: 0000000000000000 [ 198.979436][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.979448][ T7607] R13: 00007fa1d27e6038 R14: 00007fa1d27e5fa0 R15: 00007ffc8f13da68 [ 198.979483][ T7607] [ 199.188807][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.272045][ T44] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 199.344570][ T44] usb 2-1: USB disconnect, device number 17 [ 199.717400][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.731700][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 Stopping klogd: [ 199.943984][ T7642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE OK [ 200.168972][ T44] usb 2-1: new high-speed USB device number 18 using dummy_hcd Stopping acpid: [ 200.331618][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 200.347395][ T44] usb 2-1: config 1 interface 0 has no altsetting 0 [ 200.360010][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 200.369447][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.377486][ T44] usb 2-1: Product: syz [ 200.381873][ T44] usb 2-1: Manufacturer: syz [ 200.386544][ T44] usb 2-1: SerialNumber: syz [ 200.606106][ T44] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input15 [ 200.620546][ T44] usb 2-1: USB disconnect, device number 18 [ 200.698439][ T89] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.880085][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.891157][ T89] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.900265][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.910686][ T89] usb 1-1: config 0 descriptor?? [ 200.968501][ T5973] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 201.148628][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.158575][ T5973] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 201.158607][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.162845][ T5973] usb 3-1: config 0 descriptor?? [ 201.323442][ T89] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 201.337401][ T89] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input16 OK [ 201.397556][ T7662] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 201.404155][ T7662] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.419870][ T7662] vhci_hcd vhci_hcd.0: Device attached [ 201.427448][ T30] audit: type=1326 audit(1759347737.117:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7661 comm="syz.2.545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff67c38eec9 code=0x0 [ 201.449288][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.485338][ T89] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 Stopping syslogd: stopped /sbin/syslogd (pid 5216) OK [ 201.598570][ T10] vhci_hcd: vhci_device speed not set [ 201.679932][ T10] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 201.739032][ T89] usb 1-1: USB disconnect, device number 13 [ 201.755649][ T7680] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 201.768748][ T7680] bond0: (slave wlan1): Enslaving as an active interface with an up link umount: can't remount debugfs read-only [ 202.155205][ T7689] loop9: detected capacity change from 0 to 7 [ 202.163759][ T7689] buffer_io_error: 9 callbacks suppressed [ 202.163781][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.177712][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.192929][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.203849][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.215574][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.224213][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.232649][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.243293][ T7689] ldm_validate_partition_table(): Disk read failed. [ 202.250245][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.258560][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.278670][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.286972][ T7689] Dev loop9: unable to read RDB block 0 [ 202.294196][ T7689] loop9: unable to read partition table [ 202.300401][ T7689] loop9: partition table beyond EOD, truncated [ 202.310590][ T7689] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 202.310590][ T7689] ) failed (rc=-5) [ 202.383202][ T7693] loop9: detected capacity change from 0 to 7 [ 202.393049][ T7693] ldm_validate_partition_table(): Disk read failed. [ 202.399930][ T89] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 202.411735][ T7693] Dev loop9: unable to read RDB block 0 [ 202.417745][ T7693] loop9: unable to read partition table [ 202.427059][ T7693] loop9: partition table beyond EOD, truncated [ 202.433746][ T7693] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 202.433746][ T7693] ) failed (rc=-5) [ 202.473031][ T7696] FAULT_INJECTION: forcing a failure. [ 202.473031][ T7696] name failslab, interval 1, probability 0, space 0, times 0 [ 202.490323][ T7696] CPU: 0 UID: 0 PID: 7696 Comm: syz.3.556 Not tainted syzkaller #0 PREEMPT(full) [ 202.490353][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.490366][ T7696] Call Trace: [ 202.490375][ T7696] [ 202.490384][ T7696] dump_stack_lvl+0x189/0x250 [ 202.490423][ T7696] ? __pfx____ratelimit+0x10/0x10 [ 202.490448][ T7696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.490481][ T7696] ? __pfx__printk+0x10/0x10 [ 202.490519][ T7696] ? __pfx___might_resched+0x10/0x10 [ 202.490545][ T7696] ? fs_reclaim_acquire+0x7d/0x100 [ 202.490571][ T7696] should_fail_ex+0x414/0x560 [ 202.490612][ T7696] should_failslab+0xa8/0x100 [ 202.490637][ T7696] __kmalloc_noprof+0xcb/0x7f0 [ 202.490670][ T7696] ? tomoyo_encode+0x28b/0x550 [ 202.490704][ T7696] tomoyo_encode+0x28b/0x550 [ 202.490737][ T7696] tomoyo_realpath_from_path+0x58d/0x5d0 [ 202.490777][ T7696] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 202.490800][ T7696] tomoyo_path_number_perm+0x1e8/0x5a0 [ 202.490826][ T7696] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.490890][ T7696] ? __fget_files+0x2a/0x420 [ 202.490933][ T7696] ? __fget_files+0x3a0/0x420 [ 202.490958][ T7696] ? __fget_files+0x2a/0x420 [ 202.490989][ T7696] security_file_ioctl+0xcb/0x2d0 [ 202.491025][ T7696] __se_sys_ioctl+0x47/0x170 [ 202.491061][ T7696] do_syscall_64+0xfa/0xfa0 [ 202.491087][ T7696] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.491113][ T7696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.491134][ T7696] ? clear_bhb_loop+0x60/0xb0 [ 202.491161][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.491181][ T7696] RIP: 0033:0x7f550218eec9 [ 202.491201][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.491219][ T7696] RSP: 002b:00007f550308a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.491242][ T7696] RAX: ffffffffffffffda RBX: 00007f55023e5fa0 RCX: 00007f550218eec9 [ 202.491258][ T7696] RDX: 0000000000000000 RSI: 000000004004743b RDI: 0000000000000004 [ 202.491271][ T7696] RBP: 00007f550308a090 R08: 0000000000000000 R09: 0000000000000000 [ 202.491284][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.491297][ T7696] R13: 00007f55023e6038 R14: 00007f55023e5fa0 R15: 00007ffc893b24e8 [ 202.491332][ T7696] [ 202.491431][ T7696] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.777211][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.798487][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.818739][ T89] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 202.827856][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.881292][ T89] usb 2-1: config 0 descriptor?? [ 203.399033][ T89] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 203.406174][ T89] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 203.442372][ T89] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 203.795871][ T89] hid-led 0003:0FC5:B080.000C: probe with driver hid-led failed with error -71 [ 203.823141][ T89] usb 2-1: USB disconnect, device number 19 [ 203.829227][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 203.852691][ T7671] vhci_hcd: connection reset by peer [ 203.870861][ T1148] vhci_hcd: stop threads [ 203.875284][ T1148] vhci_hcd: release socket [ 203.879999][ T1148] vhci_hcd: disconnect device [ 203.921936][ T5973] usbhid 3-1:0.0: can't add hid device: -71 [ 203.938758][ T5973] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 203.984713][ T5973] usb 3-1: USB disconnect, device number 14 [ 203.991025][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.012447][ T44] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.052751][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.081273][ T44] usb 1-1: config 0 descriptor?? [ 204.106564][ T7727] tipc: Started in network mode [ 204.111985][ T7727] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 204.121258][ T7727] tipc: Enabling of bearer rejected, failed to enable media [ 204.135728][ T7727] overlay: filesystem on ./bus not supported as upperdir [ 204.149949][ T30] audit: type=1800 audit(1759347739.837:108): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.567" name="bus" dev="overlay" ino=771 res=0 errno=0 [ 204.207083][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.216395][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only [ 204.448685][ T89] usb 3-1: new full-speed USB device number 15 using dummy_hcd umount: can't remount /dev/root read-only [ 204.495492][ T44] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor The system is going down NOW! Sent SIGTERM to all processes [ 204.613252][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input17 [ 204.688842][ T89] usb 3-1: device descriptor read/all, error -71 Connection to 10.128.0.86 closed by remote host. [ 204.778790][ T44] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 204.812164][ T44] usb 1-1: USB disconnect, device number 14 [ 205.622929][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 205.759940][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.885330][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.955301][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.135377][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.196878][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.290282][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.364921][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.456005][ T61] bond0: left allmulticast mode [ 206.461198][ T61] bond_slave_0: left allmulticast mode [ 206.466792][ T61] bond_slave_1: left allmulticast mode [ 206.474043][ T61] bridge0: port 3(bond0) entered disabled state [ 206.484276][ T61] bridge_slave_1: left allmulticast mode [ 206.490094][ T61] bridge_slave_1: left promiscuous mode [ 206.495857][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.506788][ T61] bridge_slave_0: left allmulticast mode [ 206.513263][ T61] bridge_slave_0: left promiscuous mode [ 206.519221][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.818843][ T10] vhci_hcd: vhci_device speed not set [ 206.907752][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.919195][ T61] bond_slave_0: left promiscuous mode [ 206.927579][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.937186][ T61] bond_slave_1: left promiscuous mode [ 206.943881][ T61] bond0 (unregistering): Released all slaves [ 207.083909][ T61] dvmrp1 (unregistering): left allmulticast mode [ 207.198196][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.209296][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.221200][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 207.235959][ T61] bond0 (unregistering): Released all slaves [ 207.364453][ T61] tipc: Left network mode [ 207.775805][ T61] hsr_slave_0: left promiscuous mode [ 207.782184][ T61] hsr_slave_1: left promiscuous mode [ 207.788282][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.795897][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.803864][ T2347] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 207.813145][ T2347] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 207.815027][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.822358][ T2347] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 207.829773][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.841637][ T2347] pvrusb2: Failure uploading firmware1 [ 207.855410][ T2347] pvrusb2: Device initialization was not successful. [ 207.862478][ T2347] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 207.871835][ T2347] pvrusb2: Invalid write control endpoint [ 207.872129][ T815] pvrusb2: Device being rendered inoperable [ 207.878785][ T2347] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 207.893328][ T2347] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 207.902413][ T2347] ------------[ cut here ]------------ [ 207.907937][ T2347] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0x9b0, CPU#0: pvrusb2-context/2347 [ 207.909544][ T61] hsr_slave_0: left promiscuous mode [ 207.920972][ T2347] Modules linked in: [ 207.930315][ T2347] CPU: 0 UID: 0 PID: 2347 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 207.940226][ T2347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.950646][ T2347] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 207.956950][ T2347] Code: a9 fb e9 5d fc ff ff e8 88 44 a9 fb c6 05 40 20 b8 09 01 48 c7 c7 40 ba 2c 8c e8 85 53 10 fb e9 85 fc ff ff e8 6b 44 a9 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 bb 2c 8c 4c 89 e2 e8 c5 98 15 fb e9 [ 207.976635][ T2347] RSP: 0018:ffffc90004dbf5b0 EFLAGS: 00010293 [ 207.982921][ T2347] RAX: ffffffff86174dd5 RBX: dffffc0000000000 RCX: ffff88802a540000 [ 207.990967][ T2347] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 207.998999][ T2347] RBP: 0000000000000001 R08: ffffffff8fe57b77 R09: 1ffffffff1fcaf6e [ 208.006998][ T2347] R10: dffffc0000000000 R11: fffffbfff1fcaf6f R12: ffffffff8c848a40 [ 208.015025][ T2347] R13: 0000000000001770 R14: ffff88806700f0b0 R15: 00000000fffffff5 [ 208.023038][ T2347] FS: 0000000000000000(0000) GS:ffff8881257a8000(0000) knlGS:0000000000000000 [ 208.032099][ T2347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.038898][ T2347] CR2: 00007ff20c6f1bd0 CR3: 000000007c41e000 CR4: 00000000003526f0 [ 208.046887][ T2347] Call Trace: [ 208.050365][ T2347] [ 208.053332][ T2347] ? kmem_cache_free+0x19b/0x690 [ 208.058302][ T2347] ? _request_firmware+0x6be/0x15b0 [ 208.063598][ T2347] _request_firmware+0xf83/0x15b0 [ 208.068729][ T2347] ? __pfx__request_firmware+0x10/0x10 [ 208.074235][ T2347] request_firmware+0x36/0x50 [ 208.078953][ T2347] pvr2_locate_firmware+0xb3/0x500 [ 208.084093][ T2347] pvr2_upload_firmware1+0x1b4/0x900 [ 208.089602][ T2347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.095643][ T2347] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 208.101541][ T2347] pvr2_hdw_initialize+0x3df/0x3ac0 [ 208.106777][ T2347] ? __mutex_trylock_common+0x153/0x260 [ 208.112415][ T2347] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 208.118098][ T2347] ? rcu_is_watching+0x15/0xb0 [ 208.122913][ T2347] ? trace_contention_end+0x39/0x120 [ 208.128238][ T2347] ? pvr2_context_thread_func+0x263/0xaf0 [ 208.134023][ T2347] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 208.139986][ T2347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.146209][ T2347] ? schedule+0x91/0x360 [ 208.150516][ T2347] ? schedule+0x16f/0x360 [ 208.154879][ T2347] pvr2_context_thread_func+0x487/0xaf0 [ 208.160478][ T2347] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 208.166555][ T2347] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 208.172504][ T2347] ? __pfx_autoremove_wake_function+0x10/0x10 [ 208.178632][ T2347] ? __kthread_parkme+0x7b/0x200 [ 208.183586][ T2347] ? __kthread_parkme+0x1a1/0x200 [ 208.188712][ T2347] kthread+0x711/0x8a0 [ 208.192816][ T2347] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 208.198948][ T2347] ? __pfx_kthread+0x10/0x10 [ 208.203590][ T2347] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.208846][ T2347] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.214057][ T2347] ? __pfx_kthread+0x10/0x10 [ 208.218696][ T2347] ret_from_fork+0x4bc/0x870 [ 208.223308][ T2347] ? __pfx_ret_from_fork+0x10/0x10 [ 208.228500][ T2347] ? __switch_to_asm+0x39/0x70 [ 208.233277][ T2347] ? __switch_to_asm+0x33/0x70 [ 208.238043][ T2347] ? __pfx_kthread+0x10/0x10 [ 208.242825][ T2347] ret_from_fork_asm+0x1a/0x30 [ 208.247678][ T2347] [ 208.251047][ T2347] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.258367][ T2347] CPU: 0 UID: 0 PID: 2347 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 208.268116][ T2347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.278195][ T2347] Call Trace: [ 208.281489][ T2347] [ 208.284435][ T2347] dump_stack_lvl+0x99/0x250 [ 208.289051][ T2347] ? __asan_memcpy+0x40/0x70 [ 208.293675][ T2347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.298892][ T2347] ? __pfx__printk+0x10/0x10 [ 208.303513][ T2347] vpanic+0x237/0x6d0 [ 208.307594][ T2347] ? __pfx_vpanic+0x10/0x10 [ 208.312112][ T2347] ? is_bpf_text_address+0x26/0x2b0 [ 208.317334][ T2347] panic+0xb9/0xc0 [ 208.321069][ T2347] ? __pfx_panic+0x10/0x10 [ 208.325506][ T2347] __warn+0x334/0x4c0 [ 208.329513][ T2347] ? firmware_fallback_sysfs+0x746/0x9b0 [ 208.335169][ T2347] ? firmware_fallback_sysfs+0x746/0x9b0 [ 208.340815][ T2347] report_bug+0x2be/0x4f0 [ 208.345172][ T2347] ? firmware_fallback_sysfs+0x746/0x9b0 [ 208.350830][ T2347] ? firmware_fallback_sysfs+0x746/0x9b0 [ 208.356502][ T2347] ? firmware_fallback_sysfs+0x748/0x9b0 [ 208.362162][ T2347] handle_bug+0x84/0x160 [ 208.366433][ T2347] exc_invalid_op+0x1a/0x50 [ 208.370967][ T2347] asm_exc_invalid_op+0x1a/0x20 [ 208.375838][ T2347] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 208.382118][ T2347] Code: a9 fb e9 5d fc ff ff e8 88 44 a9 fb c6 05 40 20 b8 09 01 48 c7 c7 40 ba 2c 8c e8 85 53 10 fb e9 85 fc ff ff e8 6b 44 a9 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 bb 2c 8c 4c 89 e2 e8 c5 98 15 fb e9 [ 208.401751][ T2347] RSP: 0018:ffffc90004dbf5b0 EFLAGS: 00010293 [ 208.407843][ T2347] RAX: ffffffff86174dd5 RBX: dffffc0000000000 RCX: ffff88802a540000 [ 208.415845][ T2347] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 208.423832][ T2347] RBP: 0000000000000001 R08: ffffffff8fe57b77 R09: 1ffffffff1fcaf6e [ 208.431829][ T2347] R10: dffffc0000000000 R11: fffffbfff1fcaf6f R12: ffffffff8c848a40 [ 208.439818][ T2347] R13: 0000000000001770 R14: ffff88806700f0b0 R15: 00000000fffffff5 [ 208.447820][ T2347] ? firmware_fallback_sysfs+0x745/0x9b0 [ 208.453503][ T2347] ? kmem_cache_free+0x19b/0x690 [ 208.458473][ T2347] ? _request_firmware+0x6be/0x15b0 [ 208.463701][ T2347] _request_firmware+0xf83/0x15b0 [ 208.468768][ T2347] ? __pfx__request_firmware+0x10/0x10 [ 208.474261][ T2347] request_firmware+0x36/0x50 [ 208.478965][ T2347] pvr2_locate_firmware+0xb3/0x500 [ 208.484103][ T2347] pvr2_upload_firmware1+0x1b4/0x900 [ 208.489413][ T2347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.495416][ T2347] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 208.501255][ T2347] pvr2_hdw_initialize+0x3df/0x3ac0 [ 208.506484][ T2347] ? __mutex_trylock_common+0x153/0x260 [ 208.512061][ T2347] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 208.517715][ T2347] ? rcu_is_watching+0x15/0xb0 [ 208.522506][ T2347] ? trace_contention_end+0x39/0x120 [ 208.527821][ T2347] ? pvr2_context_thread_func+0x263/0xaf0 [ 208.533568][ T2347] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 208.539231][ T2347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.545234][ T2347] ? schedule+0x91/0x360 [ 208.549494][ T2347] ? schedule+0x16f/0x360 [ 208.553847][ T2347] pvr2_context_thread_func+0x487/0xaf0 [ 208.559417][ T2347] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 208.565508][ T2347] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 208.571508][ T2347] ? __pfx_autoremove_wake_function+0x10/0x10 [ 208.577605][ T2347] ? __kthread_parkme+0x7b/0x200 [ 208.582563][ T2347] ? __kthread_parkme+0x1a1/0x200 [ 208.587630][ T2347] kthread+0x711/0x8a0 [ 208.591732][ T2347] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 208.597820][ T2347] ? __pfx_kthread+0x10/0x10 [ 208.602439][ T2347] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.607653][ T2347] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.612874][ T2347] ? __pfx_kthread+0x10/0x10 [ 208.617492][ T2347] ret_from_fork+0x4bc/0x870 [ 208.622111][ T2347] ? __pfx_ret_from_fork+0x10/0x10 [ 208.627250][ T2347] ? __switch_to_asm+0x39/0x70 [ 208.632032][ T2347] ? __switch_to_asm+0x33/0x70 [ 208.636818][ T2347] ? __pfx_kthread+0x10/0x10 [ 208.641454][ T2347] ret_from_fork_asm+0x1a/0x30 [ 208.646277][ T2347] [ 208.649687][ T2347] Kernel Offset: disabled [ 208.654033][ T2347] Rebooting in 86400 seconds..