last executing test programs: 10.667153867s ago: executing program 0 (id=184): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f0000001300)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x4, 0x10, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'L'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0xffff, 0x9}, {0x6, 0x24, 0x1a, 0x10, 0xf63eafdb2e20dcba}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @obex={0x5, 0x24, 0x15, 0xca9c}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xb7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6a, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x7, 0x7b}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x4, 0xb0, 0x1, 0x0, 0x2a}, 0x1a, &(0x7f0000000500)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0xe, 0x3}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000d00)={0x14, &(0x7f0000000bc0)={0x20, 0x21, 0xd0, {0xd0, 0x31, "abe4a53d87bd6a776c8d87d4f5a18c553595a2aac57622ea2345d90bbc763d497b1a0c44411dfef7520440fc7f7273bf54700f7f8245e30f5fefacdab3f6c218cc9d9726e850bfa28eed38d64d93d00a887473b216e0e311f9100e047f3f134b58c51a00141e81237e7f04997b146ea505819f45503a8680983ccac0c7c5107d3ae08aa7be206e300341109e32bbede5613535f0c2d1c6adb7f1849a1cde814abf11a7d556af99409931f607a68b186876e1eef428d94326444ed0e5e1cd52cc37a69aa05bb191ac60a055d99a96"}}, 0x0}, &(0x7f0000001280)={0x44, &(0x7f0000000d40)={0x40, 0x16}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x9, 0x4, 0x48, 0x8, 0xffff, 0x8, 0x6f, 0x2, 0x5, 0x7, 0x3, 0x9}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2, 0x178}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000380), &(0x7f00000002c0)=r4}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={0x14, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setreuid(0xffffffffffffffff, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x40, 0x23, 0xa3, {0xa3, 0xc, "67b3cac1a533139d13a869f8bd6bbf43536f6b086ed7469a11053eb217c795f09067b2b1d7b6c47a424f2dc4c0a9a3d43122e91f7c0b6c25002c803d647589f1a8b8d7e1b9a70da99e7eeb041740360a918f6245792372c6d39332554f6a5bf58fe40179c95982ea7d90bb2f6e41513405c62edb124ba0f129f658ef6639244697c6fc88055be0667b374b32f929aa2a1b8cfa305415ac53f8adc5a88b5880d438"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000b80)={0x34, &(0x7f0000000a00)={0x40, 0xa, 0x37, "aa7a27d9e84df419424b995aab117d8d01e72ee96cc93e00a7d653321e062d7009e2e23069f86971a7fbe60194b2890e9de0f44bd0d3e4"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000ac0)={0x20, 0x0, 0x37, {0x35, "627faab42b4adf3d9b8fc270820657bc5b25e576d1907c4fc5b22ba326c3d3eccabb68fda93cafb343943fd1d728d5d815d1587eca"}}, &(0x7f0000000b00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000b40)={0x20, 0x0, 0x1, 0x6}}) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r2) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x16, 0x13, "d5dc3fd6ae0653e3233199c14118cc2bccbf89"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.774967472s ago: executing program 2 (id=192): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700), 0x40c02, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x143080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x97e, 0x0, &(0x7f0000000440)="88a431305b0a2c22a7304530d0bcc7302d64a0674f8530ec519e1abc3f976545d823636ecf43168546dceb427015992e9b0c38f1852cfca86839adfa60737201da3da068e6d05282456f710775c6c97de8c8216fc419db89fc13d81e6831f6b43d416a01ff755f8e33b712cd9750c4f99a500df60570b8d4029b4bf8b15077eb1e0700000075d3aef729c55ffc1f1408c6ed9c9195df0e18e405f9dfffc67f51b1e97cc4e00c3fba16a071a80d2e4d8ddb60a2af2ecd6c775ede1e0e6400"/201, 0x0, 0xc9}) ioprio_set$pid(0x2, 0x0, 0x6000) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r2, 0x100000e00008, 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x4000000073, 0x19a99158a7116ca8) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000900)={0x1, 0x1}) setxattr$system_posix_acl(&(0x7f0000000540)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESHEX=r3, @ANYBLOB="0a6326def3c163042b53f43209fade9f1fbac27a970bf3d16bb197f4f7e814dd624dff47acef3bc93c136d64c8bc9ef0f86bf3f315948a727c4910a6669d33300a929384fcdea0dbb9da36427bef1372febe162209", @ANYRES32, @ANYRESOCT, @ANYRESHEX=r2], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x42) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000340)={0xf0, 0x78, 0x1e0, 0x78, 0x4, 0x0, 0x1, 0x0, {0xff, 0x2}, {0x4}, {0x2400, 0x8}, {0x6, 0x1000, 0x1}, 0x0, 0x110, 0x4aa, 0x2, 0x1, 0x0, 0x326, 0x8, 0x2, 0x1001, 0x8bc, 0xfffff452, 0x1, 0x200, 0x1, 0x1}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1, 0x0, 0x9}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xff]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0xfffffffc, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe4c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, &(0x7f0000000880)="f2070f01c30f009c3000800000b97a0a00000f32c4e375c17d72120000442400e1000000c744240200000000c7442406000000000f01142466b821010f00d80f0fd0970fb30d78de00000000c9f47ebf", 0x50}], 0x1, 0x7c, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x86882) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x10000, 0x0, 0x0, 0xf, 0x1c, "fee8a2ab78fc979fd1f30d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 9.395855115s ago: executing program 1 (id=193): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010070080904000001020d0000052406000105240000000d240f0100000000000000000006241a00000808241c09f3b1118c0905810308000000000904010000020d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.74820791s ago: executing program 2 (id=196): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x8, 0x8000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xff, 0x7, 0xf4, 0x5}, {0x4, 0x3, 0xb, 0x800}, {0xff, 0x8, 0x0, 0x4}, {0xe6c, 0x1, 0x7f, 0x401}, {0x7, 0x4, 0xa, 0x9}, {0x4, 0x1, 0x8, 0x16e}, {0x6, 0xb, 0x40}]}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x7c, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x5b, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @random="0463bedc36e5", {0xf}}, 0x0, @random=0x4, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xae}, @void, @val={0x6, 0x2, 0x4}, @val={0x2d, 0x1a, {0x1000, 0x1, 0x3, 0x0, {0x1, 0x1ffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x5}}, @val={0x72, 0x6}, @void}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0xe, 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 7.613216938s ago: executing program 2 (id=197): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x82) close(r0) mount$fuse(0x0, 0x0, 0x0, 0x1144880, &(0x7f0000000380)=ANY=[@ANYBLOB='f]=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r4, &(0x7f0000000740), 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0xfffb) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="180000007a000106000000000100040007000000200080008cc14572e4e47a370f55049d15a9300d23ef051deff30700000093c1ce267e17fa827edd8afddea200026684ff38ad0c576b84531823e0bf5d82cbb9d2a0332cb66a1d16e394567afbe6c6e833f6b249838cc677a66000"/124], 0x18}], 0x1}, 0x4004080) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0xfffffffe, 0x0, 0x20000002, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40000, 0x687, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x51, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x4, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffd, 0x2000000, 0x40, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x3, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd93, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x4], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x3, 0x0, 0x0, 0x8f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}, 0x45c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x25e}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x800) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000600)) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d103200", 0x27}], 0x3}], 0x1, 0x20040885) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x2}, 0x0) recvmsg$can_bcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}, 0x40000022) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) 7.421846625s ago: executing program 0 (id=198): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8000000a) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0e99db6de761fc6, 0xa774) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e50128bd70000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="770001000000000000000000000000000000000008"], 0x38}}, 0x0) r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r3, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) (async) rt_sigqueueinfo(r3, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) fcntl$lock(r2, 0x5, &(0x7f0000000140)={0x2, 0x0, 0x7fffffffffffffff, 0x5, r3}) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x90) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/135, 0x87, 0x6, 0xbc5, 0xf91, 0x9, 0x2}}, 0x120) (async) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/135, 0x87, 0x6, 0xbc5, 0xf91, 0x9, 0x2}}, 0x120) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) (async) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002680)={0x0, &(0x7f00000023c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro_nat=0x6404, 0x3ff, 0xffffffff, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0x967b}}, @out_dx={0x6a, 0x28, {0xe970, 0x4, 0x2}}, @out_dx={0x6a, 0x28, {0x38b9, 0x6, 0x6}}, @in_dx={0x69, 0x20, {0x54a4, 0x4}}, @cpuid={0x64, 0x18, {0x3, 0xf43a}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x680c, 0x2, 0x5, 0x5aa}}, @code={0xa, 0x6b, {"3e66440f3882a8a94000008f2978e1d8c461fee6489e36f2430f011c000f20e035020000000f22e0b9a10b0000b87db80000ba000000000f3066baf80cb876a77a83ef66bafc0c66b85e0066ef66b8c2000f00d00f01c40f2057"}}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0x9bf5}}, @nested_amd_vmsave={0x183, 0x18}, @code={0xa, 0x48, {"3626460f01c4430f370f01df440f3809106564460f300f20e035010000000f22e0c4a1fd10c4de470236f3470f38f69100800000440f08"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x82, 0x4, 0x8}}], 0x293}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000026c0)={0x3, 0x0, [{0x323, 0x0, 0xfff}, {0xaca, 0x0, 0xffffffffffffffff}, {0x572, 0x0, 0xfffffffffffffffc}]}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000026c0)={0x3, 0x0, [{0x323, 0x0, 0xfff}, {0xaca, 0x0, 0xffffffffffffffff}, {0x572, 0x0, 0xfffffffffffffffc}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) socket(0x1e, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x2c, 0x301, 0x0, 0x0, {0x1e}, [@generic='\x00']}, 0x18}}, 0x0) 7.059855587s ago: executing program 2 (id=199): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0xa800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000180)={0x1, 0x1}, 0xffffffffffffff78) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f0000000240)="ab", 0x1}], 0x1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x60003, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x4, 0x0, 0x2, 0x1}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca4, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000100020000000700000040020200", @ANYRES32=r3, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0500000001000000010000000b0000000000000000000000007c023086525966a516caa7c6018ff8a947cc942c28b7bc23f157606265739889ab2a916b88780000000000000002b6305f133ebe6c8f04c328e3da936c93f87db62961ee9fc8ceed8f82595137dea6940ed8cb4b54cbd3fba99ea6a1d105be39f7c2afbbad363d17ca3f71de51ac0cb3c3acf3f8e40abe57a9864ff7f6000000"], 0x50) r10 = epoll_create(0x1002) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'vxcan0\x00'}, {0x20, '#'}, {0x20, '%%\xda0'}, {0x20, '\x00'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '/dev/net/tun\x00'}, {0x20, 'vxcan1\x00'}], 0xa, "89df857fde7c1e31f8eb1499e558e8518b275e2dac51452abbe88cbbab06dd1d6eb994b76050f7d1a6292452d08fcda30ac10aee2fc2de286a91bef5e8883cfa7de47b103c9223380f1731f4f84e8dabc26572e4831c85e18ae6"}, 0x92) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000040)={0x1000000d}) 6.911264176s ago: executing program 3 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0xfff5, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 6.714956455s ago: executing program 4 (id=201): syz_emit_ethernet(0x86, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x78, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x45, 0xffffffffffffffff, [{0x0, 0x2}, {0x5, 0x9, "020007651442eb"}, {0x1, 0x12, "74b000561de584b703c87214d42243b6"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x2, 0x2}]}]}}}}}}}, 0x0) 6.712537009s ago: executing program 3 (id=202): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$kcm(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x700, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.632127886s ago: executing program 4 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) 6.483660885s ago: executing program 4 (id=204): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) unshare(0x26020480) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c17, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) 6.471963525s ago: executing program 3 (id=205): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = io_uring_setup(0x46a8, &(0x7f00000000c0)={0x0, 0x8a9c, 0x20, 0x1, 0x1b4}) syz_io_uring_setup(0x631f, &(0x7f0000000140)={0x0, 0x8262, 0x4, 0x0, 0x120, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) prctl$PR_SET_SECCOMP(0x3d, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1, 0x60, 0xf}, {0x0, 0x0, 0x4, 0xf}]}) bind$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 6.395683329s ago: executing program 0 (id=206): prctl$PR_SET_THP_DISABLE(0x29, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000440)=0x100, 0x4) sendfile(r0, r1, 0x0, 0x2) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 6.388829468s ago: executing program 3 (id=207): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/96, 0x60) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000300)="7800000018002507b9409b02ffff48000203be04020406050a08040c5c000900580004020a0000000d0085a168d0bf46d32345653600648d270016000a09000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004070b0015000a0000000000e000e218d1dd3b6ed538640f3250", 0x78, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x8000000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b0732376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d315d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11ee9afb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e75c40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000002400)="9917b1ad3d06a27855d01141e914353e8c663ed1065e32301b8acd1815ed897020c9092fe19ef95bd3c69397d675e3c19835f4c930a9bcbd49c4d872b7679a32e22015d7df39001b2d750fe2484101ef67cb628910e4cde2d8285b9017f55e84b67b72840813a8d080b71200f197d5b65f243ac4ac17d0cba3d08c98ceedf43365fc78aa0f52585ef7d8d525c049e1ae193a110f2dcfce4e6114b15de04b2720d6bd946506004cf479e742dcf73534e370150d97a55b559b5a1bedbc9290cbcac428f960e016fb88cfc21d86da2974ec3f2632992a27a4e5864623e05722eb07d27139b45171ec0cefa44e98f05dd4ff957056265edbacd81a611e4dfacb2b4879517e00c52e84728b1de1193bc88e509860ff143fc216c5100c41667a3ba5b157db616145a6d5ddb592e6b9589cdc93e3e8ef63da3cb4033d9f676cec3dcbb003ae54940e30203e1dc7b939c9c32029ad645b46ee269892e7a786bd36c2f7d962aad3b8d6e9d946adfa984a52cf7d35c5b2f492ab267c1ca948a5c0323d628364a612004c1c7feb2671a984f4dc05330a968e4b8cbe9200f111597c8ecc7ea7681ec281e168edbadc83d98de2b0dda7b187f509e487d63300932f3c76a1b66b4e01dffb07b4c80b5f5273a84b3cb0732b691738bba87517d53cf2b88b481cb325b8b912f54cee9d2546f2fdb96931bda2821eb66554abd4a21a8281c3c461df633a97f5cb3cf924fb324782399df0dc72d18d22b320e605dddf1123417dffc6452835a63fca230fbb002fd9c204b0819c56c4ce398423518b59dc8220bbf0c8b66f54c8009f1170f4c5582bfc703938bdf4d88ffe3eb87f4d2a62d442bb08ba405e11984c919fed63f9e86fd16c00843fa07cd9170919f4d07a12ad38db3f9effcfe1d631a48150e33ce07b3516fefab9587043a908dac8b0ffe361ec8e0fe7531f6d6d858cdabf7600f3a2bd90bce672cba7d366ae4ac6e33813f18340349422230cfe1d8c5757eb139321d44b57159089c68c13d7806cdbebeb42953f6f1670a313278a13076defab61b2016cf636ed37c7e7e1c49a4fb1d6a3d249e189087b37e724b6b24824bce4f77ab6f8a8d2f571d23c5120d75440e8eeda120467b5046b316e39aea9b6c7fa65eb4db56a3fed78c25fcde3afa956dee186fcad0b83f3d50a153f269113f5d9f1ccdff5ba86390c95b3a4ac782cd1121253f728b9b28a3cf59ebd82b0439d2f439e9cd00ca11a3f73515b6256b0faa56063ab761d5860a002c27fede7ce87b6336a4a146f2286ee32bb12e5a8bef04ba8cdb901c602a80eec7e74c947f88f6939ad240db8bc4baf655b941d1fc166fcbd2a64b5691e9145847ebc3ff5f8c07b8265c00176fa4617b6b7249aa801a090d4c65e36cfbbbca28913a892c3a7dd856fdf1f9a7279acfeee9fe51d14f87e4928f07f80145f54afb9a94fce7e76d38b64858327883b8f7141ccac8de649b7eb216d1b6c63f6d4d56dd9f11a2b36a6b3913917c378931e1ba3ec16aec67ef2bab2f1336a6990f7a78ab8acbc81d4ef49dc9bf02e6bae05118c706aeafa332e785ab59140d41ec0d00261ef9dd1735e19954cf1e8042b84185fa8bea4878e22ae53841b9c9752c950e5b21c7e7212b0297f22675cf8baae246e3c46a33e7228633954253add2592dbb7335b24569c834977a53ef23a84f7819deabd2c499422f23e7b68", 0x4bd}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x6, 0x3, 0x2) 6.217458179s ago: executing program 1 (id=208): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f0000001300)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x4, 0x10, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'L'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0xffff, 0x9}, {0x6, 0x24, 0x1a, 0x10, 0xf63eafdb2e20dcba}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @obex={0x5, 0x24, 0x15, 0xca9c}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xb7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6a, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x7, 0x7b}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x4, 0xb0, 0x1, 0x0, 0x2a}, 0x1a, &(0x7f0000000500)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0xe, 0x3}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000d00)={0x14, &(0x7f0000000bc0)={0x20, 0x21, 0xd0, {0xd0, 0x31, "abe4a53d87bd6a776c8d87d4f5a18c553595a2aac57622ea2345d90bbc763d497b1a0c44411dfef7520440fc7f7273bf54700f7f8245e30f5fefacdab3f6c218cc9d9726e850bfa28eed38d64d93d00a887473b216e0e311f9100e047f3f134b58c51a00141e81237e7f04997b146ea505819f45503a8680983ccac0c7c5107d3ae08aa7be206e300341109e32bbede5613535f0c2d1c6adb7f1849a1cde814abf11a7d556af99409931f607a68b186876e1eef428d94326444ed0e5e1cd52cc37a69aa05bb191ac60a055d99a96"}}, 0x0}, &(0x7f0000001280)={0x44, &(0x7f0000000d40)={0x40, 0x16, 0x18, "6499570ba3bcb51db1898b9a59010aa492997ad41bdf6a47"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x9, 0x4, 0x48, 0x8, 0xffff, 0x8, 0x6f, 0x2, 0x5, 0x7, 0x3, 0x9}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2, 0x178}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000380), &(0x7f00000002c0)=r4}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={0x14, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setreuid(0xffffffffffffffff, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x40, 0x23, 0xa3, {0xa3, 0xc, "67b3cac1a533139d13a869f8bd6bbf43536f6b086ed7469a11053eb217c795f09067b2b1d7b6c47a424f2dc4c0a9a3d43122e91f7c0b6c25002c803d647589f1a8b8d7e1b9a70da99e7eeb041740360a918f6245792372c6d39332554f6a5bf58fe40179c95982ea7d90bb2f6e41513405c62edb124ba0f129f658ef6639244697c6fc88055be0667b374b32f929aa2a1b8cfa305415ac53f8adc5a88b5880d438"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000b80)={0x34, &(0x7f0000000a00)={0x40, 0xa, 0x37, "aa7a27d9e84df419424b995aab117d8d01e72ee96cc93e00a7d653321e062d7009e2e23069f86971a7fbe60194b2890e9de0f44bd0d3e4"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xec}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000ac0)={0x20, 0x0, 0x37, {0x35, "627faab42b4adf3d9b8fc270820657bc5b25e576d1907c4fc5b22ba326c3d3eccabb68fda93cafb343943fd1d728d5d815d1587eca"}}, &(0x7f0000000b00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000b40)={0x20, 0x0, 0x1, 0x6}}) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r2) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x16, 0x13, "d5dc3fd6ae0653e3233199c14118cc2bccbf89"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.216722929s ago: executing program 4 (id=209): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000a00001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x800) 5.895402325s ago: executing program 0 (id=210): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[@nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0xb9d}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x87, 0x0, 0x9, 0x3}}, @nested_load_code={0x12e, 0x90, {0x3, "2e652ef2420fd6dab9620900000f32c744240000000000c744240200000000c7442406000000000f011c240f0f099626640f21ab672e3e65460f01c8c40251a79ba9000000c7442400da000000c744240200000000c7442406000000000f011c2466baf80cb83cf2c583ef66bafc0c66ed66b8ee000f00d8"}}, @nested_load_code={0x12e, 0x68, {0x0, "64f3470fc732470f32b8010000000f01c1c462f9232e67660f3a6243b100c7442400c9110000c744240204000000c7442406000000000f011424f20f2dd266b8cb000f00d0440f015d8cd0359d230000"}}], 0x158}) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000200)) 5.69803413s ago: executing program 2 (id=211): r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x9, 0x41c403) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000400)=0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000001c0)={0x0, 0x0}) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0xd185, 0x80000, r1}) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="6a03a65c00008a", @ANYRES16=r3, @ANYBLOB="02002dbd7000050000000b00000008000500faffffff380002800800070001000000060002004e22000008000600ff03000014000100fc00000000000000000000000000000006000b000a0000000800060001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x6000}, 0x20000000) (async) r4 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x90, &(0x7f0000000300)={0x1, 0x800000001, 0x5e3, 0xfffffffffffffff9}) mq_timedreceive(r4, &(0x7f0000000380)=""/128, 0x80, 0x6, &(0x7f0000000180)={0x77359400}) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0xac877cbec12e8ed0, 0x5d, 0xa9, 0x10, 0x8, 0xbb4, 0xa5f, 0x5d7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x4, 0x40, 0x3}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x62, 0x0, 0x1, [{0x0, 0x0}]}) 4.143281111s ago: executing program 1 (id=212): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000003e00070127bd700000000000017c00000400fca20c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280725eb862cec9a478080007000001"], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4040) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x559203, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x40003) pipe2$9p(&(0x7f0000000200), 0x80) r5 = io_uring_setup(0x3c93, &(0x7f0000000300)={0x0, 0xd6eb, 0x1, 0x1000, 0x60}) r6 = epoll_create1(0x0) epoll_pwait2(r6, &(0x7f0000000700)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x80000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r8) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, r9) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$can_bcm(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000600)=""/193, 0xc1}], 0x2}, 0x80) r11 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r8) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000001020304050607085365cec7dea730041112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"], 0x48, r11) 3.919405547s ago: executing program 1 (id=213): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x9, r3, 0xc, r0}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) listen(r4, 0x1) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0xffffffff000) r7 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000b17000/0x4000)=nil, 0x4000, 0x2, 0x40010, r1, 0x9ef31000) r8 = userfaultfd(0x801) r9 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00004cd000/0x1000)=nil, 0x1000}}) syz_clone(0x40080020, 0x0, 0x0, 0x0, 0x0, 0x0) 3.812238339s ago: executing program 1 (id=214): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x15, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e1", 0x12}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) getsockname$netlink(r3, 0x0, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) recvmmsg(r8, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.340403202s ago: executing program 3 (id=215): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x153, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xe0, 0x60}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000001080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x4, 0xb, '\x00', [@generic={0x80, 0x8, "09e12e5f0b6bdcf7"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x148}}], 0x1, 0x810) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000640)=""/59, 0x3b}], 0x1}}], 0x1, 0x10120, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60000040}, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(r7, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.067294459s ago: executing program 4 (id=216): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = dup(r1) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) write$binfmt_aout(r2, 0x0, 0xffffffdb) socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x10c, 0x1a, 0x633, 0xfffffffe, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x2, 0x20}, {@in6=@remote, 0x0, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x4000}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc}}]}, 0x10c}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="0c463471a2c906bdea29e9fbdae9c0ae", 0x10) syz_usb_connect(0x3, 0x3e, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x1e, 0x43, 0x6d, 0x10, 0x45e, 0xf8, 0xe0e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x2a, 0x9, 0x20, 0x7f, "", [{{0x9, 0x4, 0xb2, 0x70, 0x0, 0xe, 0x1, 0x0, 0x2f, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x2, 0x96, 0x8}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x8, 0x6, "", "f7"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x6, 0x8}]}]}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 2.819977389s ago: executing program 0 (id=217): socket(0x840000000002, 0x3, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (fail_nth: 6) 2.586472658s ago: executing program 2 (id=218): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010070080904000001020d0000052406000105240000000d240f0100000000000000000006241a00000808241c09f3b1118c0905810308000000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.995766435s ago: executing program 0 (id=219): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010070080904000001020d0000052406000105240000000d240f0100000000000000000006241a00000808241c09f3b1118c0905810308000000000904010000020d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x9, 0x10, 0x59, 0x6, 0x8050, 0x80, 0x10, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 257.811212ms ago: executing program 3 (id=220): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x2, 0x1e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e8048968680d010203010902350101000000000904"], 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000b800c0018"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = socket(0x40000000015, 0x5, 0x0) getpeername(r8, 0x0, 0x0) r9 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000000040)={'veth1_to_bridge\x00', @ifru_names='veth1_to_batadv\x00'}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x1, 0x15, 0xfff, 0x9, 0x1000, 0x4b, 0x0, 0x4, 0x0, 0x1, 0x0, 0x6, 0x5, 0xfffffffffffffffe, 0x4], 0x0, 0x1019c4}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x48, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@dstopts={0x2f, 0x1, '\x00', [@padn, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0xe}]}]}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7001fedbdf25130000000c0947000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24002010}, 0x90) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 237.670172ms ago: executing program 1 (id=221): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, &(0x7f0000000080)="36e2365320", 0x5, 0xc17) r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="0015d9"], 0x0, 0x0}) 0s ago: executing program 4 (id=222): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 67.082587][ T5612] cgroup: Unknown subsys name 'net' [ 67.188822][ T5612] cgroup: Unknown subsys name 'cpuset' [ 67.197279][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.581825][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.678766][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.687279][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.696351][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.705669][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.713483][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.768467][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.776909][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.784767][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.794413][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.802325][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.840743][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.851970][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.859607][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.867767][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.876646][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.924369][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.936112][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.943969][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.953160][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.964666][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.973078][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.982152][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.990651][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.003757][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.011744][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.279139][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.287816][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.875627][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.882903][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.890263][ T5631] bridge_slave_0: entered allmulticast mode [ 71.897436][ T5631] bridge_slave_0: entered promiscuous mode [ 71.914088][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.921300][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.928521][ T5633] bridge_slave_0: entered allmulticast mode [ 71.935727][ T5633] bridge_slave_0: entered promiscuous mode [ 71.953923][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.961214][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.968442][ T5631] bridge_slave_1: entered allmulticast mode [ 71.975422][ T5631] bridge_slave_1: entered promiscuous mode [ 71.987949][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.995083][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.002346][ T5633] bridge_slave_1: entered allmulticast mode [ 72.009370][ T5633] bridge_slave_1: entered promiscuous mode [ 72.074578][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.081953][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.089170][ T5629] bridge_slave_0: entered allmulticast mode [ 72.096275][ T5629] bridge_slave_0: entered promiscuous mode [ 72.125644][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.133070][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.140438][ T5639] bridge_slave_0: entered allmulticast mode [ 72.147737][ T5639] bridge_slave_0: entered promiscuous mode [ 72.155224][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.162785][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.170282][ T5629] bridge_slave_1: entered allmulticast mode [ 72.177382][ T5629] bridge_slave_1: entered promiscuous mode [ 72.186892][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.206788][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.216173][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.223293][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.230668][ T5639] bridge_slave_1: entered allmulticast mode [ 72.238039][ T5639] bridge_slave_1: entered promiscuous mode [ 72.255262][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.275046][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.311821][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.319053][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.326542][ T5637] bridge_slave_0: entered allmulticast mode [ 72.333610][ T5637] bridge_slave_0: entered promiscuous mode [ 72.360638][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.378648][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.385820][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.393040][ T5637] bridge_slave_1: entered allmulticast mode [ 72.400669][ T5637] bridge_slave_1: entered promiscuous mode [ 72.418154][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.429364][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.440098][ T5631] team0: Port device team_slave_0 added [ 72.456884][ T5633] team0: Port device team_slave_0 added [ 72.464844][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.484374][ T5631] team0: Port device team_slave_1 added [ 72.510919][ T5633] team0: Port device team_slave_1 added [ 72.548704][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.578065][ T5629] team0: Port device team_slave_0 added [ 72.584418][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.591530][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.617585][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.630748][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.650176][ T5639] team0: Port device team_slave_0 added [ 72.657810][ T5629] team0: Port device team_slave_1 added [ 72.663874][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.670851][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.696982][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.717874][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.724836][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.750928][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.764340][ T5639] team0: Port device team_slave_1 added [ 72.797060][ T50] Bluetooth: hci0: command tx timeout [ 72.811524][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.818603][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.844700][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.874801][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.882416][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.882591][ T50] Bluetooth: hci1: command tx timeout [ 72.909399][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.926843][ T5637] team0: Port device team_slave_0 added [ 72.939313][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.946300][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.972291][ T50] Bluetooth: hci2: command tx timeout [ 72.973121][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.990280][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.997454][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.023458][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.034837][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.041926][ T50] Bluetooth: hci4: command tx timeout [ 73.042062][ T50] Bluetooth: hci3: command tx timeout [ 73.047930][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.078902][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.091364][ T5637] team0: Port device team_slave_1 added [ 73.151817][ T5631] hsr_slave_0: entered promiscuous mode [ 73.158831][ T5631] hsr_slave_1: entered promiscuous mode [ 73.184260][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.191599][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.218155][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.230838][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.238074][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.264285][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.290123][ T5633] hsr_slave_0: entered promiscuous mode [ 73.296581][ T5633] hsr_slave_1: entered promiscuous mode [ 73.302746][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 73.308726][ T5633] Cannot create hsr debugfs directory [ 73.344352][ T5629] hsr_slave_0: entered promiscuous mode [ 73.350869][ T5629] hsr_slave_1: entered promiscuous mode [ 73.357288][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 73.363027][ T5629] Cannot create hsr debugfs directory [ 73.412761][ T5639] hsr_slave_0: entered promiscuous mode [ 73.419111][ T5639] hsr_slave_1: entered promiscuous mode [ 73.425089][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 73.431098][ T5639] Cannot create hsr debugfs directory [ 73.512774][ T5637] hsr_slave_0: entered promiscuous mode [ 73.519093][ T5637] hsr_slave_1: entered promiscuous mode [ 73.525095][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 73.530943][ T5637] Cannot create hsr debugfs directory [ 73.930686][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.947175][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.955173][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.966922][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.974934][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.985376][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.000826][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.009832][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.062909][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.073406][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.081521][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.090741][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.098901][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.108787][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.119785][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.129057][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.203652][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.212820][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.220839][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.231902][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.239907][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.249523][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.264733][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.275082][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.352971][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.363926][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.381406][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.391280][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.399215][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.409251][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.423649][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.433445][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.482416][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.541921][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.551474][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.560013][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.569849][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.583688][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.590880][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.600547][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.608716][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.618443][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.651245][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.658650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.681758][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.690905][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.698020][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.749526][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.786258][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.812902][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.828079][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.835261][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.856257][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.865136][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.872307][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.876941][ T50] Bluetooth: hci0: command tx timeout [ 74.888608][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.895807][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.916392][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.923506][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.957598][ T50] Bluetooth: hci1: command tx timeout [ 74.996293][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.021447][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.028681][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.036226][ T50] Bluetooth: hci2: command tx timeout [ 75.058098][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.065189][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.097261][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.116090][ T50] Bluetooth: hci3: command tx timeout [ 75.119293][ T5636] Bluetooth: hci4: command tx timeout [ 75.186406][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.209310][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.223588][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.263639][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.272720][ T5631] veth0_vlan: entered promiscuous mode [ 75.297994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.305088][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.318252][ T5631] veth1_vlan: entered promiscuous mode [ 75.338218][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.345393][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.380215][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.413895][ T5629] veth0_vlan: entered promiscuous mode [ 75.435110][ T5629] veth1_vlan: entered promiscuous mode [ 75.459945][ T5631] veth0_macvtap: entered promiscuous mode [ 75.468587][ T5639] veth0_vlan: entered promiscuous mode [ 75.501273][ T5631] veth1_macvtap: entered promiscuous mode [ 75.509966][ T5639] veth1_vlan: entered promiscuous mode [ 75.530034][ T5637] veth0_vlan: entered promiscuous mode [ 75.562269][ T5637] veth1_vlan: entered promiscuous mode [ 75.570416][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.581952][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.599205][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.613096][ T5629] veth0_macvtap: entered promiscuous mode [ 75.631716][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.641159][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.652648][ T5629] veth1_macvtap: entered promiscuous mode [ 75.664105][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.685771][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.742428][ T5639] veth0_macvtap: entered promiscuous mode [ 75.759687][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.785180][ T5639] veth1_macvtap: entered promiscuous mode [ 75.813384][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.830355][ T5637] veth0_macvtap: entered promiscuous mode [ 75.839390][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.841928][ T5637] veth1_macvtap: entered promiscuous mode [ 75.860361][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.869239][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.870311][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.881047][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.899996][ T5633] veth0_vlan: entered promiscuous mode [ 75.910390][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.954088][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.962384][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.971211][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.991152][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.001186][ T5633] veth1_vlan: entered promiscuous mode [ 76.011078][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.031620][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.063874][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079485][ T145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.101961][ T145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.111508][ T145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.139888][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.162647][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.178622][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.187234][ T145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.207459][ T145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.218081][ T145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.262074][ T145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.276257][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.297318][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.338803][ T5633] veth0_macvtap: entered promiscuous mode [ 76.404531][ T5633] veth1_macvtap: entered promiscuous mode [ 76.422919][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.434485][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.461960][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.476649][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.541032][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.571675][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.587923][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.599325][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.669560][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.689293][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.706849][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.744157][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.761316][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.770516][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.786837][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.892453][ T24] usb 1-1: config 2 has an invalid interface number: 227 but max is 2 [ 76.912436][ T24] usb 1-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 76.928219][ T24] usb 1-1: config 2 has an invalid interface number: 225 but max is 2 [ 76.949633][ T24] usb 1-1: config 2 has an invalid interface number: 77 but max is 2 [ 76.957949][ T5636] Bluetooth: hci0: command tx timeout [ 77.001797][ T24] usb 1-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 77.018727][ T24] usb 1-1: config 2 has no interface number 0 [ 77.027053][ T24] usb 1-1: config 2 has no interface number 1 [ 77.033215][ T24] usb 1-1: config 2 has no interface number 2 [ 77.039447][ T5636] Bluetooth: hci1: command tx timeout [ 77.049157][ T24] usb 1-1: config 2 interface 227 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 77.061361][ T24] usb 1-1: config 2 interface 227 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 77.072627][ T24] usb 1-1: config 2 interface 227 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 77.084721][ T24] usb 1-1: config 2 interface 227 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 77.099266][ T24] usb 1-1: config 2 interface 227 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 77.110370][ T24] usb 1-1: config 2 interface 227 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 64 [ 77.121250][ T5636] Bluetooth: hci2: command tx timeout [ 77.128312][ T24] usb 1-1: config 2 interface 227 altsetting 5 endpoint 0x5 has invalid maxpacket 1088, setting to 64 [ 77.139672][ T24] usb 1-1: config 2 interface 227 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 8 [ 77.153141][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.161381][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.193131][ T24] usb 1-1: config 2 interface 227 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 77.204341][ T5636] Bluetooth: hci3: command tx timeout [ 77.210154][ T50] Bluetooth: hci4: command tx timeout [ 77.220599][ T24] usb 1-1: config 2 interface 225 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 77.234759][ T24] usb 1-1: config 2 interface 225 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 77.247565][ T24] usb 1-1: config 2 interface 225 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 77.260308][ T24] usb 1-1: config 2 interface 225 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 77.273473][ T24] usb 1-1: config 2 interface 77 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 77.287148][ T24] usb 1-1: config 2 interface 77 altsetting 248 has a duplicate endpoint with address 0xC, skipping [ 77.299286][ T24] usb 1-1: config 2 interface 77 altsetting 248 has a duplicate endpoint with address 0xC, skipping [ 77.310504][ T24] usb 1-1: config 2 interface 77 altsetting 248 has a duplicate endpoint with address 0x6, skipping [ 77.322610][ T24] usb 1-1: config 2 interface 77 altsetting 248 has a duplicate endpoint with address 0x6, skipping [ 77.334749][ T24] usb 1-1: config 2 interface 77 altsetting 248 has a duplicate endpoint with address 0x7, skipping [ 77.346426][ T24] usb 1-1: config 2 interface 77 altsetting 248 has a duplicate endpoint with address 0x9, skipping [ 77.360215][ T24] usb 1-1: config 2 interface 77 altsetting 248 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 77.371964][ T24] usb 1-1: config 2 interface 77 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 77.384134][ T24] usb 1-1: config 2 interface 77 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 77.396876][ T24] usb 1-1: config 2 interface 77 altsetting 248 has a duplicate endpoint with address 0xE, skipping [ 77.408093][ T24] usb 1-1: config 2 interface 227 has no altsetting 0 [ 77.414904][ T24] usb 1-1: config 2 interface 225 has no altsetting 0 [ 77.422151][ T24] usb 1-1: config 2 interface 77 has no altsetting 0 [ 77.432150][ T24] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice=54.07 [ 77.441918][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.450226][ T24] usb 1-1: Product: ﳍ廣鯭ꪁ肌蛊搹椬䖱㧜哉Ὧ攛ↇቼꕳ痧㒼豸ꏠb嶻䪃鼃汃巅✤進陜ɓ쬉⒠줿翷䠴ᐿ詬瓘䠗甙ۭ膱鎆釳뻿ꑧ⵿⠊鹚了扶ី轪᬴⼧䓝爷덪⚾堢貌嫥⅐跠㖆脇蟓⾃ଌᵲۀ勵벚ൄ祫燄뼎범鞥Ǣ丝⥙꾣澶鏠㨾ꟓ眼䮴㣶Ｚ씱깑흙馓ଢ଼邊㊱꣘　氺辇 [ 77.490461][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.501521][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.515686][ T24] usb 1-1: Manufacturer: 摋蔖萵℩ວ潌馡鲥貧鶶㹙壈嶕㹿㊆狠迩ⲁ̘柨깮˙鰲ᆂ칱仸袅囨ᡏ䏑ꗃ狂맹㱈엝勋墈傑诰孔ઁ凶琽⒔횣곥櫽ۭ悒뉘ⷨ鈹官뢒ᯀ䳭쇆⋪㎾剻敖 [ 77.556634][ T24] usb 1-1: SerialNumber: ‚܏✈捖旰㇚झꣿ볺媚鱬囂㛮徫茘藝ꢽ뜢⺤⽺魲邶ٰᵤ繒⫂汩 [ 77.586533][ T5714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.594185][ T5714] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.674963][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.726541][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.756474][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.777449][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.842317][ T24] emi26 - firmware loader 1-1:2.227: emi26_probe start [ 77.859789][ T24] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 77.867847][ T5735] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 77.882581][ T24] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 77.912843][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.933609][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.014290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.041140][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.174578][ T5742] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9'. [ 78.185341][ T5742] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.288490][ T5732] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.301679][ T5746] syz_tun: entered allmulticast mode [ 78.321313][ T5745] syz_tun: left allmulticast mode [ 78.457777][ T5732] usb 5-1: Using ep0 maxpacket: 16 [ 78.477849][ T5732] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.488191][ T5732] usb 5-1: config 0 has no interface number 0 [ 78.498787][ T5732] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 78.514593][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.531214][ T5690] IPVS: starting estimator thread 0... [ 78.542440][ T5732] usb 5-1: Product: syz [ 78.552059][ T5732] usb 5-1: Manufacturer: syz [ 78.558788][ T5732] usb 5-1: SerialNumber: syz [ 78.580634][ T5732] usb 5-1: config 0 descriptor?? [ 78.608494][ T5732] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 78.636788][ T5755] IPVS: using max 34 ests per chain, 81600 per kthread [ 78.687710][ T5760] netlink: 'syz.2.15': attribute type 21 has an invalid length. [ 79.049250][ T50] Bluetooth: hci0: command tx timeout [ 79.116765][ T50] Bluetooth: hci1: command tx timeout [ 79.206129][ T50] Bluetooth: hci2: command tx timeout [ 79.214749][ T5732] gspca_spca1528: reg_w err -71 [ 79.239443][ T5732] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 79.276100][ T50] Bluetooth: hci4: command tx timeout [ 79.282857][ T5732] usb 5-1: USB disconnect, device number 2 [ 79.289442][ T50] Bluetooth: hci3: command tx timeout [ 80.073826][ T30] audit: type=1326 audit(1778561971.759:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.115386][ T30] audit: type=1326 audit(1778561971.789:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.164688][ T30] audit: type=1326 audit(1778561971.789:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.210752][ T30] audit: type=1326 audit(1778561971.789:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.277039][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.301170][ T30] audit: type=1326 audit(1778561971.789:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.360342][ T5788] Cannot find set identified by id 0 to match [ 80.372017][ T30] audit: type=1326 audit(1778561971.789:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.400302][ T30] audit: type=1326 audit(1778561971.789:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.431871][ T30] audit: type=1326 audit(1778561971.789:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.459029][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 80.474624][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.488044][ T30] audit: type=1326 audit(1778561971.789:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.526430][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.540981][ T30] audit: type=1326 audit(1778561971.789:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd35ed9cdd9 code=0x7ffc0000 [ 80.567462][ T29] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 80.576824][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.600169][ T29] usb 2-1: config 0 descriptor?? [ 81.031634][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.057050][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.103403][ T29] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 81.156354][ T5675] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.291662][ T29] corsair 0003:1B1C:1B02.0001: Read invalid backlight brightness: ae. [ 81.348261][ T5675] usb 4-1: Using ep0 maxpacket: 16 [ 81.365553][ T5675] usb 4-1: unable to get BOS descriptor or descriptor too short [ 81.382704][ T5675] usb 4-1: config 3 has an invalid interface number: 67 but max is 0 [ 81.396960][ T5675] usb 4-1: config 3 has no interface number 0 [ 81.408700][ T5675] usb 4-1: config 3 interface 67 has no altsetting 0 [ 81.427955][ T5675] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=f4.60 [ 81.429174][ T5799] loop8: detected capacity change from 0 to 128 [ 81.453784][ T5675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.472206][ T5675] usb 4-1: Product: syz [ 81.478742][ T5675] usb 4-1: Manufacturer: syz [ 81.486672][ T5675] usb 4-1: SerialNumber: syz [ 81.498883][ T5683] usb 2-1: USB disconnect, device number 2 [ 81.552790][ T5799] loop8: AHDI p2 p4 [ 81.577800][ T5799] loop8: p2 start 512 is beyond EOD, truncated [ 81.739092][ T5675] cdc_ether 4-1:3.67: bad CDC descriptors [ 81.759360][ T5675] usb 4-1: unsupported MDLM descriptors [ 81.796946][ T5675] usb 4-1: USB disconnect, device number 2 [ 82.043907][ T50] Bluetooth: hci4: connection err: -111 [ 82.180176][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.204416][ T5808] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 82.276122][ T5808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.299043][ T5808] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 82.367950][ T5808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.396312][ T5808] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 82.439364][ T5808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.455575][ T5808] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 82.494476][ T5808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 82.520334][ T5808] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 82.636586][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.788785][ T5732] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.816166][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 82.830017][ T29] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 82.851052][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 82.866062][ T29] usb 4-1: Product: syz [ 82.870410][ T29] usb 4-1: Manufacturer: syz [ 82.877639][ T29] usb 4-1: SerialNumber: syz [ 82.895695][ T29] usb 4-1: config 0 descriptor?? [ 82.911828][ T29] gspca_main: sq905-2.14.0 probing 2770:9120 [ 82.956086][ T5732] usb 3-1: Using ep0 maxpacket: 8 [ 82.972305][ T5732] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 82.985969][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 83.004987][ T5732] usb 3-1: Product: syz [ 83.011799][ T5732] usb 3-1: Manufacturer: syz [ 83.017808][ T5812] mmap: syz.1.28 (5812) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.029806][ T5732] usb 3-1: SerialNumber: syz [ 83.050355][ T5732] usb 3-1: config 0 descriptor?? [ 83.073033][ T5732] gspca_main: sq905-2.14.0 probing 2770:9120 [ 83.305995][ T5690] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.466036][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 83.473502][ T5690] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.482080][ T5690] usb 2-1: config 0 has no interface number 0 [ 83.492853][ T5690] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 83.512980][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.521334][ T5690] usb 2-1: Product: syz [ 83.525571][ T5690] usb 2-1: Manufacturer: syz [ 83.530781][ T5690] usb 2-1: SerialNumber: syz [ 83.540616][ T5690] usb 2-1: config 0 descriptor?? [ 83.598781][ T5851] netlink: 'syz.4.33': attribute type 10 has an invalid length. [ 83.608540][ T5690] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 83.641306][ T5851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.674265][ T5853] netlink: 14 bytes leftover after parsing attributes in process `syz.4.33'. [ 83.687591][ T5851] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 83.806779][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.859630][ T29] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 83.893980][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.895572][ T29] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 84.004814][ T5853] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 84.016335][ T5732] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 84.038674][ T5732] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 84.111741][ T5853] bond0 (unregistering): Released all slaves [ 84.126252][ T5690] gspca_spca1528: reg_w err -110 [ 84.166189][ T5690] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 84.403200][ T5675] usb 2-1: USB disconnect, device number 3 [ 84.916153][ T5881] netlink: 68 bytes leftover after parsing attributes in process `syz.4.34'. [ 85.366023][ T5075] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.518266][ T5075] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 85.539840][ T5075] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 85.540041][ T5675] usb 4-1: USB disconnect, device number 3 [ 85.560780][ T5075] usb 2-1: config 13 interface 0 has no altsetting 0 [ 85.581438][ T5075] usb 2-1: config 13 interface 0 has no altsetting 1 [ 85.592334][ T5075] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 85.610729][ T5075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.626271][ T5075] usb 2-1: Product: syz [ 85.630525][ T5075] usb 2-1: Manufacturer: syz [ 85.635194][ T5075] usb 2-1: SerialNumber: syz [ 85.850928][ T5704] usb 3-1: USB disconnect, device number 2 [ 86.066447][ T5675] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.135410][ T5075] snd-usb-audio 2-1:13.0: probe with driver snd-usb-audio failed with error -22 [ 86.164414][ T5075] usb 2-1: USB disconnect, device number 4 [ 86.180604][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.236077][ T5675] usb 4-1: Using ep0 maxpacket: 16 [ 86.242686][ T5675] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 86.251921][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.262798][ T5675] usb 4-1: config 0 descriptor?? [ 86.271848][ T5675] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 86.396978][ T809] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 86.483047][ T5675] gspca_sonixj: reg_w1 err -71 [ 86.493675][ T5675] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 86.508381][ T5675] usb 4-1: USB disconnect, device number 4 [ 86.557737][ T809] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 86.573352][ T809] usb 3-1: config 0 has no interface number 0 [ 86.582780][ T809] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 86.591932][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.600080][ T809] usb 3-1: Product: syz [ 86.604276][ T809] usb 3-1: Manufacturer: syz [ 86.608993][ T809] usb 3-1: SerialNumber: syz [ 86.616417][ T809] usb 3-1: config 0 descriptor?? [ 86.629369][ T809] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 86.639920][ T994] cfg80211: failed to load regulatory.db [ 87.132864][ T5941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.148557][ T5941] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 87.204272][ T5942] netlink: 196 bytes leftover after parsing attributes in process `syz.1.45'. [ 87.223367][ T5942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.231016][ T5942] IPv6: NLM_F_CREATE should be set when creating new route [ 87.238328][ T5942] IPv6: NLM_F_CREATE should be set when creating new route [ 87.449347][ T5951] netlink: 'syz.1.47': attribute type 1 has an invalid length. [ 87.617600][ T5675] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 87.779786][ T5675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.795761][ T5675] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 87.810886][ T5675] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 87.829523][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.854499][ T5675] usb 4-1: config 0 descriptor?? [ 87.887371][ T5675] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 87.894984][ T5675] dvb-usb: bulk message failed: -22 (3/0) [ 88.057080][ T5675] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 88.090769][ T5675] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 88.104907][ T5949] input: syz0 as /devices/virtual/input/input5 [ 88.112027][ T5675] usb 4-1: media controller created [ 88.143391][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.222394][ T5675] dvb-usb: bulk message failed: -22 (6/0) [ 88.244945][ T5675] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 88.270998][ T5675] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 88.326253][ T5683] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.336555][ T5675] dvb-usb: schedule remote query interval to 150 msecs. [ 88.348178][ T5675] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 88.423387][ T5675] usb 4-1: USB disconnect, device number 5 [ 88.501779][ T5675] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 88.512270][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 88.526801][ T5683] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 88.554482][ T5683] usb 5-1: config 0 has no interface number 1 [ 88.570861][ T5683] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 88.592818][ T5683] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 88.613369][ T5683] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 88.624434][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.636155][ T5683] usb 5-1: Product: syz [ 88.641518][ T5683] usb 5-1: Manufacturer: syz [ 88.646340][ T5683] usb 5-1: SerialNumber: syz [ 88.660605][ T5683] usb 5-1: config 0 descriptor?? [ 88.677350][ T5683] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 88.933349][ T2365] pvrusb2: Invalid read control endpoint [ 88.940876][ T5683] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 88.952928][ T2365] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 88.963958][ T2365] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 88.980529][ T5683] usb 5-1: USB disconnect, device number 3 [ 89.668111][ T5979] binder: 5977:5979 unknown command 0 [ 89.678471][ T5979] binder: 5977:5979 ioctl c0306201 200000000300 returned -22 [ 89.692864][ T5973] fuse: Bad value for 'group_id' [ 89.698836][ T5973] fuse: Bad value for 'group_id' [ 89.799564][ T5984] vivid-000: disconnect [ 89.863782][ T809] gspca_stk1135: reg_w 0x353 err -71 [ 89.875394][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 89.887575][ T809] gspca_stk1135: Sensor write failed [ 89.894961][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 89.902556][ T809] gspca_stk1135: Sensor write failed [ 89.908256][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 89.914683][ T809] gspca_stk1135: Sensor read failed [ 89.920399][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 89.929082][ T809] gspca_stk1135: Sensor read failed [ 89.934408][ T809] gspca_stk1135: Detected sensor type unknown (0x0) [ 89.941305][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 89.947891][ T809] gspca_stk1135: Sensor read failed [ 89.954052][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 89.960776][ T809] gspca_stk1135: Sensor read failed [ 89.967165][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 89.973622][ T809] gspca_stk1135: Sensor write failed [ 89.985497][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 89.993477][ T809] gspca_stk1135: Sensor write failed [ 89.999329][ T809] stk1135 3-1:0.3: probe with driver stk1135 failed with error -71 [ 90.011725][ T809] usb 3-1: USB disconnect, device number 3 [ 90.440258][ T5992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.59'. [ 90.615418][ T5983] vivid-000: reconnect [ 91.876006][ T5690] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 92.058717][ T5690] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 92.066975][ T5690] usb 2-1: config 0 has no interface number 0 [ 92.074708][ T5690] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 92.084353][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.092556][ T5690] usb 2-1: Product: syz [ 92.096952][ T5690] usb 2-1: Manufacturer: syz [ 92.101577][ T5690] usb 2-1: SerialNumber: syz [ 92.108488][ T5690] usb 2-1: config 0 descriptor?? [ 92.118580][ T5690] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 92.526003][ T809] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.695963][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 92.708093][ T809] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 92.721176][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.729496][ T809] usb 4-1: Product: 絀洞樖筎쓖雱ᡀꀥ࿉肩携篽ꡜ큰㹔싊帄곫䷿䒦솸衤璘㟎ొ䭭ㄹ婣냶㴻쑜毨ঈ籲ポꠙ䒷짬ꠗ줏椪隯ᢔṢ毞⬩흗 [ 92.748239][ T809] usb 4-1: Manufacturer: ᱋ [ 92.752896][ T809] usb 4-1: SerialNumber: syz [ 92.873828][ T6012] trusted_key: syz.0.66 sent an empty control message without MSG_MORE. [ 92.969149][ T809] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 93.029845][ T809] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 93.048990][ T809] usb 4-1: disable ehci-hcd to run US-144 [ 93.060434][ T809] usb 4-1: disable ehci-hcd to run US-144 [ 93.071475][ T809] usb 4-1: disable ehci-hcd to run US-144 [ 93.131762][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.172417][ T809] usb 4-1: USB disconnect, device number 6 [ 93.699304][ T6018] geneve2: entered allmulticast mode [ 94.168740][ T809] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 94.338002][ T809] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 94.372406][ T809] usb 4-1: config 0 has no interface number 0 [ 94.389868][ T809] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 94.399883][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.407983][ T809] usb 4-1: Product: syz [ 94.412408][ T809] usb 4-1: Manufacturer: syz [ 94.418574][ T809] usb 4-1: SerialNumber: syz [ 94.440497][ T809] usb 4-1: config 0 descriptor?? [ 94.454297][ T809] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 94.461305][ T6032] netlink: 'syz.4.71': attribute type 13 has an invalid length. [ 94.472788][ T6032] gretap0: refused to change device tx_queue_len [ 94.479885][ T6032] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 94.554941][ T6032] xt_cgroup: invalid path, errno=-2 [ 94.562012][ T6032] syzkaller0: entered promiscuous mode [ 94.567941][ T6032] syzkaller0: entered allmulticast mode [ 95.336570][ T5690] gspca_stk1135: reg_w 0x353 err -71 [ 95.344581][ T5690] gspca_stk1135: serial bus timeout: status=0x00 [ 95.352148][ T5690] gspca_stk1135: Sensor write failed [ 95.357729][ T5690] gspca_stk1135: serial bus timeout: status=0x00 [ 95.364109][ T5690] gspca_stk1135: Sensor write failed [ 95.369642][ T5690] gspca_stk1135: serial bus timeout: status=0x00 [ 95.376057][ T5690] gspca_stk1135: Sensor read failed [ 95.381407][ T5690] gspca_stk1135: serial bus timeout: status=0x00 [ 95.388426][ T5690] gspca_stk1135: Sensor read failed [ 95.393790][ T5690] gspca_stk1135: Detected sensor type unknown (0x0) [ 95.400618][ T5690] gspca_stk1135: serial bus timeout: status=0x00 [ 95.407071][ T5690] gspca_stk1135: Sensor read failed [ 95.412313][ T5690] gspca_stk1135: serial bus timeout: status=0x00 [ 95.419181][ T5690] gspca_stk1135: Sensor read failed [ 95.424658][ T5690] gspca_stk1135: serial bus timeout: status=0x00 [ 95.431148][ T5690] gspca_stk1135: Sensor write failed [ 95.436505][ T5690] gspca_stk1135: serial bus timeout: status=0x00 [ 95.442852][ T5690] gspca_stk1135: Sensor write failed [ 95.448333][ T5690] stk1135 2-1:0.3: probe with driver stk1135 failed with error -71 [ 95.460060][ T5690] usb 2-1: USB disconnect, device number 5 [ 95.963968][ T6048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.77'. [ 96.286135][ T5675] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.435946][ T5675] usb 3-1: Using ep0 maxpacket: 16 [ 96.442690][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.453728][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.463599][ T5675] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 96.472925][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.483172][ T5675] usb 3-1: config 0 descriptor?? [ 96.894323][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.903328][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.919128][ T5675] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 97.117195][ T5675] corsair 0003:1B1C:1B02.0002: Read invalid backlight brightness: ae. [ 97.329311][ T5675] usb 3-1: USB disconnect, device number 4 [ 97.676951][ T809] gspca_stk1135: reg_w 0x353 err -71 [ 97.684689][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 97.691489][ T809] gspca_stk1135: Sensor write failed [ 97.696950][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 97.703318][ T809] gspca_stk1135: Sensor write failed [ 97.709055][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 97.715400][ T809] gspca_stk1135: Sensor read failed [ 97.720681][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 97.727080][ T809] gspca_stk1135: Sensor read failed [ 97.732315][ T809] gspca_stk1135: Detected sensor type unknown (0x0) [ 97.739001][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 97.745410][ T809] gspca_stk1135: Sensor read failed [ 97.750813][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 97.758316][ T809] gspca_stk1135: Sensor read failed [ 97.763590][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 97.770160][ T809] gspca_stk1135: Sensor write failed [ 97.775515][ T809] gspca_stk1135: serial bus timeout: status=0x00 [ 97.782673][ T809] gspca_stk1135: Sensor write failed [ 97.788415][ T809] stk1135 4-1:0.3: probe with driver stk1135 failed with error -71 [ 97.802987][ T809] usb 4-1: USB disconnect, device number 7 [ 98.197410][ T5675] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 98.437456][ T5675] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 98.445693][ T5675] usb 3-1: config 0 has no interface number 0 [ 98.457859][ T5675] usb 3-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.492298][ T5675] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 98.515952][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 98.523999][ T5675] usb 3-1: Manufacturer: syz [ 98.533913][ T5675] usb 3-1: SerialNumber: syz [ 98.540140][ T6067] P: entered promiscuous mode [ 98.549322][ T5675] usb 3-1: config 0 descriptor?? [ 98.854973][ T6070] tipc: Failed to obtain node identity [ 98.861119][ T6070] tipc: Enabling of bearer rejected, failed to enable media [ 99.157599][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.168550][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.350070][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 99.362691][ T6083] sctp: [Deprecated]: syz.1.89 (pid 6083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.362691][ T6083] Use struct sctp_sack_info instead [ 99.836323][ T5675] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.849519][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.006065][ T5675] usb 2-1: Using ep0 maxpacket: 16 [ 100.011722][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 100.022008][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 100.031409][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.040804][ T5675] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 100.050152][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.059816][ T5675] usb 2-1: Product: syz [ 100.065018][ T10] usb 4-1: config 0 descriptor?? [ 100.070206][ T5675] usb 2-1: Manufacturer: syz [ 100.075686][ T5675] usb 2-1: SerialNumber: syz [ 100.084518][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 100.105035][ T5675] r8152-cfgselector 2-1: Unknown version 0x0000 [ 100.111487][ T5675] r8152-cfgselector 2-1: config 0 descriptor?? [ 100.283763][ T10] usb 4-1: Detected FT232B [ 100.485749][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.494711][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.504056][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 100.516778][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 100.528563][ T5675] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 100.539669][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.557849][ T10] usb 4-1: USB disconnect, device number 8 [ 100.576997][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.587287][ T10] ftdi_sio 4-1:0.0: device disconnected [ 100.905091][ T994] usb 3-1: USB disconnect, device number 5 [ 101.002199][ T6101] netlink: 68 bytes leftover after parsing attributes in process `syz.2.95'. [ 101.085681][ T6104] process 'syz.4.96' launched '/dev/fd/7/./file1' with NULL argv: empty string added [ 101.405975][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.475950][ T994] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 101.605981][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 101.613425][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.624855][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.634852][ T10] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.647922][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.654585][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 101.664151][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.673505][ T994] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.686987][ T10] usb 2-1: config 0 descriptor?? [ 101.708160][ T994] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.720794][ T994] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.737095][ T994] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.746401][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.754450][ T994] usb 4-1: Product: syz [ 101.759357][ T994] usb 4-1: Manufacturer: syz [ 101.764001][ T994] usb 4-1: SerialNumber: syz [ 102.319498][ T10] usb 2-1: string descriptor 0 read error: -71 [ 102.327392][ T10] uclogic 0003:5543:0045.0003: failed retrieving string descriptor #200: -71 [ 102.337962][ T10] uclogic 0003:5543:0045.0003: failed retrieving pen parameters: -71 [ 102.346453][ T10] uclogic 0003:5543:0045.0003: failed probing pen v2 parameters: -71 [ 102.354713][ T10] uclogic 0003:5543:0045.0003: failed probing parameters: -71 [ 102.362381][ T10] uclogic 0003:5543:0045.0003: probe with driver uclogic failed with error -71 [ 102.375742][ T10] usb 2-1: USB disconnect, device number 7 [ 102.791720][ T994] cdc_ncm 4-1:1.0: bind() failure [ 102.801713][ T994] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 102.811260][ T994] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 102.820723][ T994] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 102.834356][ T994] usb 4-1: USB disconnect, device number 9 [ 103.085859][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 103.112035][ T6125] bond1: option lacp_active: invalid value (5) [ 103.122820][ T6125] bond1 (unregistering): Released all slaves [ 103.402089][ T6134] syz.1.106 uses obsolete (PF_INET,SOCK_PACKET) [ 103.411671][ T6134] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 103.665968][ T994] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.827754][ T994] usb 2-1: Using ep0 maxpacket: 32 [ 103.865707][ T994] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 103.878678][ T994] usb 2-1: config 0 has no interface number 0 [ 103.896685][ T994] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 103.907833][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.918437][ T994] usb 2-1: Product: syz [ 103.922748][ T994] usb 2-1: Manufacturer: syz [ 103.927547][ T994] usb 2-1: SerialNumber: syz [ 103.937662][ T994] usb 2-1: config 0 descriptor?? [ 103.953763][ T994] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 104.183411][ T6141] loop4: detected capacity change from 0 to 7 [ 104.192851][ T6141] Dev loop4: unable to read RDB block 7 [ 104.200885][ T6141] loop4: unable to read partition table [ 104.208575][ T6141] loop4: partition table beyond EOD, truncated [ 104.221491][ T6141] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 104.410561][ T6147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.716673][ T5075] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 104.876371][ T5075] usb 4-1: Using ep0 maxpacket: 16 [ 104.888935][ T5075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.910786][ T5075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.944949][ T5075] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 104.962949][ T5075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.995242][ T5075] usb 4-1: config 0 descriptor?? [ 105.245959][ T5732] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 105.364427][ T6171] netlink: 68 bytes leftover after parsing attributes in process `syz.4.120'. [ 105.407397][ T5732] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 105.419491][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.431427][ T5732] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 105.441934][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.449883][ T5732] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 105.465345][ T5732] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 105.476897][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 105.487510][ T5075] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 105.504289][ T5732] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 105.522140][ T5732] usb 3-1: language id specifier not provided by device, defaulting to English [ 105.541533][ T5732] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 105.550916][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.559733][ T5732] usb 3-1: Manufacturer: 躔煟祚肂濬즰 [ 105.576635][ T5732] usb 3-1: config 0 descriptor?? [ 105.582991][ T6163] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.592627][ T5732] hub 3-1:0.0: bad descriptor, ignoring hub [ 105.599059][ T5732] hub 3-1:0.0: probe with driver hub failed with error -5 [ 105.612954][ T5732] input: 躔煟祚肂濬즰 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 105.664044][ T5075] corsair 0003:1B1C:1B02.0004: Read invalid backlight brightness: ae. [ 105.894270][ T10] usb 4-1: USB disconnect, device number 10 [ 106.331692][ T994] usb 2-1: qt2_attach - failed to power on unit: -71 [ 106.340864][ T994] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 106.357152][ T994] usb 2-1: USB disconnect, device number 8 [ 106.765958][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 106.887124][ T5704] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.931003][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.940493][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.948952][ T10] usb 4-1: Product: syz [ 106.953424][ T10] usb 4-1: Manufacturer: syz [ 106.958457][ T10] usb 4-1: SerialNumber: syz [ 106.970156][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 107.022488][ T5711] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 107.056697][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 107.065015][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.074801][ T5704] usb 2-1: config 42 has an invalid interface number: 178 but max is 0 [ 107.083722][ T5704] usb 2-1: config 42 has no interface number 0 [ 107.090594][ T5704] usb 2-1: config 42 interface 178 has no altsetting 0 [ 107.100865][ T5704] usb 2-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 107.110460][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.125103][ T5704] usb 2-1: Product: syz [ 107.129468][ T5704] usb 2-1: Manufacturer: syz [ 107.134189][ T5704] usb 2-1: SerialNumber: syz [ 107.449061][ T5075] usb 4-1: USB disconnect, device number 11 [ 107.840933][ T994] usb 3-1: USB disconnect, device number 6 [ 108.077021][ T5711] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 108.088437][ T5711] ath9k_htc: Failed to initialize the device [ 108.095837][ T5075] usb 4-1: ath9k_htc: USB layer deinitialized [ 108.476198][ T994] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.515992][ T5075] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 108.625956][ T994] usb 3-1: Using ep0 maxpacket: 16 [ 108.633188][ T994] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 108.656235][ T5075] usb 4-1: device descriptor read/64, error -71 [ 108.665077][ T994] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 108.674538][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 108.682821][ T994] usb 3-1: Product: syz [ 108.687261][ T994] usb 3-1: Manufacturer: syz [ 108.691899][ T994] usb 3-1: SerialNumber: syz [ 108.699371][ T994] usb 3-1: config 0 descriptor?? [ 108.708343][ T994] pwc: Philips SPC 880NC USB webcam detected. [ 108.906027][ T5075] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 108.920629][ T994] pwc: Warning: more than 1 configuration available. [ 108.928825][ T994] pwc: Failed to set LED on/off time (-71) [ 108.936593][ T994] pwc: send_video_command error -71 [ 108.941887][ T994] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 108.950046][ T994] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 108.964111][ T994] usb 3-1: USB disconnect, device number 7 [ 109.056147][ T5075] usb 4-1: device descriptor read/64, error -71 [ 109.166521][ T5075] usb usb4-port1: attempt power cycle [ 109.434036][ T5704] uvcvideo 2-1:42.178: Found multiple Units with ID 1 [ 109.443854][ T5704] uvcvideo 2-1:42.178: Found UVC 0.00 device syz (045e:00f8) [ 109.459478][ T5704] uvcvideo 2-1:42.178: No valid video chain found. [ 109.480300][ T5704] usb 2-1: USB disconnect, device number 9 [ 109.508964][ T6213] vivid-000: disconnect [ 109.527590][ T5075] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 109.576830][ T5075] usb 4-1: device descriptor read/8, error -71 [ 109.825971][ T5075] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 109.857812][ T5075] usb 4-1: device descriptor read/8, error -71 [ 109.886884][ T6212] vivid-000: reconnect [ 109.983159][ T5075] usb usb4-port1: unable to enumerate USB device [ 110.126994][ T5704] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.286094][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 110.304264][ T5704] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.337711][ T5704] usb 3-1: config 42 has an invalid interface number: 178 but max is 0 [ 110.353321][ T5704] usb 3-1: config 42 has no interface number 0 [ 110.361863][ T5704] usb 3-1: config 42 interface 178 has no altsetting 0 [ 110.374595][ T5704] usb 3-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 110.416530][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.445451][ T5704] usb 3-1: Product: syz [ 110.462075][ T5704] usb 3-1: Manufacturer: syz [ 110.470321][ T5704] usb 3-1: SerialNumber: syz [ 110.483664][ T6231] program syz.1.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.500491][ T6231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.624068][ T5704] uvcvideo 3-1:42.178: Found multiple Units with ID 1 [ 112.641696][ T5704] uvcvideo 3-1:42.178: Found UVC 0.00 device syz (045e:00f8) [ 112.683748][ T5704] uvcvideo 3-1:42.178: No valid video chain found. [ 112.720497][ T5704] usb 3-1: USB disconnect, device number 8 [ 112.994638][ T6265] vivid-000: disconnect [ 113.276463][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.436135][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 113.443167][ T29] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 113.455594][ T29] usb 2-1: config 0 has no interface number 1 [ 113.462647][ T29] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 113.474544][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 113.496467][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 113.508187][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.527638][ T29] usb 2-1: Product: syz [ 113.535946][ T29] usb 2-1: Manufacturer: syz [ 113.546421][ T29] usb 2-1: SerialNumber: syz [ 113.569729][ T29] usb 2-1: config 0 descriptor?? [ 113.583279][ T29] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 113.644810][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.149'. [ 113.699344][ T6274] Zero length message leads to an empty skb [ 113.783039][ T6263] vivid-000: reconnect [ 113.818196][ T29] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 113.832901][ T29] usb 2-1: USB disconnect, device number 10 [ 113.851888][ T29] pvrusb2: Device being rendered inoperable [ 113.860574][ T29] pvrusb2: Device being rendered inoperable [ 113.948545][ T5732] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 114.018053][ T6279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.150'. [ 114.028738][ T6279] tipc: Enabling of bearer rejected, media not registered [ 114.096098][ T5732] usb 3-1: device descriptor read/64, error -71 [ 114.276333][ T29] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 114.336002][ T5732] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.375229][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 114.385397][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 114.398410][ T6282] syz_tun: entered allmulticast mode [ 114.412800][ T6281] syz_tun: left allmulticast mode [ 114.425981][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 114.432691][ T29] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 114.442459][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.467578][ T5732] usb 3-1: device descriptor read/64, error -71 [ 114.586319][ T5732] usb usb3-port1: attempt power cycle [ 114.674481][ T6279] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 114.684959][ T6279] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 114.693176][ T6279] netlink: 256 bytes leftover after parsing attributes in process `syz.3.150'. [ 114.703925][ T29] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 114.713978][ T29] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 114.723472][ T29] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 114.896013][ T5675] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 114.926008][ T5732] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 114.946542][ T5732] usb 3-1: device descriptor read/8, error -71 [ 115.045964][ T5675] usb 2-1: Using ep0 maxpacket: 16 [ 115.052753][ T5675] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 115.061890][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.072197][ T5675] usb 2-1: config 0 descriptor?? [ 115.080085][ T5675] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 115.195971][ T5732] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.217107][ T5732] usb 3-1: device descriptor read/8, error -71 [ 115.283195][ T5675] usb 2-1: Detected FT232B [ 115.326232][ T5732] usb usb3-port1: unable to enumerate USB device [ 115.486159][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.494999][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.505292][ T5675] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 115.522074][ T5675] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 115.530788][ T5675] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.548201][ T5675] usb 2-1: USB disconnect, device number 11 [ 115.571162][ T5675] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.582725][ T5675] ftdi_sio 2-1:0.0: device disconnected [ 116.227918][ T6293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.478869][ T6295] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 116.490721][ T6295] gretap1: entered promiscuous mode [ 116.497881][ T6295] gretap1: entered allmulticast mode [ 116.625427][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 116.625446][ T30] audit: type=1326 audit(1778562008.309:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.658321][ T30] audit: type=1326 audit(1778562008.309:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.682701][ T30] audit: type=1326 audit(1778562008.349:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.708245][ T30] audit: type=1326 audit(1778562008.349:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.755432][ T30] audit: type=1326 audit(1778562008.349:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.809662][ T30] audit: type=1326 audit(1778562008.349:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.835257][ T30] audit: type=1326 audit(1778562008.349:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.863361][ T6299] loop4: detected capacity change from 0 to 2640 [ 116.870398][ T30] audit: type=1326 audit(1778562008.349:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.899157][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 116.907814][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 116.917595][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 116.926883][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 116.934859][ T30] audit: type=1326 audit(1778562008.349:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.978548][ T30] audit: type=1326 audit(1778562008.349:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f95aab9cdd9 code=0x7ffc0000 [ 116.978679][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 117.016643][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 117.048006][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 117.059109][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 117.076145][ T6299] ldm_validate_partition_table(): Disk read failed. [ 117.084393][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 117.098802][ T6299] Buffer I/O error on dev loop4, logical block 0, async page read [ 117.144744][ T6299] Dev loop4: unable to read RDB block 0 [ 117.162758][ T6299] loop4: unable to read partition table [ 117.202935][ T6299] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 117.274341][ T6306] vivid-000: disconnect [ 117.375969][ T5704] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 117.389546][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.162'. [ 117.525960][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 117.533457][ T5704] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 117.542672][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.553354][ T5704] usb 3-1: config 0 has no interface number 0 [ 117.564357][ T5704] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 117.574472][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.583595][ T5704] usb 3-1: Product: syz [ 117.588297][ T5704] usb 3-1: Manufacturer: syz [ 117.593068][ T5704] usb 3-1: SerialNumber: syz [ 117.603094][ T5704] usb 3-1: config 0 descriptor?? [ 117.619487][ T5704] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 117.671926][ T6305] vivid-000: reconnect [ 117.822335][ T5704] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 117.834435][ T5704] uvcvideo 3-1:0.105: No valid video chain found. [ 117.845983][ T5704] usb 3-1: USB disconnect, device number 13 [ 118.522919][ T6323] futex_wake_op: syz.3.167 tries to shift op by 32; fix this program [ 118.535996][ T5075] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 118.606485][ T5732] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 118.688698][ T5075] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 118.697825][ T5075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.705839][ T5075] usb 2-1: Product: syz [ 118.710107][ T5075] usb 2-1: Manufacturer: syz [ 118.714718][ T5075] usb 2-1: SerialNumber: syz [ 118.721937][ T5075] usb 2-1: config 0 descriptor?? [ 118.730880][ T5075] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 118.766005][ T5732] usb 3-1: Using ep0 maxpacket: 8 [ 118.772449][ T5732] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 118.783962][ T5732] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 118.793316][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.801466][ T5732] usb 3-1: Product: syz [ 118.805732][ T5732] usb 3-1: Manufacturer: syz [ 118.810511][ T5732] usb 3-1: SerialNumber: syz [ 118.817725][ T5732] usb 3-1: config 0 descriptor?? [ 118.826243][ T5732] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 120.960960][ T6331] syzkaller0: entered promiscuous mode [ 120.966894][ T6331] syzkaller0: entered allmulticast mode [ 121.731892][ T6343] vivid-000: disconnect [ 121.951335][ T5075] gspca_stk1135: reg_w 0x353 err -71 [ 121.981101][ T5075] gspca_stk1135: serial bus timeout: status=0x00 [ 122.005437][ T5075] gspca_stk1135: Sensor write failed [ 122.036847][ T5075] gspca_stk1135: serial bus timeout: status=0x00 [ 122.057953][ T5075] gspca_stk1135: Sensor write failed [ 122.078976][ T5732] gspca_zc3xx: reg_w_i err -71 [ 122.085942][ T5075] gspca_stk1135: serial bus timeout: status=0x00 [ 122.103180][ T5075] gspca_stk1135: Sensor read failed [ 122.126998][ T5732] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 122.144205][ T5075] gspca_stk1135: serial bus timeout: status=0x00 [ 122.162349][ T5075] gspca_stk1135: Sensor read failed [ 122.174136][ T5732] usb 3-1: USB disconnect, device number 14 [ 122.193441][ T5075] gspca_stk1135: Detected sensor type unknown (0x0) [ 122.213083][ T5075] gspca_stk1135: serial bus timeout: status=0x00 [ 122.232177][ T5075] gspca_stk1135: Sensor read failed [ 122.256887][ T5075] gspca_stk1135: serial bus timeout: status=0x00 [ 122.278405][ T5075] gspca_stk1135: Sensor read failed [ 122.294544][ T5075] gspca_stk1135: serial bus timeout: status=0x00 [ 122.308668][ T5075] gspca_stk1135: Sensor write failed [ 122.327793][ T5075] gspca_stk1135: serial bus timeout: status=0x00 [ 122.345835][ T5075] gspca_stk1135: Sensor write failed [ 122.363788][ T5075] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 122.400846][ T5075] usb 2-1: USB disconnect, device number 12 [ 122.610055][ T6342] vivid-000: reconnect [ 124.781383][ T6398] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 124.883310][ T6403] vivid-000: disconnect [ 125.145382][ T6393] could not allocate digest TFM handle sha3-224-ce [ 125.214301][ T6411] loop8: detected capacity change from 0 to 128 [ 125.270342][ T6411] loop8: AHDI p4 [ 125.662477][ T6399] vivid-000: reconnect [ 125.765987][ T5732] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 125.949536][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.977186][ T5732] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.001787][ T5732] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.034873][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.051817][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.074752][ T5732] usb 2-1: Product: syz [ 126.084889][ T5732] usb 2-1: Manufacturer: syz [ 126.103406][ T5732] usb 2-1: SerialNumber: syz [ 126.733070][ T5732] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 126.747585][ T5732] cdc_ncm 2-1:1.0: bind() failure [ 126.778238][ T5732] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 126.795318][ T5732] cdc_ncm 2-1:1.1: bind() failure Stopping sshd: [ 127.442761][ T6432] @: renamed from veth0_vlan (while UP) stopped /usr/sbin/sshd (pid 5385) OK Stopping crond: stopped /usr/sbin/crond (pid 5364) OK [ 127.886917][ T6441] misc userio: No port type given on /dev/userio [ 127.996676][ T6445] capability: warning: `syz.2.199' uses deprecated v2 capabilities in a way that may be insecure Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5289) [ 128.541759][ T5675] usb 2-1: USB disconnect, device number 13 Stopping network: [ 128.966331][ T5675] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.126221][ T5675] usb 2-1: Using ep0 maxpacket: 16 [ 129.144984][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.175997][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.192773][ T5675] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 129.203613][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.240784][ T5675] usb 2-1: config 0 descriptor?? OK Stopping iptables: OK [ 129.436720][ T5732] usb 3-1: new low-speed USB device number 15 using dummy_hcd Stopping system message bus: [ 129.576011][ T5732] usb 3-1: device descriptor read/64, error -71 [ 129.662766][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.671905][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.700172][ T5675] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 done [ 129.836029][ T5732] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 129.887660][ T5675] corsair 0003:1B1C:1B02.0005: Read invalid backlight brightness: ae. [ 129.966132][ T5732] usb 3-1: device descriptor read/64, error -71 [ 130.077421][ T5732] usb usb3-port1: attempt power cycle [ 130.100380][ T5697] usb 2-1: USB disconnect, device number 14 Stopping klogd: OK Stopping acpid: [ 130.416073][ T5732] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 130.437910][ T5732] usb 3-1: device descriptor read/8, error -71 [ 130.644539][ T6521] netlink: 'syz.1.212': attribute type 2 has an invalid length. [ 130.656371][ T6521] : entered promiscuous mode [ 130.685960][ T5732] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 130.707195][ T5732] usb 3-1: device descriptor read/8, error -71 [ 130.817971][ T5732] usb usb3-port1: unable to enumerate USB device [ 131.395965][ T5075] usb 2-1: new high-speed USB device number 15 using dummy_hcd OK [ 131.556337][ T5075] usb 2-1: Using ep0 maxpacket: 16 [ 131.574318][ T5075] usb 2-1: config 0 has no interfaces? [ 131.580495][ T5075] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.591969][ T5075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping syslogd: [ 131.603111][ T5075] usb 2-1: config 0 descriptor?? stopped /sbin/syslogd (pid 4976) OK [ 132.251349][ T6547] FAULT_INJECTION: forcing a failure. [ 132.251349][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 132.276043][ T6547] CPU: 1 UID: 0 PID: 6547 Comm: syz.0.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.276070][ T6547] Tainted: [L]=SOFTLOCKUP [ 132.276076][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.276094][ T6547] Call Trace: [ 132.276104][ T6547] [ 132.276111][ T6547] dump_stack_lvl+0xe8/0x150 [ 132.276142][ T6547] should_fail_ex+0x412/0x560 [ 132.276172][ T6547] should_failslab+0xa8/0x100 [ 132.276200][ T6547] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 132.276224][ T6547] ? __alloc_skb+0x186/0x7d0 [ 132.276251][ T6547] ? __alloc_skb+0x1d0/0x7d0 [ 132.276271][ T6547] ? __local_bh_enable_ip+0xd0/0x130 [ 132.276293][ T6547] __alloc_skb+0x1d0/0x7d0 [ 132.276313][ T6547] ? netlink_ack_tlv_len+0x6c/0x210 [ 132.276339][ T6547] netlink_ack+0x146/0xa50 [ 132.276376][ T6547] netlink_rcv_skb+0x2b6/0x4b0 [ 132.276400][ T6547] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.276425][ T6547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.276458][ T6547] ? bpf_lsm_capable+0x9/0x20 [ 132.276474][ T6547] ? security_capable+0x7e/0x2c0 [ 132.276502][ T6547] nfnetlink_rcv+0x2c0/0x27b0 [ 132.276531][ T6547] ? __local_bh_enable_ip+0xd0/0x130 [ 132.276549][ T6547] ? lockdep_hardirqs_on+0x7a/0x110 [ 132.276573][ T6547] ? __dev_queue_xmit+0x2b6/0x3950 [ 132.276597][ T6547] ? __local_bh_enable_ip+0xd0/0x130 [ 132.276613][ T6547] ? __dev_queue_xmit+0x2b6/0x3950 [ 132.276638][ T6547] ? __dev_queue_xmit+0x1fe5/0x3950 [ 132.276662][ T6547] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 132.276693][ T6547] ? __dev_queue_xmit+0x2b6/0x3950 [ 132.276723][ T6547] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.276750][ T6547] ? __pfx___dev_queue_xmit+0x10/0x10 [ 132.276782][ T6547] ? ref_tracker_free+0x693/0x840 [ 132.276808][ T6547] ? __pfx_ref_tracker_free+0x10/0x10 [ 132.276829][ T6547] ? __asan_memcpy+0x40/0x70 [ 132.276849][ T6547] ? __skb_clone+0x63/0x7a0 [ 132.276877][ T6547] ? __skb_clone+0x483/0x7a0 [ 132.276907][ T6547] ? skb_clone+0x246/0x3a0 [ 132.276933][ T6547] ? __netlink_deliver_tap+0x807/0x850 [ 132.276956][ T6547] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.276985][ T6547] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.277008][ T6547] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.277036][ T6547] netlink_unicast+0x75c/0x8e0 [ 132.277066][ T6547] netlink_sendmsg+0x813/0xb40 [ 132.277097][ T6547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.277124][ T6547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 132.277148][ T6547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.277174][ T6547] ____sys_sendmsg+0x972/0x9f0 [ 132.277198][ T6547] ? __might_fault+0xaf/0x130 [ 132.277224][ T6547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.277263][ T6547] ? import_iovec+0x73/0xa0 [ 132.277292][ T6547] ___sys_sendmsg+0x2a5/0x360 [ 132.277315][ T6547] ? __lock_acquire+0x6b5/0x2cf0 [ 132.277338][ T6547] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.277393][ T6547] ? __fget_files+0x2a/0x420 [ 132.277413][ T6547] ? __fget_files+0x3a0/0x420 [ 132.277442][ T6547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 132.277469][ T6547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.277501][ T6547] ? __pfx_ksys_write+0x10/0x10 [ 132.277538][ T6547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.277553][ T6547] do_syscall_64+0x15f/0xf80 [ 132.277571][ T6547] ? trace_irq_disable+0x3b/0x140 [ 132.277590][ T6547] ? clear_bhb_loop+0x40/0x90 [ 132.277605][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.277617][ T6547] RIP: 0033:0x7fd5cad9cdd9 [ 132.277633][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.277646][ T6547] RSP: 002b:00007fd5cbbc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.277662][ T6547] RAX: ffffffffffffffda RBX: 00007fd5cb016090 RCX: 00007fd5cad9cdd9 [ 132.277671][ T6547] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 132.277679][ T6547] RBP: 00007fd5cbbc8090 R08: 0000000000000000 R09: 0000000000000000 [ 132.277686][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.277693][ T6547] R13: 00007fd5cb016128 R14: 00007fd5cb016090 R15: 00007fd5cb13fa48 [ 132.277712][ T6547] [ 132.735725][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742225][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 133.390537][ T5075] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 133.547715][ T5075] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.560299][ T5075] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 133.591542][ T5075] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 133.627306][ T5075] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.637944][ T5075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.650852][ T5075] usb 3-1: Product: syz [ 133.662771][ T5075] usb 3-1: Manufacturer: syz [ 133.681440][ T5075] usb 3-1: SerialNumber: syz [ 133.979799][ T6552] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 133.988943][ T6552] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 134.341960][ T5711] usb 2-1: USB disconnect, device number 15 [ 134.402457][ T5075] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 134.408540][ T5075] cdc_ncm 3-1:1.0: bind() failure [ 134.421859][ T5075] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 134.447701][ T5075] cdc_ncm 3-1:1.1: bind() failure [ 134.833729][ T6561] netlink: 'syz.4.222': attribute type 9 has an invalid length. [ 134.856048][ T5711] usb 2-1: new high-speed USB device number 16 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 134.971741][ T4994] udevd[4994]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 135.015937][ T5711] usb 2-1: device descriptor read/64, error -71 Connection to 10.128.0.109 closed by remote host. [ 135.070483][ T5732] usb 3-1: USB disconnect, device number 19 [ 135.847298][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.032623][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.099432][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.166826][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 136.272378][ T12] bridge_slave_1: left allmulticast mode [ 136.278216][ T12] bridge_slave_1: left promiscuous mode [ 136.285168][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.295703][ T12] bridge_slave_0: left allmulticast mode [ 136.302982][ T12] bridge_slave_0: left promiscuous mode [ 136.309251][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.445127][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.456886][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.469026][ T12] bond0 (unregistering): Released all slaves [ 136.537967][ T12] : left promiscuous mode [ 136.746841][ T12] hsr_slave_0: left promiscuous mode [ 136.752948][ T12] hsr_slave_1: left promiscuous mode [ 136.758783][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.766231][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.774079][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.781516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.794120][ T12] veth1_macvtap: left promiscuous mode [ 136.801232][ T12] veth0_macvtap: left promiscuous mode [ 136.923845][ T12] team0 (unregistering): Port device team_slave_1 removed [ 136.942877][ T12] team0 (unregistering): Port device team_slave_0 removed [ 137.202146][ T6563] smc: removing smcd device lo [ 137.220598][ T2365] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 137.230239][ T29] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 137.232989][ T2365] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 137.255384][ T2365] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 137.265317][ T2365] pvrusb2: Failure uploading firmware1 [ 137.271212][ T2365] pvrusb2: Device initialization was not successful. [ 137.272512][ T29] dvb_usb_az6027 4-1:64.0: probe with driver dvb_usb_az6027 failed with error -2 [ 137.284787][ T2365] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 137.298299][ T24] usb 1-1: emi26_load_firmware - request_firmware() failed [ 137.303640][ T5683] pvrusb2: Device being rendered inoperable [ 137.312347][ T2365] pvrusb2: Failed to submit write-control URB status=-19 [ 137.314877][ T24] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 137.339504][ T24] emi26 - firmware loader 1-1:2.227: probe with driver emi26 - firmware loader failed with error -5 [ 137.351482][ T2365] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 137.370062][ T2365] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 137.386253][ T2365] ------------[ cut here ]------------ [ 137.388913][ T24] emi26 - firmware loader 1-1:2.225: emi26_probe start [ 137.391756][ T2365] ret [ 137.399017][ T2365] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#0: pvrusb2-context/2365 [ 137.410544][ T24] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 137.415393][ T2365] Modules linked in: [ 137.426794][ T29] usb 4-1: USB disconnect, device number 16 [ 137.428535][ T2365] CPU: 0 UID: 0 PID: 2365 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 137.436329][ T24] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 137.444845][ T2365] Tainted: [L]=SOFTLOCKUP [ 137.456507][ T2365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.462486][ T24] ------------[ cut here ]------------ [ 137.466596][ T2365] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 137.466625][ T2365] Code: bb fb e9 5d fc ff ff e8 c8 de bb fb c6 05 27 cc 10 0a 01 48 c7 c7 60 f2 53 8c e8 25 ca 1d fb e9 85 fc ff ff e8 ab de bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 f3 53 8c 4c 89 e2 e8 25 6a 22 fb e9 [ 137.466640][ T2365] RSP: 0018:ffffc9000772f670 EFLAGS: 00010293 [ 137.466659][ T2365] RAX: ffffffff8609e325 RBX: dffffc0000000000 RCX: ffff88802d075c40 [ 137.472146][ T24] ret [ 137.478605][ T2365] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 137.498208][ T24] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#1: kworker/1:0/24 [ 137.504150][ T2365] RBP: 0000000000000001 R08: ffffffff9030b6f7 R09: 1ffffffff20616de [ 137.504167][ T2365] R10: dffffc0000000000 R11: fffffbfff20616df R12: ffffffff8cae5340 [ 137.512211][ T24] Modules linked in: [ 137.514808][ T2365] R13: 0000000000001770 R14: ffff88807a5140b0 R15: 00000000fffffff5 [ 137.514823][ T2365] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 137.514839][ T2365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.522919][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.535169][ T2365] CR2: 00007fc50b7f84c0 CR3: 00000000317b8000 CR4: 00000000003526f0 [ 137.535191][ T2365] Call Trace: [ 137.535199][ T2365] [ 137.535210][ T2365] ? kfree+0x1c5/0x640 [ 137.535234][ T2365] ? _request_firmware+0xf11/0x1780 [ 137.535261][ T2365] ? __kmalloc_cache_noprof+0x15b/0x660 [ 137.535291][ T2365] _request_firmware+0x1052/0x1780 [ 137.543296][ T24] Tainted: [L]=SOFTLOCKUP [ 137.543306][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.543319][ T24] Workqueue: usb_hub_wq hub_event [ 137.551356][ T2365] ? __pfx__request_firmware+0x10/0x10 [ 137.555213][ T24] [ 137.555223][ T24] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 137.563224][ T2365] request_firmware+0x36/0x50 [ 137.563255][ T2365] pvr2_locate_firmware+0xb3/0x500 [ 137.563284][ T2365] pvr2_upload_firmware1+0x1ba/0x910 [ 137.572258][ T24] Code: bb fb e9 5d fc ff ff e8 c8 de bb fb c6 05 27 cc 10 0a 01 48 c7 c7 60 f2 53 8c e8 25 ca 1d fb e9 85 fc ff ff e8 ab de bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 f3 53 8c 4c 89 e2 e8 25 6a 22 fb e9 [ 137.578880][ T2365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.589690][ T24] RSP: 0018:ffffc900001e6a90 EFLAGS: 00010287 [ 137.597639][ T2365] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 137.600943][ T24] [ 137.600954][ T24] RAX: ffffffff8609e325 RBX: dffffc0000000000 RCX: 0000000000100000 [ 137.603893][ T2365] pvr2_hdw_initialize+0x428/0x3c50 [ 137.607985][ T24] RDX: ffffc900128e1000 RSI: 00000000000b301a RDI: 00000000000b301b [ 137.613193][ T2365] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.618785][ T24] RBP: 0000000000000001 R08: ffffffff9030b6f7 R09: 1ffffffff20616de [ 137.623894][ T2365] ? __pfx___mutex_trylock_common+0x10/0x10 [ 137.628261][ T24] R10: dffffc0000000000 R11: fffffbfff20616df R12: ffffffff8c8c7120 [ 137.638321][ T2365] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 137.643375][ T24] R13: 0000000000001770 R14: ffff88805534d0b0 R15: 00000000fffffff5 [ 137.648875][ T2365] ? rcu_is_watching+0x15/0xb0 [ 137.651208][ T24] FS: 0000000000000000(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 137.657471][ T2365] ? trace_contention_end+0x3d/0x140 [ 137.662191][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.667328][ T2365] ? pvr2_context_thread_func+0x26a/0xb40 [ 137.672616][ T24] CR2: 00005555757d1a38 CR3: 00000000317b8000 CR4: 00000000003526f0 [ 137.692253][ T2365] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 137.692283][ T2365] ? pvr2_context_thread_func+0x102/0xb40 [ 137.698344][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000041391c33 [ 137.704379][ T2365] ? __pfx___schedule+0x10/0x10 [ 137.710238][ T24] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 137.712542][ T2365] ? __pfx___mutex_lock+0x10/0x10 [ 137.720556][ T24] Call Trace: [ 137.725739][ T2365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.733749][ T24] [ 137.738958][ T2365] ? schedule+0x90/0x360 [ 137.746968][ T24] ? kfree+0x1c5/0x640 [ 137.752854][ T2365] ? schedule+0x16e/0x360 [ 137.761547][ T24] ? _request_firmware+0xf11/0x1780 [ 137.766636][ T2365] pvr2_context_thread_func+0x490/0xb40 [ 137.766666][ T2365] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 137.766691][ T2365] ? __pfx_autoremove_wake_function+0x10/0x10 [ 137.766723][ T2365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.766749][ T2365] ? __kthread_parkme+0x7a/0x1f0 [ 137.766778][ T2365] kthread+0x388/0x470 [ 137.774774][ T24] _request_firmware+0x1052/0x1780 [ 137.779574][ T2365] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 137.788668][ T24] ? __pfx__request_firmware+0x10/0x10 [ 137.793787][ T2365] ? __pfx_kthread+0x10/0x10 [ 137.800414][ T24] ? __kmalloc_cache_noprof+0x31c/0x660 [ 137.806167][ T2365] ret_from_fork+0x514/0xb70 [ 137.814205][ T24] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.819810][ T2365] ? __pfx_ret_from_fork+0x10/0x10 [ 137.825563][ T24] request_firmware+0x36/0x50 [ 137.833835][ T2365] ? __switch_to+0xc79/0x1410 [ 137.839814][ T24] emi26_probe+0x16a/0x1690 [ 137.839870][ T24] ? __pfx_emi26_probe+0x10/0x10 [ 137.849484][ T2365] ? __pfx_kthread+0x10/0x10 [ 137.852924][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 137.856296][ T2365] ret_from_fork_asm+0x1a/0x30 [ 137.862234][ T24] usb_probe_interface+0x659/0xc70 [ 137.865185][ T2365] [ 137.865199][ T2365] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 137.865255][ T2365] CPU: 0 UID: 0 PID: 2365 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 137.865335][ T2365] Tainted: [L]=SOFTLOCKUP [ 137.865359][ T2365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.865387][ T2365] Call Trace: [ 137.865405][ T2365] [ 137.865431][ T2365] vpanic+0x56c/0xa60 [ 137.865484][ T2365] ? __pfx__printk+0x10/0x10 [ 137.865546][ T2365] ? __pfx_vpanic+0x10/0x10 [ 137.865591][ T2365] ? is_bpf_text_address+0x292/0x2b0 [ 137.865643][ T2365] ? is_bpf_text_address+0x26/0x2b0 [ 137.865708][ T2365] panic+0xc5/0xd0 [ 137.865764][ T2365] ? __pfx_panic+0x10/0x10 [ 137.865836][ T2365] ? ret_from_fork_asm+0x1a/0x30 [ 137.865907][ T2365] __warn+0x315/0x4c0 [ 137.865941][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 137.865995][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 137.866042][ T2365] __report_bug+0x29a/0x540 [ 137.866120][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 137.866175][ T2365] ? __pfx___report_bug+0x10/0x10 [ 137.866236][ T2365] ? __up_read+0x291/0x6b0 [ 137.866323][ T2365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.866385][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 137.866436][ T2365] report_bug+0x16a/0x220 [ 137.866510][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 137.866555][ T2365] ? firmware_fallback_sysfs+0x748/0xa30 [ 137.866605][ T2365] handle_bug+0x9c/0x200 [ 137.866661][ T2365] exc_invalid_op+0x1a/0x50 [ 137.866734][ T2365] asm_exc_invalid_op+0x1a/0x20 [ 137.866803][ T2365] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 137.866853][ T2365] Code: bb fb e9 5d fc ff ff e8 c8 de bb fb c6 05 27 cc 10 0a 01 48 c7 c7 60 f2 53 8c e8 25 ca 1d fb e9 85 fc ff ff e8 ab de bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 f3 53 8c 4c 89 e2 e8 25 6a 22 fb e9 [ 137.866895][ T2365] RSP: 0018:ffffc9000772f670 EFLAGS: 00010293 [ 137.866934][ T2365] RAX: ffffffff8609e325 RBX: dffffc0000000000 RCX: ffff88802d075c40 [ 137.866968][ T2365] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 137.867048][ T2365] RBP: 0000000000000001 R08: ffffffff9030b6f7 R09: 1ffffffff20616de [ 137.867078][ T2365] R10: dffffc0000000000 R11: fffffbfff20616df R12: ffffffff8cae5340 [ 137.867113][ T2365] R13: 0000000000001770 R14: ffff88807a5140b0 R15: 00000000fffffff5 [ 137.867166][ T2365] ? firmware_fallback_sysfs+0x745/0xa30 [ 137.867237][ T2365] ? kfree+0x1c5/0x640 [ 137.867291][ T2365] ? _request_firmware+0xf11/0x1780 [ 137.867363][ T2365] ? __kmalloc_cache_noprof+0x15b/0x660 [ 137.867436][ T2365] _request_firmware+0x1052/0x1780 [ 137.867549][ T2365] ? __pfx__request_firmware+0x10/0x10 [ 137.867654][ T2365] request_firmware+0x36/0x50 [ 137.867736][ T2365] pvr2_locate_firmware+0xb3/0x500 [ 137.867811][ T2365] pvr2_upload_firmware1+0x1ba/0x910 [ 137.867881][ T2365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.867963][ T2365] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 137.868087][ T2365] pvr2_hdw_initialize+0x428/0x3c50 [ 137.868163][ T2365] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.868270][ T2365] ? __pfx___mutex_trylock_common+0x10/0x10 [ 137.868334][ T2365] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 137.868394][ T2365] ? rcu_is_watching+0x15/0xb0 [ 137.868449][ T2365] ? trace_contention_end+0x3d/0x140 [ 137.868543][ T2365] ? pvr2_context_thread_func+0x26a/0xb40 [ 137.868627][ T2365] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 137.868693][ T2365] ? pvr2_context_thread_func+0x102/0xb40 [ 137.868748][ T2365] ? __pfx___schedule+0x10/0x10 [ 137.868812][ T2365] ? __pfx___mutex_lock+0x10/0x10 [ 137.868881][ T2365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.868954][ T2365] ? schedule+0x90/0x360 [ 137.869032][ T2365] ? schedule+0x16e/0x360 [ 137.869085][ T2365] pvr2_context_thread_func+0x490/0xb40 [ 137.869153][ T2365] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 137.869214][ T2365] ? __pfx_autoremove_wake_function+0x10/0x10 [ 137.869293][ T2365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.869355][ T2365] ? __kthread_parkme+0x7a/0x1f0 [ 137.869429][ T2365] kthread+0x388/0x470 [ 137.869453][ T2365] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 138.391179][ T2365] ? __pfx_kthread+0x10/0x10 [ 138.395773][ T2365] ret_from_fork+0x514/0xb70 [ 138.400362][ T2365] ? __pfx_ret_from_fork+0x10/0x10 [ 138.405479][ T2365] ? __switch_to+0xc79/0x1410 [ 138.410160][ T2365] ? __pfx_kthread+0x10/0x10 [ 138.414777][ T2365] ret_from_fork_asm+0x1a/0x30 [ 138.419548][ T2365] [ 138.423243][ T2365] Kernel Offset: disabled [ 138.427576][ T2365] Rebooting in 86400 seconds..