last executing test programs: 6.538798153s ago: executing program 0 (id=97): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x814) 6.316877683s ago: executing program 0 (id=99): shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) 6.112139494s ago: executing program 0 (id=102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x60, 0x11, 0x5a, {0x5a, 0x3, "b777a5771bffc492158f23ac68f1a6e3b48eb4ec0c519a250d0f225c4076207ad68f2ef12ca454ae0523c0a96b1d8ba892b9d29d6003b7fa9ea9ed16b631d9899886a3641b99e61b0f6ced59d0ac97a5649674f9dd19ce93"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000680)={0x44, &(0x7f0000000340)={0x20, 0xb, 0x7b, "6826977a87396b324e30f53de5337d37bdf83f37fd4d48ed368a83fb49818bc100a1055e8647c537a917c1a1cc181bb0e308a598f56fa06fc15522a009cd3f912aa7362da3e122e5ac913985d1083228d2a4f99e7d5e5c9cfb589fffc4d0d4a9fd97b80658f6602342b0607c65ea5009fe2c819c791cd017d0054f"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000200)={0x20, 0x81, 0x2, "8d08"}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "2cba4c"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "426c15"}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "32f58f"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "37dca8"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000300)={0x40, 0xf}, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) 3.623565306s ago: executing program 4 (id=113): shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) 3.606167182s ago: executing program 2 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 3.533545497s ago: executing program 4 (id=115): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x1, 0x4000000, 0x9, 0x7fe}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)) 3.439315951s ago: executing program 2 (id=117): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x10001, "029c6e5c846eccb800d2ae30e3f5c320998750190300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r3}) epoll_create1(0x0) r4 = syz_usbip_server_init(0x4) ppoll(&(0x7f0000000000)=[{r4, 0x5240}, {r2, 0x490}], 0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.418924571s ago: executing program 1 (id=118): syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc"], 0x294}}, 0x0) 3.375400466s ago: executing program 3 (id=119): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000ac0)=[{&(0x7f0000000380)="c33ed94f2dc2260b9d517d5d8265526c9695bdad49927bdeb8115787cb039f1f18bf27d3515d98faba45af46cf11c40aa7d65477ef00191a4ddabd5def08da5b229c1cd4f191dffcc069fcb1fde92450aeefb917583ed23dd61648b0578443a273d010a7ac3b3044ce35804cf54354e7e921d066f3cf31b23b841e4c6a912b13b3bf130f8920746c9202203ca05695cf5fcad5f88145f3dbd3b517eaaa616840fe1f61d9556f1d0febebd182a8dea9b0ee74c8e65e3d09", 0xb7}, {&(0x7f0000000440)}, {&(0x7f00000004c0)="07997c9cf04ad6ae73916dbcf0ded6fcbb75c182ab67c1cb7ff1d23de1847c8c607fa895f85e4558b6d1c4dd4acc378a7f30b857adb32fe525fb8dc8b426d449e41d961bb18af35875811740c170a955ef23de03ade4964d1834d947001038f06a7d7fe2c60de659cd86215f0c0f6b60786ba0874abeb3c0004f7c47eba71b5b00"/139, 0x8b}, {&(0x7f0000000580)="1eefa3dfcb026d0abb94950df380d5abdf72a9c11daee59f04d69212709bc01c90bb2054391938df469d98f999bf0e12dcf5fe61aa2eb6a85e238b483144844a073d303cabc212ff7135998be53a9f4e28a0866b5a03a108954946d689fd7783b885a9d591d48a512216ff619abd72", 0x6f}, {&(0x7f0000000600)="61221faaa117cf1878dbfb825a8c1e9aa2431751c78ce68a6498d43deb3169647a4b7b5e2cd574eca31be62c12df06da460a72a054b9dd8165c449f4a1e391743cf67375c5b9884ace9684cc0a991a935273477e908a4c6a2d2d1fcceebfe3a4d5868f08b00cd4cea7dc689ebd3eb3a2ef5b2b8b25c3010be77fcde182ce148df3844a5f395c3d2d868409", 0x8b}, {&(0x7f00000006c0)="0d2d232b4955befcc6da6685d46c4c493a218ec3f78b2a405b192c90c8382f1b7af037b469f3025d8e05efac604a581d0b98957c76d5360cd0d87c95b902bbbf10c61a4f109ae8ce019df5c91e488d35a18b81d3b07cd3baacac66de5a1abaec446bf46e557cd407fc647af9120d1bc4ee4ab1bd8851e89adb428a6cf39ddeafd59c203182e97f9998140b53afb19a45368003e24137b2a1e255a87483bf0e6eda480e2a3af02612", 0xa8}, {&(0x7f0000000780)="8a72dba34f8b0d74c2a663eb2a675013d28139d298df4ce9fd791fdd8785083ca1d4665187257b12428d981ec9b042811e943331768677cfe794399351abdc404810fc47523611e34711fda7320a97d47e977d569302bbaeb762942b70e6bc5e3fdbb6a6348e3329b1f4fd7c9246aaf7fda185f63fa2b0a2a604b9fcd3964b3c0a94751dc669932510fc69033a4ef9826f8f26573f76d81fb6dc83e4a16d49431d1c048e8491cf79da4f5f172fb9a8b950bee1b7ab24456b4dd51d868e4e42ba595e2fc6995eee2d111c3b1bd9de8e77eb94d229ac7f0f9eead7c1312f37733b242b02b0baa4d4fecb603892debc245c3d9834fba1", 0xf5}, {&(0x7f0000000940)="aea4543723d67ce08dae230e370e61b3682edcf8bb5c7a897e87ea5f5bd535e3059731b40d4067b1ae8ff46e1823406f08a81a36aca0fde438232ef27021c7be2a935525055415db555c80659bdb01c34a45c00e083e4ef8277522dc4d2d7d1b56e866b685b36f5c1d733860e7083eb1222c284db4bbb453e30ce650c1c7e0a6702f8587c9fc73d816c99045dae4773732afb4c6d0a23e28a4a951b3d06859ef519c212d05463579505111f46ccd6a5d691616df21cff4cd4c1022ad", 0xbc}, {&(0x7f0000000a00)="fac2300e5cdd0a202e8dbc0a2af2cdb20863d9005ee2a77bd282928e4a418a96a297051f98aadece3bd735edf03444148c15c00dce0107b408f527e6c2c081be230e654806947bb2ee7b8526699d2c043a6c2a770ee3d03d5a3aa8690f53a203cf09e403e3f51fd7749b8ca3ae4da686f26b577fcb8f50cbd3a54b6ea344b54472f1f227b4cfc0ab5193e9bd7329f024a9006145f6075afc895f156bee3fe3e92cfd3b6bd341bb33d86a031871685aa140c2b9d490", 0xb5}], 0x9, 0x8, 0x7fff) syz_usb_disconnect(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x24}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000900), 0x4) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1000, 0x5, 0x8000, 0x2e6, 0xffffffff, 0x1000, 0x7, 0x10001, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) 3.276674673s ago: executing program 1 (id=120): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x10001, "029c6e5c846eccb800d2ae30e3f5c320998750190300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r3}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.755385987s ago: executing program 2 (id=121): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x814) 2.732848153s ago: executing program 2 (id=122): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0x9, @output={0x0, 0x1, {0x1, 0x2}, 0x7, 0x9a47}}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f0000000000)={0x2, 0x2, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x58}}], 0x1, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000081ca4335d56edb1a5cbb27f000000952adf0fb75b5b45eaa192f69c536145f2371bd0ee43ac5944c85452edf0fb712d3f0fe1941de3284345bfe5", @ANYRES16=r6, @ANYRESHEX=r6], 0x48) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x5a, 0xa, 0x1, "05fcff410400001b00", 0x34343452}) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r8, &(0x7f0000000400)=[{&(0x7f0000000a40)="a451f091f012eb", 0x7}], 0x61) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x20) write$P9_RSTATu(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="3c0200007d01000005fb000000040000002003000000000000000000000000000000000000000700000000000000000000002900046e6f6465767b6376666f7825ffffff8102000000000031ff0abc922b33695aa3c2c4626d71fe00003800704a86cec602007dfa673effeb09b5351f5bde050000000000187b5fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2021000000800000000000000f31362405500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000040000047ec21ca9ef20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732eb42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/542, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23c) 2.719780024s ago: executing program 0 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (fail_nth: 5) 2.463361897s ago: executing program 2 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.333713122s ago: executing program 1 (id=125): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@assoc={0x18, 0x117, 0x4, 0xa6}], 0x18, 0x8045}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000340)=""/53, 0x35}], 0x4, &(0x7f00000003c0)}, 0xffff7fff}], 0x2, 0x0, 0x0) 2.2702209s ago: executing program 0 (id=126): r0 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0xd0}}, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x8001420, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x90013, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8a}, 0x8}, 0x1c, 0x0}, 0xb10) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0xffffffff, 0x32315659, 0x280, 0x168}) open(&(0x7f00000005c0)='./bus\x00', 0x1639c2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) getpriority(0x1, r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x7810c0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) 2.154101395s ago: executing program 1 (id=127): mknod(&(0x7f0000000100)='./bus\x00', 0x8001420, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x1639c2, 0x0) 2.111299341s ago: executing program 2 (id=128): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000180)="6832330d63c51542c1626bf4591b46fd74fd3bfe83be7689614c2a4c5a77c22215a5b9c5f8533c0855aadad66f6c4c1fbba7709ae3fbde314b444fedda", 0x3d}, {&(0x7f00000005c0)="dac1bb4952eb16ef48aef08910ffc17c5ebd684ed96b7950e082a9418cb9930feafc5e8deb1a72bfdfc191cd5905ec1dd72c501e96dd7aed903b6705d2b3bb5b78efa8a829aa3eb245c0734affb80d5220a8f7688fc2a5cd92473ac62cd7057cddeece4abee853b3a21861421b442482b2331c582d4b6aa5ab625c91940a00056b5bbcd985e11083477433769224332d335b31be3b13d26979f6ee42b1f6173f6ac371f6bfe37c01bb0c9bc2283810fa6006007c946505d83847d7f4d529cea3836f539aeb7bde1c53d831da5383ebd52bdff3476d168d03fb0713d51c64085c8cd1cb369cd3a5d105234ee0262433750b804b1eeec66db2c69c9497834b5be8027d3b6c21f8f0216277de4c30585e387d57148496e50bf08a1151f89553bff6890a04ab937a72864e945fd329e97d02a48763ba2bde1e7691517bf36600301ab8ae165b5c8151a54ce2606f23b761b8c1b15644accd0335cb4c474ae5c055cb353c20ec0aebc42b50555d5d1224af0af12994295b8cae2b90f4309ba413d4924c9476fa8a0096e9954f932473aceee44da66045b73f6640b04483984d00a272e90e6ba5e3aa77be6a8ae53b46333e653c969596468a51abef01431f9d254644d1f1d1372024c03aaf4ed5c2322ade7dabeacb18f1d95fbcc103e5392bf05a813d422f959a8a59cc99b61fd6c067563e47803e33c322762978028a7c671d9f0b00de3e30d51d40a0181c5af2218e42871bfe9889bb310c62aadfd8e1312596c66bb064774aab27cc53f605aa13dc5034f4c40888690904d3d278e1ba4bec0c93a75d4d5c0d68e774216b27ea5fb31fecc22848f9563ab39ce99bd03b54711e3c797cfba92fc3bc4be4bcd55849a73cb4889e8afa58833ba4adfa97e916a6339a074fb67f44ce4b8eed22c189a09030abbf9db20cd705ee2725fd5466d82e0867d4f64f89eff5f1ac00248f83505b53c31be077fb6788770a06a45011124baf1c530ae0547f9a3ef4c350445e63c2a8f878ed4aff828ac96b9d0cdf69cc323049d867c351fa025ca731f47a785e5e1d8ddd6f016aa86cf4d3c287f9d1ccd7a6c001b876fe173f24323613c5b2b477180012005bd395dbf678e8f011301bef31c5f76f9884059a4e603adbb92b641dfbc1a65ff8d28ed7af22d466cc220e1c38dc06bffba55c0fdb09f7205907de7e621814f37c3b227b1aae11b502aa36ba9c2169fe946af2475c1613c8e80194b3aa9c938e01928e3bb4465d35b46bab099ec5be8c491d74ca0989390dcec1d394a8d7216a0ae25e6344dcdf6815288ad1abe859d5f90f8e28aa3a0a866c781d39e6ca192a3afc56f22bbdf9486e7543a62688ff3bcd82e62cb4c85f63026335c256a146e7343be02ec5cfe8f4ece8713854f58ceee8d50019745fbb30315216bb177def39ad7a9061420decb48dc87900d1079c4814e415202a5e5da7c240040b3de357974fbd8968eb1333793262d8fbbceaf2e4377bf75516a6c6bdb2435af96cdcb0c288895d655610642015e51cbe9f3804d6f4925ce8a348d9f33d8c89655a805d45f3bec8d238530c819cc1247e8a62f753235259621b33ca6ca724397842b81f0288509bfea907f5eba919262a7a154cf7064b3db607073d62e0c848fc3d938ac715b227789edc021ac719addf2750356fc7184a45d86648075375dca9be6e11a2cf4f4a41c594d6dbc1c1e93c75604615d46abf133d0f79cfa1b71d7f5aaf268936250521d162c2f74d180a695d5df0fd67790a2cbcb3f1aa7e8d78a2e414933ffbbfdaef41995c0f9609801f22eb733ec39c70820e43317b37dd23ccc4ece813447b6d8c2a3103aeb8d58bb42790ed37ebce57c75daf6477d8962580f335d73ce4ba06c1c1b3b3a6277e758b4245447313838bba0c8705df997344394c7ca706409dfe51bb65cfd3c50a642f265c38d4440afeec056e66d13451383c7e9c625227b92d4fdb0323db9cc3136a3e3927b8868deaea5fe4e2af170e3621ec207444ca9522ecd8db6e0985efe481d94453856d71c2028295fd5b22a6970ff73c44b2aae99365f3e91c4bb2892f78ca276ca60cc196a758d85cbedc557493d809ee47a762a5745a9a452e3b4cc0bc45193c6fa7aaf00fab0b7090b820adb3417fc8fbdfc6dc4f099b1b06d3085f248b3de98c4f89e8842a4c20c887b44366e93c16ae3b1a8e9b3f078b9ff17a844a54c328b5952aa822548a950512ee97e2556d782273ccfc1d9646a4516049cf7a758024c011e4d47a207ce4e4f83e398c08327ff1eea4e4cec7f83c92a712741541e9c4bcea56bd29af190c9213c915a1127df38791cd73e90039e799340c4df52670809acd1e0e44f5a2c1d51ff7bc8047eefbb041e4f341fbc305f89433cdd55af1f769d7267dc635b2cfab960e553f01368a46443544fa558e179a1d46252271ee8f6704034cae98be55c36feb027230ea2af4f6a8c040ae4dc406d80380eea82501f492e518ad7b97fd26f78349fe4fcfe15122ce238fecad2638aa6500d40477ee8f132a0cb5b551a36e7bafb21d929ce0b8db99cbad190027e18a71f0b9c72f51ea19fa2dccabb8d72c570ffadff97b4d5fdb9b4c79851781e21e1c58f43f46", 0x740}, {0x0}], 0x3) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.92613365s ago: executing program 4 (id=129): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8045}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1}, 0xffff7fff}], 0x2, 0x0, 0x0) 1.840903055s ago: executing program 4 (id=130): socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r4, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x80) 1.649443169s ago: executing program 4 (id=131): syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc01"], 0x294}}, 0x0) 1.56340571s ago: executing program 3 (id=132): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x814) 1.428236857s ago: executing program 4 (id=133): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x6d0802, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x8, "f65040e8"}, @main=@item_4={0x3, 0x0, 0xb}, @main=@item_012={0x2, 0x0, 0x9, "deeb"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @local=@item_012={0x2, 0x2, 0x9, "fd7d"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "fc5d487b"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x24048000) (async) write$FUSE_DIRENT(r4, &(0x7f0000000080)={0xd0, 0x0, 0x0, [{0x1, 0x2, 0x3, 0xc, '\'%&'}, {0x3, 0x9870, 0x4, 0x4, '[/1\x04'}, {0x5, 0x3, 0x0, 0x5b}, {0x6, 0xb7d, 0x2, 0xfffffc21, '!\x91'}, {0x1, 0x9, 0xf, 0xdb73, '/dev/sequencer\x00'}, {0x6, 0x5, 0x6, 0x8, '(+-}]-'}]}, 0xd0) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r5, 0x10d, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 1.362328722s ago: executing program 3 (id=134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8045}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1}, 0xffff7fff}], 0x2, 0x0, 0x0) (fail_nth: 1) 976.649027ms ago: executing program 1 (id=135): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x10001, "029c6e5c846eccb800d2ae30e3f5c320998750190300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r3}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 922.149357ms ago: executing program 0 (id=136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8045}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1}, 0xffff7fff}], 0x2, 0x0, 0x0) 863.36708ms ago: executing program 3 (id=137): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@assoc={0x18, 0x117, 0x4, 0xa6}], 0x18, 0x8045}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000340)=""/53, 0x35}], 0x4, &(0x7f00000003c0)}, 0xffff7fff}], 0x2, 0x0, 0x0) 767.971023ms ago: executing program 3 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 437.135015ms ago: executing program 3 (id=139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x1, 0x4000000, 0x9, 0x7fe}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)) 0s ago: executing program 1 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e000100020000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000016"], 0x28}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)='X', 0xffa0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x140, 0x300, 0xa00, 0x140, 0x80000000, 0xb, 0x0, 0x2000000, {0x0, 0x0, 0x10}, {0x1, 0x0, 0xfffffffc}, {0x0, 0xfffffffe}, {0x41, 0x10000000}, 0x7, 0x3f0, 0x0, 0xfca, 0x0, 0x253f, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x11, 0x200, 0x3}) pread64(r4, &(0x7f00000001c0)=""/4096, 0x1000, 0xffffffff9ec9f3c2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.55' (ED25519) to the list of known hosts. [ 57.412234][ T5817] cgroup: Unknown subsys name 'net' [ 57.556307][ T5817] cgroup: Unknown subsys name 'cpuset' [ 57.563991][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.798930][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.980047][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.987894][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.996554][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.002061][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.004062][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.019478][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.023280][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.028362][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.034475][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.049229][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.057072][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.059384][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.065937][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.072695][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.079404][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.085849][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.093279][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.101172][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.107889][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.114485][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.123039][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.127000][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.144068][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.144117][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.159645][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.176027][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.185657][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.210942][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.220712][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.228126][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.561434][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 61.628819][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 61.720994][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.729138][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.736949][ T5847] bridge_slave_0: entered allmulticast mode [ 61.743553][ T5847] bridge_slave_0: entered promiscuous mode [ 61.769718][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.777421][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.784857][ T5847] bridge_slave_1: entered allmulticast mode [ 61.791853][ T5847] bridge_slave_1: entered promiscuous mode [ 61.826795][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 61.859616][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 61.882283][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.893805][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.927882][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.935282][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.942405][ T5845] bridge_slave_0: entered allmulticast mode [ 61.949435][ T5845] bridge_slave_0: entered promiscuous mode [ 61.957247][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.964405][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.971689][ T5845] bridge_slave_1: entered allmulticast mode [ 61.978451][ T5845] bridge_slave_1: entered promiscuous mode [ 62.049991][ T5847] team0: Port device team_slave_0 added [ 62.068410][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.082093][ T5847] team0: Port device team_slave_1 added [ 62.088050][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 62.100896][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.169739][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.177069][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.202985][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.216039][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.222998][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.248936][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.265082][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.272214][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.279911][ T5846] bridge_slave_0: entered allmulticast mode [ 62.286833][ T5846] bridge_slave_0: entered promiscuous mode [ 62.297934][ T5845] team0: Port device team_slave_0 added [ 62.305206][ T5845] team0: Port device team_slave_1 added [ 62.346284][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.353450][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.360779][ T5846] bridge_slave_1: entered allmulticast mode [ 62.367544][ T5846] bridge_slave_1: entered promiscuous mode [ 62.382556][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.390119][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.401025][ T5848] bridge_slave_0: entered allmulticast mode [ 62.407854][ T5848] bridge_slave_0: entered promiscuous mode [ 62.417381][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.424620][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.431768][ T5848] bridge_slave_1: entered allmulticast mode [ 62.439218][ T5848] bridge_slave_1: entered promiscuous mode [ 62.457679][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.464839][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.490870][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.503803][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.510864][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.536907][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.568461][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.587714][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.621606][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.639861][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.706351][ T5845] hsr_slave_0: entered promiscuous mode [ 62.713208][ T5845] hsr_slave_1: entered promiscuous mode [ 62.721848][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.729494][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.736942][ T5849] bridge_slave_0: entered allmulticast mode [ 62.743485][ T5849] bridge_slave_0: entered promiscuous mode [ 62.752803][ T5846] team0: Port device team_slave_0 added [ 62.764495][ T5848] team0: Port device team_slave_0 added [ 62.772654][ T5847] hsr_slave_0: entered promiscuous mode [ 62.779102][ T5847] hsr_slave_1: entered promiscuous mode [ 62.786159][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.794202][ T5847] Cannot create hsr debugfs directory [ 62.800622][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.810579][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.818108][ T5849] bridge_slave_1: entered allmulticast mode [ 62.825248][ T5849] bridge_slave_1: entered promiscuous mode [ 62.833106][ T5846] team0: Port device team_slave_1 added [ 62.849565][ T5848] team0: Port device team_slave_1 added [ 62.910778][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.918555][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.945832][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.957822][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.964866][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.990822][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.003523][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.010612][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.036664][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.071695][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.081390][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.088561][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.114552][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.143298][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.165193][ T5837] Bluetooth: hci3: command tx timeout [ 63.171070][ T5836] Bluetooth: hci0: command tx timeout [ 63.180334][ T5849] team0: Port device team_slave_0 added [ 63.217787][ T5849] team0: Port device team_slave_1 added [ 63.244754][ T5836] Bluetooth: hci1: command tx timeout [ 63.250492][ T5836] Bluetooth: hci2: command tx timeout [ 63.302625][ T5846] hsr_slave_0: entered promiscuous mode [ 63.309400][ T5846] hsr_slave_1: entered promiscuous mode [ 63.315697][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.323275][ T5846] Cannot create hsr debugfs directory [ 63.329610][ T5836] Bluetooth: hci4: command tx timeout [ 63.341650][ T5848] hsr_slave_0: entered promiscuous mode [ 63.351053][ T5848] hsr_slave_1: entered promiscuous mode [ 63.357371][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.368203][ T5848] Cannot create hsr debugfs directory [ 63.380672][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.390882][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.417467][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.447972][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.455230][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.481552][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.603535][ T5849] hsr_slave_0: entered promiscuous mode [ 63.610128][ T5849] hsr_slave_1: entered promiscuous mode [ 63.618009][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.625654][ T5849] Cannot create hsr debugfs directory [ 63.717619][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.728278][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.760870][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.795648][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.850659][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.859209][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.872614][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.898123][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.969086][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.982704][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.011762][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.030397][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.066581][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.077016][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.095119][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.102446][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.112993][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.182638][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.193564][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.219697][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.230630][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.254467][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.279276][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.307034][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.314301][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.339482][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.346622][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.395102][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.419609][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.430795][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.437887][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.447156][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.454290][ T5082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.508355][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.528069][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.535183][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.570625][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.605787][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.612871][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.657945][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.683004][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.690121][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.700682][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.707818][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.731931][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.785687][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.828252][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.858867][ T5847] veth0_vlan: entered promiscuous mode [ 64.872820][ T5845] veth0_vlan: entered promiscuous mode [ 64.887938][ T5845] veth1_vlan: entered promiscuous mode [ 64.907283][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.931183][ T5847] veth1_vlan: entered promiscuous mode [ 64.960133][ T5845] veth0_macvtap: entered promiscuous mode [ 64.973489][ T5845] veth1_macvtap: entered promiscuous mode [ 65.001985][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.025495][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.039578][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.046693][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.058330][ T5846] veth0_vlan: entered promiscuous mode [ 65.066120][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.083429][ T5847] veth0_macvtap: entered promiscuous mode [ 65.096998][ T5846] veth1_vlan: entered promiscuous mode [ 65.109281][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.116389][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.128880][ T5847] veth1_macvtap: entered promiscuous mode [ 65.148820][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.189089][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.199751][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.209923][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.219150][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.236209][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.248769][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.256174][ T5837] Bluetooth: hci3: command tx timeout [ 65.260469][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.271431][ T5836] Bluetooth: hci0: command tx timeout [ 65.314616][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.325572][ T5836] Bluetooth: hci2: command tx timeout [ 65.325622][ T5836] Bluetooth: hci1: command tx timeout [ 65.336913][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.348090][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.379125][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.388162][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.397640][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.407410][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.416234][ T5837] Bluetooth: hci4: command tx timeout [ 65.440192][ T5848] veth0_vlan: entered promiscuous mode [ 65.456441][ T5846] veth0_macvtap: entered promiscuous mode [ 65.476155][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.498782][ T5846] veth1_macvtap: entered promiscuous mode [ 65.533658][ T5848] veth1_vlan: entered promiscuous mode [ 65.562607][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.576076][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.580744][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.595798][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.605899][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.617391][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.628185][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.660540][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.672613][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.674027][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.687128][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.693474][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.709477][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.720410][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.761829][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.764775][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.778796][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.778888][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.795025][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.804165][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.821353][ T5849] veth0_vlan: entered promiscuous mode [ 65.845559][ T5848] veth0_macvtap: entered promiscuous mode [ 65.864841][ T5848] veth1_macvtap: entered promiscuous mode [ 65.891321][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.896850][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.910221][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.919080][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.929070][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.939632][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.949533][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.960597][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.972684][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.993469][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.012522][ T5849] veth1_vlan: entered promiscuous mode [ 66.030129][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.041530][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.053159][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.067194][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.077164][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.087820][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.098748][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.134360][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.143093][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.158572][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.185400][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.271246][ T5849] veth0_macvtap: entered promiscuous mode [ 66.324502][ T5849] veth1_macvtap: entered promiscuous mode [ 66.361679][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.384256][ T5892] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.385335][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.426172][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.448816][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.461031][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.478457][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.488549][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.503738][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.521711][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.533861][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.554951][ T5894] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 66.564417][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.599670][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.613235][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.628817][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.643068][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.655239][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.670431][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.685931][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.696516][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.706389][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.717043][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.728583][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.742926][ T5894] team0: Port device netdevsim0 added [ 66.809015][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.826127][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.858742][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.868520][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.957439][ T5082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.973976][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.982343][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.989933][ T5082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.183826][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.203441][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.329546][ T5837] Bluetooth: hci3: command tx timeout [ 67.338138][ T5837] Bluetooth: hci0: command tx timeout [ 67.363968][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.403156][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.413799][ T5836] Bluetooth: hci1: command tx timeout [ 67.414324][ T5837] Bluetooth: hci2: command tx timeout [ 67.484646][ T976] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.495842][ T5837] Bluetooth: hci4: command tx timeout [ 67.584625][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.621219][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.667856][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.680687][ T976] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.702071][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.729606][ T976] usb 1-1: config 0 descriptor?? [ 67.752087][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.779942][ T5885] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.790247][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.836009][ T5885] usb 5-1: config 0 descriptor?? [ 67.907305][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.967691][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10'. [ 68.104258][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.194342][ T976] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 68.231003][ T976] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 68.255733][ T5885] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 68.287901][ T5885] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input6 [ 68.302395][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.329655][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.349218][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.360998][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.379472][ T976] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 68.393188][ T9] usb 2-1: SerialNumber: syz [ 68.479636][ T5885] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 68.732258][ T5923] pimreg: entered allmulticast mode [ 68.838732][ T5924] pimreg: left allmulticast mode [ 68.874304][ T25] usb 5-1: USB disconnect, device number 2 [ 68.900564][ T5882] usb 1-1: USB disconnect, device number 2 [ 68.924143][ T5885] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.118766][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.152539][ T5885] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.179311][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.206107][ T5885] usb 3-1: config 0 descriptor?? [ 69.267729][ T9] usb 2-1: 0:2 : does not exist [ 69.285435][ T9] usb 2-1: USB disconnect, device number 2 [ 69.404059][ T5837] Bluetooth: hci0: command tx timeout [ 69.404069][ T5836] Bluetooth: hci3: command tx timeout [ 69.485090][ T5837] Bluetooth: hci2: command tx timeout [ 69.490595][ T5837] Bluetooth: hci1: command tx timeout [ 69.504109][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.550475][ T5936] fuse: Unknown parameter 'otm’de' [ 69.563891][ T5836] Bluetooth: hci4: command tx timeout [ 69.651959][ T5885] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 69.668919][ T5885] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input7 [ 69.757045][ T5885] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 69.773960][ T5832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.973792][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.975337][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.996553][ T5832] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 70.012686][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.038831][ T5832] usb 5-1: config 0 descriptor?? [ 70.137018][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 70.147802][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.161176][ T9] usb 4-1: config 0 descriptor?? [ 70.178175][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 70.201383][ T5886] usb 3-1: USB disconnect, device number 2 [ 70.303754][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.374365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.484016][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 70.505855][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.524490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.533171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.542921][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 70.573149][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.614387][ T5883] usb 1-1: config 0 descriptor?? [ 70.624124][ T5883] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 70.643706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 70.654045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.663266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.672083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.723653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.733784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.742165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.845517][ T5832] usbhid 5-1:0.0: can't add hid device: -71 [ 70.876947][ T5832] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 70.920035][ T5832] usb 5-1: USB disconnect, device number 3 [ 70.956407][ T9] gspca_spca508: reg_read err -71 [ 70.975097][ T9] gspca_spca508: reg_read err -71 [ 70.995743][ T9] gspca_spca508: reg_read err -71 [ 71.014012][ T9] gspca_spca508: reg_read err -71 [ 71.023939][ T9] gspca_spca508: reg write: error -71 [ 71.029425][ T9] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 71.060875][ T9] usb 4-1: USB disconnect, device number 2 [ 71.193896][ T5880] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 71.352392][ T5957] binder: 5954:5957 ioctl ae9a 0 returned -22 [ 71.369476][ T5957] kvm: emulating exchange as write [ 71.387278][ T5880] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 71.396592][ T5880] usb 3-1: config 0 has no interface number 0 [ 71.402728][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.440783][ T5880] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 71.497873][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 71.567027][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.573532][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.608375][ T5880] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 71.649081][ T5880] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 71.699917][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.736734][ T5880] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 71.779010][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.822970][ T5880] usb 3-1: config 0 descriptor?? [ 71.847618][ T5952] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.874004][ T5952] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.909148][ T5880] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 72.064083][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.214302][ T5885] usb 5-1: device descriptor read/64, error -71 [ 72.273928][ T976] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.473919][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.485593][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 72.494298][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.505604][ T976] usb 4-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 72.517717][ T976] usb 4-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 72.553387][ T976] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 72.607452][ T976] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.623831][ T5885] usb 5-1: device descriptor read/64, error -71 [ 72.648210][ T976] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 72.662938][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.720009][ T976] usb 4-1: Product: syz [ 72.734154][ T5885] usb usb5-port1: attempt power cycle [ 72.751287][ T976] usb 4-1: Manufacturer: syz [ 72.764122][ T976] usb 4-1: SerialNumber: syz [ 72.782187][ T976] usb 4-1: config 0 descriptor?? [ 72.807959][ T5968] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 73.087348][ T976] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.134144][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.159446][ T5885] usb 5-1: device descriptor read/8, error -71 [ 73.170662][ T976] usb 4-1: USB disconnect, device number 3 [ 73.348236][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.458106][ T5885] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.518641][ T5885] usb 5-1: device descriptor read/8, error -71 [ 73.634162][ T5885] usb usb5-port1: unable to enumerate USB device [ 73.715796][ T5883] usb 1-1: USB disconnect, device number 3 [ 73.860481][ T5885] usb 3-1: USB disconnect, device number 3 [ 73.898590][ T5885] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 74.043903][ T5836] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 74.294556][ T5983] netlink: 'syz.0.31': attribute type 7 has an invalid length. [ 74.563911][ T976] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.573722][ T5880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.716636][ T976] usb 1-1: config 125 has too many interfaces: 144, using maximum allowed: 32 [ 74.725685][ T976] usb 1-1: config 125 has an invalid descriptor of length 0, skipping remainder of the config [ 74.743943][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 74.753456][ T5880] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 74.761791][ T976] usb 1-1: config 125 has 1 interface, different from the descriptor's value: 144 [ 74.763683][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.781710][ T5880] usb 2-1: config 0 has no interface number 1 [ 74.787983][ T5880] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 74.801578][ T5880] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 74.820479][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.820487][ T976] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 74.820513][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.852039][ T5880] usb 2-1: Product: syz [ 74.873373][ T5880] usb 2-1: Manufacturer: syz [ 74.880080][ T976] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 74.887762][ T5880] usb 2-1: SerialNumber: syz [ 74.889592][ T5880] usb 2-1: config 0 descriptor?? [ 74.917112][ T5880] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 74.931354][ T5885] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.003436][ T5996] netlink: 460 bytes leftover after parsing attributes in process `syz.4.35'. [ 75.142093][ T5880] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 75.170302][ T2337] pvrusb2: Invalid write control endpoint [ 75.174852][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.213145][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.224769][ T2337] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 75.234875][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.239093][ T2337] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 75.293350][ T5885] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 75.309339][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.332041][ T5885] usb 3-1: config 0 descriptor?? [ 75.372820][ T976] pwc: send_video_command error -71 [ 75.381034][ T976] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 75.414418][ T976] Philips webcam 1-1:125.0: probe with driver Philips webcam failed with error -71 [ 75.422965][ T6000] veth0: entered promiscuous mode [ 75.434935][ T5988] netlink: 1275 bytes leftover after parsing attributes in process `syz.1.32'. [ 75.459754][ T5988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.462111][ T6000] veth0: left promiscuous mode [ 75.485074][ T976] usb 1-1: USB disconnect, device number 4 [ 75.554769][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.584268][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.629968][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 75.638015][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 75.662228][ T5885] usb 3-1: USB disconnect, device number 4 [ 75.931782][ T5880] usb 2-1: USB disconnect, device number 3 [ 76.103802][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 76.163832][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.263774][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 76.270583][ T5883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.281621][ T5883] usb 3-1: config 0 has no interface number 0 [ 76.287845][ T5883] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.297614][ T5883] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.308081][ T5883] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.318153][ T5883] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.323791][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 76.328085][ T5883] usb 3-1: config 0 interface 1 has no altsetting 0 [ 76.339844][ T5883] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 76.341155][ T5885] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.349043][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.350876][ T5883] usb 3-1: config 0 descriptor?? [ 76.372531][ T5885] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.392312][ T976] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.405115][ T5885] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 76.422203][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.430810][ T5885] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 76.447930][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.460834][ T5885] usb 4-1: config 0 descriptor?? [ 76.565495][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.589762][ T976] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.605658][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.620570][ T976] usb 1-1: config 0 descriptor?? [ 76.668929][ T5886] usb 3-1: USB disconnect, device number 5 [ 76.712438][ T973] cfg80211: failed to load regulatory.db [ 76.905848][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 76.942343][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 76.958000][ T5885] usb 4-1: USB disconnect, device number 4 [ 77.034995][ T976] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 77.071358][ T976] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input8 [ 77.302125][ T976] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 77.404417][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.539243][ T976] usb 1-1: USB disconnect, device number 5 [ 77.599296][ T5885] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.608070][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.620986][ T5885] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.636815][ T5885] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.646817][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.655457][ T5885] usb 5-1: Product: syz [ 77.659631][ T5885] usb 5-1: Manufacturer: syz [ 77.672174][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 77.677669][ T5885] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 77.737913][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 77.812022][ T6042] netlink: 'syz.3.51': attribute type 7 has an invalid length. [ 77.881956][ T5883] usb 5-1: USB disconnect, device number 8 [ 77.903722][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 77.910217][ T5886] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.921550][ T5886] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.932194][ T5886] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.945689][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.952309][ T5886] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 77.961380][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.971611][ T5886] usb 3-1: config 0 descriptor?? [ 78.057981][ T976] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 78.226722][ T976] usb 4-1: config 125 has too many interfaces: 144, using maximum allowed: 32 [ 78.239431][ T976] usb 4-1: config 125 has an invalid descriptor of length 0, skipping remainder of the config [ 78.250762][ T976] usb 4-1: config 125 has 1 interface, different from the descriptor's value: 144 [ 78.260198][ T976] usb 4-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 78.269363][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.282692][ T976] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 78.389438][ T5886] usbhid 3-1:0.0: can't add hid device: -71 [ 78.395841][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 78.406786][ T5886] usb 3-1: USB disconnect, device number 6 [ 78.632436][ T976] pwc: send_video_command error -71 [ 78.642220][ T976] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 78.651564][ T976] Philips webcam 4-1:125.0: probe with driver Philips webcam failed with error -71 [ 78.678946][ T976] usb 4-1: USB disconnect, device number 5 [ 78.779594][ T6054] netlink: 460 bytes leftover after parsing attributes in process `syz.4.54'. [ 78.933789][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 79.107481][ T5886] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.118613][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.128442][ T5886] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.145949][ T5886] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.157421][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.168339][ T5886] usb 1-1: Product: syz [ 79.172535][ T5886] usb 1-1: Manufacturer: syz [ 79.181907][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 79.187247][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 79.192663][ T5886] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 79.392029][ T5885] usb 1-1: USB disconnect, device number 6 [ 79.969669][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 80.294149][ T5886] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.312922][ T6081] netlink: 460 bytes leftover after parsing attributes in process `syz.0.67'. [ 80.446383][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.469316][ T5886] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.498767][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.532099][ T5886] usb 5-1: config 0 descriptor?? [ 80.705924][ T5832] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 80.743374][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 80.799545][ T6077] bond0: entered promiscuous mode [ 80.826967][ T6077] bond_slave_0: entered promiscuous mode [ 80.833290][ T6077] bond_slave_1: entered promiscuous mode [ 80.845014][ T6077] bond0: entered allmulticast mode [ 80.856803][ T6077] bond_slave_0: entered allmulticast mode [ 80.862864][ T6077] bond_slave_1: entered allmulticast mode [ 80.873874][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 80.880864][ T5832] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.892587][ T5832] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.903596][ T5832] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 80.918058][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.925087][ T5832] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 80.936395][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.953248][ T5886] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 80.967594][ T5832] usb 1-1: config 0 descriptor?? [ 80.989052][ T5886] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input9 [ 81.089837][ T5886] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 81.337510][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 81.412461][ T5832] usbhid 1-1:0.0: can't add hid device: -71 [ 81.418753][ T5832] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.436213][ T5832] usb 1-1: USB disconnect, device number 7 [ 81.505245][ T5885] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.518919][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.529466][ T5885] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.545376][ T5885] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.550748][ T5886] usb 5-1: USB disconnect, device number 9 [ 81.554653][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.574298][ T5885] usb 3-1: Product: syz [ 81.578507][ T5885] usb 3-1: Manufacturer: syz [ 81.592432][ T5885] cdc_wdm 3-1:1.0: skipping garbage [ 81.598530][ T5885] cdc_wdm 3-1:1.0: skipping garbage [ 81.616147][ T5885] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 81.803311][ T5885] usb 3-1: USB disconnect, device number 7 [ 81.983936][ T6110] netlink: 460 bytes leftover after parsing attributes in process `syz.1.79'. [ 82.195072][ T5886] usb 4-1: new low-speed USB device number 6 using dummy_hcd Stopping sshd: [ 82.367779][ T5886] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 82.389931][ T5886] usb 4-1: config 0 has no interface number 0 [ 82.405070][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.429897][ T5886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 82.462479][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 82.494437][ T5886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 82.510914][ T5886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 82.521858][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.534999][ T5886] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 82.544113][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.558395][ T5886] usb 4-1: config 0 descriptor?? [ 82.564347][ T6111] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.571632][ T6111] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.583365][ T5886] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 Connection to 10.128.10.55 closed by remote host. [ 82.944091][ T5832] usb 3-1: new high-speed USB device number 8 using dummy_hcd OK Stopping dhcpcd... [ 83.055326][ T5886] usb 4-1: USB disconnect, device number 6 [ 83.081064][ T5886] ldusb 4-1:0.55: LD USB Device #0 now disconnected stopped /sbin/dhcpcd (pid 5498) [ 83.138188][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 83.161963][ T5832] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.192351][ T5832] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.200150][ T6150] netlink: 256 bytes leftover after parsing attributes in process `syz.0.94'. [ 83.214624][ T5832] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 83.274805][ T5832] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.293691][ T5832] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 83.302756][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.336523][ T5832] usb 3-1: config 0 descriptor?? Stopping network: [ 83.780421][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 83.786620][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 83.808122][ T5832] usb 3-1: USB disconnect, device number 8 [ 84.091890][ T6184] FAULT_INJECTION: forcing a failure. [ 84.091890][ T6184] name failslab, interval 1, probability 0, space 0, times 1 [ 84.120965][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.3.103 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 84.128972][ T5885] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 84.131577][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 84.131637][ T6184] Call Trace: [ 84.152479][ T6184] [ 84.155409][ T6184] dump_stack_lvl+0x241/0x360 [ 84.160108][ T6184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.165303][ T6184] ? __pfx__printk+0x10/0x10 [ 84.169897][ T6184] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 84.175268][ T6184] ? __pfx___might_resched+0x10/0x10 [ 84.180551][ T6184] should_fail_ex+0x3b0/0x4e0 [ 84.185235][ T6184] should_failslab+0xac/0x100 [ 84.189912][ T6184] __kmalloc_node_noprof+0xe1/0x4d0 [ 84.195112][ T6184] ? __kvmalloc_node_noprof+0x72/0x190 [ 84.200574][ T6184] ? __pfx_macvlan_setup+0x10/0x10 [ 84.205686][ T6184] __kvmalloc_node_noprof+0x72/0x190 [ 84.210973][ T6184] alloc_netdev_mqs+0xa4/0x1080 [ 84.215818][ T6184] ? __pfx_macvlan_setup+0x10/0x10 [ 84.220928][ T6184] ? __pfx_snprintf+0x10/0x10 [ 84.225614][ T6184] ? rcu_is_watching+0x15/0xb0 [ 84.230395][ T6184] rtnl_create_link+0x2f9/0xc20 [ 84.235255][ T6184] rtnl_newlink_create+0x210/0xa40 [ 84.240385][ T6184] ? __pfx___mutex_lock+0x10/0x10 [ 84.245415][ T6184] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 84.251057][ T6184] ? ns_capable+0x8a/0xf0 [ 84.255395][ T6184] rtnl_newlink+0x160d/0x2150 [ 84.260094][ T6184] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.265121][ T6184] ? __netlink_deliver_tap+0x56b/0x7f0 [ 84.270573][ T6184] ? __pfx_validate_chain+0x10/0x10 [ 84.275772][ T6184] ? __sock_sendmsg+0x221/0x270 [ 84.280625][ T6184] ? ____sys_sendmsg+0x52a/0x7e0 [ 84.285560][ T6184] ? __sys_sendmsg+0x269/0x350 [ 84.290344][ T6184] ? do_syscall_64+0xf3/0x230 [ 84.295040][ T6184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.301126][ T6184] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.307110][ T6184] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.313443][ T6184] ? mark_lock+0x9a/0x360 [ 84.317777][ T6184] ? __lock_acquire+0x1397/0x2100 [ 84.322821][ T6184] ? __pfx_lock_release+0x10/0x10 [ 84.327853][ T6184] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.332882][ T6184] rtnetlink_rcv_msg+0x791/0xcf0 [ 84.337819][ T6184] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 84.342935][ T6184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.348402][ T6184] ? ref_tracker_free+0x643/0x7e0 [ 84.353429][ T6184] netlink_rcv_skb+0x1e3/0x430 [ 84.358537][ T6184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.363995][ T6184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.369296][ T6184] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.374491][ T6184] netlink_unicast+0x7f6/0x990 [ 84.379271][ T6184] ? __pfx_netlink_unicast+0x10/0x10 [ 84.384557][ T6184] ? __virt_addr_valid+0x45f/0x530 [ 84.389665][ T6184] ? __phys_addr_symbol+0x2f/0x70 [ 84.394690][ T6184] ? __check_object_size+0x47a/0x730 [ 84.399983][ T6184] netlink_sendmsg+0x8e4/0xcb0 [ 84.404762][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.410046][ T6184] ? aa_sock_msg_perm+0x91/0x160 [ 84.414982][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.420262][ T6184] __sock_sendmsg+0x221/0x270 [ 84.424940][ T6184] ____sys_sendmsg+0x52a/0x7e0 [ 84.429704][ T6184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.434982][ T6184] ? __fget_files+0x2a/0x410 [ 84.439574][ T6184] ? __fget_files+0x2a/0x410 [ 84.444169][ T6184] __sys_sendmsg+0x269/0x350 [ 84.448754][ T6184] ? __pfx_lock_release+0x10/0x10 [ 84.453774][ T6184] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.458887][ T6184] ? __pfx_vfs_write+0x10/0x10 [ 84.463672][ T6184] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.470001][ T6184] ? do_syscall_64+0x100/0x230 [ 84.474772][ T6184] ? do_syscall_64+0xb6/0x230 [ 84.479452][ T6184] do_syscall_64+0xf3/0x230 [ 84.483952][ T6184] ? clear_bhb_loop+0x35/0x90 [ 84.488619][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.494525][ T6184] RIP: 0033:0x7f4ee2985d29 [ 84.498943][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.518543][ T6184] RSP: 002b:00007f4ee3741038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.526953][ T6184] RAX: ffffffffffffffda RBX: 00007f4ee2b75fa0 RCX: 00007f4ee2985d29 [ 84.534917][ T6184] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 84.542880][ T6184] RBP: 00007f4ee3741090 R08: 0000000000000000 R09: 0000000000000000 [ 84.550844][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.558805][ T6184] R13: 0000000000000000 R14: 00007f4ee2b75fa0 R15: 00007f4ee2c9fa28 [ 84.566787][ T6184] [ 84.569815][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.598980][ T973] usb 1-1: new high-speed USB device number 8 using dummy_hcd OK Stopping iptables: [ 84.765458][ T5885] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.784391][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 84.792898][ T973] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 84.793774][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.803277][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.864687][ T5885] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.870323][ T973] usb 1-1: Product: syz OK [ 84.895843][ T5885] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.915019][ T973] usb 1-1: Manufacturer: syz [ 84.917761][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.919630][ T973] usb 1-1: SerialNumber: syz [ 84.941137][ T973] usb 1-1: config 0 descriptor?? [ 84.953031][ T5885] usb 5-1: Product: syz [ 84.963184][ T5885] usb 5-1: Manufacturer: syz Stopping system message bus: [ 85.007067][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 85.012304][ T5885] cdc_wdm 5-1:1.0: skipping garbage [ 85.048584][ T5885] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 85.234830][ T5885] usb 5-1: USB disconnect, device number 10 [ 85.395697][ T973] airspy 1-1:0.0: Board ID: 00 [ 85.407072][ T973] airspy 1-1:0.0: Firmware version: [ 85.437984][ T6202] netlink: 256 bytes leftover after parsing attributes in process `syz.3.107'. done Stopping klogd: OK Stopping acpid: [ 86.252265][ T6225] trusted_key: syz.2.112 sent an empty control message without MSG_MORE. [ 86.411337][ T973] airspy 1-1:0.0: Registered as swradio24 [ 86.428037][ T973] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 86.556566][ T6236] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 86.563277][ T6236] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.579197][ T6240] netlink: 256 bytes leftover after parsing attributes in process `syz.1.118'. [ 86.595098][ T6236] vhci_hcd vhci_hcd.0: Device attached [ 86.605317][ T6237] vhci_hcd: connection closed [ 86.608465][ T32] vhci_hcd: stop threads [ 86.618473][ T32] vhci_hcd: release socket [ 86.623262][ T32] vhci_hcd: disconnect device [ 86.624024][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.640655][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.652631][ T9] usb 1-1: USB disconnect, device number 8 [ 86.764908][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 86.873814][ T973] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.923794][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 86.931052][ T5885] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.942148][ T5885] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.953456][ T5885] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 86.966422][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.973023][ T5885] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 86.982143][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.991335][ T5885] usb 5-1: config 0 descriptor?? [ 87.027183][ T973] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.038812][ T973] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 87.049166][ T973] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.059705][ T973] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.074677][ T973] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.083830][ T973] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.091870][ T973] usb 4-1: Product: syz [ 87.096103][ T973] usb 4-1: Manufacturer: syz [ 87.105692][ T973] cdc_wdm 4-1:1.0: skipping garbage [ 87.110929][ T973] cdc_wdm 4-1:1.0: skipping garbage [ 87.120566][ T973] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 87.251394][ T6251] FAULT_INJECTION: forcing a failure. [ 87.251394][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 87.270076][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz.0.123 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 87.280698][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 87.290750][ T6251] Call Trace: [ 87.294039][ T6251] [ 87.296971][ T6251] dump_stack_lvl+0x241/0x360 [ 87.301662][ T6251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.306874][ T6251] ? __pfx__printk+0x10/0x10 [ 87.311474][ T6251] should_fail_ex+0x3b0/0x4e0 [ 87.316175][ T6251] should_failslab+0xac/0x100 [ 87.320859][ T6251] ? skb_clone+0x20c/0x390 [ 87.325295][ T6251] kmem_cache_alloc_noprof+0x70/0x380 [ 87.330701][ T6251] skb_clone+0x20c/0x390 [ 87.334976][ T6251] __netlink_deliver_tap+0x3cc/0x7f0 [ 87.340299][ T6251] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.345516][ T6251] netlink_deliver_tap+0x19d/0x1b0 [ 87.350647][ T6251] netlink_unicast+0x7c4/0x990 [ 87.355444][ T6251] ? __pfx_netlink_unicast+0x10/0x10 [ 87.360789][ T6251] ? __virt_addr_valid+0x45f/0x530 [ 87.365927][ T6251] ? __phys_addr_symbol+0x2f/0x70 [ 87.370980][ T6251] ? __check_object_size+0x47a/0x730 [ 87.376299][ T6251] netlink_sendmsg+0x8e4/0xcb0 [ 87.381092][ T6251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.387048][ T6251] ? aa_sock_msg_perm+0x91/0x160 [ 87.392018][ T6251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.397316][ T6251] __sock_sendmsg+0x221/0x270 [ 87.401993][ T6251] ____sys_sendmsg+0x52a/0x7e0 [ 87.406755][ T6251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.412045][ T6251] ? __fget_files+0x2a/0x410 [ 87.416648][ T6251] ? __fget_files+0x2a/0x410 [ 87.421240][ T6251] __sys_sendmsg+0x269/0x350 [ 87.425840][ T6251] ? __pfx_lock_release+0x10/0x10 [ 87.430907][ T6251] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.436163][ T6251] ? __pfx_vfs_write+0x10/0x10 [ 87.440984][ T6251] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.447339][ T6251] ? do_syscall_64+0x100/0x230 [ 87.452139][ T6251] ? do_syscall_64+0xb6/0x230 [ 87.456845][ T6251] do_syscall_64+0xf3/0x230 [ 87.461806][ T6251] ? clear_bhb_loop+0x35/0x90 [ 87.466495][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.472400][ T6251] RIP: 0033:0x7f184ad85d29 [ 87.476824][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.496434][ T6251] RSP: 002b:00007f184bc1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.504859][ T6251] RAX: ffffffffffffffda RBX: 00007f184af75fa0 RCX: 00007f184ad85d29 [ 87.512829][ T6251] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 87.520813][ T6251] RBP: 00007f184bc1c090 R08: 0000000000000000 R09: 0000000000000000 [ 87.528785][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.536756][ T6251] R13: 0000000000000000 R14: 00007f184af75fa0 R15: 00007f184b09fa28 [ 87.544744][ T6251] OK [ 87.562330][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 87.572486][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 87.574747][ T973] usb 4-1: USB disconnect, device number 7 [ 87.587598][ T5885] usb 5-1: USB disconnect, device number 11 Stopping syslogd: OK umount: can't remount debugfs read-only [ 88.073846][ T5885] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 88.250226][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.291817][ T5885] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.333383][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.371141][ T5885] usb 3-1: config 0 descriptor?? [ 88.668047][ T6284] FAULT_INJECTION: forcing a failure. [ 88.668047][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.706145][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.3.134 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 88.716805][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 88.726855][ T6284] Call Trace: [ 88.730126][ T6284] [ 88.733041][ T6284] dump_stack_lvl+0x241/0x360 [ 88.737713][ T6284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.742904][ T6284] ? __pfx__printk+0x10/0x10 [ 88.747501][ T6284] ? __pfx_lock_release+0x10/0x10 [ 88.752516][ T6284] should_fail_ex+0x3b0/0x4e0 [ 88.757189][ T6284] _copy_from_user+0x2f/0xc0 [ 88.761783][ T6284] copy_msghdr_from_user+0xae/0x680 [ 88.766973][ T6284] ? __lock_acquire+0x1397/0x2100 [ 88.771986][ T6284] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 88.777779][ T6284] ? __fget_files+0x2a/0x410 [ 88.782358][ T6284] ? __fget_files+0x2a/0x410 [ 88.786939][ T6284] do_recvmmsg+0x3bd/0xab0 [ 88.791346][ T6284] ? __pfx_do_recvmmsg+0x10/0x10 [ 88.796286][ T6284] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 88.802181][ T6284] ? ksys_write+0x22a/0x2b0 [ 88.806850][ T6284] ? __pfx_lock_release+0x10/0x10 [ 88.811867][ T6284] ? vfs_write+0x730/0xd30 [ 88.816279][ T6284] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.822247][ T6284] ? __fget_files+0x2a/0x410 [ 88.826845][ T6284] __x64_sys_recvmmsg+0x199/0x250 [ 88.831874][ T6284] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 88.837409][ T6284] ? do_syscall_64+0x100/0x230 [ 88.842168][ T6284] ? do_syscall_64+0xb6/0x230 [ 88.846835][ T6284] do_syscall_64+0xf3/0x230 [ 88.851327][ T6284] ? clear_bhb_loop+0x35/0x90 [ 88.856019][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.861900][ T6284] RIP: 0033:0x7f4ee2985d29 [ 88.866306][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.885899][ T6284] RSP: 002b:00007f4ee3741038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 88.895086][ T6284] RAX: ffffffffffffffda RBX: 00007f4ee2b75fa0 RCX: 00007f4ee2985d29 [ 88.903130][ T6284] RDX: 0000000000000002 RSI: 0000000020000400 RDI: 0000000000000004 [ 88.911089][ T6284] RBP: 00007f4ee3741090 R08: 0000000000000000 R09: 0000000000000000 [ 88.919074][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.927119][ T6284] R13: 0000000000000000 R14: 00007f4ee2b75fa0 R15: 00007f4ee2c9fa28 [ 88.935083][ T6284] [ 88.984928][ T5885] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 89.042069][ T5885] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input10 [ 89.123989][ T5832] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 89.175065][ T5885] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 89.305614][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 89.328241][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.343839][ T973] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 89.368306][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.389575][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.418603][ T5832] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.431289][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.453970][ T5832] usb 5-1: config 0 descriptor?? [ 89.503854][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 89.530134][ T973] usb 1-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 89.561214][ C0] keytouch 0003:0926:3333.0006: usb_submit_urb(ctrl) failed: -19 [ 89.561219][ T5886] usb 3-1: USB disconnect, device number 9 [ 89.577231][ T973] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.600979][ T973] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.633330][ T973] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.661319][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.676504][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.693736][ T973] usb 1-1: Product: syz [ 89.698890][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.717610][ T973] usb 1-1: Manufacturer: syz [ 89.724558][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.738561][ T973] usb 1-1: SerialNumber: syz [ 89.747548][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.783555][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.784777][ T973] cdc_ncm 1-1:1.0: skipping garbage [ 89.797790][ T973] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 89.804694][ T973] cdc_ncm 1-1:1.0: bind() failure [ 89.806035][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.839232][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.874108][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.882573][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.895483][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.913753][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only [ 89.993037][ T5832] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max umount: can't remount /dev/root read-only [ 90.015421][ T5886] usb 1-1: USB disconnect, device number 9 The system is going down NOW! Sent SIGTERM to all processes [ 90.075926][ T5832] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 90.098938][ T5817] syz-executor (5817) used greatest stack depth: 17528 bytes left [ 90.154553][ T5832] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 90.166147][ T5832] microsoft 0003:045E:07DA.0007: no inputs found [ 90.172791][ T5832] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 90.343941][ T5882] usb 4-1: device not accepting address 8, error -71 [ 90.833008][ T3477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.967553][ T3477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.998251][ T976] usb 5-1: USB disconnect, device number 12 [ 91.056507][ T3477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.106457][ T3477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.186196][ T3477] bridge_slave_1: left allmulticast mode [ 91.191992][ T3477] bridge_slave_1: left promiscuous mode [ 91.199579][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.212721][ T3477] bridge_slave_0: left allmulticast mode Sent SIGKILL to[ 91.220234][ T3477] bridge_slave_0: left promiscuous mode all processes [ 91.227122][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state Requesting system poweroff [ 91.490598][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.501653][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.511619][ T3477] bond0 (unregistering): Released all slaves [ 91.750396][ T3477] hsr_slave_0: left promiscuous mode [ 91.756477][ T3477] hsr_slave_1: left promiscuous mode [ 91.763421][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.770921][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.780598][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.788585][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.803535][ T3477] veth1_macvtap: left promiscuous mode [ 91.809606][ T3477] veth0_macvtap: left promiscuous mode [ 91.815325][ T3477] veth1_vlan: left promiscuous mode [ 91.820828][ T3477] veth0_vlan: left promiscuous mode [ 92.127426][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 92.164579][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 92.251391][ T2337] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 92.262191][ T2337] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 92.271386][ T2337] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 92.282000][ T2337] pvrusb2: Failure uploading firmware1 [ 92.287877][ T2337] pvrusb2: Device initialization was not successful. [ 92.295454][ T2337] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 92.305868][ T2337] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 92.315228][ T5880] pvrusb2: Device being rendered inoperable [ 92.326648][ T2337] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 92.335419][ T2337] ------------[ cut here ]------------ [ 92.340944][ T2337] WARNING: CPU: 1 PID: 2337 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x782/0x9e0 [ 92.352822][ T2337] Modules linked in: [ 92.356920][ T2337] CPU: 1 UID: 0 PID: 2337 Comm: pvrusb2-context Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 92.368337][ T2337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 92.378728][ T2337] RIP: 0010:firmware_fallback_sysfs+0x782/0x9e0 [ 92.385303][ T2337] Code: 1c 24 e9 4d fc ff ff e8 1c f9 95 fb c6 05 c6 3b fa 09 01 48 c7 c7 20 17 86 8c e8 d9 8b fd fa e9 72 fc ff ff e8 ff f8 95 fb 90 <0f> 0b 90 48 89 df 48 c7 c6 00 18 86 8c 4c 89 ea e8 89 ea ff fa e9 [ 92.404921][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.411320][ T2337] RSP: 0018:ffffc90005fb7730 EFLAGS: 00010293 [ 92.417433][ T2337] RAX: ffffffff86097af1 RBX: ffff888022f2f0a8 RCX: ffff888029fd9e00 [ 92.425447][ T2337] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 92.433411][ T2337] RBP: 000000000000003c R08: ffffffff86097500 R09: 1ffffffff2854736 [ 92.441426][ T2337] R10: dffffc0000000000 R11: fffffbfff2854737 R12: 00000000fffffff5 [ 92.449429][ T2337] R13: ffffffff8cdd8e00 R14: 0000000000000001 R15: 0000000000001770 [ 92.457468][ T2337] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 92.466439][ T2337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.473037][ T2337] CR2: 00007f9a404a7d60 CR3: 0000000034f10000 CR4: 00000000003526f0 [ 92.481162][ T2337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.489401][ T2337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.497441][ T2337] Call Trace: [ 92.500727][ T2337] [ 92.503697][ T2337] ? __warn+0x165/0x4d0 [ 92.507890][ T2337] ? firmware_fallback_sysfs+0x782/0x9e0 [ 92.513515][ T2337] ? report_bug+0x2b3/0x500 [ 92.518027][ T2337] ? firmware_fallback_sysfs+0x782/0x9e0 [ 92.523728][ T2337] ? handle_bug+0x60/0x90 [ 92.528072][ T2337] ? exc_invalid_op+0x1a/0x50 [ 92.532753][ T2337] ? asm_exc_invalid_op+0x1a/0x20 [ 92.537804][ T2337] ? firmware_fallback_sysfs+0x190/0x9e0 [ 92.543425][ T2337] ? firmware_fallback_sysfs+0x781/0x9e0 [ 92.549068][ T2337] ? firmware_fallback_sysfs+0x782/0x9e0 [ 92.554745][ T2337] ? _request_firmware+0xd5a/0x13b0 [ 92.559954][ T2337] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 92.565658][ T2337] ? _request_firmware+0xd5a/0x13b0 [ 92.570887][ T2337] _request_firmware+0xdf7/0x13b0 [ 92.575933][ T2337] ? __pfx__request_firmware+0x10/0x10 [ 92.581591][ T2337] ? rcu_is_watching+0x15/0xb0 [ 92.586657][ T2337] ? trace_contention_end+0x3c/0x120 [ 92.591982][ T2337] ? __mutex_lock+0x37f/0xee0 [ 92.596681][ T2337] request_firmware+0x36/0x50 [ 92.601347][ T2337] pvr2_locate_firmware+0xb1/0x500 [ 92.606484][ T2337] pvr2_upload_firmware1+0x1c6/0x950 [ 92.611763][ T2337] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 92.617612][ T2337] pvr2_hdw_initialize+0x411/0x3d10 [ 92.622845][ T2337] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 92.628491][ T2337] ? pvr2_context_thread_func+0x220/0xb50 [ 92.634245][ T2337] ? __pfx_lock_release+0x10/0x10 [ 92.639292][ T2337] ? rcu_is_watching+0x15/0xb0 [ 92.644119][ T2337] ? trace_contention_end+0x3c/0x120 [ 92.649414][ T2337] ? __mutex_lock+0x37f/0xee0 [ 92.654114][ T2337] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.660082][ T2337] ? __mutex_unlock_slowpath+0x21e/0x790 [ 92.665751][ T2337] ? __pfx___mutex_lock+0x10/0x10 [ 92.670781][ T2337] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.676800][ T2337] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 92.683397][ T2337] ? finish_wait+0xd4/0x1e0 [ 92.688212][ T2337] pvr2_context_thread_func+0x4b3/0xb50 [ 92.697593][ T2337] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 92.703522][ T2337] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 92.709673][ T2337] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 92.715596][ T2337] ? __pfx_autoremove_wake_function+0x10/0x10 [ 92.721696][ T2337] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 92.727611][ T2337] ? __kthread_parkme+0x169/0x1d0 [ 92.732623][ T2337] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 92.738711][ T2337] kthread+0x2f0/0x390 [ 92.742768][ T2337] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 92.748845][ T2337] ? __pfx_kthread+0x10/0x10 [ 92.753424][ T2337] ret_from_fork+0x4b/0x80 [ 92.757861][ T2337] ? __pfx_kthread+0x10/0x10 [ 92.762441][ T2337] ret_from_fork_asm+0x1a/0x30 [ 92.767247][ T2337] [ 92.770267][ T2337] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.777529][ T2337] CPU: 1 UID: 0 PID: 2337 Comm: pvrusb2-context Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 92.788619][ T2337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 92.798654][ T2337] Call Trace: [ 92.801917][ T2337] [ 92.804832][ T2337] dump_stack_lvl+0x241/0x360 [ 92.809495][ T2337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.814677][ T2337] ? __pfx__printk+0x10/0x10 [ 92.819255][ T2337] ? vscnprintf+0x5d/0x90 [ 92.823567][ T2337] panic+0x349/0x880 [ 92.827458][ T2337] ? __warn+0x174/0x4d0 [ 92.831609][ T2337] ? __pfx_panic+0x10/0x10 [ 92.836026][ T2337] ? ret_from_fork_asm+0x1a/0x30 [ 92.840953][ T2337] __warn+0x344/0x4d0 [ 92.844929][ T2337] ? firmware_fallback_sysfs+0x782/0x9e0 [ 92.850558][ T2337] report_bug+0x2b3/0x500 [ 92.854883][ T2337] ? firmware_fallback_sysfs+0x782/0x9e0 [ 92.860509][ T2337] handle_bug+0x60/0x90 [ 92.864660][ T2337] exc_invalid_op+0x1a/0x50 [ 92.869153][ T2337] asm_exc_invalid_op+0x1a/0x20 [ 92.874009][ T2337] RIP: 0010:firmware_fallback_sysfs+0x782/0x9e0 [ 92.880244][ T2337] Code: 1c 24 e9 4d fc ff ff e8 1c f9 95 fb c6 05 c6 3b fa 09 01 48 c7 c7 20 17 86 8c e8 d9 8b fd fa e9 72 fc ff ff e8 ff f8 95 fb 90 <0f> 0b 90 48 89 df 48 c7 c6 00 18 86 8c 4c 89 ea e8 89 ea ff fa e9 [ 92.899844][ T2337] RSP: 0018:ffffc90005fb7730 EFLAGS: 00010293 [ 92.905908][ T2337] RAX: ffffffff86097af1 RBX: ffff888022f2f0a8 RCX: ffff888029fd9e00 [ 92.913869][ T2337] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 92.921828][ T2337] RBP: 000000000000003c R08: ffffffff86097500 R09: 1ffffffff2854736 [ 92.929788][ T2337] R10: dffffc0000000000 R11: fffffbfff2854737 R12: 00000000fffffff5 [ 92.937751][ T2337] R13: ffffffff8cdd8e00 R14: 0000000000000001 R15: 0000000000001770 [ 92.945717][ T2337] ? firmware_fallback_sysfs+0x190/0x9e0 [ 92.951347][ T2337] ? firmware_fal