last executing test programs: 10m1.635106392s ago: executing program 3 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m0.041018523s ago: executing program 3 (id=26): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x4040080) 9m57.30576731s ago: executing program 3 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 9m55.509316302s ago: executing program 3 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 9m53.964185819s ago: executing program 3 (id=36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 9m53.306775207s ago: executing program 3 (id=37): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) prlimit64(r0, 0x7, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8018, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0xc010) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x4}) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) 9m37.711085347s ago: executing program 32 (id=37): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) prlimit64(r0, 0x7, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8018, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0xc010) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x4}) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) 9m14.553232034s ago: executing program 1 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, '\x00'}) connect$pptp(r2, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) bind$xdp(r1, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300"/366], 0x610) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) setrlimit(0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 9m14.184411851s ago: executing program 2 (id=114): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b52, &(0x7f0000000000)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000010280)={0x0, 0x9, 0x0, 0x5}, 0x10) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="02aaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmsg$key(r1, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000100)=[0xffffffff, 0x19f, 0x48, 0x3, 0x68b, 0xe016, 0xfffffffb, 0x5]) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) 9m11.797351179s ago: executing program 2 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000a80)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000bc0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000000000)={&(0x7f0000000c00)=[0x0, 0x2, 0x8f1, 0x7, 0x7, 0x5, 0x80000001, 0x0, 0xb, 0x80000001, 0x2, 0x1, 0xf2, 0xa13, 0x2, 0x200, 0x7f, 0x49e, 0x1ff, 0xffffffff, 0xf, 0x5, 0x7, 0x8, 0x3f, 0x18c, 0x4, 0x9, 0xf946, 0xfffffff7, 0x2, 0x7fff, 0x7, 0x52, 0x1, 0x6, 0x9, 0x95, 0x57bd173f, 0x8497, 0xffffaf84, 0x2866, 0xb, 0x2, 0x1000, 0xfa7, 0x6, 0x2, 0x2, 0x688, 0x0, 0x3, 0x401, 0x62, 0x119e, 0x2, 0x3b, 0x91, 0x101, 0x3, 0x3, 0x8000, 0x7, 0x6, 0x0, 0x7, 0x5, 0x5, 0x1, 0x5fc5, 0x3, 0x8, 0xffffffff, 0x7264, 0x1, 0x4, 0xfe3, 0x2, 0x1, 0xfffffffd, 0x100, 0x10000, 0x9, 0x1ff, 0x3, 0x7, 0x25, 0x3b, 0x7, 0x8, 0x1f, 0x8, 0x80000001, 0x34, 0x7f, 0xfffffffc, 0x7, 0x7fff, 0x4, 0x0, 0xf1, 0x3, 0x8, 0x40, 0xd33f, 0xc2, 0xd42, 0x7fff, 0x2, 0x0, 0x8, 0xd584, 0x4, 0x1, 0xffffffff, 0x7f, 0x80, 0x4, 0x4, 0x6, 0x4, 0x10001, 0x54, 0x800000, 0x1, 0xffffffdf, 0x5, 0x6, 0x7ff, 0x4fa0, 0x4, 0xfffffffa, 0x101, 0x5, 0x7fffffff, 0xfffffff5, 0x9, 0x9759, 0x1, 0x7, 0x5, 0xc000000, 0x8, 0x10001, 0x9, 0x8000, 0x6, 0xa0, 0x3, 0x936f, 0x9aa, 0x6, 0x107, 0x3, 0x9, 0xfa28, 0xffffffff, 0xe, 0x1, 0x10001, 0x8, 0x2700, 0x4, 0x6, 0x3, 0x2, 0x6, 0xd2, 0x2, 0x2, 0x6, 0x5, 0x400, 0xc6, 0x4, 0x4, 0x3, 0x8, 0x1, 0xffffffff, 0x7, 0x5527, 0x9, 0x0, 0x10a, 0x7ff, 0x7, 0x5, 0x5, 0x3, 0x1, 0x9, 0x0, 0x6, 0x6, 0x1, 0x10001, 0x3, 0x6b6, 0x86f, 0x0, 0x7, 0xffffffc0, 0x80000000, 0xf089, 0x0, 0x4, 0x4, 0x9, 0x401, 0x1, 0x1, 0xa000, 0x8, 0x6, 0x7, 0x40000000, 0x8001, 0x0, 0x9, 0x8, 0x1, 0x9, 0xcc0, 0x8f, 0x10, 0x4, 0x4, 0x6, 0x2, 0x380, 0xe460, 0x5, 0x7, 0xa2d, 0x7, 0x80000001, 0x6, 0x10, 0x477a, 0x0, 0xa4e6, 0x0, 0x6, 0x3, 0x1, 0x6, 0x5, 0xfffffff9, 0x963, 0x83, 0x6b5, 0x8, 0x0, 0x6, 0x6, 0x1ff, 0x6, 0x10, 0xc, 0x40, 0x8, 0xfffffffc, 0x0, 0x885, 0x2, 0x7, 0x8, 0x1ff, 0x0, 0x4, 0x0, 0x4, 0x8f2, 0xb, 0xffffff58, 0x4, 0xe, 0x9, 0x81, 0x8, 0x9, 0x80000001, 0x85e, 0x4, 0x0, 0x81, 0x35, 0xd79c, 0x0, 0x3, 0x6, 0x1, 0x7, 0x8, 0xf, 0x4, 0x1, 0x400000d, 0x3, 0x3, 0x3ff, 0x3, 0xbba5, 0x2, 0xfb1, 0x192, 0xe043, 0xfffffff8, 0x10000, 0xb7a5, 0x59f6, 0x0, 0x8, 0x7, 0x3, 0x3, 0x8, 0x200, 0x9, 0x0, 0x0, 0x7, 0x21d6, 0x2, 0x0, 0xf, 0x10000, 0x81, 0x7, 0x8, 0x444a, 0x80000000, 0x2, 0x1, 0x0, 0xe, 0x2, 0x5, 0xffffffff, 0x6, 0x7, 0x2, 0x2, 0x519, 0x3ff, 0x3, 0x80e, 0x1caf, 0xfff, 0x81, 0x9, 0x0, 0xae, 0x7, 0x1, 0x328, 0x400, 0x3, 0xf, 0x51, 0x101, 0x3, 0x5, 0x33, 0x400, 0x1d, 0x4, 0x7, 0x0, 0x8, 0xf7, 0x8000, 0x5, 0x9, 0x6, 0x0, 0x2, 0x84, 0xa, 0xfffffffa, 0x5, 0x7ff, 0x4636, 0x1, 0xffff, 0x1, 0xa, 0x7, 0x1, 0x6, 0x81, 0x3, 0x1, 0x7, 0x7, 0x3, 0x6, 0x5, 0xfffffff1, 0x9900000, 0x7, 0xfffff000, 0x80, 0x80, 0x2, 0x3, 0x4, 0xfffffeff, 0x40, 0x8, 0x2, 0x40, 0x1, 0x0, 0xc, 0x0, 0x8, 0x1000, 0x9, 0x6f, 0x9c, 0x0, 0xbf3, 0x45a5, 0x5, 0x1000, 0x3, 0x4, 0x80000000, 0x4, 0x0, 0x2, 0x3, 0x7, 0xe, 0x6, 0xe9e, 0x8001, 0x4, 0x9, 0x9, 0x4000000, 0x4, 0x1, 0x3, 0x3377, 0xffffffff, 0x7, 0x80000000, 0xbb, 0x9, 0x1, 0x1e8d9990, 0x7, 0x1, 0x0, 0x2, 0xfffffe01, 0x7, 0x7, 0x1, 0x10001, 0xa, 0xc8c3, 0x8, 0x740f, 0xa87, 0x0, 0x3, 0x0, 0x4, 0x9, 0x1, 0x802, 0xfffffff9, 0x6, 0x0, 0x3, 0x200, 0x438c3538, 0x7ffffeff, 0x2, 0x2fa, 0x2, 0x7, 0xd, 0x1, 0x4, 0x27, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0xfffffffe, 0x22, 0x22, 0x101, 0x10001, 0x8000, 0x6, 0xc, 0x0, 0x3, 0x5, 0xfffffff9, 0x8, 0xffffffff, 0x4, 0x9, 0x9, 0x7fff, 0x6, 0x8, 0x966, 0x3, 0x7, 0x8, 0x6, 0x8, 0x850b, 0xfffffff7, 0x1, 0x4, 0x81, 0xb, 0xd8, 0x2, 0xdcf9, 0x9, 0x101, 0x1, 0x20000000, 0x604, 0x7c27, 0x80000001, 0xd, 0x8, 0x5, 0x967, 0x4, 0x1, 0x3ecb, 0xb, 0x6, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x5, 0x4800000, 0x2, 0x8, 0x80, 0xd2b, 0x80000009, 0x0, 0xd, 0x3, 0x6, 0x80000000, 0x4, 0x0, 0x3ff, 0x656, 0x80, 0x68, 0x4, 0x3, 0xa, 0x7fb, 0x2, 0x5, 0x6, 0x2, 0x63, 0xfffffe01, 0x6, 0x694, 0xfffffffb, 0xb13, 0x9, 0x4, 0x9, 0x2a, 0x8, 0xb, 0xe, 0x1, 0x7, 0x4, 0x200, 0x4, 0x8a, 0x67, 0x3ff, 0x5, 0x559, 0x8, 0x3f50, 0x6, 0x5, 0x1, 0x5, 0x0, 0x1, 0x3, 0xfffffffa, 0xa, 0x40009, 0x3, 0x9, 0x930c, 0x1000, 0x5a, 0x8, 0x8, 0x1, 0x1, 0x2, 0x5, 0x7, 0x1, 0xfffffffc, 0xe, 0x3, 0xd, 0x400, 0x3, 0x0, 0xfc, 0x3, 0x80, 0x2, 0x3, 0x7, 0x9, 0x0, 0x8, 0x4, 0xfffffffb, 0x10001, 0x8, 0x7, 0x7, 0xd, 0x5, 0xfc, 0x6, 0x12c, 0x6, 0x7, 0x2, 0x28, 0x0, 0x5, 0x2, 0x7, 0x8, 0x0, 0x2, 0x100, 0x80000001, 0x10, 0x2, 0x4, 0x100, 0x3ff, 0x200, 0x9, 0x1001, 0x4, 0x72e, 0x7fff, 0x0, 0x236d, 0x2, 0x4, 0x9c, 0x7, 0x3, 0x227, 0x6, 0x3, 0xe, 0x0, 0x7, 0x4, 0x0, 0x5, 0x5, 0x8, 0xfff, 0x80, 0x401, 0xc0000, 0xb0, 0x200080, 0x10000, 0x5, 0x3, 0x547, 0x8, 0x81, 0x1, 0x4, 0x0, 0x9, 0x80002, 0x9, 0x7, 0x7, 0x7, 0x1, 0x7, 0x5, 0xffffffc0, 0x8, 0xb9, 0x6, 0x8, 0x4f57, 0x4, 0xe, 0x9, 0x800, 0x6, 0x4, 0x2, 0x5, 0xb, 0x8, 0x80000001, 0x5, 0x10000, 0x5, 0xfffffffe, 0x3, 0x1, 0x7, 0x8001, 0xda, 0x2, 0xfffffff7, 0x0, 0xb908, 0xb, 0x2, 0x1, 0x7, 0xfffffffa, 0x1, 0x6, 0xfffffff7, 0x4, 0x7, 0x2, 0x6, 0x9, 0x734, 0x7, 0x10002, 0x2195, 0x6, 0xfffffff0, 0x1d624e79, 0x0, 0x8, 0xdb, 0x4, 0x0, 0x0, 0x2, 0x1, 0xe1, 0x9, 0x9, 0xfffffffb, 0x2, 0x4, 0xba2, 0x8, 0x3, 0xfffffff8, 0x8000, 0xe7f5, 0x5, 0x4, 0xff, 0x1001, 0x4, 0x7, 0x48e6, 0x4, 0x1, 0x8000, 0x1000, 0x7, 0x2, 0xff, 0xc040000, 0x0, 0x8, 0x3, 0xa, 0x0, 0x40, 0x54e5abd6, 0x101, 0x404, 0x2, 0x0, 0x0, 0x9, 0x1, 0x6, 0x1, 0xffff06a3, 0x6, 0x0, 0x31c1, 0x7, 0x1004, 0x1, 0x1, 0x2, 0x4, 0xf8000000, 0x14000000, 0x62b, 0x8, 0x40, 0x8, 0xfffffffc, 0x3c9f, 0xffff2ddf, 0x8, 0x0, 0xc4, 0x7, 0x80000000, 0x4, 0x3, 0x2, 0xa9e, 0x8000, 0x7, 0x1ff, 0xc, 0x0, 0x0, 0x1, 0x2, 0x0, 0xde32, 0x1, 0x9, 0xf11e, 0x0, 0x6, 0x9aa4, 0x2, 0x7, 0x7, 0x819d, 0x64f, 0xa, 0x5, 0x3, 0x8, 0xfffffffe, 0x1000, 0x200, 0xff, 0x8, 0x0, 0xffffffff, 0x9, 0x0, 0x9, 0x1, 0x3, 0x3, 0x6, 0x0, 0x7fffffff, 0x3, 0x4, 0x3, 0x3bb6, 0xff, 0x1, 0x10, 0x5, 0x3, 0xff, 0x7, 0x1c0, 0xb585, 0x0, 0x8, 0x9, 0x4, 0x3, 0x101, 0x6, 0x6, 0x1, 0x50e, 0x60f2, 0x7, 0x81, 0x1, 0xb4, 0x7, 0x1, 0x4, 0x6, 0x8, 0x7ff, 0x76ac, 0x10000, 0x84c6, 0x8, 0x3, 0xe, 0x4, 0x5, 0x5, 0x7f, 0x8, 0xc5, 0x2, 0x5, 0x200, 0x1, 0x7fffffff, 0x6, 0x591, 0xcd, 0xfff, 0x0, 0x8, 0x9, 0x98, 0xd, 0x7ff, 0x16adb03, 0x59, 0x9, 0xe, 0x0, 0x9, 0x7, 0x1, 0x101, 0x3, 0x2, 0xb, 0x1, 0x4, 0x7, 0x0, 0x6, 0x9, 0x7, 0x5, 0x8, 0x7ff, 0x84bb, 0x7, 0x3, 0x401, 0x100, 0xf75, 0x8, 0xfff, 0x3ff, 0xbd89, 0x2, 0x7, 0xffffff6a, 0x9, 0x4, 0x1ff, 0x5, 0xadea, 0xc2, 0x9, 0x7, 0x3, 0x1, 0x0, 0xb, 0x625ba91b, 0x8, 0x2, 0x8, 0x3, 0x400, 0xffffffff, 0xe, 0x1, 0xbcbe, 0x6045, 0x6, 0x5, 0x425, 0x1000, 0x5, 0x8b22, 0x3, 0x2, 0x0, 0x3, 0x8, 0x1, 0x5, 0xf, 0x1, 0xa, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@hyper=0x8f1}) 9m11.365618137s ago: executing program 1 (id=119): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m10.17420587s ago: executing program 2 (id=120): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5e, 0x0, 0x0, 0x8, 0xffffffffffffff75, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 9m9.785918853s ago: executing program 2 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0xb23, 0x0, 0x42}) 9m9.438447019s ago: executing program 1 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9m7.938864046s ago: executing program 1 (id=127): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGSW(r3, 0x8040451b, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 9m5.133225423s ago: executing program 2 (id=128): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, '\x00'}) connect$pptp(r2, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) bind$xdp(r1, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300"/366], 0x610) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) setrlimit(0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 9m5.108399714s ago: executing program 1 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000a80)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000bc0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000000000)={&(0x7f0000000c00)=[0x0, 0x2, 0x8f1, 0x7, 0x7, 0x5, 0x80000001, 0x0, 0xb, 0x80000001, 0x2, 0x1, 0xf2, 0xa13, 0x2, 0x200, 0x7f, 0x49e, 0x1ff, 0xffffffff, 0xf, 0x5, 0x7, 0x8, 0x3f, 0x18c, 0x4, 0x9, 0xf946, 0xfffffff7, 0x2, 0x7fff, 0x7, 0x52, 0x1, 0x6, 0x9, 0x95, 0x57bd173f, 0x8497, 0xffffaf84, 0x2866, 0xb, 0x2, 0x1000, 0xfa7, 0x6, 0x2, 0x2, 0x688, 0x0, 0x3, 0x401, 0x62, 0x119e, 0x2, 0x3b, 0x91, 0x101, 0x3, 0x3, 0x8000, 0x7, 0x6, 0x0, 0x7, 0x5, 0x5, 0x1, 0x5fc5, 0x3, 0x8, 0xffffffff, 0x7264, 0x1, 0x4, 0xfe3, 0x2, 0x1, 0xfffffffd, 0x100, 0x10000, 0x9, 0x1ff, 0x3, 0x7, 0x25, 0x3b, 0x7, 0x8, 0x1f, 0x8, 0x80000001, 0x34, 0x7f, 0xfffffffc, 0x7, 0x7fff, 0x4, 0x0, 0xf1, 0x3, 0x8, 0x40, 0xd33f, 0xc2, 0xd42, 0x7fff, 0x2, 0x0, 0x8, 0xd584, 0x4, 0x1, 0xffffffff, 0x7f, 0x80, 0x4, 0x4, 0x6, 0x4, 0x10001, 0x54, 0x800000, 0x1, 0xffffffdf, 0x5, 0x6, 0x7ff, 0x4fa0, 0x4, 0xfffffffa, 0x101, 0x5, 0x7fffffff, 0xfffffff5, 0x9, 0x9759, 0x1, 0x7, 0x5, 0xc000000, 0x8, 0x10001, 0x9, 0x8000, 0x6, 0xa0, 0x3, 0x936f, 0x9aa, 0x6, 0x107, 0x3, 0x9, 0xfa28, 0xffffffff, 0xe, 0x1, 0x10001, 0x8, 0x2700, 0x4, 0x6, 0x3, 0x2, 0x6, 0xd2, 0x2, 0x2, 0x6, 0x5, 0x400, 0xc6, 0x4, 0x4, 0x3, 0x8, 0x1, 0xffffffff, 0x7, 0x5527, 0x9, 0x0, 0x10a, 0x7ff, 0x7, 0x5, 0x5, 0x3, 0x1, 0x9, 0x0, 0x6, 0x6, 0x1, 0x10001, 0x3, 0x6b6, 0x86f, 0x0, 0x7, 0xffffffc0, 0x80000000, 0xf089, 0x0, 0x4, 0x4, 0x9, 0x401, 0x1, 0x1, 0xa000, 0x8, 0x6, 0x7, 0x40000000, 0x8001, 0x0, 0x9, 0x8, 0x1, 0x9, 0xcc0, 0x8f, 0x10, 0x4, 0x4, 0x6, 0x2, 0x380, 0xe460, 0x5, 0x7, 0xa2d, 0x7, 0x80000001, 0x6, 0x10, 0x477a, 0x0, 0xa4e6, 0x0, 0x6, 0x3, 0x1, 0x6, 0x5, 0xfffffff9, 0x963, 0x83, 0x6b5, 0x8, 0x0, 0x6, 0x6, 0x1ff, 0x6, 0x10, 0xc, 0x40, 0x8, 0xfffffffc, 0x0, 0x885, 0x2, 0x7, 0x8, 0x1ff, 0x0, 0x4, 0x0, 0x4, 0x8f2, 0xb, 0xffffff58, 0x4, 0xe, 0x9, 0x81, 0x8, 0x9, 0x80000001, 0x85e, 0x4, 0x0, 0x81, 0x35, 0xd79c, 0x0, 0x3, 0x6, 0x1, 0x7, 0x8, 0xf, 0x4, 0x1, 0x400000d, 0x3, 0x3, 0x3ff, 0x3, 0xbba5, 0x2, 0xfb1, 0x192, 0xe043, 0xfffffff8, 0x10000, 0xb7a5, 0x59f6, 0x0, 0x8, 0x7, 0x3, 0x3, 0x8, 0x200, 0x9, 0x0, 0x0, 0x7, 0x21d6, 0x2, 0x0, 0xf, 0x10000, 0x81, 0x7, 0x8, 0x444a, 0x80000000, 0x2, 0x1, 0x0, 0xe, 0x2, 0x5, 0xffffffff, 0x6, 0x7, 0x2, 0x2, 0x519, 0x3ff, 0x3, 0x80e, 0x1caf, 0xfff, 0x81, 0x9, 0x0, 0xae, 0x7, 0x1, 0x328, 0x400, 0x3, 0xf, 0x51, 0x101, 0x3, 0x5, 0x33, 0x400, 0x1d, 0x4, 0x7, 0x0, 0x8, 0xf7, 0x8000, 0x5, 0x9, 0x6, 0x0, 0x2, 0x84, 0xa, 0xfffffffa, 0x5, 0x7ff, 0x4636, 0x1, 0xffff, 0x1, 0xa, 0x7, 0x1, 0x6, 0x81, 0x3, 0x1, 0x7, 0x7, 0x3, 0x6, 0x5, 0xfffffff1, 0x9900000, 0x7, 0xfffff000, 0x80, 0x80, 0x2, 0x3, 0x4, 0xfffffeff, 0x40, 0x8, 0x2, 0x40, 0x1, 0x0, 0xc, 0x0, 0x8, 0x1000, 0x9, 0x6f, 0x9c, 0x0, 0xbf3, 0x45a5, 0x5, 0x1000, 0x3, 0x4, 0x80000000, 0x4, 0x0, 0x2, 0x3, 0x7, 0xe, 0x6, 0xe9e, 0x8001, 0x4, 0x9, 0x9, 0x4000000, 0x4, 0x1, 0x3, 0x3377, 0xffffffff, 0x7, 0x80000000, 0xbb, 0x9, 0x1, 0x1e8d9990, 0x7, 0x1, 0x0, 0x2, 0xfffffe01, 0x7, 0x7, 0x1, 0x10001, 0xa, 0xc8c3, 0x8, 0x740f, 0xa87, 0x0, 0x3, 0x0, 0x4, 0x9, 0x1, 0x802, 0xfffffff9, 0x6, 0x0, 0x3, 0x200, 0x438c3538, 0x7ffffeff, 0x2, 0x2fa, 0x2, 0x7, 0xd, 0x1, 0x4, 0x27, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0xfffffffe, 0x22, 0x22, 0x101, 0x10001, 0x8000, 0x6, 0xc, 0x0, 0x3, 0x5, 0xfffffff9, 0x8, 0xffffffff, 0x4, 0x9, 0x9, 0x7fff, 0x6, 0x8, 0x966, 0x3, 0x7, 0x8, 0x6, 0x8, 0x850b, 0xfffffff7, 0x1, 0x4, 0x81, 0xb, 0xd8, 0x2, 0xdcf9, 0x9, 0x101, 0x1, 0x20000000, 0x604, 0x7c27, 0x80000001, 0xd, 0x8, 0x5, 0x967, 0x4, 0x1, 0x3ecb, 0xb, 0x6, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x5, 0x4800000, 0x2, 0x8, 0x80, 0xd2b, 0x80000009, 0x0, 0xd, 0x3, 0x6, 0x80000000, 0x4, 0x0, 0x3ff, 0x656, 0x80, 0x68, 0x4, 0x3, 0xa, 0x7fb, 0x2, 0x5, 0x6, 0x2, 0x63, 0xfffffe01, 0x6, 0x694, 0xfffffffb, 0xb13, 0x9, 0x4, 0x9, 0x2a, 0x8, 0xb, 0xe, 0x1, 0x7, 0x4, 0x200, 0x4, 0x8a, 0x67, 0x3ff, 0x5, 0x559, 0x8, 0x3f50, 0x6, 0x5, 0x1, 0x5, 0x0, 0x1, 0x3, 0xfffffffa, 0xa, 0x40009, 0x3, 0x9, 0x930c, 0x1000, 0x5a, 0x8, 0x8, 0x1, 0x1, 0x2, 0x5, 0x7, 0x1, 0xfffffffc, 0xe, 0x3, 0xd, 0x400, 0x3, 0x0, 0xfc, 0x3, 0x80, 0x2, 0x3, 0x7, 0x9, 0x0, 0x8, 0x4, 0xfffffffb, 0x10001, 0x8, 0x7, 0x7, 0xd, 0x5, 0xfc, 0x6, 0x12c, 0x6, 0x7, 0x2, 0x28, 0x0, 0x5, 0x2, 0x7, 0x8, 0x0, 0x2, 0x100, 0x80000001, 0x10, 0x2, 0x4, 0x100, 0x3ff, 0x200, 0x9, 0x1001, 0x4, 0x72e, 0x7fff, 0x0, 0x236d, 0x2, 0x4, 0x9c, 0x7, 0x3, 0x227, 0x6, 0x3, 0xe, 0x0, 0x7, 0x4, 0x0, 0x5, 0x5, 0x8, 0xfff, 0x80, 0x401, 0xc0000, 0xb0, 0x200080, 0x10000, 0x5, 0x3, 0x547, 0x8, 0x81, 0x1, 0x4, 0x0, 0x9, 0x80002, 0x9, 0x7, 0x7, 0x7, 0x1, 0x7, 0x5, 0xffffffc0, 0x8, 0xb9, 0x6, 0x8, 0x4f57, 0x4, 0xe, 0x9, 0x800, 0x6, 0x4, 0x2, 0x5, 0xb, 0x8, 0x80000001, 0x5, 0x10000, 0x5, 0xfffffffe, 0x3, 0x1, 0x7, 0x8001, 0xda, 0x2, 0xfffffff7, 0x0, 0xb908, 0xb, 0x2, 0x1, 0x7, 0xfffffffa, 0x1, 0x6, 0xfffffff7, 0x4, 0x7, 0x2, 0x6, 0x9, 0x734, 0x7, 0x10002, 0x2195, 0x6, 0xfffffff0, 0x1d624e79, 0x0, 0x8, 0xdb, 0x4, 0x0, 0x0, 0x2, 0x1, 0xe1, 0x9, 0x9, 0xfffffffb, 0x2, 0x4, 0xba2, 0x8, 0x3, 0xfffffff8, 0x8000, 0xe7f5, 0x5, 0x4, 0xff, 0x1001, 0x4, 0x7, 0x48e6, 0x4, 0x1, 0x8000, 0x1000, 0x7, 0x2, 0xff, 0xc040000, 0x0, 0x8, 0x3, 0xa, 0x0, 0x40, 0x54e5abd6, 0x101, 0x404, 0x2, 0x0, 0x0, 0x9, 0x1, 0x6, 0x1, 0xffff06a3, 0x6, 0x0, 0x31c1, 0x7, 0x1004, 0x1, 0x1, 0x2, 0x4, 0xf8000000, 0x14000000, 0x62b, 0x8, 0x40, 0x8, 0xfffffffc, 0x3c9f, 0xffff2ddf, 0x8, 0x0, 0xc4, 0x7, 0x80000000, 0x4, 0x3, 0x2, 0xa9e, 0x8000, 0x7, 0x1ff, 0xc, 0x0, 0x0, 0x1, 0x2, 0x0, 0xde32, 0x1, 0x9, 0xf11e, 0x0, 0x6, 0x9aa4, 0x2, 0x7, 0x7, 0x819d, 0x64f, 0xa, 0x5, 0x3, 0x8, 0xfffffffe, 0x1000, 0x200, 0xff, 0x8, 0x0, 0xffffffff, 0x9, 0x0, 0x9, 0x1, 0x3, 0x3, 0x6, 0x0, 0x7fffffff, 0x3, 0x4, 0x3, 0x3bb6, 0xff, 0x1, 0x10, 0x5, 0x3, 0xff, 0x7, 0x1c0, 0xb585, 0x0, 0x8, 0x9, 0x4, 0x3, 0x101, 0x6, 0x6, 0x1, 0x50e, 0x60f2, 0x7, 0x81, 0x1, 0xb4, 0x7, 0x1, 0x4, 0x6, 0x8, 0x7ff, 0x76ac, 0x10000, 0x84c6, 0x8, 0x3, 0xe, 0x4, 0x5, 0x5, 0x7f, 0x8, 0xc5, 0x2, 0x5, 0x200, 0x1, 0x7fffffff, 0x6, 0x591, 0xcd, 0xfff, 0x0, 0x8, 0x9, 0x98, 0xd, 0x7ff, 0x16adb03, 0x59, 0x9, 0xe, 0x0, 0x9, 0x7, 0x1, 0x101, 0x3, 0x2, 0xb, 0x1, 0x4, 0x7, 0x0, 0x6, 0x9, 0x7, 0x5, 0x8, 0x7ff, 0x84bb, 0x7, 0x3, 0x401, 0x100, 0xf75, 0x8, 0xfff, 0x3ff, 0xbd89, 0x2, 0x7, 0xffffff6a, 0x9, 0x4, 0x1ff, 0x5, 0xadea, 0xc2, 0x9, 0x7, 0x3, 0x1, 0x0, 0xb, 0x625ba91b, 0x8, 0x2, 0x8, 0x3, 0x400, 0xffffffff, 0xe, 0x1, 0xbcbe, 0x6045, 0x6, 0x5, 0x425, 0x1000, 0x5, 0x8b22, 0x3, 0x2, 0x0, 0x3, 0x8, 0x1, 0x5, 0xf, 0x1, 0xa, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@hyper=0x8f1}) 9m3.937086485s ago: executing program 1 (id=130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x88}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000300), 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_setup(0x510d, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 9m3.742390817s ago: executing program 2 (id=132): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1f, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x7, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getpid() r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) 8m49.942477405s ago: executing program 0 (id=143): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xbaebfbc4237eee37, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0xbf0e, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000340)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x3) 8m48.745980161s ago: executing program 0 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8m48.571442458s ago: executing program 33 (id=130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x88}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000300), 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_setup(0x510d, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 8m48.473296735s ago: executing program 34 (id=132): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1f, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x7, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getpid() r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) 8m48.026042779s ago: executing program 0 (id=147): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x237}) socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2a2d01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) close_range(r1, 0xffffffffffffffff, 0x0) 8m47.285098377s ago: executing program 0 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_open_dev$usbmon(0x0, 0x0, 0x80) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(0x0, 0x1, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') 8m46.224863193s ago: executing program 0 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000a80)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000bc0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000000)={&(0x7f0000000c00)=[0x0, 0x2, 0x8f1, 0x7, 0x7, 0x5, 0x80000001, 0x0, 0xb, 0x80000001, 0x2, 0x1, 0xf2, 0xa13, 0x2, 0x200, 0x7f, 0x49e, 0x1ff, 0xffffffff, 0xf, 0x5, 0x7, 0x8, 0x3f, 0x18c, 0x4, 0x9, 0xf946, 0xfffffff7, 0x2, 0x7fff, 0x7, 0x52, 0x1, 0x6, 0x9, 0x95, 0x57bd173f, 0x8497, 0xffffaf84, 0x2866, 0xb, 0x2, 0x1000, 0xfa7, 0x6, 0x2, 0x2, 0x688, 0x0, 0x3, 0x401, 0x62, 0x119e, 0x2, 0x3b, 0x91, 0x101, 0x3, 0x3, 0x8000, 0x7, 0x6, 0x0, 0x7, 0x5, 0x5, 0x1, 0x5fc5, 0x3, 0x8, 0xffffffff, 0x7264, 0x1, 0x4, 0xfe3, 0x2, 0x1, 0xfffffffd, 0x100, 0x10000, 0x9, 0x1ff, 0x3, 0x7, 0x25, 0x3b, 0x7, 0x8, 0x1f, 0x8, 0x80000001, 0x34, 0x7f, 0xfffffffc, 0x7, 0x7fff, 0x4, 0x0, 0xf1, 0x3, 0x8, 0x40, 0xd33f, 0xc2, 0xd42, 0x7fff, 0x2, 0x0, 0x8, 0xd584, 0x4, 0x1, 0xffffffff, 0x7f, 0x80, 0x4, 0x4, 0x6, 0x4, 0x10001, 0x54, 0x800000, 0x1, 0xffffffdf, 0x5, 0x6, 0x7ff, 0x4fa0, 0x4, 0xfffffffa, 0x101, 0x5, 0x7fffffff, 0xfffffff5, 0x9, 0x9759, 0x1, 0x7, 0x5, 0xc000000, 0x8, 0x10001, 0x9, 0x8000, 0x6, 0xa0, 0x3, 0x936f, 0x9aa, 0x6, 0x107, 0x3, 0x9, 0xfa28, 0xffffffff, 0xe, 0x1, 0x10001, 0x8, 0x2700, 0x4, 0x6, 0x3, 0x2, 0x6, 0xd2, 0x2, 0x2, 0x6, 0x5, 0x400, 0xc6, 0x4, 0x4, 0x3, 0x8, 0x1, 0xffffffff, 0x7, 0x5527, 0x9, 0x0, 0x10a, 0x7ff, 0x7, 0x5, 0x5, 0x3, 0x1, 0x9, 0x0, 0x6, 0x6, 0x1, 0x10001, 0x3, 0x6b6, 0x86f, 0x0, 0x7, 0xffffffc0, 0x80000000, 0xf089, 0x0, 0x4, 0x4, 0x9, 0x401, 0x1, 0x1, 0xa000, 0x8, 0x6, 0x7, 0x40000000, 0x8001, 0x0, 0x9, 0x8, 0x1, 0x9, 0xcc0, 0x8f, 0x10, 0x4, 0x4, 0x6, 0x2, 0x380, 0xe460, 0x5, 0x7, 0xa2d, 0x7, 0x80000001, 0x6, 0x10, 0x477a, 0x0, 0xa4e6, 0x0, 0x6, 0x3, 0x1, 0x6, 0x5, 0xfffffff9, 0x963, 0x83, 0x6b5, 0x8, 0x0, 0x6, 0x6, 0x1ff, 0x6, 0x10, 0xc, 0x40, 0x8, 0xfffffffc, 0x0, 0x885, 0x2, 0x7, 0x8, 0x1ff, 0x0, 0x4, 0x0, 0x4, 0x8f2, 0xb, 0xffffff58, 0x4, 0xe, 0x9, 0x81, 0x8, 0x9, 0x80000001, 0x85e, 0x4, 0x0, 0x81, 0x35, 0xd79c, 0x0, 0x3, 0x6, 0x1, 0x7, 0x8, 0xf, 0x4, 0x1, 0x400000d, 0x3, 0x3, 0x3ff, 0x3, 0xbba5, 0x2, 0xfb1, 0x192, 0xe043, 0xfffffff8, 0x10000, 0xb7a5, 0x59f6, 0x0, 0x8, 0x7, 0x3, 0x3, 0x8, 0x200, 0x9, 0x0, 0x0, 0x7, 0x21d6, 0x2, 0x0, 0xf, 0x10000, 0x81, 0x7, 0x8, 0x444a, 0x80000000, 0x2, 0x1, 0x0, 0xe, 0x2, 0x5, 0xffffffff, 0x6, 0x7, 0x2, 0x2, 0x519, 0x3ff, 0x3, 0x80e, 0x1caf, 0xfff, 0x81, 0x9, 0x0, 0xae, 0x7, 0x1, 0x328, 0x400, 0x3, 0xf, 0x51, 0x101, 0x3, 0x5, 0x33, 0x400, 0x1d, 0x4, 0x7, 0x0, 0x8, 0xf7, 0x8000, 0x5, 0x9, 0x6, 0x0, 0x2, 0x84, 0xa, 0xfffffffa, 0x5, 0x7ff, 0x4636, 0x1, 0xffff, 0x1, 0xa, 0x7, 0x1, 0x6, 0x81, 0x3, 0x1, 0x7, 0x7, 0x3, 0x6, 0x5, 0xfffffff1, 0x9900000, 0x7, 0xfffff000, 0x80, 0x80, 0x2, 0x3, 0x4, 0xfffffeff, 0x40, 0x8, 0x2, 0x40, 0x1, 0x0, 0xc, 0x0, 0x8, 0x1000, 0x9, 0x6f, 0x9c, 0x0, 0xbf3, 0x45a5, 0x5, 0x1000, 0x3, 0x4, 0x80000000, 0x4, 0x0, 0x2, 0x3, 0x7, 0xe, 0x6, 0xe9e, 0x8001, 0x4, 0x9, 0x9, 0x4000000, 0x4, 0x1, 0x3, 0x3377, 0xffffffff, 0x7, 0x80000000, 0xbb, 0x9, 0x1, 0x1e8d9990, 0x7, 0x1, 0x0, 0x2, 0xfffffe01, 0x7, 0x7, 0x1, 0x10001, 0xa, 0xc8c3, 0x8, 0x740f, 0xa87, 0x0, 0x3, 0x0, 0x4, 0x9, 0x1, 0x802, 0xfffffff9, 0x6, 0x0, 0x3, 0x200, 0x438c3538, 0x7ffffeff, 0x2, 0x2fa, 0x2, 0x7, 0xd, 0x1, 0x4, 0x27, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0xfffffffe, 0x22, 0x22, 0x101, 0x10001, 0x8000, 0x6, 0xc, 0x0, 0x3, 0x5, 0xfffffff9, 0x8, 0xffffffff, 0x4, 0x9, 0x9, 0x7fff, 0x6, 0x8, 0x966, 0x3, 0x7, 0x8, 0x6, 0x8, 0x850b, 0xfffffff7, 0x1, 0x4, 0x81, 0xb, 0xd8, 0x2, 0xdcf9, 0x9, 0x101, 0x1, 0x20000000, 0x604, 0x7c27, 0x80000001, 0xd, 0x8, 0x5, 0x967, 0x4, 0x1, 0x3ecb, 0xb, 0x6, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x5, 0x4800000, 0x2, 0x8, 0x80, 0xd2b, 0x80000009, 0x0, 0xd, 0x3, 0x6, 0x80000000, 0x4, 0x0, 0x3ff, 0x656, 0x80, 0x68, 0x4, 0x3, 0xa, 0x7fb, 0x2, 0x5, 0x6, 0x2, 0x63, 0xfffffe01, 0x6, 0x694, 0xfffffffb, 0xb13, 0x9, 0x4, 0x9, 0x2a, 0x8, 0xb, 0xe, 0x1, 0x7, 0x4, 0x200, 0x4, 0x8a, 0x67, 0x3ff, 0x5, 0x559, 0x8, 0x3f50, 0x6, 0x5, 0x1, 0x5, 0x0, 0x1, 0x3, 0xfffffffa, 0xa, 0x40009, 0x3, 0x9, 0x930c, 0x1000, 0x5a, 0x8, 0x8, 0x1, 0x1, 0x2, 0x5, 0x7, 0x1, 0xfffffffc, 0xe, 0x3, 0xd, 0x400, 0x3, 0x0, 0xfc, 0x3, 0x80, 0x2, 0x3, 0x7, 0x9, 0x0, 0x8, 0x4, 0xfffffffb, 0x10001, 0x8, 0x7, 0x7, 0xd, 0x5, 0xfc, 0x6, 0x12c, 0x6, 0x7, 0x2, 0x28, 0x0, 0x5, 0x2, 0x7, 0x8, 0x0, 0x2, 0x100, 0x80000001, 0x10, 0x2, 0x4, 0x100, 0x3ff, 0x200, 0x9, 0x1001, 0x4, 0x72e, 0x7fff, 0x0, 0x236d, 0x2, 0x4, 0x9c, 0x7, 0x3, 0x227, 0x6, 0x3, 0xe, 0x0, 0x7, 0x4, 0x0, 0x5, 0x5, 0x8, 0xfff, 0x80, 0x401, 0xc0000, 0xb0, 0x200080, 0x10000, 0x5, 0x3, 0x547, 0x8, 0x81, 0x1, 0x4, 0x0, 0x9, 0x80002, 0x9, 0x7, 0x7, 0x7, 0x1, 0x7, 0x5, 0xffffffc0, 0x8, 0xb9, 0x6, 0x8, 0x4f57, 0x4, 0xe, 0x9, 0x800, 0x6, 0x4, 0x2, 0x5, 0xb, 0x8, 0x80000001, 0x5, 0x10000, 0x5, 0xfffffffe, 0x3, 0x1, 0x7, 0x8001, 0xda, 0x2, 0xfffffff7, 0x0, 0xb908, 0xb, 0x2, 0x1, 0x7, 0xfffffffa, 0x1, 0x6, 0xfffffff7, 0x4, 0x7, 0x2, 0x6, 0x9, 0x734, 0x7, 0x10002, 0x2195, 0x6, 0xfffffff0, 0x1d624e79, 0x0, 0x8, 0xdb, 0x4, 0x0, 0x0, 0x2, 0x1, 0xe1, 0x9, 0x9, 0xfffffffb, 0x2, 0x4, 0xba2, 0x8, 0x3, 0xfffffff8, 0x8000, 0xe7f5, 0x5, 0x4, 0xff, 0x1001, 0x4, 0x7, 0x48e6, 0x4, 0x1, 0x8000, 0x1000, 0x7, 0x2, 0xff, 0xc040000, 0x0, 0x8, 0x3, 0xa, 0x0, 0x40, 0x54e5abd6, 0x101, 0x404, 0x2, 0x0, 0x0, 0x9, 0x1, 0x6, 0x1, 0xffff06a3, 0x6, 0x0, 0x31c1, 0x7, 0x1004, 0x1, 0x1, 0x2, 0x4, 0xf8000000, 0x14000000, 0x62b, 0x8, 0x40, 0x8, 0xfffffffc, 0x3c9f, 0xffff2ddf, 0x8, 0x0, 0xc4, 0x7, 0x80000000, 0x4, 0x3, 0x2, 0xa9e, 0x8000, 0x7, 0x1ff, 0xc, 0x0, 0x0, 0x1, 0x2, 0x0, 0xde32, 0x1, 0x9, 0xf11e, 0x0, 0x6, 0x9aa4, 0x2, 0x7, 0x7, 0x819d, 0x64f, 0xa, 0x5, 0x3, 0x8, 0xfffffffe, 0x1000, 0x200, 0xff, 0x8, 0x0, 0xffffffff, 0x9, 0x0, 0x9, 0x1, 0x3, 0x3, 0x6, 0x0, 0x7fffffff, 0x3, 0x4, 0x3, 0x3bb6, 0xff, 0x1, 0x10, 0x5, 0x3, 0xff, 0x7, 0x1c0, 0xb585, 0x0, 0x8, 0x9, 0x4, 0x3, 0x101, 0x6, 0x6, 0x1, 0x50e, 0x60f2, 0x7, 0x81, 0x1, 0xb4, 0x7, 0x1, 0x4, 0x6, 0x8, 0x7ff, 0x76ac, 0x10000, 0x84c6, 0x8, 0x3, 0xe, 0x4, 0x5, 0x5, 0x7f, 0x8, 0xc5, 0x2, 0x5, 0x200, 0x1, 0x7fffffff, 0x6, 0x591, 0xcd, 0xfff, 0x0, 0x8, 0x9, 0x98, 0xd, 0x7ff, 0x16adb03, 0x59, 0x9, 0xe, 0x0, 0x9, 0x7, 0x1, 0x101, 0x3, 0x2, 0xb, 0x1, 0x4, 0x7, 0x0, 0x6, 0x9, 0x7, 0x5, 0x8, 0x7ff, 0x84bb, 0x7, 0x3, 0x401, 0x100, 0xf75, 0x8, 0xfff, 0x3ff, 0xbd89, 0x2, 0x7, 0xffffff6a, 0x9, 0x4, 0x1ff, 0x5, 0xadea, 0xc2, 0x9, 0x7, 0x3, 0x1, 0x0, 0xb, 0x625ba91b, 0x8, 0x2, 0x8, 0x3, 0x400, 0xffffffff, 0xe, 0x1, 0xbcbe, 0x6045, 0x6, 0x5, 0x425, 0x1000, 0x5, 0x8b22, 0x3, 0x2, 0x0, 0x3, 0x8, 0x1, 0x5, 0xf, 0x1, 0xa, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000040)={@hyper=0x8f1}) 8m45.231794395s ago: executing program 0 (id=150): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0x0, 0x80000001}, {0x1, 0x0, 0x7}, {0x807, 0x0, 0x2}, {0x0, 0x0, 0x5}, {0x5}, {0x3, 0x0, 0x4}, {0x8402, 0x0, 0x4}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x8}, {0xfe, 0x0, 0x4}, {0x6}, {0x0, 0x0, 0x74}, {0x8, 0x0, 0x6}, {0x2, 0x0, 0x8}, {0x43, 0x0, 0x4}, {0x7761, 0x0, 0x3}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r9 = socket(0x2a, 0x2, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x20004004) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 8m29.328537147s ago: executing program 35 (id=150): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0x0, 0x80000001}, {0x1, 0x0, 0x7}, {0x807, 0x0, 0x2}, {0x0, 0x0, 0x5}, {0x5}, {0x3, 0x0, 0x4}, {0x8402, 0x0, 0x4}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x8}, {0xfe, 0x0, 0x4}, {0x6}, {0x0, 0x0, 0x74}, {0x8, 0x0, 0x6}, {0x2, 0x0, 0x8}, {0x43, 0x0, 0x4}, {0x7761, 0x0, 0x3}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r9 = socket(0x2a, 0x2, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x20004004) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 7m25.006263478s ago: executing program 4 (id=255): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) 7m24.835091117s ago: executing program 4 (id=256): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xe}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 7m24.59678547s ago: executing program 4 (id=257): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0x1}, {0xaee, 0x2, 0xac, 0x1000}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 7m24.464940292s ago: executing program 4 (id=258): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x3c) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000340)=""/193) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="3aae", 0xffd8}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) 7m24.243110756s ago: executing program 4 (id=259): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$usbmon(&(0x7f0000000340), 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x6, 0x4, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x1625, 0x0, 0x7, 0x7ffffffb, 0x2}, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 7m23.636408212s ago: executing program 4 (id=260): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 7m8.571707963s ago: executing program 36 (id=260): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 36.80105966s ago: executing program 9 (id=1206): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x2b) setresuid(0x0, 0xee01, 0x0) 35.614982917s ago: executing program 9 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0xbf0e, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000340)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) setns(r3, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) setns(0xffffffffffffffff, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.820926084s ago: executing program 9 (id=1211): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x48, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) 33.433333827s ago: executing program 9 (id=1214): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303d20422c02124070e702030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000380)={0x40, 0xb, 0x6b, "5da770b5c25d029aed5e49577fb166a222f035d465f505087f4480b9851f23961f7f99c0c27e16689ea71f0cfa41c9daf60924df0e46ecf8c5aabb0ded4ff817aad38dd5f9c455aa49082a23b5d5972405680c8e93930709cf237cba0905fbd089efb7a4cd4bfeab1ec292"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.677763613s ago: executing program 9 (id=1217): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bc"]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 27.947589787s ago: executing program 9 (id=1230): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0xfffffe9f}], 0x1}}], 0x1, 0x44810) 23.998733959s ago: executing program 5 (id=1241): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) sendmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)="d7921b9e26b6b4ad941e8a2f2fb63db984d78962c4727739d3bbcc270eb4e65b3e7bbeb55b65397ebb74c76a31a03957a50a51ea5eb66f21cfaa01e9328cd01abb07a3c712", 0x45}], 0x1, &(0x7f0000000c00)=ANY=[], 0xe0}}], 0x400000000000184, 0x0) 18.105499739s ago: executing program 5 (id=1246): syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 16.516984486s ago: executing program 5 (id=1251): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x200}, 0x8) 15.932693628s ago: executing program 6 (id=1253): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}}, 0x24}}, 0x0) 14.67720935s ago: executing program 5 (id=1254): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 9.702977959s ago: executing program 37 (id=1230): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0xfffffe9f}], 0x1}}], 0x1, 0x44810) 9.321142425s ago: executing program 6 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.032466918s ago: executing program 5 (id=1259): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.031980578s ago: executing program 6 (id=1260): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 7.857187066s ago: executing program 8 (id=1262): syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.554364604s ago: executing program 8 (id=1263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) 5.333644098s ago: executing program 8 (id=1266): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000600)={0x20, 0xe, 0x1a, "df07d11584e3ac341b7e15e0184994e422f8e1b8b00577edaeef"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.205450385s ago: executing program 6 (id=1269): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 3.572724695s ago: executing program 6 (id=1274): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.549258284s ago: executing program 6 (id=1275): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xbfd1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='devlink_hwerr\x00', r0}, 0x18) close(0xffffffffffffffff) futimesat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone3(&(0x7f0000000040)={0x49200000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x47) 2.401781947s ago: executing program 7 (id=1276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xda18, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x3}}}}}}, 0x0) 2.075296627s ago: executing program 8 (id=1277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = memfd_secret(0x0) futimesat(r1, 0x0, 0x0) 1.984311014s ago: executing program 7 (id=1278): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 1.882848268s ago: executing program 8 (id=1279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xffff, 0xe}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.722656337s ago: executing program 7 (id=1280): timer_create(0x7, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r6, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) read(r6, &(0x7f0000000380)=""/41, 0x29) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd_index=0x6, 0x401, 0x0, 0x4, 0x0, 0x0, {0x0, r1}}) 446.70906ms ago: executing program 7 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x56, &(0x7f0000004480)={@random="e5ac47edc16f", @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00c222", 0x20, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x4, 0x0, 0x4, {[@sack={0x5, 0xa, [0x3, 0xb]}]}}}}}}}}, 0x0) 270.38998ms ago: executing program 7 (id=1282): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.28038ms ago: executing program 8 (id=1283): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffff9c, 0x0, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 7 (id=1284): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): slave_0 [ 349.323601][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.323623][ T7240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.408083][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.408099][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.408123][ T7240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.470441][ T7171] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 349.536612][ T7171] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 349.579927][ T7171] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 349.639655][ T7171] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 349.939498][ T7240] hsr_slave_0: entered promiscuous mode [ 349.940832][ T7240] hsr_slave_1: entered promiscuous mode [ 349.947173][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.187804][ T5851] Bluetooth: hci5: command tx timeout [ 350.793441][ T7093] veth0_vlan: entered promiscuous mode [ 351.193727][ T7093] veth1_vlan: entered promiscuous mode [ 351.414793][ T7111] veth0_vlan: entered promiscuous mode [ 351.656035][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.669767][ T7111] veth1_vlan: entered promiscuous mode [ 351.963105][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.964832][ T7093] veth0_macvtap: entered promiscuous mode [ 352.009523][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.012130][ T7093] veth1_macvtap: entered promiscuous mode [ 352.022991][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.023199][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.083865][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.084062][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.166341][ T1587] bridge_slave_1: left allmulticast mode [ 352.166373][ T1587] bridge_slave_1: left promiscuous mode [ 352.166615][ T1587] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.239650][ T1587] bridge_slave_0: left allmulticast mode [ 352.239682][ T1587] bridge_slave_0: left promiscuous mode [ 352.239972][ T1587] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.268085][ T5851] Bluetooth: hci5: command tx timeout [ 353.808718][ T1587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.878648][ T1587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.922528][ T1587] bond0 (unregistering): Released all slaves [ 354.007310][ T7111] veth0_macvtap: entered promiscuous mode [ 354.111172][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.114619][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.185629][ T7111] veth1_macvtap: entered promiscuous mode [ 354.238878][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.363319][ T1587] hsr_slave_0: left promiscuous mode [ 354.377828][ T1587] hsr_slave_1: left promiscuous mode [ 354.378755][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.428811][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.429121][ T1587] team0 (unregistering): Port device team_slave_1 removed [ 355.638630][ T1587] team0 (unregistering): Port device team_slave_0 removed [ 357.751476][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.751697][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.840542][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.840915][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.843701][ T1460] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.857975][ T7240] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 357.914375][ T1460] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.931993][ T1460] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.932086][ T7240] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 358.013423][ T1460] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.034257][ T7240] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 358.083147][ T7240] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 358.137151][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.225069][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.358072][ T1460] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.471067][ T1460] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.505069][ T1460] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.533400][ T1460] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.825973][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.825993][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.185862][ T3207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.185881][ T3207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.316505][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.317298][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.317314][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.527344][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.527363][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.644052][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.704472][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.791591][ T7240] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.810376][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.817852][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.910309][ T1587] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.913434][ T1587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.270063][ T7316] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 361.986716][ T7119] veth0_vlan: entered promiscuous mode [ 362.110422][ T7119] veth1_vlan: entered promiscuous mode [ 362.462707][ T7171] veth0_vlan: entered promiscuous mode [ 362.507444][ T7119] veth0_macvtap: entered promiscuous mode [ 362.551743][ T7119] veth1_macvtap: entered promiscuous mode [ 362.575143][ T7171] veth1_vlan: entered promiscuous mode [ 362.745181][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.843639][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.945727][ T997] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.972682][ T997] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.984757][ T997] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.005562][ T7240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.020313][ T3207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.026902][ T7171] veth0_macvtap: entered promiscuous mode [ 363.128372][ T7171] veth1_macvtap: entered promiscuous mode [ 363.524475][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.572322][ T1587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.572341][ T1587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.598427][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.882742][ T7347] vivid-000: ================= START STATUS ================= [ 363.882860][ T7347] vivid-000: Test Pattern: 75% Colorbar [ 363.884800][ T7347] vivid-000: Fill Percentage of Frame: 100 [ 363.884882][ T7347] vivid-000: Horizontal Movement: No Movement [ 363.884900][ T7347] vivid-000: Vertical Movement: No Movement [ 363.884916][ T7347] vivid-000: OSD Text Mode: All [ 363.884930][ T7347] vivid-000: Show Border: false [ 363.884944][ T7347] vivid-000: Show Square: false [ 363.884957][ T7347] vivid-000: Sensor Flipped Horizontally: false [ 363.884971][ T7347] vivid-000: Sensor Flipped Vertically: false [ 363.884985][ T7347] vivid-000: Insert SAV Code in Image: false [ 363.884999][ T7347] vivid-000: Insert EAV Code in Image: false [ 363.885012][ T7347] vivid-000: Insert Video Guard Band: false [ 363.885026][ T7347] vivid-000: Reduced Framerate: false [ 363.885038][ T7347] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 363.885052][ T7347] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 363.885067][ T7347] vivid-000: Enable Capture Cropping: true [ 363.885154][ T7347] vivid-000: Enable Capture Composing: true [ 363.885214][ T7347] vivid-000: Enable Capture Scaler: true [ 363.885281][ T7347] vivid-000: Timestamp Source: End of Frame [ 363.885622][ T7347] vivid-000: Colorspace: sRGB [ 363.885681][ T7347] vivid-000: Transfer Function: Default [ 363.885745][ T7347] vivid-000: Y'CbCr Encoding: Default [ 363.885913][ T7347] vivid-000: HSV Encoding: Hue 0-179 [ 363.885924][ T7347] vivid-000: Quantization: Default [ 363.885932][ T7347] vivid-000: Apply Alpha To Red Only: false [ 363.885941][ T7347] vivid-000: Standard Aspect Ratio: 4x3 [ 363.885950][ T7347] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 363.885961][ T7347] vivid-000: DV Timings: 640x480p59 inactive [ 363.885972][ T7347] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 363.885981][ T7347] vivid-000: Maximum EDID Blocks: 2 [ 363.885990][ T7347] vivid-000: Limited RGB Range (16-235): false [ 363.885999][ T7347] vivid-000: Rx RGB Quantization Range: Automatic [ 363.886009][ T7347] vivid-000: Power Present: 0x00000001 [ 363.886028][ T7347] tpg source WxH: 320x240 (Y'CbCr) [ 363.886035][ T7347] tpg field: 1 [ 363.886039][ T7347] tpg crop: (0,0)/320x240 [ 363.886047][ T7347] tpg compose: (0,0)/320x240 [ 363.886053][ T7347] tpg colorspace: 8 [ 363.886057][ T7347] tpg transfer function: 0/0 [ 363.886061][ T7347] tpg Y'CbCr encoding: 0/0 [ 363.886066][ T7347] tpg quantization: 0/0 [ 363.886071][ T7347] tpg RGB range: 0/2 [ 363.886075][ T7347] vivid-000: ================== END STATUS ================== [ 364.732657][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.766194][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.789274][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.819404][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.827269][ T6365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.827289][ T6365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.461551][ T3652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.461570][ T3652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.465824][ T7240] veth0_vlan: entered promiscuous mode [ 365.528693][ T7240] veth1_vlan: entered promiscuous mode [ 365.640614][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.640633][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.840914][ T7240] veth0_macvtap: entered promiscuous mode [ 365.889667][ T7240] veth1_macvtap: entered promiscuous mode [ 365.910122][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 366.018474][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.057819][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 366.060998][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.065485][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 366.091985][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.092009][ T10] usb 7-1: Product: syz [ 366.092021][ T10] usb 7-1: Manufacturer: syz [ 366.092034][ T10] usb 7-1: SerialNumber: syz [ 366.142906][ T10] usb 7-1: config 0 descriptor?? [ 366.165337][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 366.165370][ T10] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 366.862386][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 366.931115][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.185841][ T43] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.210102][ T7384] vivid-000: ================= START STATUS ================= [ 367.210114][ T7384] vivid-000: Test Pattern: 75% Colorbar [ 367.210213][ T7384] vivid-000: Fill Percentage of Frame: 100 [ 367.210232][ T7384] vivid-000: Horizontal Movement: No Movement [ 367.210246][ T7384] vivid-000: Vertical Movement: No Movement [ 367.210254][ T7384] vivid-000: OSD Text Mode: All [ 367.210263][ T7384] vivid-000: Show Border: false [ 367.210271][ T7384] vivid-000: Show Square: false [ 367.210279][ T7384] vivid-000: Sensor Flipped Horizontally: false [ 367.210288][ T7384] vivid-000: Sensor Flipped Vertically: false [ 367.210367][ T7384] vivid-000: Insert SAV Code in Image: false [ 367.210384][ T7384] vivid-000: Insert EAV Code in Image: false [ 367.210399][ T7384] vivid-000: Insert Video Guard Band: false [ 367.210408][ T7384] vivid-000: Reduced Framerate: false [ 367.210416][ T7384] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 367.210426][ T7384] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 367.210435][ T7384] vivid-000: Enable Capture Cropping: true [ 367.210443][ T7384] vivid-000: Enable Capture Composing: true [ 367.210451][ T7384] vivid-000: Enable Capture Scaler: true [ 367.210536][ T7384] vivid-000: Timestamp Source: End of Frame [ 367.210552][ T7384] vivid-000: Colorspace: sRGB [ 367.210611][ T7384] vivid-000: Transfer Function: Default [ 367.210690][ T7384] vivid-000: Y'CbCr Encoding: Default [ 367.210749][ T7384] vivid-000: HSV Encoding: Hue 0-179 [ 367.210865][ T7384] vivid-000: Quantization: Default [ 367.210919][ T7384] vivid-000: Apply Alpha To Red Only: false [ 367.210936][ T7384] vivid-000: Standard Aspect Ratio: 4x3 [ 367.211032][ T7384] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 367.211055][ T7384] vivid-000: DV Timings: 640x480p59 inactive [ 367.211075][ T7384] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 367.211092][ T7384] vivid-000: Maximum EDID Blocks: 2 [ 367.211104][ T7384] vivid-000: Limited RGB Range (16-235): false [ 367.211113][ T7384] vivid-000: Rx RGB Quantization Range: Automatic [ 367.211121][ T7384] vivid-000: Power Present: 0x00000001 [ 367.211198][ T7384] tpg source WxH: 320x240 (Y'CbCr) [ 367.211210][ T7384] tpg field: 1 [ 367.211217][ T7384] tpg crop: (0,0)/320x240 [ 367.211228][ T7384] tpg compose: (0,0)/320x240 [ 367.211239][ T7384] tpg colorspace: 8 [ 367.211246][ T7384] tpg transfer function: 0/0 [ 367.211254][ T7384] tpg Y'CbCr encoding: 0/0 [ 367.211262][ T7384] tpg quantization: 0/0 [ 367.211266][ T7384] tpg RGB range: 0/2 [ 367.211270][ T7384] vivid-000: ================== END STATUS ================== [ 367.292967][ T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.350284][ T1460] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.550750][ T1460] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.069943][ T10] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 368.071551][ T10] em28xx 7-1:0.0: board has no eeprom [ 368.287737][ T10] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 368.287778][ T10] em28xx 7-1:0.0: dvb set to bulk mode. [ 368.296463][ T5859] em28xx 7-1:0.0: Binding DVB extension [ 368.305233][ T10] usb 7-1: USB disconnect, device number 2 [ 368.332252][ T10] em28xx 7-1:0.0: Disconnecting em28xx [ 368.524276][ T5859] em28xx 7-1:0.0: Registering input extension [ 368.525017][ T10] em28xx 7-1:0.0: Closing input extension [ 368.788522][ T6555] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 368.913761][ T10] em28xx 7-1:0.0: Freeing device [ 368.953772][ T6555] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 368.953800][ T6555] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.905962][ T6555] usb 9-1: config 0 descriptor?? [ 370.435218][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.435237][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.015330][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.015349][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.608821][ T5859] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 371.745926][ T6555] usb 9-1: Cannot set autoneg [ 371.746200][ T6555] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 371.757796][ T5859] usb 8-1: Using ep0 maxpacket: 8 [ 371.780602][ T5859] usb 8-1: config 0 has no interfaces? [ 371.785416][ T6555] usb 9-1: USB disconnect, device number 2 [ 371.807754][ T5859] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 371.807782][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 371.807799][ T5859] usb 8-1: Product: syz [ 371.807811][ T5859] usb 8-1: Manufacturer: syz [ 371.807822][ T5859] usb 8-1: SerialNumber: syz [ 371.901143][ T5859] usb 8-1: config 0 descriptor?? [ 372.168677][ T10] usb 8-1: USB disconnect, device number 2 [ 373.846854][ T5918] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 373.869437][ T7452] netlink: 'syz.9.299': attribute type 2 has an invalid length. [ 374.028280][ T5918] usb 8-1: Using ep0 maxpacket: 16 [ 374.031054][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.031103][ T5918] usb 8-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 374.031123][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.054561][ T5918] usb 8-1: config 0 descriptor?? [ 374.488192][ T5918] hid (null): report_id 0 is invalid [ 374.605822][ T5918] kye 0003:0458:5019.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 374.607541][ T5918] kye 0003:0458:5019.0001: report_id 0 is invalid [ 374.607560][ T5918] kye 0003:0458:5019.0001: item 0 0 1 8 parsing failed [ 374.637272][ T5918] kye 0003:0458:5019.0001: parse failed [ 374.637342][ T5918] kye 0003:0458:5019.0001: probe with driver kye failed with error -22 [ 374.862487][ T5918] usb 8-1: USB disconnect, device number 3 [ 377.456691][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.320'. [ 377.456732][ T7521] netlink: 48 bytes leftover after parsing attributes in process `syz.8.320'. [ 377.640302][ T7528] loop2: detected capacity change from 0 to 7 [ 377.756864][ T7528] Dev loop2: unable to read RDB block 7 [ 377.756914][ T7528] loop2: unable to read partition table [ 377.757137][ T7528] loop2: partition table beyond EOD, truncated [ 377.757154][ T7528] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 378.688618][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.688694][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.312063][ T7575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.579579][ T7569] 9pnet_fd: p9_fd_create_tcp (7569): problem connecting socket to 127.0.0.1 [ 381.606291][ T7596] vivid-000: ================= START STATUS ================= [ 381.606350][ T7596] vivid-000: Test Pattern: 75% Colorbar [ 381.607432][ T7596] vivid-000: Fill Percentage of Frame: 100 [ 381.607556][ T7596] vivid-000: Horizontal Movement: No Movement [ 381.618379][ T7596] vivid-000: Vertical Movement: No Movement [ 381.618453][ T7596] vivid-000: OSD Text Mode: All [ 381.620247][ T7596] vivid-000: Show Border: false [ 381.620374][ T7596] vivid-000: Show Square: false [ 381.620492][ T7596] vivid-000: Sensor Flipped Horizontally: false [ 381.620609][ T7596] vivid-000: Sensor Flipped Vertically: false [ 381.620681][ T7596] vivid-000: Insert SAV Code in Image: false [ 381.620794][ T7596] vivid-000: Insert EAV Code in Image: false [ 381.620900][ T7596] vivid-000: Insert Video Guard Band: false [ 381.621026][ T7596] vivid-000: Reduced Framerate: false [ 381.621093][ T7596] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 381.621188][ T7596] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 381.621432][ T7596] vivid-000: Enable Capture Cropping: true [ 381.623203][ T7596] vivid-000: Enable Capture Composing: true [ 381.623286][ T7596] vivid-000: Enable Capture Scaler: true [ 381.623449][ T7596] vivid-000: Timestamp Source: End of Frame [ 381.623571][ T7596] vivid-000: Colorspace: sRGB [ 381.623689][ T7596] vivid-000: Transfer Function: Default [ 381.623805][ T7596] vivid-000: Y'CbCr Encoding: Default [ 381.623867][ T7596] vivid-000: HSV Encoding: Hue 0-179 [ 381.623984][ T7596] vivid-000: Quantization: Default [ 381.624089][ T7596] vivid-000: Apply Alpha To Red Only: false [ 381.624162][ T7596] vivid-000: Standard Aspect Ratio: 4x3 [ 381.626701][ T7596] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 381.629304][ T7596] vivid-000: DV Timings: 640x480p59 inactive [ 381.629446][ T7596] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 381.629570][ T7596] vivid-000: Maximum EDID Blocks: 2 [ 381.629751][ T7596] vivid-000: Limited RGB Range (16-235): false [ 381.629876][ T7596] vivid-000: Rx RGB Quantization Range: Automatic [ 381.629943][ T7596] vivid-000: Power Present: 0x00000001 [ 381.630066][ T7596] tpg source WxH: 320x240 (Y'CbCr) [ 381.630336][ T7596] tpg field: 1 [ 381.630395][ T7596] tpg crop: (0,0)/320x240 [ 381.630463][ T7596] tpg compose: (0,0)/320x240 [ 381.630475][ T7596] tpg colorspace: 8 [ 381.630527][ T7596] tpg transfer function: 0/0 [ 381.630585][ T7596] tpg Y'CbCr encoding: 0/0 [ 381.630648][ T7596] tpg quantization: 0/0 [ 381.630658][ T7596] tpg RGB range: 0/2 [ 381.630666][ T7596] vivid-000: ================== END STATUS ================== [ 382.957738][ T5911] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 383.142361][ T5911] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 383.142390][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.206592][ T5911] usb 7-1: config 0 descriptor?? [ 385.003526][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.258677][ T5911] usb 7-1: Cannot set autoneg [ 385.259627][ T5911] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 385.448570][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.516685][ T5911] usb 7-1: USB disconnect, device number 3 [ 385.677202][ T7630] 9pnet_fd: p9_fd_create_tcp (7630): problem connecting socket to 127.0.0.1 [ 385.841378][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.034874][ T7634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.256826][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.355'. [ 386.256865][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.355'. [ 386.393567][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.890133][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.324847][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.419594][ T6555] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 388.521681][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.608395][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.204224][ T6555] usb 9-1: device descriptor read/64, error -71 [ 389.649619][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.783152][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.937727][ T6555] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 389.954567][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.067765][ T6555] usb 9-1: device descriptor read/64, error -71 [ 390.393594][ T6555] usb usb9-port1: attempt power cycle [ 390.437146][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.952011][ T6555] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 391.156536][ T6555] usb 9-1: device descriptor read/8, error -71 [ 391.233918][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.343825][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.425613][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.516405][ T7703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.062175][ T7705] 9pnet_fd: p9_fd_create_tcp (7705): problem connecting socket to 127.0.0.1 [ 392.671711][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.372'. [ 392.671735][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.372'. [ 393.061698][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.207405][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.729911][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.504413][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'. [ 394.504431][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'. [ 395.259620][ T6042] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 395.451697][ T6042] usb 10-1: Using ep0 maxpacket: 16 [ 395.454975][ T6042] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.455038][ T6042] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.455063][ T6042] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.455082][ T6042] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 395.455102][ T6042] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.519038][ T6042] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 395.519066][ T6042] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 395.519083][ T6042] usb 10-1: Manufacturer: syz [ 395.680667][ T6042] usb 10-1: config 0 descriptor?? [ 396.814052][ T6042] rc_core: IR keymap rc-hauppauge not found [ 396.814065][ T6042] Registered IR keymap rc-empty [ 396.814185][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 396.830396][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 396.852430][ T6042] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 396.854268][ T6042] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input10 [ 396.901846][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 396.918659][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 396.948007][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 396.968012][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 396.997809][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 397.027820][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 397.047751][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 397.067933][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 397.087934][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 397.107847][ T6042] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 397.134542][ T6042] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 397.134565][ T6042] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 397.164473][ T6042] usb 10-1: USB disconnect, device number 2 [ 397.831938][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.9.388'. [ 399.617792][ T37] audit: type=1326 audit(1756351947.853:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.7.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b37ebe9 code=0x7ffc0000 [ 399.617854][ T37] audit: type=1326 audit(1756351947.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.7.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b37ebe9 code=0x7ffc0000 [ 399.767707][ T37] audit: type=1326 audit(1756351948.223:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.7.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f534b37ebe9 code=0x7ffc0000 [ 399.767762][ T37] audit: type=1326 audit(1756351948.223:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.7.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b37ebe9 code=0x7ffc0000 [ 399.767809][ T37] audit: type=1326 audit(1756351948.223:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.7.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f534b37ebe9 code=0x7ffc0000 [ 399.767850][ T37] audit: type=1326 audit(1756351948.223:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.7.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b37ebe9 code=0x7ffc0000 [ 399.778107][ T37] audit: type=1326 audit(1756351948.253:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.7.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534b37ebe9 code=0x7ffc0000 [ 400.370023][ T7808] tty tty1: ldisc open failed (-12), clearing slot 0 [ 401.907801][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 402.077868][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 402.080742][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 402.080767][ T10] usb 6-1: config 179 has no interface number 0 [ 402.080812][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 402.080835][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 402.080860][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 402.080878][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 402.080900][ T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 402.080940][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 402.080956][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.170911][ T7844] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 402.945584][ T5932] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input11 [ 402.949981][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 402.949986][ T5911] usb 6-1: USB disconnect, device number 2 [ 402.950050][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 405.593917][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.415'. [ 407.204488][ T997] Bluetooth: hci1: Frame reassembly failed (-84) [ 409.587332][ T5851] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 411.062072][ T7962] netlink: 'syz.6.433': attribute type 2 has an invalid length. [ 412.367717][ T5859] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 412.518356][ T5859] usb 6-1: Using ep0 maxpacket: 16 [ 412.521030][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.521058][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.521094][ T5859] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 412.521115][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.575126][ T5859] usb 6-1: config 0 descriptor?? [ 413.616849][ T5859] playstation 0003:054C:05C4.0002: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 413.915650][ T5859] playstation 0003:054C:05C4.0002: Invalid reportID received, expected 18 got 0 [ 413.915677][ T5859] playstation 0003:054C:05C4.0002: Failed to retrieve DualShock4 pairing info: -22 [ 413.915727][ T5859] playstation 0003:054C:05C4.0002: Failed to get MAC address from DualShock4 [ 413.915745][ T5859] playstation 0003:054C:05C4.0002: Failed to create dualshock4. [ 414.871427][ T5859] playstation 0003:054C:05C4.0002: probe with driver playstation failed with error -22 [ 414.909965][ T5859] usb 6-1: USB disconnect, device number 3 [ 415.132637][ T8024] netlink: 'syz.8.444': attribute type 2 has an invalid length. [ 415.147924][ T998] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 415.283711][ T8019] fido_id[8019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 415.317781][ T998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 415.317813][ T998] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 415.317836][ T998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 415.321528][ T998] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 415.321554][ T998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.321571][ T998] usb 10-1: Product: syz [ 415.321582][ T998] usb 10-1: Manufacturer: syz [ 415.321594][ T998] usb 10-1: SerialNumber: syz [ 415.401196][ T998] usb 10-1: config 0 descriptor?? [ 415.402502][ T8018] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 415.402728][ T8018] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 415.520250][ T998] usb 10-1: ucan: probing device on interface #0 [ 416.542369][ T998] ucan 10-1:0.0 can0: registered device [ 416.804159][ T998] ucan 10-1:0.0 can0: firmware string: unknown [ 417.541405][ T998] usb 10-1: USB disconnect, device number 3 [ 418.118504][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.451'. [ 418.685344][ T8053] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 418.877115][ T8061] netlink: 'syz.7.456': attribute type 2 has an invalid length. [ 419.858306][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.458'. [ 419.916074][ T8067] netlink: 188 bytes leftover after parsing attributes in process `syz.6.457'. [ 420.867789][ T8085] capability: warning: `syz.6.461' uses deprecated v2 capabilities in a way that may be insecure [ 422.601021][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.9.466'. [ 422.601036][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.9.466'. [ 426.818723][ T1725] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 426.861157][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 427.557711][ T1725] usb 7-1: Using ep0 maxpacket: 16 [ 427.560637][ T1725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 427.591066][ T1725] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.591095][ T1725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.591119][ T1725] usb 7-1: Product: syz [ 427.591132][ T1725] usb 7-1: Manufacturer: syz [ 427.591145][ T1725] usb 7-1: SerialNumber: syz [ 427.616800][ T1725] usb 7-1: config 0 descriptor?? [ 427.635698][ T1725] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 427.635729][ T1725] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 428.267045][ T1725] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 428.940621][ T1725] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 428.940651][ T1725] em28xx 7-1:0.0: board has no eeprom [ 429.057690][ T1725] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 429.057716][ T1725] em28xx 7-1:0.0: dvb set to bulk mode. [ 429.058092][ T45] em28xx 7-1:0.0: Binding DVB extension [ 429.126855][ T1725] usb 7-1: USB disconnect, device number 4 [ 429.149429][ T1725] em28xx 7-1:0.0: Disconnecting em28xx [ 429.985630][ T45] em28xx 7-1:0.0: Registering input extension [ 430.093695][ T1725] em28xx 7-1:0.0: Closing input extension [ 430.312878][ T1725] em28xx 7-1:0.0: Freeing device [ 431.968223][ T5160] Bluetooth: hci2: command 0x0406 tx timeout [ 432.437828][ T1725] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 432.598061][ T1725] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 432.598089][ T1725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.621359][ T1725] usb 9-1: config 0 descriptor?? [ 432.699474][ T8191] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 433.086890][ T8191] usb 8-1: Using ep0 maxpacket: 16 [ 433.105559][ T8191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 433.128114][ T8191] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 433.128191][ T8191] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.128209][ T8191] usb 8-1: Product: syz [ 433.128221][ T8191] usb 8-1: Manufacturer: syz [ 433.128233][ T8191] usb 8-1: SerialNumber: syz [ 433.784118][ T8238] tty tty1: ldisc open failed (-12), clearing slot 0 [ 434.139728][ T8191] usb 8-1: config 0 descriptor?? [ 434.169688][ T8191] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 434.169721][ T8191] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 434.703263][ T1725] usb 9-1: Cannot set autoneg [ 434.705746][ T1725] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 434.783256][ T8257] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 435.512510][ T8191] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 436.157744][ T5932] usb 9-1: USB disconnect, device number 7 [ 437.387845][ T8191] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 437.387876][ T8191] em28xx 8-1:0.0: board has no eeprom [ 437.557714][ T5160] Bluetooth: hci4: command 0x0406 tx timeout [ 437.617714][ T8191] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 437.617743][ T8191] em28xx 8-1:0.0: dvb set to bulk mode. [ 437.663788][ T8191] usb 8-1: USB disconnect, device number 4 [ 437.663848][ T1725] em28xx 8-1:0.0: Binding DVB extension [ 437.682396][ T8191] em28xx 8-1:0.0: Disconnecting em28xx [ 437.813756][ T1725] em28xx 8-1:0.0: Registering input extension [ 437.826369][ T8191] em28xx 8-1:0.0: Closing input extension [ 437.875954][ T8191] em28xx 8-1:0.0: Freeing device [ 439.960898][ T8302] program syz.6.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.015773][ T8307] program syz.6.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.048050][ T8307] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 440.100046][ T8306] loop6: detected capacity change from 0 to 7 [ 440.116740][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.116811][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.142992][ T8306] Dev loop6: unable to read RDB block 7 [ 440.143045][ T8306] loop6: unable to read partition table [ 440.143271][ T8306] loop6: partition table beyond EOD, truncated [ 440.143289][ T8306] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.480436][ T6225] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 440.713645][ T6225] usb 7-1: Using ep0 maxpacket: 32 [ 440.742980][ T6225] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.743005][ T6225] usb 7-1: config 0 has no interface number 0 [ 440.845881][ T6225] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 440.845909][ T6225] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.845926][ T6225] usb 7-1: Product: syz [ 440.845937][ T6225] usb 7-1: Manufacturer: syz [ 440.845948][ T6225] usb 7-1: SerialNumber: syz [ 440.890461][ T6225] usb 7-1: config 0 descriptor?? [ 440.913996][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 440.916579][ T6225] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 440.916612][ T6225] usb 7-1: selecting invalid altsetting 1 [ 440.916626][ T6225] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 440.980483][ T6225] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 440.981351][ T6225] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 440.981565][ T6225] usb 7-1: media controller created [ 441.033561][ T6225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.100917][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 441.129966][ T8321] tmpfs: Bad value for 'mpol' [ 441.349161][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.349191][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.349225][ T10] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 441.349247][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.210765][ T10] usb 10-1: config 0 descriptor?? [ 442.393493][ T6225] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 442.393549][ T6225] zl10353_read_register: readreg error (reg=127, ret==-71) [ 442.413836][ T6225] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 442.534052][ T6225] usb 7-1: USB disconnect, device number 5 [ 442.699478][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 442.699607][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 442.737190][ T10] usb 10-1: USB disconnect, device number 4 [ 443.148837][ T5859] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 443.307806][ T5859] usb 9-1: Using ep0 maxpacket: 16 [ 443.315473][ T5859] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 443.340061][ T5859] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 443.340091][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.340110][ T5859] usb 9-1: Product: syz [ 443.340123][ T5859] usb 9-1: Manufacturer: syz [ 443.340136][ T5859] usb 9-1: SerialNumber: syz [ 443.427836][ T5859] usb 9-1: config 0 descriptor?? [ 444.411823][ T5859] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 444.411855][ T5859] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 444.534906][ T8351] Bluetooth: MGMT ver 1.23 [ 444.814418][ T5859] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 445.425702][ T5859] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 445.425720][ T5859] em28xx 9-1:0.0: board has no eeprom [ 445.527683][ T5859] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 445.527709][ T5859] em28xx 9-1:0.0: dvb set to bulk mode. [ 445.529029][ T998] em28xx 9-1:0.0: Binding DVB extension [ 445.558611][ T5859] usb 9-1: USB disconnect, device number 8 [ 445.683366][ T5859] em28xx 9-1:0.0: Disconnecting em28xx [ 446.891413][ T998] em28xx 9-1:0.0: Registering input extension [ 446.907757][ T5859] em28xx 9-1:0.0: Closing input extension [ 446.963285][ T5859] em28xx 9-1:0.0: Freeing device [ 447.112464][ T8384] sctp: [Deprecated]: syz.6.544 (pid 8384) Use of int in max_burst socket option deprecated. [ 447.112464][ T8384] Use struct sctp_assoc_value instead [ 447.307791][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 448.463024][ T8415] 9pnet_fd: Insufficient options for proto=fd [ 449.837792][ T7681] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 449.977697][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 449.994946][ T7681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.994978][ T7681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.994997][ T7681] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.995036][ T7681] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.995055][ T7681] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.075066][ T7681] usb 8-1: config 0 descriptor?? [ 450.137767][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 450.142989][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 450.145779][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 450.145807][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.145824][ T10] usb 9-1: Product: syz [ 450.145836][ T10] usb 9-1: Manufacturer: syz [ 450.145848][ T10] usb 9-1: SerialNumber: syz [ 450.473092][ T10] usb 9-1: config 0 descriptor?? [ 450.492190][ T10] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 450.492222][ T10] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 451.492254][ T7681] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 451.542384][ T7681] usb 8-1: USB disconnect, device number 5 [ 451.630482][ T10] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 451.688505][ T8452] fido_id[8452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 451.966846][ T8461] lo speed is unknown, defaulting to 1000 [ 451.966947][ T8461] lo speed is unknown, defaulting to 1000 [ 451.974759][ T8461] lo speed is unknown, defaulting to 1000 [ 452.121474][ T8461] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 452.266523][ T10] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 452.266550][ T10] em28xx 9-1:0.0: board has no eeprom [ 452.331680][ T8461] lo speed is unknown, defaulting to 1000 [ 452.334544][ T8461] lo speed is unknown, defaulting to 1000 [ 452.337413][ T8461] lo speed is unknown, defaulting to 1000 [ 452.357717][ T10] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 452.357743][ T10] em28xx 9-1:0.0: dvb set to bulk mode. [ 452.367055][ T8461] lo speed is unknown, defaulting to 1000 [ 452.400182][ T8461] lo speed is unknown, defaulting to 1000 [ 452.402834][ T6042] em28xx 9-1:0.0: Binding DVB extension [ 452.446559][ T10] usb 9-1: USB disconnect, device number 9 [ 452.449625][ T7681] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 452.479519][ T10] em28xx 9-1:0.0: Disconnecting em28xx [ 452.630361][ T7681] usb 8-1: config 0 has an invalid interface number: 84 but max is 0 [ 452.630388][ T7681] usb 8-1: config 0 has an invalid interface number: 66 but max is 0 [ 452.630406][ T7681] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 452.630424][ T7681] usb 8-1: config 0 has no interface number 0 [ 452.630438][ T7681] usb 8-1: config 0 has no interface number 1 [ 452.630496][ T7681] usb 8-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 452.630521][ T7681] usb 8-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 452.630544][ T7681] usb 8-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 452.630582][ T7681] usb 8-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 452.630603][ T7681] usb 8-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 452.630625][ T7681] usb 8-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 452.630647][ T7681] usb 8-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 53 [ 452.630675][ T7681] usb 8-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 452.630699][ T7681] usb 8-1: config 0 interface 66 has no altsetting 0 [ 452.645487][ T7681] usb 8-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 452.645514][ T7681] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.645531][ T7681] usb 8-1: Product: syz [ 452.645544][ T7681] usb 8-1: Manufacturer: syz [ 452.645556][ T7681] usb 8-1: SerialNumber: syz [ 452.685252][ T7681] usb 8-1: config 0 descriptor?? [ 452.701606][ T7681] ljca 8-1:0.84: bulk endpoints not found [ 452.893839][ T6042] em28xx 9-1:0.0: Registering input extension [ 452.894070][ T10] em28xx 9-1:0.0: Closing input extension [ 453.011029][ T8461] input: syz0 as /devices/virtual/input/input17 [ 453.029892][ T10] em28xx 9-1:0.0: Freeing device [ 453.296977][ T7681] ljca 8-1:0.66: probe with driver ljca failed with error -71 [ 453.315814][ T7681] usb 8-1: USB disconnect, device number 6 [ 456.530168][ T8505] vivid-000: ================= START STATUS ================= [ 456.530339][ T8505] vivid-000: Test Pattern: 75% Colorbar [ 456.530361][ T8505] vivid-000: Fill Percentage of Frame: 100 [ 456.530471][ T8505] vivid-000: Horizontal Movement: No Movement [ 456.530489][ T8505] vivid-000: Vertical Movement: No Movement [ 456.530506][ T8505] vivid-000: OSD Text Mode: All [ 456.530681][ T8505] vivid-000: Show Border: false [ 456.530750][ T8505] vivid-000: Show Square: false [ 456.530905][ T8505] vivid-000: Sensor Flipped Horizontally: false [ 456.530972][ T8505] vivid-000: Sensor Flipped Vertically: false [ 456.531033][ T8505] vivid-000: Insert SAV Code in Image: false [ 456.531049][ T8505] vivid-000: Insert EAV Code in Image: false [ 456.531172][ T8505] vivid-000: Insert Video Guard Band: false [ 456.531345][ T8505] vivid-000: Reduced Framerate: false [ 456.531406][ T8505] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 456.531472][ T8505] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 456.531642][ T8505] vivid-000: Enable Capture Cropping: true [ 456.531765][ T8505] vivid-000: Enable Capture Composing: true [ 456.531929][ T8505] vivid-000: Enable Capture Scaler: true [ 456.532065][ T8505] vivid-000: Timestamp Source: End of Frame [ 456.532196][ T8505] vivid-000: Colorspace: sRGB [ 456.532259][ T8505] vivid-000: Transfer Function: Default [ 456.532332][ T8505] vivid-000: Y'CbCr Encoding: Default [ 456.532431][ T8505] vivid-000: HSV Encoding: Hue 0-179 [ 456.532493][ T8505] vivid-000: Quantization: Default [ 456.532558][ T8505] vivid-000: Apply Alpha To Red Only: false [ 456.532663][ T8505] vivid-000: Standard Aspect Ratio: 4x3 [ 456.532730][ T8505] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 456.532881][ T8505] vivid-000: DV Timings: 640x480p59 inactive [ 456.532961][ T8505] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 456.533216][ T8505] vivid-000: Maximum EDID Blocks: 2 [ 456.533285][ T8505] vivid-000: Limited RGB Range (16-235): false [ 456.533445][ T8505] vivid-000: Rx RGB Quantization Range: Automatic [ 456.533517][ T8505] vivid-000: Power Present: 0x00000001 [ 456.533624][ T8505] tpg source WxH: 320x240 (Y'CbCr) [ 456.533684][ T8505] tpg field: 1 [ 456.533692][ T8505] tpg crop: (0,0)/320x240 [ 456.533791][ T8505] tpg compose: (0,0)/320x240 [ 456.533848][ T8505] tpg colorspace: 8 [ 456.533911][ T8505] tpg transfer function: 0/0 [ 456.533964][ T8505] tpg Y'CbCr encoding: 0/0 [ 456.534024][ T8505] tpg quantization: 0/0 [ 456.534034][ T8505] tpg RGB range: 0/2 [ 456.534042][ T8505] vivid-000: ================== END STATUS ================== [ 460.381140][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 460.381168][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 461.813749][ T8563] vivid-000: ================= START STATUS ================= [ 461.813763][ T8563] vivid-000: Test Pattern: 75% Colorbar [ 461.813786][ T8563] vivid-000: Fill Percentage of Frame: 100 [ 461.813797][ T8563] vivid-000: Horizontal Movement: No Movement [ 461.813806][ T8563] vivid-000: Vertical Movement: No Movement [ 461.813814][ T8563] vivid-000: OSD Text Mode: All [ 461.813823][ T8563] vivid-000: Show Border: false [ 461.813831][ T8563] vivid-000: Show Square: false [ 461.813840][ T8563] vivid-000: Sensor Flipped Horizontally: false [ 461.813849][ T8563] vivid-000: Sensor Flipped Vertically: false [ 461.813857][ T8563] vivid-000: Insert SAV Code in Image: false [ 461.813866][ T8563] vivid-000: Insert EAV Code in Image: false [ 461.813875][ T8563] vivid-000: Insert Video Guard Band: false [ 461.813883][ T8563] vivid-000: Reduced Framerate: false [ 461.813891][ T8563] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 461.813901][ T8563] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 461.813910][ T8563] vivid-000: Enable Capture Cropping: true [ 461.813918][ T8563] vivid-000: Enable Capture Composing: true [ 461.813926][ T8563] vivid-000: Enable Capture Scaler: true [ 461.813934][ T8563] vivid-000: Timestamp Source: End of Frame [ 461.813942][ T8563] vivid-000: Colorspace: sRGB [ 461.813950][ T8563] vivid-000: Transfer Function: Default [ 461.813958][ T8563] vivid-000: Y'CbCr Encoding: Default [ 461.813966][ T8563] vivid-000: HSV Encoding: Hue 0-179 [ 461.813974][ T8563] vivid-000: Quantization: Default [ 461.813982][ T8563] vivid-000: Apply Alpha To Red Only: false [ 461.813990][ T8563] vivid-000: Standard Aspect Ratio: 4x3 [ 461.813998][ T8563] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 461.814009][ T8563] vivid-000: DV Timings: 640x480p59 inactive [ 461.814020][ T8563] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 461.814028][ T8563] vivid-000: Maximum EDID Blocks: 2 [ 461.814036][ T8563] vivid-000: Limited RGB Range (16-235): false [ 461.814044][ T8563] vivid-000: Rx RGB Quantization Range: Automatic [ 461.814053][ T8563] vivid-000: Power Present: 0x00000001 [ 461.814063][ T8563] tpg source WxH: 320x240 (Y'CbCr) [ 461.814069][ T8563] tpg field: 1 [ 461.814072][ T8563] tpg crop: (0,0)/320x240 [ 461.814078][ T8563] tpg compose: (0,0)/320x240 [ 461.814084][ T8563] tpg colorspace: 8 [ 461.814088][ T8563] tpg transfer function: 0/0 [ 461.814092][ T8563] tpg Y'CbCr encoding: 0/0 [ 461.814097][ T8563] tpg quantization: 0/0 [ 461.814101][ T8563] tpg RGB range: 0/2 [ 461.814105][ T8563] vivid-000: ================== END STATUS ================== [ 464.130222][ T5851] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 464.130264][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 464.130286][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.130298][ T5851] Workqueue: hci4 hci_rx_work [ 464.130330][ T5851] Call Trace: [ 464.130342][ T5851] [ 464.130357][ T5851] dump_stack_lvl+0x189/0x250 [ 464.130412][ T5851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.130438][ T5851] ? __pfx__printk+0x10/0x10 [ 464.130463][ T5851] ? kernfs_path_from_node+0x2c/0x280 [ 464.130482][ T5851] ? kernfs_path_from_node+0x243/0x280 [ 464.130498][ T5851] ? kernfs_path_from_node+0x2c/0x280 [ 464.130520][ T5851] sysfs_create_dir_ns+0x259/0x280 [ 464.130545][ T5851] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 464.130565][ T5851] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 464.130603][ T5851] ? rt_spin_unlock+0x65/0x80 [ 464.130629][ T5851] kobject_add_internal+0x5a5/0xb50 [ 464.130663][ T5851] kobject_add+0x155/0x220 [ 464.130693][ T5851] ? __pfx_kobject_add+0x10/0x10 [ 464.130725][ T5851] ? get_device_parent+0x370/0x3a0 [ 464.130755][ T5851] device_add+0x408/0xb50 [ 464.130783][ T5851] hci_conn_add_sysfs+0xd5/0x1e0 [ 464.130812][ T5851] le_conn_complete_evt+0xc3a/0x1220 [ 464.130840][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.130866][ T5851] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 464.130889][ T5851] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 464.130911][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.130937][ T5851] ? skb_pull_data+0xfb/0x200 [ 464.130961][ T5851] hci_le_conn_complete_evt+0x187/0x450 [ 464.130990][ T5851] hci_event_packet+0x78f/0x1200 [ 464.131012][ T5851] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 464.131037][ T5851] ? __pfx_hci_event_packet+0x10/0x10 [ 464.131055][ T5851] ? __pfx_migrate_enable+0x10/0x10 [ 464.131084][ T5851] ? hci_send_to_monitor+0xe2/0x570 [ 464.131110][ T5851] hci_rx_work+0x46a/0xe80 [ 464.131137][ T5851] ? process_scheduled_works+0x9ef/0x17b0 [ 464.131161][ T5851] process_scheduled_works+0xade/0x17b0 [ 464.131216][ T5851] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.131257][ T5851] worker_thread+0x8a0/0xda0 [ 464.131308][ T5851] kthread+0x711/0x8a0 [ 464.131336][ T5851] ? __pfx_worker_thread+0x10/0x10 [ 464.131357][ T5851] ? __pfx_kthread+0x10/0x10 [ 464.131388][ T5851] ? __pfx_kthread+0x10/0x10 [ 464.131413][ T5851] ret_from_fork+0x3fc/0x770 [ 464.131436][ T5851] ? __pfx_ret_from_fork+0x10/0x10 [ 464.131460][ T5851] ? __switch_to_asm+0x39/0x70 [ 464.131473][ T5851] ? __switch_to_asm+0x33/0x70 [ 464.131487][ T5851] ? __pfx_kthread+0x10/0x10 [ 464.131510][ T5851] ret_from_fork_asm+0x1a/0x30 [ 464.131541][ T5851] [ 464.131608][ T5851] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 464.131647][ T5851] Bluetooth: hci4: failed to register connection device [ 465.020768][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.603'. [ 465.020793][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.603'. [ 465.058311][ T5859] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 465.211799][ T5859] usb 9-1: Using ep0 maxpacket: 8 [ 465.249088][ T5859] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 465.266077][ T5859] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 465.266104][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.266122][ T5859] usb 9-1: Product: syz [ 465.266135][ T5859] usb 9-1: Manufacturer: syz [ 465.266147][ T5859] usb 9-1: SerialNumber: syz [ 465.318994][ T5859] usb 9-1: config 0 descriptor?? [ 465.327351][ T5859] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 465.327421][ T5859] usb 9-1: setting power ON [ 465.361599][ T5859] dvb-usb: bulk message failed: -22 (2/0) [ 465.414552][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.415491][ T5859] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 465.415547][ T5859] usb 9-1: media controller created [ 465.501137][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.566570][ T8596] dvb-usb: bulk message failed: -22 (3/0) [ 465.566591][ T8596] cxusb: i2c rd: len=187 is too big! [ 465.566591][ T8596] [ 465.588423][ T5859] usb 9-1: selecting invalid altsetting 6 [ 465.588444][ T5859] usb 9-1: digital interface selection failed (-22) [ 465.588470][ T5859] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 465.591402][ T5859] usb 9-1: setting power OFF [ 465.591549][ T5859] dvb-usb: bulk message failed: -22 (2/0) [ 465.591565][ T5859] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 465.591577][ T5859] (NULL device *): no alternate interface [ 465.691820][ T5859] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 465.714794][ T5859] usb 9-1: USB disconnect, device number 10 [ 466.187829][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 466.215280][ T8621] vivid-000: ================= START STATUS ================= [ 466.215444][ T8621] vivid-000: Test Pattern: 75% Colorbar [ 466.215515][ T8621] vivid-000: Fill Percentage of Frame: 100 [ 466.215687][ T8621] vivid-000: Horizontal Movement: No Movement [ 466.215757][ T8621] vivid-000: Vertical Movement: No Movement [ 466.215913][ T8621] vivid-000: OSD Text Mode: All [ 466.215980][ T8621] vivid-000: Show Border: false [ 466.216091][ T8621] vivid-000: Show Square: false [ 466.216161][ T8621] vivid-000: Sensor Flipped Horizontally: false [ 466.216269][ T8621] vivid-000: Sensor Flipped Vertically: false [ 466.216406][ T8621] vivid-000: Insert SAV Code in Image: false [ 466.216598][ T8621] vivid-000: Insert EAV Code in Image: false [ 466.216668][ T8621] vivid-000: Insert Video Guard Band: false [ 466.216909][ T8621] vivid-000: Reduced Framerate: false [ 466.216984][ T8621] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 466.217093][ T8621] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 466.217168][ T8621] vivid-000: Enable Capture Cropping: true [ 466.217185][ T8621] vivid-000: Enable Capture Composing: true [ 466.217868][ T8621] vivid-000: Enable Capture Scaler: true [ 466.217996][ T8621] vivid-000: Timestamp Source: End of Frame [ 466.218112][ T8621] vivid-000: Colorspace: sRGB [ 466.218226][ T8621] vivid-000: Transfer Function: Default [ 466.218341][ T8621] vivid-000: Y'CbCr Encoding: Default [ 466.218357][ T8621] vivid-000: HSV Encoding: Hue 0-179 [ 466.218373][ T8621] vivid-000: Quantization: Default [ 466.218544][ T8621] vivid-000: Apply Alpha To Red Only: false [ 466.218615][ T8621] vivid-000: Standard Aspect Ratio: 4x3 [ 466.218765][ T8621] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 466.218887][ T8621] vivid-000: DV Timings: 640x480p59 inactive [ 466.219005][ T8621] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 466.219110][ T8621] vivid-000: Maximum EDID Blocks: 2 [ 466.219226][ T8621] vivid-000: Limited RGB Range (16-235): false [ 466.219288][ T8621] vivid-000: Rx RGB Quantization Range: Automatic [ 466.219350][ T8621] vivid-000: Power Present: 0x00000001 [ 466.219418][ T8621] tpg source WxH: 320x240 (Y'CbCr) [ 466.219430][ T8621] tpg field: 1 [ 466.219585][ T8621] tpg crop: (0,0)/320x240 [ 466.219641][ T8621] tpg compose: (0,0)/320x240 [ 466.219701][ T8621] tpg colorspace: 8 [ 466.219709][ T8621] tpg transfer function: 0/0 [ 466.219763][ T8621] tpg Y'CbCr encoding: 0/0 [ 466.219822][ T8621] tpg quantization: 0/0 [ 466.219881][ T8621] tpg RGB range: 0/2 [ 466.219890][ T8621] vivid-000: ================== END STATUS ================== [ 467.830876][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 468.891686][ T5851] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 468.891712][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.891735][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.891747][ T5851] Workqueue: hci2 hci_rx_work [ 468.891771][ T5851] Call Trace: [ 468.891779][ T5851] [ 468.891787][ T5851] dump_stack_lvl+0x189/0x250 [ 468.891815][ T5851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.891840][ T5851] ? __pfx__printk+0x10/0x10 [ 468.891867][ T5851] ? kernfs_path_from_node+0x2c/0x280 [ 468.891886][ T5851] ? kernfs_path_from_node+0x243/0x280 [ 468.891903][ T5851] ? kernfs_path_from_node+0x2c/0x280 [ 468.891925][ T5851] sysfs_create_dir_ns+0x259/0x280 [ 468.891951][ T5851] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 468.891972][ T5851] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 468.891998][ T5851] ? rt_spin_unlock+0x65/0x80 [ 468.892023][ T5851] kobject_add_internal+0x5a5/0xb50 [ 468.892066][ T5851] kobject_add+0x155/0x220 [ 468.892096][ T5851] ? __pfx_kobject_add+0x10/0x10 [ 468.892129][ T5851] ? get_device_parent+0x370/0x3a0 [ 468.892158][ T5851] device_add+0x408/0xb50 [ 468.892188][ T5851] hci_conn_add_sysfs+0xd5/0x1e0 [ 468.892217][ T5851] le_conn_complete_evt+0xc3a/0x1220 [ 468.892247][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.892273][ T5851] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 468.892297][ T5851] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 468.892319][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.892345][ T5851] ? skb_pull_data+0xfb/0x200 [ 468.892370][ T5851] hci_le_conn_complete_evt+0x187/0x450 [ 468.892400][ T5851] hci_event_packet+0x78f/0x1200 [ 468.892423][ T5851] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 468.892446][ T5851] ? __pfx_hci_event_packet+0x10/0x10 [ 468.892465][ T5851] ? __pfx_migrate_enable+0x10/0x10 [ 468.892495][ T5851] ? hci_send_to_monitor+0xe2/0x570 [ 468.892521][ T5851] hci_rx_work+0x46a/0xe80 [ 468.892549][ T5851] ? process_scheduled_works+0x9ef/0x17b0 [ 468.892574][ T5851] process_scheduled_works+0xade/0x17b0 [ 468.892628][ T5851] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.892669][ T5851] worker_thread+0x8a0/0xda0 [ 468.892721][ T5851] kthread+0x711/0x8a0 [ 468.892750][ T5851] ? __pfx_worker_thread+0x10/0x10 [ 468.892771][ T5851] ? __pfx_kthread+0x10/0x10 [ 468.892802][ T5851] ? __pfx_kthread+0x10/0x10 [ 468.892829][ T5851] ret_from_fork+0x3fc/0x770 [ 468.892854][ T5851] ? __pfx_ret_from_fork+0x10/0x10 [ 468.892884][ T5851] ? __switch_to_asm+0x39/0x70 [ 468.892899][ T5851] ? __switch_to_asm+0x33/0x70 [ 468.892915][ T5851] ? __pfx_kthread+0x10/0x10 [ 468.892940][ T5851] ret_from_fork_asm+0x1a/0x30 [ 468.892976][ T5851] [ 468.893030][ T5851] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 468.893080][ T5851] Bluetooth: hci2: failed to register connection device [ 469.678318][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.616'. [ 469.678341][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.616'. [ 470.917681][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 472.568891][ T8685] vivid-000: ================= START STATUS ================= [ 472.568911][ T8685] vivid-000: Test Pattern: 75% Colorbar [ 472.568933][ T8685] vivid-000: Fill Percentage of Frame: 100 [ 472.568949][ T8685] vivid-000: Horizontal Movement: No Movement [ 472.568965][ T8685] vivid-000: Vertical Movement: No Movement [ 472.568980][ T8685] vivid-000: OSD Text Mode: All [ 472.568994][ T8685] vivid-000: Show Border: false [ 472.569008][ T8685] vivid-000: Show Square: false [ 472.569021][ T8685] vivid-000: Sensor Flipped Horizontally: false [ 472.569036][ T8685] vivid-000: Sensor Flipped Vertically: false [ 472.569050][ T8685] vivid-000: Insert SAV Code in Image: false [ 472.569065][ T8685] vivid-000: Insert EAV Code in Image: false [ 472.569080][ T8685] vivid-000: Insert Video Guard Band: false [ 472.569095][ T8685] vivid-000: Reduced Framerate: false [ 472.569108][ T8685] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 472.569125][ T8685] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 472.569141][ T8685] vivid-000: Enable Capture Cropping: true [ 472.569155][ T8685] vivid-000: Enable Capture Composing: true [ 472.569171][ T8685] vivid-000: Enable Capture Scaler: true [ 472.569184][ T8685] vivid-000: Timestamp Source: End of Frame [ 472.569199][ T8685] vivid-000: Colorspace: sRGB [ 472.569212][ T8685] vivid-000: Transfer Function: Default [ 472.569227][ T8685] vivid-000: Y'CbCr Encoding: Default [ 472.569242][ T8685] vivid-000: HSV Encoding: Hue 0-179 [ 472.569256][ T8685] vivid-000: Quantization: Default [ 472.569270][ T8685] vivid-000: Apply Alpha To Red Only: false [ 472.569285][ T8685] vivid-000: Standard Aspect Ratio: 4x3 [ 472.569300][ T8685] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 472.569319][ T8685] vivid-000: DV Timings: 640x480p59 inactive [ 472.569338][ T8685] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 472.569354][ T8685] vivid-000: Maximum EDID Blocks: 2 [ 472.569368][ T8685] vivid-000: Limited RGB Range (16-235): false [ 472.569383][ T8685] vivid-000: Rx RGB Quantization Range: Automatic [ 472.569398][ T8685] vivid-000: Power Present: 0x00000001 [ 472.569415][ T8685] tpg source WxH: 320x240 (Y'CbCr) [ 472.569425][ T8685] tpg field: 1 [ 472.569431][ T8685] tpg crop: (0,0)/320x240 [ 472.569441][ T8685] tpg compose: (0,0)/320x240 [ 472.569452][ T8685] tpg colorspace: 8 [ 472.569458][ T8685] tpg transfer function: 0/0 [ 472.569466][ T8685] tpg Y'CbCr encoding: 0/0 [ 472.569473][ T8685] tpg quantization: 0/0 [ 472.569481][ T8685] tpg RGB range: 0/2 [ 472.569488][ T8685] vivid-000: ================== END STATUS ================== [ 472.810204][ T8674] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 474.177239][ T8699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.566306][ T8701] sctp: [Deprecated]: syz.5.628 (pid 8701) Use of int in max_burst socket option deprecated. [ 474.566306][ T8701] Use struct sctp_assoc_value instead [ 475.251298][ T8702] 9pnet_fd: p9_fd_create_tcp (8702): problem connecting socket to 127.0.0.1 [ 479.430026][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.644'. [ 481.645671][ T8792] netlink: 'syz.8.654': attribute type 2 has an invalid length. [ 483.962087][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.662'. [ 484.272286][ T8826] binder: 8825:8826 ioctl c0306201 200000000080 returned -14 [ 485.346721][ T8844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.541510][ T8846] 9pnet_fd: p9_fd_create_tcp (8846): problem connecting socket to 127.0.0.1 [ 490.493045][ T8844] vivid-007: kernel_thread() failed [ 492.415994][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.675'. [ 492.416012][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.675'. [ 495.137853][ T8903] netlink: 596 bytes leftover after parsing attributes in process `syz.8.684'. [ 495.575750][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.687'. [ 495.575775][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.687'. [ 501.588792][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.588842][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.570809][ T8958] sctp: [Deprecated]: syz.7.699 (pid 8958) Use of int in max_burst socket option deprecated. [ 502.570809][ T8958] Use struct sctp_assoc_value instead [ 503.149081][ T1725] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 504.171610][ T1725] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 504.171638][ T1725] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.210489][ T1725] usb 10-1: config 0 descriptor?? [ 504.659648][ T1725] usb 10-1: Cannot read MAC address [ 504.659915][ T1725] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 505.942470][ T8191] usb 10-1: USB disconnect, device number 5 [ 506.080161][ T6042] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 506.250443][ T6042] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 506.250490][ T6042] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 506.250510][ T6042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.331469][ T6042] usb 7-1: config 0 descriptor?? [ 506.346119][ T9020] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 507.572605][ T6042] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 507.572644][ T6042] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 507.572670][ T6042] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 507.572695][ T6042] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 507.572719][ T6042] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 507.630547][ T6042] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 507.756237][ T8191] usb 7-1: USB disconnect, device number 6 [ 508.320756][ T9036] fido_id[9036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 508.692574][ T9052] sctp: [Deprecated]: syz.6.720 (pid 9052) Use of int in max_burst socket option deprecated. [ 508.692574][ T9052] Use struct sctp_assoc_value instead [ 509.257691][ T8191] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 509.286890][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.9.724'. [ 509.417729][ T8191] usb 7-1: Using ep0 maxpacket: 16 [ 509.420412][ T8191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.420442][ T8191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.420477][ T8191] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 509.420498][ T8191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.537813][ T8191] usb 7-1: config 0 descriptor?? [ 509.961296][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 509.963659][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 509.963813][ T8191] usbhid 7-1:0.0: can't add hid device: -32 [ 509.963922][ T8191] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 509.978338][ T8191] usb 7-1: USB disconnect, device number 7 [ 510.097799][ T6042] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 510.255519][ T6042] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 510.255547][ T6042] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.282924][ T6042] usb 10-1: config 0 descriptor?? [ 510.731978][ T6042] usb 10-1: Cannot read MAC address [ 510.732256][ T6042] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 510.917112][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.729'. [ 511.197852][ T9097] mmap: syz.7.732 (9097) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 511.786150][ T9115] vivid-000: ================= START STATUS ================= [ 511.786219][ T9115] vivid-000: Test Pattern: 75% Colorbar [ 511.786422][ T9115] vivid-000: Fill Percentage of Frame: 100 [ 511.786441][ T9115] vivid-000: Horizontal Movement: No Movement [ 511.786630][ T9115] vivid-000: Vertical Movement: No Movement [ 511.786726][ T9115] vivid-000: OSD Text Mode: All [ 511.786791][ T9115] vivid-000: Show Border: false [ 511.786807][ T9115] vivid-000: Show Square: false [ 511.786929][ T9115] vivid-000: Sensor Flipped Horizontally: false [ 511.786947][ T9115] vivid-000: Sensor Flipped Vertically: false [ 511.787252][ T9115] vivid-000: Insert SAV Code in Image: false [ 511.787271][ T9115] vivid-000: Insert EAV Code in Image: false [ 511.787471][ T9115] vivid-000: Insert Video Guard Band: false [ 511.787489][ T9115] vivid-000: Reduced Framerate: false [ 511.790693][ T9115] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 511.790807][ T9115] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 511.790827][ T9115] vivid-000: Enable Capture Cropping: true [ 511.791002][ T9115] vivid-000: Enable Capture Composing: true [ 511.791115][ T9115] vivid-000: Enable Capture Scaler: true [ 511.791177][ T9115] vivid-000: Timestamp Source: End of Frame [ 511.791293][ T9115] vivid-000: Colorspace: sRGB [ 511.791400][ T9115] vivid-000: Transfer Function: Default [ 511.791516][ T9115] vivid-000: Y'CbCr Encoding: Default [ 511.791578][ T9115] vivid-000: HSV Encoding: Hue 0-179 [ 511.791698][ T9115] vivid-000: Quantization: Default [ 511.791808][ T9115] vivid-000: Apply Alpha To Red Only: false [ 511.791826][ T9115] vivid-000: Standard Aspect Ratio: 4x3 [ 511.791942][ T9115] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 511.792079][ T9115] vivid-000: DV Timings: 640x480p59 inactive [ 511.792196][ T9115] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 511.792311][ T9115] vivid-000: Maximum EDID Blocks: 2 [ 511.792423][ T9115] vivid-000: Limited RGB Range (16-235): false [ 511.792484][ T9115] vivid-000: Rx RGB Quantization Range: Automatic [ 511.792600][ T9115] vivid-000: Power Present: 0x00000001 [ 511.792766][ T9115] tpg source WxH: 320x240 (Y'CbCr) [ 511.792845][ T9115] tpg field: 1 [ 511.792854][ T9115] tpg crop: (0,0)/320x240 [ 511.792976][ T9115] tpg compose: (0,0)/320x240 [ 511.793032][ T9115] tpg colorspace: 8 [ 511.793039][ T9115] tpg transfer function: 0/0 [ 511.793093][ T9115] tpg Y'CbCr encoding: 0/0 [ 511.793103][ T9115] tpg quantization: 0/0 [ 511.793201][ T9115] tpg RGB range: 0/2 [ 511.793256][ T9115] vivid-000: ================== END STATUS ================== [ 514.227858][ T10] usb 10-1: USB disconnect, device number 6 [ 517.736454][ T5933] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 518.780135][ T5933] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 518.780163][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.806833][ T5933] usb 7-1: config 0 descriptor?? [ 519.250557][ T5933] usb 7-1: Cannot read MAC address [ 519.250829][ T5933] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 520.463348][ T8191] usb 7-1: USB disconnect, device number 8 [ 522.808832][ T9246] Invalid ELF header magic: != ELF [ 523.073666][ T9250] atomic_op ffff8880347ea218 conn xmit_atomic 0000000000000000 [ 523.628587][ T1725] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 524.347805][ T1725] usb 8-1: device descriptor read/64, error -71 [ 524.597651][ T1725] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 524.737711][ T1725] usb 8-1: device descriptor read/64, error -71 [ 524.767726][ T5933] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 524.848118][ T1725] usb usb8-port1: attempt power cycle [ 524.937622][ T5933] usb 10-1: Using ep0 maxpacket: 8 [ 524.943233][ T5933] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 524.943260][ T5933] usb 10-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 524.943293][ T5933] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 524.943314][ T5933] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.192261][ T1725] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 525.208582][ T1725] usb 8-1: device descriptor read/8, error -71 [ 525.379200][ T7681] usb 10-1: USB disconnect, device number 7 [ 525.470747][ T1725] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 525.488855][ T1725] usb 8-1: device descriptor read/8, error -71 [ 525.601932][ T1725] usb usb8-port1: unable to enumerate USB device [ 526.899527][ T9297] netlink: 188 bytes leftover after parsing attributes in process `syz.7.781'. [ 527.199843][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.782'. [ 528.651302][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.787'. [ 530.855407][ T1725] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 531.027744][ T1725] usb 10-1: Using ep0 maxpacket: 8 [ 531.032545][ T1725] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 531.032570][ T1725] usb 10-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 531.032605][ T1725] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 531.032625][ T1725] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.412514][ T7681] usb 10-1: USB disconnect, device number 8 [ 531.614463][ T9372] vivid-000: ================= START STATUS ================= [ 531.614524][ T9372] vivid-000: Test Pattern: 75% Colorbar [ 531.614632][ T9372] vivid-000: Fill Percentage of Frame: 100 [ 531.614766][ T9372] vivid-000: Horizontal Movement: No Movement [ 531.614829][ T9372] vivid-000: Vertical Movement: No Movement [ 531.614897][ T9372] vivid-000: OSD Text Mode: All [ 531.614944][ T9372] vivid-000: Show Border: false [ 531.614959][ T9372] vivid-000: Show Square: false [ 531.615079][ T9372] vivid-000: Sensor Flipped Horizontally: false [ 531.615098][ T9372] vivid-000: Sensor Flipped Vertically: false [ 531.615296][ T9372] vivid-000: Insert SAV Code in Image: false [ 531.615361][ T9372] vivid-000: Insert EAV Code in Image: false [ 531.615419][ T9372] vivid-000: Insert Video Guard Band: false [ 531.615475][ T9372] vivid-000: Reduced Framerate: false [ 531.615533][ T9372] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 531.615689][ T9372] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 531.615758][ T9372] vivid-000: Enable Capture Cropping: true [ 531.615816][ T9372] vivid-000: Enable Capture Composing: true [ 531.615873][ T9372] vivid-000: Enable Capture Scaler: true [ 531.615936][ T9372] vivid-000: Timestamp Source: End of Frame [ 531.616102][ T9372] vivid-000: Colorspace: sRGB [ 531.616159][ T9372] vivid-000: Transfer Function: Default [ 531.616219][ T9372] vivid-000: Y'CbCr Encoding: Default [ 531.616278][ T9372] vivid-000: HSV Encoding: Hue 0-179 [ 531.616334][ T9372] vivid-000: Quantization: Default [ 531.616392][ T9372] vivid-000: Apply Alpha To Red Only: false [ 531.616547][ T9372] vivid-000: Standard Aspect Ratio: 4x3 [ 531.616610][ T9372] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 531.616672][ T9372] vivid-000: DV Timings: 640x480p59 inactive [ 531.616782][ T9372] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 531.616800][ T9372] vivid-000: Maximum EDID Blocks: 2 [ 531.616940][ T9372] vivid-000: Limited RGB Range (16-235): false [ 531.617020][ T9372] vivid-000: Rx RGB Quantization Range: Automatic [ 531.617143][ T9372] vivid-000: Power Present: 0x00000001 [ 531.617204][ T9372] tpg source WxH: 320x240 (Y'CbCr) [ 531.617255][ T9372] tpg field: 1 [ 531.617263][ T9372] tpg crop: (0,0)/320x240 [ 531.617275][ T9372] tpg compose: (0,0)/320x240 [ 531.617366][ T9372] tpg colorspace: 8 [ 531.617374][ T9372] tpg transfer function: 0/0 [ 531.617420][ T9372] tpg Y'CbCr encoding: 0/0 [ 531.617430][ T9372] tpg quantization: 0/0 [ 531.617479][ T9372] tpg RGB range: 0/2 [ 531.617488][ T9372] vivid-000: ================== END STATUS ================== [ 531.763935][ T998] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 531.956076][ T998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 531.956171][ T998] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 531.956235][ T998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.070650][ T998] usb 8-1: config 0 descriptor?? [ 532.076191][ T9368] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 532.826311][ T998] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 532.826348][ T998] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 532.826374][ T998] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 532.826400][ T998] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 532.826425][ T998] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 532.902476][ T998] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 532.993397][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.9.799'. [ 533.045750][ T998] usb 8-1: USB disconnect, device number 11 [ 533.262462][ T9379] fido_id[9379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 533.621420][ T998] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 533.827709][ T998] usb 7-1: Using ep0 maxpacket: 16 [ 533.830166][ T998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.830194][ T998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.830230][ T998] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 533.830251][ T998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.709056][ T998] usb 7-1: config 0 descriptor?? [ 534.734158][ T9378] team0: Port device team_slave_0 removed [ 535.168143][ T998] usbhid 7-1:0.0: can't add hid device: -71 [ 535.168269][ T998] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 535.328283][ T998] usb 7-1: USB disconnect, device number 9 [ 536.189398][ T9414] vivid-000: ================= START STATUS ================= [ 536.189417][ T9414] vivid-000: Test Pattern: 75% Colorbar [ 536.189438][ T9414] vivid-000: Fill Percentage of Frame: 100 [ 536.189456][ T9414] vivid-000: Horizontal Movement: No Movement [ 536.189473][ T9414] vivid-000: Vertical Movement: No Movement [ 536.189489][ T9414] vivid-000: OSD Text Mode: All [ 536.189505][ T9414] vivid-000: Show Border: false [ 536.189534][ T9414] vivid-000: Show Square: false [ 536.189550][ T9414] vivid-000: Sensor Flipped Horizontally: false [ 536.189567][ T9414] vivid-000: Sensor Flipped Vertically: false [ 536.189583][ T9414] vivid-000: Insert SAV Code in Image: false [ 536.189600][ T9414] vivid-000: Insert EAV Code in Image: false [ 536.189616][ T9414] vivid-000: Insert Video Guard Band: false [ 536.189632][ T9414] vivid-000: Reduced Framerate: false [ 536.189648][ T9414] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 536.189667][ T9414] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 536.189684][ T9414] vivid-000: Enable Capture Cropping: true [ 536.189700][ T9414] vivid-000: Enable Capture Composing: true [ 536.189716][ T9414] vivid-000: Enable Capture Scaler: true [ 536.189732][ T9414] vivid-000: Timestamp Source: End of Frame [ 536.189748][ T9414] vivid-000: Colorspace: sRGB [ 536.189763][ T9414] vivid-000: Transfer Function: Default [ 536.189779][ T9414] vivid-000: Y'CbCr Encoding: Default [ 536.189794][ T9414] vivid-000: HSV Encoding: Hue 0-179 [ 536.189810][ T9414] vivid-000: Quantization: Default [ 536.189826][ T9414] vivid-000: Apply Alpha To Red Only: false [ 536.189842][ T9414] vivid-000: Standard Aspect Ratio: 4x3 [ 536.189857][ T9414] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 536.189878][ T9414] vivid-000: DV Timings: 640x480p59 inactive [ 536.189898][ T9414] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 536.189915][ T9414] vivid-000: Maximum EDID Blocks: 2 [ 536.189931][ T9414] vivid-000: Limited RGB Range (16-235): false [ 536.189947][ T9414] vivid-000: Rx RGB Quantization Range: Automatic [ 536.189964][ T9414] vivid-000: Power Present: 0x00000001 [ 536.189982][ T9414] tpg source WxH: 320x240 (Y'CbCr) [ 536.189993][ T9414] tpg field: 1 [ 536.190000][ T9414] tpg crop: (0,0)/320x240 [ 536.190011][ T9414] tpg compose: (0,0)/320x240 [ 536.190022][ T9414] tpg colorspace: 8 [ 536.190029][ T9414] tpg transfer function: 0/0 [ 536.190037][ T9414] tpg Y'CbCr encoding: 0/0 [ 536.190046][ T9414] tpg quantization: 0/0 [ 536.190054][ T9414] tpg RGB range: 0/2 [ 536.190062][ T9414] vivid-000: ================== END STATUS ================== [ 540.864119][ T7681] IPVS: starting estimator thread 0... [ 541.007665][ T998] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 541.390730][ T998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 541.390779][ T998] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 541.390799][ T998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.503241][ T9433] IPVS: using max 7 ests per chain, 16800 per kthread [ 541.682634][ T998] usb 6-1: config 0 descriptor?? [ 541.696585][ T9429] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 543.136282][ T998] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 543.136317][ T998] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 543.136343][ T998] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 543.136367][ T998] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 543.136391][ T998] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 543.238220][ T998] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 543.245941][ T998] usb 6-1: USB disconnect, device number 4 [ 543.939762][ T9460] fido_id[9460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 545.281110][ T6225] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 545.489956][ T6225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.489988][ T6225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.490024][ T6225] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 545.490045][ T6225] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.613516][ T6225] usb 10-1: config 0 descriptor?? [ 546.288891][ T1725] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 546.439223][ T6225] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 546.439259][ T6225] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 546.443853][ T1725] usb 7-1: Using ep0 maxpacket: 8 [ 546.446196][ T1725] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 546.446220][ T1725] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 546.446238][ T1725] usb 7-1: config 179 has no interface number 0 [ 546.446290][ T1725] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 546.446310][ T1725] usb 7-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 546.446348][ T1725] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 546.446368][ T1725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.458035][ T6225] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 546.458074][ T6225] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 546.458100][ T6225] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 546.488534][ T6225] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 546.631523][ T6225] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 546.940327][ T9] usb 7-1: USB disconnect, device number 10 [ 548.222521][ T9472] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 548.731192][ T9505] 9pnet_fd: Insufficient options for proto=fd [ 548.764307][ T6225] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 548.793955][ T6225] usb 10-1: USB disconnect, device number 9 [ 555.116475][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 555.937162][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.8.852'. [ 556.040684][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.040709][ T9] usb 8-1: config 0 has no interface number 0 [ 556.044253][ T9] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 556.044280][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.044298][ T9] usb 8-1: Product: syz [ 556.044311][ T9] usb 8-1: Manufacturer: syz [ 556.044324][ T9] usb 8-1: SerialNumber: syz [ 556.082561][ T9] usb 8-1: config 0 descriptor?? [ 556.318297][ T9] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 556.337728][ T9] usb 8-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 556.337757][ T9] usb 8-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 560.831525][ T5932] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 561.214908][ T5932] usb 10-1: device descriptor read/64, error -71 [ 562.205899][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.870'. [ 562.718458][ T5932] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 563.261473][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.261550][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.284016][ T5932] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 563.284040][ T5932] usb 10-1: config 0 has no interface number 0 [ 563.352428][ T5932] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 563.352455][ T5932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.352473][ T5932] usb 10-1: Product: syz [ 563.352485][ T5932] usb 10-1: Manufacturer: syz [ 563.352498][ T5932] usb 10-1: SerialNumber: syz [ 563.432580][ T5932] usb 10-1: config 0 descriptor?? [ 563.758583][ T5932] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 564.080310][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.740299][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.780913][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.810272][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.907347][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.925842][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.886387][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.769776][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.795568][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.989887][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.358880][ T5851] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 568.958791][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.9.892'. [ 569.884394][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.9.892'. [ 573.467920][ T9439] Bluetooth: hci3: command 0x0406 tx timeout [ 573.697592][ T5859] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 573.930108][ T9735] netlink: 188 bytes leftover after parsing attributes in process `syz.8.907'. [ 573.960396][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 573.977108][ T5859] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 573.977134][ T5859] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 573.977151][ T5859] usb 6-1: config 179 has no interface number 0 [ 573.977196][ T5859] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 573.977220][ T5859] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 573.977245][ T5859] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 573.977284][ T5859] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 573.977304][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.985949][ T9729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 574.361001][ T7681] usb 6-1: USB disconnect, device number 5 [ 577.498529][ T9777] netlink: 188 bytes leftover after parsing attributes in process `syz.7.920'. [ 579.841514][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.928'. [ 579.869369][ T8191] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 580.042804][ T8191] usb 6-1: Using ep0 maxpacket: 8 [ 580.053365][ T8191] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 580.053390][ T8191] usb 6-1: config 179 has no interface number 0 [ 580.053440][ T8191] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 580.053462][ T8191] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 580.053486][ T8191] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 580.053506][ T8191] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 580.053546][ T8191] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 580.053564][ T8191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.174876][ T9804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 580.516499][ T998] usb 6-1: USB disconnect, device number 6 [ 580.811385][ T9807] team0: Port device team_slave_0 removed [ 583.933604][ T9827] netlink: 188 bytes leftover after parsing attributes in process `syz.6.933'. [ 586.817696][ T6225] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 586.994191][ T6225] usb 6-1: Using ep0 maxpacket: 8 [ 587.016213][ T6225] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 587.016239][ T6225] usb 6-1: config 179 has no interface number 0 [ 587.016296][ T6225] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 587.016320][ T6225] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 587.016344][ T6225] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 587.016364][ T6225] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 587.016404][ T6225] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 587.016425][ T6225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.578917][ T9842] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 587.899872][ T6225] usb 6-1: USB disconnect, device number 7 [ 588.207639][ T9868] netlink: 188 bytes leftover after parsing attributes in process `syz.6.948'. [ 591.381808][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.953'. [ 592.745844][ T9909] netlink: 188 bytes leftover after parsing attributes in process `syz.9.959'. [ 597.097962][ T9949] netlink: 188 bytes leftover after parsing attributes in process `syz.8.973'. [ 597.305273][ T9954] netlink: 64 bytes leftover after parsing attributes in process `syz.5.975'. [ 600.537174][ T9978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.076139][ T9975] 9pnet_fd: p9_fd_create_tcp (9975): problem connecting socket to 127.0.0.1 [ 602.146550][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.981'. [ 602.558759][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.932190][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.148797][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.565856][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.627763][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.844802][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.883990][ T9987] team0: Port device team_slave_0 removed [ 604.289551][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.519754][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.204349][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.836321][T10026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.009091][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 606.600896][T10026] vivid-007: kernel_thread() failed [ 607.628622][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.764056][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.633700][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.239529][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.876386][T10082] 9pnet_fd: p9_fd_create_tcp (10082): problem connecting socket to 127.0.0.1 [ 612.372842][T10081] vivid-003: kernel_thread() failed [ 614.497301][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1020'. [ 614.615925][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1018'. [ 614.615950][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1018'. [ 614.859165][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1021'. [ 616.948918][T10107] team0: Port device team_slave_0 removed [ 617.177694][ T5859] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 618.383228][ T5859] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 618.383256][ T5859] usb 6-1: config 0 has no interface number 0 [ 618.391371][ T5859] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 618.391398][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.391416][ T5859] usb 6-1: Product: syz [ 618.391427][ T5859] usb 6-1: Manufacturer: syz [ 618.391440][ T5859] usb 6-1: SerialNumber: syz [ 618.400328][ T5859] usb 6-1: config 0 descriptor?? [ 618.634952][ T5859] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 618.666746][ T5859] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 618.667173][ T5859] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 618.667222][ T5859] usb 6-1: media controller created [ 618.771043][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.890660][ T5859] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 619.061639][ T5859] usb 6-1: USB disconnect, device number 8 [ 619.183013][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1032'. [ 619.349519][ T5932] usb 10-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 619.349601][ T5932] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 619.374044][ T9] usb 8-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 619.374141][ T9] dvb_usb_ec168 8-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 619.380077][ T5932] usb 10-1: USB disconnect, device number 11 [ 619.395499][ T7295] udevd[7295]: setting mode of /dev/bus/usb/010/011 to 020664 failed: No such file or directory [ 619.395702][ T7295] udevd[7295]: setting owner of /dev/bus/usb/010/011 to uid=0, gid=0 failed: No such file or directory [ 619.477355][ T9] usb 8-1: USB disconnect, device number 12 [ 619.652015][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1035'. [ 619.744912][ T5932] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 620.817654][ T6042] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 620.952588][T10176] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1040'. [ 620.997595][ T6042] usb 7-1: Using ep0 maxpacket: 16 [ 621.026659][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.035014][ T6042] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 621.035041][ T6042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.035058][ T6042] usb 7-1: Product: syz [ 621.035071][ T6042] usb 7-1: Manufacturer: syz [ 621.035083][ T6042] usb 7-1: SerialNumber: syz [ 621.058485][ T6042] usb 7-1: config 0 descriptor?? [ 623.575873][ T6042] usb 7-1: USB disconnect, device number 11 [ 624.387700][ T5859] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 624.450352][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.450429][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.540255][ T5859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.540316][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 624.540341][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.545394][ T5859] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 624.545421][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.545438][ T5859] usb 6-1: Product: syz [ 624.545451][ T5859] usb 6-1: Manufacturer: syz [ 624.545464][ T5859] usb 6-1: SerialNumber: syz [ 624.649300][ T5859] usb 6-1: config 0 descriptor?? [ 624.653796][T10203] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 624.681528][ T5859] usb 6-1: ucan: probing device on interface #0 [ 624.681552][ T5859] usb 6-1: ucan: invalid EP count (1) [ 624.681566][ T5859] usb 6-1: ucan: probe failed; try to update the device firmware [ 627.490237][ T9] usb 6-1: USB disconnect, device number 9 [ 631.559492][T10271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.066397][T10268] 9pnet_fd: p9_fd_create_tcp (10268): problem connecting socket to 127.0.0.1 [ 632.088813][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1072'. [ 636.402575][T10307] netlink: 'syz.9.1082': attribute type 72 has an invalid length. [ 636.402597][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1082'. [ 637.883609][ T6042] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 638.027605][ T6042] usb 6-1: Using ep0 maxpacket: 16 [ 638.030170][ T6042] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.030223][ T6042] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.033295][ T6042] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 638.033322][ T6042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.033339][ T6042] usb 6-1: Product: syz [ 638.033352][ T6042] usb 6-1: Manufacturer: syz [ 638.033364][ T6042] usb 6-1: SerialNumber: syz [ 638.112180][ T6042] usb 6-1: config 0 descriptor?? [ 638.697686][ T45] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 638.857598][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 638.860069][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.860097][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.860132][ T45] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 638.860152][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.873979][ T45] usb 10-1: config 0 descriptor?? [ 639.483597][ T45] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.9-1/input0 [ 639.795911][ T45] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 18: -32 [ 639.795937][ T45] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 pairing info: -32 [ 639.795985][ T45] playstation 0003:054C:05C4.0008: Failed to get MAC address from DualShock4 [ 639.796000][ T45] playstation 0003:054C:05C4.0008: Failed to create dualshock4. [ 639.858818][ T45] playstation 0003:054C:05C4.0008: probe with driver playstation failed with error -32 [ 639.877674][ T45] usb 10-1: USB disconnect, device number 13 [ 640.012149][T10337] fido_id[10337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 640.019185][T10340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.326099][T10348] netlink: 'syz.6.1097': attribute type 72 has an invalid length. [ 640.326119][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1097'. [ 640.776789][ T6042] usb 6-1: USB disconnect, device number 10 [ 641.449244][ T7681] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 641.610336][ T7681] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.610379][ T7681] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 641.610399][ T7681] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.659300][ T7681] usb 8-1: config 0 descriptor?? [ 641.937773][T10384] netlink: 'syz.8.1112': attribute type 72 has an invalid length. [ 641.937793][T10384] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1112'. [ 645.046097][ T45] usb 8-1: USB disconnect, device number 13 [ 645.209006][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 645.357660][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 645.377708][ T9] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 645.377734][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.377753][ T9] usb 9-1: Product: syz [ 645.377764][ T9] usb 9-1: Manufacturer: syz [ 645.377776][ T9] usb 9-1: SerialNumber: syz [ 645.394578][ T9] usb 9-1: config 0 descriptor?? [ 645.490939][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 646.074570][ T9] gspca_stk1135: reg_w 0x3 err -71 [ 646.075624][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 646.075637][ T9] gspca_stk1135: Sensor write failed [ 646.075658][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 646.075666][ T9] gspca_stk1135: Sensor write failed [ 646.075687][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 646.075695][ T9] gspca_stk1135: Sensor read failed [ 646.075716][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 646.075724][ T9] gspca_stk1135: Sensor read failed [ 646.075731][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 646.075766][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 646.075775][ T9] gspca_stk1135: Sensor read failed [ 646.075795][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 646.075803][ T9] gspca_stk1135: Sensor read failed [ 646.075823][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 646.075831][ T9] gspca_stk1135: Sensor write failed [ 646.075852][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 646.075861][ T9] gspca_stk1135: Sensor write failed [ 646.075947][ T9] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 646.101381][ T9] usb 9-1: USB disconnect, device number 11 [ 646.477557][ T6042] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 646.738382][ T6042] usb 7-1: Using ep0 maxpacket: 8 [ 646.982261][ T6042] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 646.982592][ T6042] usb 7-1: config 179 has no interface number 0 [ 646.983948][ T6042] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 646.984805][ T6042] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 646.985053][ T6042] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 646.985173][ T6042] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 646.985321][ T6042] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 647.000366][ T6042] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 647.000392][ T6042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.029626][T10439] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 647.822450][ T6225] usb 7-1: USB disconnect, device number 12 [ 647.822478][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 647.822642][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 653.053299][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1144'. [ 653.238013][ T9] kernel read not supported for file /rfkill (pid: 9 comm: kworker/0:0) [ 655.959563][T10532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.242566][T10530] 9pnet_fd: p9_fd_create_tcp (10530): problem connecting socket to 127.0.0.1 [ 656.827648][ T5859] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 656.977604][ T5859] usb 6-1: Using ep0 maxpacket: 16 [ 656.980641][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.980671][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.980707][ T5859] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 656.980733][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.015963][ T5859] usb 6-1: config 0 descriptor?? [ 657.490204][ T5859] playstation 0003:054C:05C4.0009: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 657.636573][ T5859] playstation 0003:054C:05C4.0009: Invalid byte count transferred, expected 16 got 0 [ 657.636601][ T5859] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 pairing info: -22 [ 657.636656][ T5859] playstation 0003:054C:05C4.0009: Failed to get MAC address from DualShock4 [ 657.636669][ T5859] playstation 0003:054C:05C4.0009: Failed to create dualshock4. [ 657.642296][ T5859] playstation 0003:054C:05C4.0009: probe with driver playstation failed with error -22 [ 657.846076][ T5859] usb 6-1: USB disconnect, device number 11 [ 658.727683][ T5859] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 658.880344][ T5859] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 658.880377][ T5859] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 658.895780][ T5859] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 658.895806][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.895824][ T5859] usb 8-1: Product: syz [ 658.895836][ T5859] usb 8-1: Manufacturer: syz [ 658.895849][ T5859] usb 8-1: SerialNumber: syz [ 658.915779][ T5859] usb 8-1: config 0 descriptor?? [ 658.917210][T10563] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 658.938282][ T5859] usb 8-1: ucan: probing device on interface #0 [ 658.938305][ T5859] usb 8-1: ucan: invalid EP count (1) [ 658.938319][ T5859] usb 8-1: ucan: probe failed; try to update the device firmware [ 661.354462][T10579] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 661.354795][T10579] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 661.493449][ T45] usb 8-1: USB disconnect, device number 14 [ 662.582124][T10592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.757574][ T5859] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 669.920388][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 669.920422][ T5859] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 669.920444][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 669.924026][ T5859] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 669.924054][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.924072][ T5859] usb 7-1: Product: syz [ 669.924084][ T5859] usb 7-1: Manufacturer: syz [ 669.924098][ T5859] usb 7-1: SerialNumber: syz [ 669.999819][ T5859] usb 7-1: config 0 descriptor?? [ 670.007997][T10643] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 670.022191][ T5859] usb 7-1: ucan: probing device on interface #0 [ 670.022221][ T5859] usb 7-1: ucan: invalid in_ep MaxPacketSize [ 670.022234][ T5859] usb 7-1: ucan: probe failed; try to update the device firmware [ 671.697654][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 671.847725][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 671.849290][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.851482][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 671.851497][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.851507][ T9] usb 6-1: Product: syz [ 671.851514][ T9] usb 6-1: Manufacturer: syz [ 671.851521][ T9] usb 6-1: SerialNumber: syz [ 671.925302][ T9] usb 6-1: config 0 descriptor?? [ 672.551158][ T9] usb 7-1: USB disconnect, device number 13 [ 672.583204][ T7681] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 672.733456][T10678] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1197'. [ 672.750858][ T7681] usb 10-1: Using ep0 maxpacket: 16 [ 672.752480][ T7681] usb 10-1: config 0 interface 0 has no altsetting 0 [ 672.752504][ T7681] usb 10-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 672.752517][ T7681] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.758840][ T7681] usb 10-1: config 0 descriptor?? [ 673.179795][ T7681] usbhid 10-1:0.0: can't add hid device: -71 [ 673.179913][ T7681] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 673.997643][ T7681] usb 10-1: USB disconnect, device number 14 [ 674.424927][ T7681] usb 6-1: USB disconnect, device number 12 [ 675.543720][ T8191] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 675.743377][ T8191] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 675.743412][ T8191] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 675.743434][ T8191] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 675.785521][ T8191] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 675.785548][ T8191] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.785568][ T8191] usb 9-1: Product: syz [ 675.785579][ T8191] usb 9-1: Manufacturer: syz [ 675.785592][ T8191] usb 9-1: SerialNumber: syz [ 675.845544][ T8191] usb 9-1: config 0 descriptor?? [ 675.846647][T10708] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 675.869767][ T8191] usb 9-1: ucan: probing device on interface #0 [ 675.869790][ T8191] usb 9-1: ucan: invalid in_ep MaxPacketSize [ 675.869803][ T8191] usb 9-1: ucan: probe failed; try to update the device firmware [ 677.795096][ T7681] usb 9-1: USB disconnect, device number 12 [ 678.349647][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 678.507797][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 678.513055][ T9] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 678.513081][ T9] usb 10-1: config 0 has no interface number 0 [ 678.513128][ T9] usb 10-1: config 0 interface 12 has no altsetting 0 [ 678.518591][ T9] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 678.518619][ T9] usb 10-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 678.518637][ T9] usb 10-1: Product: syz [ 678.518649][ T9] usb 10-1: Manufacturer: syz [ 678.518673][ T9] usb 10-1: SerialNumber: syz [ 678.536830][ T9] usb 10-1: config 0 descriptor?? [ 678.677652][ T5859] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 678.860373][ T5859] usb 9-1: Using ep0 maxpacket: 16 [ 678.864547][ T5859] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 678.872426][ T5859] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 678.872452][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.872521][ T5859] usb 9-1: Product: syz [ 678.872534][ T5859] usb 9-1: Manufacturer: syz [ 678.872546][ T5859] usb 9-1: SerialNumber: syz [ 678.908201][ T5859] usb 9-1: config 0 descriptor?? [ 679.042676][T10740] No control pipe specified [ 679.167387][ T9] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 679.167627][ T9] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 679.167645][ T9] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 679.167745][ T9] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 679.238320][ T9] usb 10-1: USB disconnect, device number 15 [ 680.132186][ T6225] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 680.297903][ T6225] usb 10-1: Using ep0 maxpacket: 8 [ 680.304664][ T6225] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 680.304690][ T6225] usb 10-1: config 179 has no interface number 0 [ 680.304740][ T6225] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 680.304764][ T6225] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 680.304789][ T6225] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 680.304813][ T6225] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 680.304837][ T6225] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 680.304875][ T6225] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 680.304895][ T6225] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.644646][T10744] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 681.804138][ T7681] usb 9-1: USB disconnect, device number 13 [ 682.749203][ T5859] usb 10-1: USB disconnect, device number 16 [ 682.804319][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 682.985563][ T9] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 683.184179][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 683.184213][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 683.184236][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 683.316808][ T9] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 683.316836][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.316855][ T9] usb 8-1: Product: syz [ 683.316867][ T9] usb 8-1: Manufacturer: syz [ 683.316879][ T9] usb 8-1: SerialNumber: syz [ 683.416966][ T9] usb 8-1: config 0 descriptor?? [ 683.424949][T10771] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 683.425158][T10771] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 683.429809][T10779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.453915][ T9] usb 8-1: ucan: probing device on interface #0 [ 683.731866][ T9] usb 8-1: ucan: could not read protocol version, ret=-32 [ 683.731890][ T9] usb 8-1: ucan: probe failed; try to update the device firmware [ 683.961381][T10779] 9pnet_fd: p9_fd_create_tcp (10779): problem connecting socket to 127.0.0.1 [ 685.623665][ T5859] usb 8-1: USB disconnect, device number 15 [ 685.888728][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.888975][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.805098][T10826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.186925][T10826] 9pnet_fd: p9_fd_create_tcp (10826): problem connecting socket to 127.0.0.1 [ 693.504512][T10833] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1245'. [ 694.828474][ T5859] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 695.540135][ T5859] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 695.540167][ T5859] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 695.540189][ T5859] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 695.546277][ T5859] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 695.546302][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.546320][ T5859] usb 9-1: Product: syz [ 695.546332][ T5859] usb 9-1: Manufacturer: syz [ 695.546345][ T5859] usb 9-1: SerialNumber: syz [ 695.552114][ T5859] usb 9-1: config 0 descriptor?? [ 695.557825][T10840] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 695.557936][T10840] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 695.569555][ T5859] usb 9-1: ucan: probing device on interface #0 [ 696.621744][ T5859] usb 9-1: ucan: could not read protocol version, ret=-32 [ 696.622035][ T5859] usb 9-1: ucan: probe failed; try to update the device firmware [ 701.967718][ T6042] usb 9-1: USB disconnect, device number 14 [ 706.491914][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1267'. [ 706.547696][ T45] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 706.711424][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 706.711570][ T45] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 706.711594][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 706.714793][ T45] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 706.714818][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.714835][ T45] usb 9-1: Product: syz [ 706.714847][ T45] usb 9-1: Manufacturer: syz [ 706.714859][ T45] usb 9-1: SerialNumber: syz [ 706.793314][ T45] usb 9-1: config 0 descriptor?? [ 706.794092][T10896] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 706.794228][T10896] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 706.817091][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 706.830287][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 706.832589][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 706.836865][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 706.843371][ T45] usb 9-1: ucan: probing device on interface #0 [ 706.849433][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 706.994886][T10894] lo speed is unknown, defaulting to 1000 [ 707.064810][ T45] usb 9-1: ucan: could not read protocol version, ret=-32 [ 707.064834][ T45] usb 9-1: ucan: probe failed; try to update the device firmware [ 707.663826][T10918] warning: `syz.6.1269' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 707.794340][T10913] lo speed is unknown, defaulting to 1000 [ 708.918135][ T5851] Bluetooth: hci1: command tx timeout [ 709.217011][ T7679] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.321252][ T1725] usb 9-1: USB disconnect, device number 15 [ 709.652860][ T7679] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.987835][ T5851] Bluetooth: hci1: command tx timeout [ 711.080785][ T7679] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.620437][ C0] ------------[ cut here ]------------ [ 712.620462][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 712.620506][ C0] Modules linked in: [ 712.620529][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 712.620556][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 712.620571][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 712.620593][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 712.620612][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 712.620632][ C0] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801c2c5940 [ 712.620649][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 712.620664][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 712.620679][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000004 [ 712.620695][ C0] R13: 0000000000000000 R14: 0000000000000020 R15: ffff88801b2b9468 [ 712.620710][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 712.620728][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.620743][ C0] CR2: 00007f3543092104 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 712.620762][ C0] Call Trace: [ 712.620770][ C0] [ 712.620797][ C0] ? __pfx_est_timer+0x10/0x10 [ 712.620836][ C0] call_timer_fn+0x17b/0x5f0 [ 712.620864][ C0] ? __pfx_est_timer+0x10/0x10 [ 712.620885][ C0] ? call_timer_fn+0xbe/0x5f0 [ 712.620913][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 712.620952][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.620979][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 712.621003][ C0] ? __pfx_est_timer+0x10/0x10 [ 712.621027][ C0] __run_timer_base+0x648/0x970 [ 712.621072][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 712.621119][ C0] run_timer_softirq+0xb7/0x180 [ 712.621146][ C0] handle_softirqs+0x22c/0x710 [ 712.621185][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 712.621226][ C0] run_ktimerd+0xcf/0x190 [ 712.621254][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 712.621286][ C0] ? schedule+0x91/0x360 [ 712.621320][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 712.621346][ C0] smpboot_thread_fn+0x542/0xa60 [ 712.621373][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 712.621411][ C0] kthread+0x711/0x8a0 [ 712.621446][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 712.621471][ C0] ? __pfx_kthread+0x10/0x10 [ 712.621509][ C0] ? __pfx_kthread+0x10/0x10 [ 712.621541][ C0] ret_from_fork+0x3fc/0x770 [ 712.621573][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 712.621608][ C0] ? __switch_to_asm+0x39/0x70 [ 712.621627][ C0] ? __switch_to_asm+0x33/0x70 [ 712.621646][ C0] ? __pfx_kthread+0x10/0x10 [ 712.621678][ C0] ret_from_fork_asm+0x1a/0x30 [ 712.621718][ C0] [ 712.621729][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 712.621745][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 712.621771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 712.621784][ C0] Call Trace: [ 712.621792][ C0] [ 712.621801][ C0] dump_stack_lvl+0x99/0x250 [ 712.621831][ C0] ? __asan_memcpy+0x40/0x70 [ 712.621855][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.621885][ C0] ? __pfx__printk+0x10/0x10 [ 712.621925][ C0] vpanic+0x281/0x750 [ 712.621954][ C0] ? __pfx__printk+0x10/0x10 [ 712.621977][ C0] ? __pfx_vpanic+0x10/0x10 [ 712.622007][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 712.622049][ C0] panic+0xb9/0xc0 [ 712.622078][ C0] ? __pfx_panic+0x10/0x10 [ 712.622127][ C0] __warn+0x31b/0x4b0 [ 712.622154][ C0] ? est_timer+0x6dc/0x9f0 [ 712.622179][ C0] ? est_timer+0x6dc/0x9f0 [ 712.622201][ C0] report_bug+0x2be/0x4f0 [ 712.622225][ C0] ? est_timer+0x6dc/0x9f0 [ 712.622249][ C0] ? est_timer+0x6dc/0x9f0 [ 712.622276][ C0] ? est_timer+0x6de/0x9f0 [ 712.622297][ C0] handle_bug+0x84/0x160 [ 712.622329][ C0] exc_invalid_op+0x1a/0x50 [ 712.622359][ C0] asm_exc_invalid_op+0x1a/0x20 [ 712.622379][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 712.622402][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 712.622421][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 712.622439][ C0] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801c2c5940 [ 712.622455][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 712.622469][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 712.622484][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000004 [ 712.622499][ C0] R13: 0000000000000000 R14: 0000000000000020 R15: ffff88801b2b9468 [ 712.622524][ C0] ? est_timer+0x6db/0x9f0 [ 712.622573][ C0] ? __pfx_est_timer+0x10/0x10 [ 712.622608][ C0] call_timer_fn+0x17b/0x5f0 [ 712.622635][ C0] ? __pfx_est_timer+0x10/0x10 [ 712.622657][ C0] ? call_timer_fn+0xbe/0x5f0 [ 712.622684][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 712.622722][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.622749][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 712.622772][ C0] ? __pfx_est_timer+0x10/0x10 [ 712.622797][ C0] __run_timer_base+0x648/0x970 [ 712.622842][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 712.622888][ C0] run_timer_softirq+0xb7/0x180 [ 712.622916][ C0] handle_softirqs+0x22c/0x710 [ 712.622955][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 712.622994][ C0] run_ktimerd+0xcf/0x190 [ 712.623021][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 712.623048][ C0] ? schedule+0x91/0x360 [ 712.623081][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 712.623106][ C0] smpboot_thread_fn+0x542/0xa60 [ 712.623134][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 712.623171][ C0] kthread+0x711/0x8a0 [ 712.623206][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 712.623232][ C0] ? __pfx_kthread+0x10/0x10 [ 712.623279][ C0] ? __pfx_kthread+0x10/0x10 [ 712.623312][ C0] ret_from_fork+0x3fc/0x770 [ 712.623342][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 712.623375][ C0] ? __switch_to_asm+0x39/0x70 [ 712.623393][ C0] ? __switch_to_asm+0x33/0x70 [ 712.623410][ C0] ? __pfx_kthread+0x10/0x10 [ 712.623441][ C0] ret_from_fork_asm+0x1a/0x30 [ 712.623482][ C0] [ 712.623735][ C0] Kernel Offset: disabled