last executing test programs: 11.034959839s ago: executing program 4 (id=1380): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000240)=0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f000000a380)="ee43a8f8855298a8290b47b6eb9ecbe3b5cc7d6c5531c6b9218388565017628705c4c32fd55292c0c3f883dbf2e8034edf548838c491174fa9ac73e1c9cc70bf5a3522661ea6daeb623ad80d7d2c07b34a3c6082104cfcdef7787b6571dfdf4179e6fe0b1d1a55e1804b1c64f153b46f3ea2ddeb087377540bd71dd01663b7fcb827815c7f8a0045e3e851ccf0c6e73fee19fedd3098a97fbef63ff5eb7c1c1f2facda43aba1f2cdf493a3539ab05e525711238ea2b5e70c7bf56091e3fdd7de8cc3ff7b43e649b5c7378c1f9538f8cd9adc78d0893204f65f7d3b0c7d4d5dd1441cf6d19035e5382545c8c91521551b6347bf4d2356b015b77d05a492e1f8a5a356afeec8b308d8f2c838bd0c9b28dde9239783312362e311e727d23d8545f171dfad77a54fc618378a8088c4627b1a85123cff5d5b58ae14284084d327e439fa1901f9bf6c52e9a2b7176cd308b3c0d82f6ac370a95055c37b56478f8f33648164250f2c4ec4ff44ff22fc62308909ac5f6b3ee783169933dd421a77bdc238b6e54ed292d033fc80b2f4f6e9200589ef32be4de445d981ed0df390fa2691cf5a22eb7dd1277eed9f79cc489fcbd424f9e42683b4891d54d93d1d12eb6076af805bd5ab5a6007da7daa9eaa4763c5ff36b4d6547145e90e5b74041e24bd3c4b996412637757dcc343784511f09bce6e91908b1a3d4f2bc8310105bef2474b2a7e3204a475a1aa5b6189ca02892342e4ce48e4e7a34eac5f5a973ad1fdeb2404e8899bfa9e40f411c84f75d76a4c680ca107e8cc134527f942d15a17011ffed9f11947a2054d8875d6a562a10685e73c92b78ed8b8c05ac12bdc7b627f0f00a2048027ef15085179610b3142d95b73e931ffd17a40f207e682cd567213c4b88ece6f8e41917944da92b7b834027b0ca18d3f1d1264a920dda9f494bdc359e060be1298dcf3be313cbbc61a70bc02dadc0bbaa4fcc2ce0575651adf3d277f0d4e0bf7ef449e0a6a9d9ff5a20f659fd0b5515d46dd1ed1b412b19a7ab40eff607d26b71056de718acdf6ac40f5e50bfd2a65984242fc20d69bba826d308e0cbafe1b6bd336bc2f1c205bd454a06e5199a23ca1c0a7595cae2550c21aae006001cfa7cdc428cded037397e6b6d009f6b9bee1615aa52da336538e045bf324c71dad2997d87801f87d4d3e0a9a7038573b6220b0676af9b56240f3db4af583ff2a8b9242a6568bc0994d89639a88fea8ede9c59b04591378ec006088dd6ec82c4de4c9de7776ca070a3e7103551ad58eee1ccc0e4d3a0392285802d23b8b5be7b407bb8e38dd7fb793c295c16167c6761ab88f28d509854314f5b7120eaa00f0665c4131cad14a86cd4a758716426eb189b9ad7736d7c7b4a49e7be11019cd28d8869a9f30d8ae52ce35c5a69163d514884fb0e404f59bb7f378dae93d3b1c77db574c5115136a7a0d751486cb0dfc6231b3e242ef88c0d983f65e78e74001e50019fd124d1a0761362cd0ee6d6212c55f37837e21356db7fb5fe79c05db8e45425222f3c4d1fc09667accd4164b8ef336ae3db5b215c82dc0ae4e44c98db78481b9942555dc0ca311c4cabdddd318c5e4f8d477294aa43820f3e4c334987423acd6736196a2990789b4b2d65f48ba3039eeecb2ab8abbf1004c10cc1b563ad368df3513b152878c08fefe65744210432347bf4a67f09dda78be9f1024e077c7191f39b718eb12d7bc7500e855f40673d9975c12ac0bc3526d5017cbfa2a07263f58293bb8c7500b8e365533161295d9ca65c6b8b29482ce3078295a6454bdb574476249c0f7b4cdf3ae3ef55afa3ef653e712f14de270ef728ff4c4f38d09b03daad2868e922a7723ec00884ddfd19a527744ef6cecbc74e8c74aa37b62734286ef94d400a7f884f20c2891ebe78b70a7ea6535c1f1d2a421fd3a05a45749f1511a10eb6f45e54e1b83a2e437df5127be5b54cdaf39bbc96187e46cde341a948bc6999ff738a8abb8da9b943e8e2de28d37cd07c346d05b18b90dc98310d8de6286c42bad83393f3f57ab3c54ad753588909c7eaa08eaccfbda485af7423bcfb58966a0f2b1362801223a99228865b1dfba3d102b63fe3a1dfedd561d205358a276d3887612ce91de546ce6d0b9f5420b667675bc597964910891bf71f949e186f4fe96324b1690c53a8ac12bcbd86e046f3752453bc8c3abc04ca05aeaa4539419dcc2985eb0ba64faa63733a417c25eb4e0a94d4237c9f305fc1a5575b85835f2a71d9dbebbf13a8f58ae798feac3f36af38970b89a705fdb4964ad62c2e3bcf80078a03bff48b9a7c948010789fcd4930999ab49c8dbac946ae3e51ce06b24d0a96fd51070e79950f4477fa39452180ae8cf0dae34079354e0772283d07f0580fc9e03cdac4b27edcf59587746871b1739daf3db43e78d832039f3d82f2fc9aee5798b4d19ae96b9b81c73bc2633a32d0800452bd22a0cc557d20d46343b244051e0aa33edb3edf35d26114e59424454225e4468131ba1ab70c320a321d5771f18c8fc48617763f77cd3d0b51d90a0d05bef340cc4d52fd65e6b39f2e4f7a7bb8722641df73ec3931541a6cdc43cafa6c5e885ebcc00d230f5d03e59e46feb996da8fa59d16d1e271b0faf2f3f1e1eeda53b9f6bee341b94f4ac6c2f0431253c2beb3d3dac49ae543643a2a4b6aaf5ae46d85a102b71d7ae6cbcd50ab8c6a7a61a972cd6c0ecc8ac1cb7c2b7b732e268c0155b918559afe4f470a9f3e61a41acdee97605332613bce6cb5eadf3786a6ab6bd90d672cd4861f273b1a16998a22c03a81fd8295f6a3068581844ffee8b1e7b95b246167b367b2696508d51b2fa3ccdaae9edd68a04a85a95603b28c273f24715267b8e066cfbbce136ea2cbcc9087fcfe17da753734ce7c47195d9aa65149dc2d0e6155d52ac5173160b84d21906704ea06b34c6f7696f81f39ea3c3b2e5ccb3866357143da1ea3362fa2567b3822f3cfa547cab553f16c589339cefd6620f290273be6375afe68d09f910c6121c84d787b6fbb46ea6561f78459d08a15d8e712606015709fbf5902e46f84ac3d270df370acb8f6c7ee59f61eccd167a885068da639fb3f1c4c7722d7a0fed2489855dd31783bfe807926dff94b6d98535364ea1117592025d20942d2090b0706ae357f98f1e2b7511a9f37b3a9d3d2bacc5aff1e8b3d5f3d5134e75f8af24bf348d50a5222eb0cb2ac2a53ae4e069bce30cda581df56adfe41f7c1831bb2e4370914be2d3c6b5f33c5414597c7248d402e373aa246535d69385da9da1c4a3584b8d280fea95ab160ac8c4303c3f2800ccb7b5797395418b4f3c7dc728dac80404c576e6731644089bc7fc82bc3c6abbd5e174a40e6f1d56c5023669aa08130eee2a0b7263eb215af283b7422689b1966d0bb8e34b8b2b8acd118f125c3d45c4297ff38e1e45c5eb1f3d9b5ef283a7f188baf6ca030b9dbf624e23f8455bb8afe8314bc1acd0beda0cd477a16d982ddbc9c525c8c24b9e53ddb4ff9d03c6db15b121738c4d5a24e638a0c238e3cb865eb7433d672401f6dae1ce7ffe330045e44644f185b2d47c82108dd6052d2a928d7f49e9e22b7cdd94c09a6c9820ff22169acc82e08b430926c5af7d290ca92598fa2d212154a10e17e5af05b5c2141475d7ab034bd384cf663fec9e1f9d8f50c1d3e0406f2665cb273ca0185281ee3a65cd76a1a350fe9aeae6e49cb8f0eb4dba4c19ecf27479833fc47dfee6ae7806723ba5c2f24c62e26a3d8a74cb43546d28acb0fbf287c03dcdac6699c3c7f9a3b806ac2318118395fa4e052eb620f02a90dc0556e6338266d5529f968359372a21c5b54a46ae61dcd528d7569435311abf1133be800f466dc19ade70b233ab4a5fa04ddcc476ba44aafd2c443a0c6738a422477a8da46420dbc8cf09302e8e59ce967a4832b46e74bf81306ccb497bcd35ae1e552566c5414982ba51151a4f1b13dc1d0065ea65e5272d9a004ffa84574ce96d94561d46664659dd9ebabd1a907b5127b140801720c1d92a40530040c03a869debffa977a57a8d6196cfc24e844f2486639ed630f5eae1dafd32ebaa1d71a7cfbe98badd7f0962fdce731e2ebd4b97fbbfb82a6cbf94d9d67a58f74d0856ae50e757823976f018281590e6adb9b6d5c0e58833d747957196d502f0f96f70bc351fb9599dd3d177162d087f25f4ef07c2796d2b3b1d2ed1d45bd3ee150d0b9569c4ba640526df0c91825fa8442045ca8397aaa16a39f179dd04fa63c9195617849868f0018756391089827fd090b898b165c0528f835d7726c18cd81f1613c5607d54d074d0c3e37a76c884f963ff8070cb25e441d215c02328ea43f518e139a5df4c033e429a27ca9ec62b103578c075baee7a047e070892c169401bd1d3b9b94bb3375af9ef41d75e4199e486042c0c50bf7b2b883251938ec16150cdcd3806b1df7c6bf190567afbfc540145e9f4885a02a2e0a32f878c097799b728eb6db95061c741526f9a8f988f6c6c24b459fa236b27e978628e38c6a4e0a88199f645e64a535a13e8aec318c43c55c7e61160851d534383b76e300718553a710ddbf937f2f16bff9a2cb883d4d96151b2ce87b6269dce42b153d8d4d7cdd1f1d041bd0a58e76f169f8a3ca5fe9d1cd0d5023b9caaec86fbd65b67c7a972a9616cbeee989942b965d6fc0eaa1ac40240dbc910a72cb5ac4af89b390eabfa9fb8740028f0db6c52036df330d65b958d54b92e156a560648e83fc662d63f1a2af989c03a035f539ae047d611c3eff899ea684e02eb0021ab1a7a20ada3a7bc671935238232b785bc740aeda2a9a8107d63aaea386b9b4462921f2a57c9f681ac4d2e5688de78480826fd0c2646c6922a337a121efad078e8032b9adae398d02da7ab5144f9cde3cc6306c4250788f365f7a51f59e4bd7b4944f5c3acf6046e5ac66fb5d0f83ffbd24de6b43ca32547138609099bb2615fb1ffd971a7117b21e2b70002b5de395f14bf5bd96869bb858687c69026453e2f2f058736603f95f80d8c8d0a22f4f547bf5873ec896f46ce6699682f375cc3d460e836ab58e19830d10dd6458eca0b31dc8b568a1d99b7f01ae483f8c9e99245a5437d4af82b3925aee36b3dc77d5b588d9e225050ee847bbf1c4d0a26fa55eed6f8586d979e9b0e0fadafc8cb56bb74f16efdf4967627a11f669aa5eea716f957d2352e158dec9d295f9d50ca846fda87fcbaeac91df406b7250da41177587dc7102f8fcd9086e263feec335ed1312b71d74403f81c7c7d5731d4b8a10475f86bfeb59a52e769d8c1322facd03960286cda9b6fbea84b06b443baf710d29a209e01d572beb43ddd6ffef3c35afd79a3b12099680a377ee7469610fa26210522d8764d93a00d4a63061f7d0c777199983d416ae39497fcbebff49eed8f404739cb76c6a3f3a1c5804074756266294e2ed4fb15ef2f2cbbf98183dc5dfcb568da748ddf2e5ff56688e1ea25410321d0015c45ceb9eff7c855f683e6a7da716ae15363f98a17fa602edc2cda3ba3bf3d0f53adf56618b2629d4feb77bf70f80c68beea0a37034270c6599498d995c91468fcc4c6650471227af2e38eb3ba208bb7c3c7c326ef744c58bb10e548a770caf35e0ee64053bd8820cdcb4cee1f5ef3dc45ecf8f2a6a0d8e3978c5456ea5989316d75ec5743faf8e63c6b1d68186c7dc2bb8b04f239b42af853e39a43d5891ba3479c0efc744ba207ab8ff1e755f3f304d286de3a739b2801af5bab3fd7f034ede2dd38da60415393d6b12ea96ee6cf3b1a87b12b034719e9d907497e1114c888ff2ead6cbc00aa4e9db18186913c35147c9ad06748971a7aed0fa87b4c864150ff06e37b2ef984f0d6e2838e099bcfb92939c75082fa5dc9c7c8455b119866939ef78a594d48b1e233ab2530058a7c2ae8f4147528d0ba328aabdd8d61c2270fb9ab790fbf913e97d15d5e20553016791855e617131474ef0b75081a0c43fc5fa1ecb67c7edeeecc97cd7d941845dad2e54b42e18e68ce41f849313143fe0152e104a2a401e42f982145d9bce7ed874705bf7576ce102ebbe11d6187acba2d06e2b3762cdc8c3f67aa66fd1d70e4ee55205edc63a9895969ec6fd13b798d5a0401c2e18a580f10505d5abc79a799088d59481a6c26b94180efda1c5c23e9b884f658d8fb0cd80e8e6b3a20c81676f47e929433c27bacb24257edf3e8630755e17d800d8db4f2be1fda9317ba2ecb53756fb0ca80701e49e209859f006a4324c0de093b3da7c23be79567990c7d887a03ab64b787832dbaf2579e76d343d41d37431475d11e918393296bff7a33feb659948d554405fac79bf7cc7c4f702e0d74a3cc384f44bdcb800cb24ee11c9531418c1c82453c0410514391cf5679e4d0d9949a8ce20ac70c12694ea6ca08a87307a98a05d48c7608783e0acc829c65425d8677f103a92e1c852164f09ab67f9a155f3575b2ec3ccfd7cb9ad431dd875369abb7ea31b994e2e39a59e5bd93bc8852ea3e2efff3707c8e1319e6c16be14e3386ad2bb5affb435c2436762b58dc6ffeec0743ea0dca0384ef1217db3d6219fb2921861b176fa0b714decb2e5bfe305691d92c4c65a427ab02b8cbf11a701fe74c20de74ef56ed85fd9136ca03b15d0d99e553ba4ebc8ac4e6c41506c97a33c9a05ce53d19bf62cf6ff16ede1bdbee982553bcf11ea5d2d4922f4e7ba82c83a6307610e34da0ca81c43193cdd16a8bd73b6b119461dd245e1f033da72e644614743741b34bc7813a3937a6447e499f036440781a43ccef1bcc15c8b58999e60ad807e82529bd8c819194f0e396b0d93168fc800c0fec2b7b260d1b6c18956d66ad2db20acb3117a2bd17ddb5c046559461f5e91c74b89535c49efb89bf78ec20743017eae6e1f7c393d28f5c8f7c0f0914a30eb2626a294a3ed7ada207e51bd7a9520460f2b8586c29fdf88ece2a3a5a068430a571d98c26e51a45bbb50231197363845c76f58506bf31738a23fe792f678c042e30d7dd5f19ed5ab4bb36536671e160925d4af6ff078c2b7dbdf9c55ed31e61eacc01babc62d9d2e671bc6c1932e170e3dcc5ad67a9ea7d46fca2f256fbf781019782d4066331fe10f62a6ae077a8b9569dc4bac6b90fb730a968f1782cbfc5e005bad8d9b00ae9199c81e317d91196abc75f1887cb8ffcb440f37a972d4ced20f158844e0ee36111a4247dfda14cc5cada6d372e75ee370149d7fa822f73ef0edc835a338c6d5699911fea2fedd7f3e381caff836a690331327f96ab7904a461ef5a36ce5f552bc1d1d9968106a7b8e07eef4aae2e716422a2fb7b0c1e05f09c29ca83f3405adb80e237d6f145383ec4885573e50ca2ad014308ed70477257f4d904089eec809c55d85684265a1d3b00718cfb14d644463623ba225aa95bee2a95e13a0817e2c98d96b822e6e4ef36d18a831699889034d116c84e45467f46140b88c765339b04ee65e3ef12356fe6d7ef1c80653d2e34af6e03c4503431f775e161ab7edbbfd9316372084e5e69d98443d529c9488e26c40734a636d3cb2f3b7e9bf248d647382937e623f1a7119a8deb731db5e2dbb5cc9d7b60e80f35ada2ee398d3a6c1d1d9c485d4c31c4e3beb69017bc92d9d1eba03994832aa7081bc0d29d97154c20f29d183c589e939f2e62ee71ebcbbf42ecdc9b0342920112b6a50bfa1558ca9b8af99008a8a9be29d121b4cb879ad0f61a21d57698cbda61acf65abd1912e1956226ee646c1e87315939ec9d98db2e49101964e26b28350c7fa529bbcad3c1794c2c52fa63755f09b6e1e2ee4d63050f7197b8d013296b1594a8aa16aafbb3cd4cead348e1c1a9cbdcbc09908e8696a72528ecdf12579e3a9d16afcc7b995398e3f0e6c169363195c454c0d761b20a073c962b29d0dc6dc053a586fe928ca31a759781744ed81844ae0c002b039c32538d35cc293d1fe828123110c07a81e6e0ecabf7075cd890c88c4b67a900464a234dc7043ad678f189c4c47068f16d9cc2ea87211cac5d3c3db3e220eb2463a548d4329093d486ea81c020bb72bffaaf205490011900e3dec6dc911343298a47019dd4d18a8bd71cad38ada40ffe14072790ab40c0a586a3ce452dc15940847ce5c794a6840ff6222c934893226bf8315a0be2f2fb6371cfeeedfe94736af945259bee27ce07827b4fa6dfab66e28ebde09053cf8ec25861aad91cfd1efcb69e60cf8ff3c1b8283301c0b5c1122f7b0733fcfe7f71066d74da3a0fa3abe052de9acf07aa091c13baf1338494f54aea94d494d34f4e10b5cba392de299c971b1cd8eb8c5fcfba94585f58b995c89136383742f318bb3c738ecf00014d9025b7b01b905aafbb58910a873e6dad1227dc062455b1390d8835e1ca0e0799993239fcc387f2bcc85380286c7931000000000000000019b4847c97840fab93d928a2d664edf10c610110188c69cbcba07e95a7659ee5311dbb4fbbdb63c8c561a1d8e6f3c8c940c4ea4d8ebf8e18ca586f8da46e82dfd1fe22a396518f81b97fed2a3b1d36a7e5348e64838594f9f9aacc3494d01f2bf7cf78c5ab4d715aaa3300b384d80265c9675a9db90ea034d91731dd4c0186bdf370df405a8c3aac525aee5dc5174d61e0ea993b79f47f63ca6d7fa2cb2ac622020e7f7b1c4701a248835de588056c4ca462777cca604c3df4d4984ae969c3bfd440906360341b624a234f28de5e5f2fd22b13daae2ce5afcec92a7950910b771c18f18926cedbfe440ec532e343ba80da0ae9f5f5357094052c26d554715a08670aa16bc4d7787a5d81af654e37133e3557d36ca5a9b6206b0d5a0e82c210e4f9693a91d8a5d7d074cce6c9b9f52ca31f0895add87f9fd430b6cf3e9ad17aeae6ed22278b41a2ae03eebb14d679a11372a5850d2456714bf379799d4b8fae37c0e6176c2b6017a73c2234133632a4f0b582a79573e3fb1669a94708da158443266feefe6cfe3b618d1a9cadc213952c420267016deed5cdcfbd521fb8d0f93f5d445b682a67f214d73467c4c76719eef00990fbcbc327ad082a111bc618593bdb67bad926a47c4a5bf18a37abb8f8b6808d69c36520e9dd74799f565cdb5cdea0d89888b4e83b885aaf1c08131f9bb680392b83aae52911f824865a0678160aceebbfb599871399319c4743ae40fdb9d8219ff9ca1c910e42eeb8e79c902b2bfa71ca623ca5ab04b191c50a2a131dbfa051fa4419161285e39ba8eced0fa666b0a83d7677e786396e63efcb0122c437b2396d4b93047320c136e965f24884bbc7f7211c92330205241b1b50013881ba99c1f630f9942be247bbb8db79d517d60d71d16270d7abc0780b812efba3dec50711bd7cbdfa1606bafca8401c44f3672b64a5fd53fd6f8f4dbde88e3dee77df73eba8deeebe60ebbea469fc95e69210be69cf3c483c1ed1e109dd96f4c87e23a2350574e7c6d856628dced7383176ec275fcec450a0cd3c3762d7646ea93c3dc83914127c344c05f6d951e733da419dc5ffb448cbac887194560a0e6072c4bb6c46678a15e6c4086dcae730ac7100d2fa6885002ee67fdb3191179646fcbffd570d4c788e21557acddb0a169e358b3ad891db2013f5155793a8cd8b30a89081709a9d32abe87b8c659439443c5b2a2b4154a531220c7ed0a1719b379d0586ba129b64c6c648546e127e2a9e12121d7a23d453ced5d1659fae2e8472d0a57837dea21faae210abdc7647491cff768dc4b22a3848be5fa919f475117eb9be58660db072ca53c4496308c75a341deb2637c58b58d33e06659d0ef2b89f2e39d7489365ff42204353887b2911b8ab780ca4939033717223286671fe3a91eace5eb8ef8e613cb2256e9cf98a828f3568e89a8124a23f796f49243a5d9e194f4dc832a756fa800cf25a919ca672d027b9aea023261f8d2e923020f9f80292e9a5288160632ceb2017c3f355d1e87371a2db60d6ef950161c9aab029e9e41d3539ec0b73041586063d060e7c1a03d40347b25f6c304f37babf81ad29acd7e7843a15024de14d6f4eb41ac1bf595938c8c831802bddfda06c714c05ffd88954b230d1bdcc1e186ce5e856483b571b7181770c29df1b1997916949194066134a3ec3ad3ffe2075cc4c327f6a50dedb03c63e791f5d2ecc04fe56c96d7e24175c6d9fa6c0f9bbbc51686ae9ad58c7ce31744610e4ba65c86f19cb03cb93fc570d5b8a3e14b5500df16c8929e263193f57d6dd358a1d958bb43a21b5bb59e218bf7eac475c852a0291fdda5a07c8a35a34ffe25d869c769242bc2ac43b9a7a3c6699a5dc51d5289a075406e893adc7cf3bc460914fe02f287c8bed53fb562c36561caee0a49aeb021235aecfa1897bd118f876d7b10b274ce0328eae9b6586296347c8021ea5d3bb651d7fc7ef7810dd8358850c0f6bd2e17b56cd904c52d6f09f3488c6888e78558cc2c1ec1ae10aee278a3d6aa94ea83e2c62fb3fe9f109e34b1911f87cc37d4ec57f0df5aeae79aa4fa669efef94a35298d9cb0221dceb1579094df98bbbc2f5934c52c4dceca9c3296e8a19ca944c8a9222cd0a98dcdc399fd7ed7eee87d90faa80c5a87a13dd195683e94ff03eed98cc5015a31e587497f9152e43423b8f60df798384be82b41736aba5e40ce8ddfd4197637769fa8143886dd72af1ec9bb9b2860fb23f64ac33e8dfa5496fe2099a0d2a7d6c5991e858b909221981dd426bdaa2f98a4d85d8bc6bbe054861c83c2a7c817ed30aff28942165c0a97e0705a759d38c204b41d757501cf5692645c561e9f74e9fc0e77aa2c72880066d7397be02931ac1e51e3a4a624110e89d782479b7566d711504c62724617648ddae642e45696909bc03f4dee792cb7065ad13b4098400bb1f5b85602f8abb6c3cd0e113a04df48cc27b3524de423bcd2468b96262059958c3b576fd755a3f47e6e8adb9707b781545eff74eba17e3165e0aa070a113c9dfe8e02628581a31284d10b4bae5fed080f3fc34785e388e4ea17107945e3542f103e2991084d55165ddc8a42e66ab8011d030c9b2b8ce7dbbe556b40bd37e8adb463cbcb98f721dbafec0effa06975360cf73d1402f973fad361769f7a6fc58b4e4309e973b180662ce8bcbcd2856dc869cad595c9403c34745f59a48648397c8bac67e3df1f5f9463f4ee0cdb6f0e0e14d88b7b56627bad0e79c9b1449efe71517125591671122b482887b36af65250efb90d6de209b38285305fb4460d418046e422c5726b095ea16396878d2884bf0342f3909b9b497cad70fb25d6a6edd41df986bd4586608c45c9dbe452424f1b339cea49d88b2c4e9968e27da1b6bbb62074fd24368cc0f60dadb5965efaf09788d618a76cec20920bcf1634c93b101f15cdf12ad81ab311a0963679be0b1fa1fddada5c37e0fee1cf92952375133b518edac696889a54c6c42bf655f8b982704ee2356133d78c20ef8ec58bc4b1b3b71b8440aca555ddb82e8c6774970298116369847d443e0fc134aab890c658bce45801df1e1ca6b2eb433e0af4ccf7436d700", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x1000000000000, {{0x3, 0x0, 0x7caef2bd5608ec51, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r8, 0x5, &(0x7f0000000200)={0x1}) shutdown(r4, 0x1) connect$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) 9.038424705s ago: executing program 2 (id=1390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x9, 0x9, 0x1, 0x100000001, 0x1000001, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x2, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, 0x5bb], 0xdddd1000, 0x4d340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_RUN(r2, 0xae80, 0x2800) 8.496979451s ago: executing program 2 (id=1391): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) clock_adjtime(0x0, 0x0) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r5 = mq_open(&(0x7f0000000000)='eth0\x00', 0x80, 0x0, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) r7 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x41c3, 0x800, 0x2, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x3, 0x0, 0x0, 0x13, 0x1}) io_uring_enter(r7, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r4, &(0x7f0000002880)=ANY=[@ANYBLOB="00030800ed0619000c0047510fa2006600000d2f90787f000001e000000186060000000300000421880b00000001080008000c0086dd080088be00000002142845080100000000000002080022eb000000012705690102000000000000020002990808006558000000036c281ca6af69b2c81e673b56732f8e1fce0dc4013df1cc589d0e1600b756cc38adabb1441bbf31392bf902003f143613f4f718d181bc5b730b10b7ed60e5aa8e74442f36b9f2af2cf28520cdf06c0fb80a701816a774d281e6dbc3ddb3fbe032fda9784231ae7d4c2db388a8960a7fa4580c9970cfd851244a356410458a5cb4fcbaf163b7a2f527597dbe71c15abe3d6c757ea8ba5b22f7a4629df8e438511fe1690a8117970c1ea61442fbb3bfe5c348138093bc2a53daeba108c57d98fc236d6d97f2fb149378f154de945eba6d9a8ac1887bef8fe22de3ddf5e8f07f86ea1918ee63338bbe357ee7edb2a953721232018b67fc9d5a2580dc7a4c8aa2268a5d490be84712fbf93dfffb498e5752d873438a4a5eb8bcbf8b724ecf09899b59b9c726d9772b337a7c6f50c969e5a78aa1939b7805d0a6e57ed474d7ff9e2a151538d0cae4b3ab638ed29f57060fa1ce535d297321748e915356689f377fd86b63837f12c2110b8697de321da59219d15653ab3b40c5c61123d367de347e30fffa61a2aeb311a21da82579cbe483479e53692519d0e87eedb9d1ab2d02366316383ecc2efd9057f97ecf1748961a2a9a0555276b241458c8a966aaf976684c31a2ae59a3fc6eeea6ef4f40938491f9fd2e3b3190d1b3ccf9e1222b23a1a00737a3bcfa930c6c3652fe8d9d2d2d84ead8b99c53d20ab5673b4608adf6898b0273b202c2b06324f687b602bb98c93a563187cb7b9eeb7f4d18d7ddcf803c6d592983dcbeeab893f809829d1368c456ec796b82086248d2341041f05bbc14af84378f75caaef5b439ab90054f7540a22ebd0043515da40a8b6da103b469c4442d0df76f03d9dcd43cadf88eacdbcec59ea7792884bc038f69a995aedfe97372cac67c0898c6fa71fff10a26d3a6f36b9224f61332246a0f84ae2d5f13d9b18e11bbe2829fde0c7f157073da9e9c9912ef6e87505474a3d0123ed542acca43764c27437d975819a161857b320f4003f60da53e3c1e287b4d9238dc5460861ee145f5b71f9fe832c6da25779f94ec7e5fdd74ac2265b4ef2e64dab59b8682667ea4cb42c41e6a6af9ff0e4f890361b56f4e4a8632967edab7fee129bec73830c55ec49e1ebd76b37ef83e6cb5712d3baa08e3ea0b58ae799ac0dce7778504e74b4106915ae53ced0607b2f82fa3051086c2b7381bdcc74b4fd9b9870b51da18672d8c070c2b996f9f04c86c9c4d43c0171da15182ba62919993c81f465eb5646a1e576e9f02fbe83609e518e57849ce1bfc6c5918819e96a1567dc67ffdd3451e80a75dc7dd17d716721380ccb619e8525d65190cf5c0539b1069c6db79d51b717d53f206631685af56a91d075f525d5c48a37befb9d71edfb38459e21143bf33f50806e1ead2391d6b3b5d551f4409667f995fdd3970d0b0b493f723cd9623e17516b2795062454628e3a9cce41c9c9118a921692f437fc2df7c75f9827aca01a1f1f8e0d692ecc85dee316a524cca2ac38c00cfae8e297f78d96197d912cd43e2aba0e49e641aafedbe6985a5b288d224fba3e52cf0f155414ebaa5252d9012f975b9facb40eb41d78fbb42a31a156e98b45782aa1718bdb7dba63b1d89b01940a07d0f6c72f589a3166533ae230c51e38ada77024acd1d474ad574a28cf953528ce124c67652cf4ce78315f53d7674dc81eaae2482226383141634357b5d166055d51de5d2958f4808f873b7489aba19f67b76c366a5ee58eb58fdf0d2c42723c5ac14b5b3491dd0beab2d8904af5158ec1c380555e1becc989a712fd1d31b22621cfebb46efe520276e95c066a91250fd6707eef3325785fd2556972793e9b95c27b8c248e5e1485aae843a8571d7a6df2d170851df7e00394291f1712e10287aab9fb7e05504a5f079f6845771abb88fcd05998d927f8aa25af0070c312c9d66bfc1509607c46391d8be07da9ddf5d80a84f78a5f7ea23014e837bd4e0733336d215f95e9610fb239118695934b8fd2babd6bee50db5658a8eea37966e4d5775e4c0b3f051d5d03f79797ab212bc0b8aa8beeb12c52c89d3f3d5f00da4a300e48d16479321262cf0b06377f6927ab7b2d78f7f776b2857684f56281cb2b91287967e72ab9daed371d1d046bfedc1937cde2db24c559f9b963da800ce232ff8b6b3fa50dc6b54d14c65518a182431803b6f12bf0ee2004fe703e86adcd826654203ca1d74a28901a20484a8f484dc8d354be090e0289866a13dbfc8f9b967e0acc018e9426f4aba5e8f62d6fbd7aea97f57e510889109989c13468ca739e7c16b081e68ded4ba62336e3f0da49e4ad6bed0ee05cf59e641d98a5a39d2dc3ed155607ee1656d54d8546ca1d046fea4ff330581a422de0ee95dbb6a2a369d16639d0f4a3ad995fa74cf10339dc0689348fa5a11b0a44592248ae59fa60bc50c31c48573fed7539dbc451697f0057c3d585866382d6050d802d22cceec270fd31b35c1430275000f3ebd9bfe7a346d9643ecff99c940c9e4f9a9e6745c4012404e74a1a4a3041ca2871fac33e6774300b1e264d77c7240ef68e7819acde82e8487555955e4549e2a09475aba300596f11de1b9c731c363fb7559a0f4576c1ba7a239490194d9fef85711cfc6c4784a1253fce5c66dcb013be354cfbe33aa16fa11c57d132b006db1310632d4ad36ba89e42872f7119a3559b8878a0566a18d57a7fd779236eab1a240f05dc4e0aaa9821efe6d69d0c1e46e8e1be55d12fe561e1eabd2bd62f92784ff62543fc19ce255a531a2a9d8cd581f9dcfbf1840cfec06f907bcaaa8b869a924fc49ec7943eb228cda14fe18f6c2779e0ac8926bd179af732b6d6097c4704cfc93eb952721e00cfec60b80290f2b669acca7d395e982c50b28acb2891a169924732361266ffc1dcbf6328cb66930a5767af49d408b1b43e43ff9ac6b9d996cdf194af8905f63e5375ee5d8cc507cf693589e82d6e3bea879b4602c72ce72376d4729e6b3452eaf238066fb4de979998f95bad095e8a743c806f636a2d920d28848a65ad658db973680d83c220d00bd9934ee9cb0855c1fcce8f3906bb42437fcbc0c32faea7d1b8cf3dd08735e8317447eb026be9a128a2fdf1756ac400c9ecc1d7dbc58eaad009d7691e345f302bf2013a9e0e7fb84a3c0ae4f0a87ac88ba530b0fcdbcde19c2c5c9f6c27a029eab82ae5783be5682bc78ed58f663864b9bcb0aac99d8697579e279ac118275d35aaab7fe16ccc53744aa0e114659bf0aa035aa004593fd7ccac065395d57cfad3a240912ca6cec7c2de2506931640a07eceb8d11e4a3bdc8739b4b77270dbc769b3f0ce83720a0337e1bf9a2e84ecd60bbb32f5618b7447a0295784d296d3bb36be053bb8627c6857c24c4240aff6a8c00b83cc8a147d8e859262dde72a8e3c889ba09e2734304dd62ed8fd5bc90c0380904f4ef1fa147777a0186af2453ceb099909cb1639f16921f54d5f472e27157db291344759e08ad658615a58422ad7ceff39cdcb1666fe5bec61b8abce3b2a534c553e75616a18479cc32a560a5bd064042dd11756e4a36c1c03c5c2cad2ba4df9be073382e68d9a0bbe55729b847f5d9b6b168bf972f889425b5360e0aaaf9d2bdfef7c0b3ae1adc754cb8e914b1dea770f5c24114800476d27c10e115c178d1376df58c0e570f0908f64e82272682a5f7b41f7cb51c6d3c9e09ab0eeb7d09722f2aa2105801ad32452679ccf87933fa885b02eb023909852a422bd74483d5d7de04b4e2f623e450725751db743010027bacda092c621ccd981fda4a0f4150a8a2040273d3a7ea14c1d368a20d0db6cc62a276c50360f0f12f61b322f2c5051de1b98365a8cdc5b5a0bbd1425b5b0be770e3e3da5d464c766c7c4c485d4280043799f7b20942061b3f9e57accae3703e68b4ef98dc73c15152bfc21115caf402fd4e100b60ec65c3b49e44cf8b3043e85e4c0631d240f2097fd23c0469c4e5c1f7346dc0aa4530250ab6987b020d691ae566dfdebb3752db8ac45740959c6c31b37fc37e202e43c93fc83e8ae3b46cfb808ff1b4e2901487f661edb20973c24db0a34df8e62a9550b54b1a2e84bed8b4292d416ed590455741566dd28b021a69a489a096e97e04c9eb639f83a6f2bef9e0f1ce21ce7251c6a1dc88b5e67b1cfb8f8c917dc6f5d5b8181046e70786dd8fb48b3c23140625050d64bbb66f6dc86afbb9bb2e0a7d62856a7d8a205ea631e6709c40aa2c2e4ae97ac4c5d1ace85cc42438842ab3469f72a34aeef42b26cb3a0d1a0d3ab7e7a4f4aa155be86d03ed743258d391df54eec2d802e316dfc564859eafb1b021f20cba99a9102641e30c6cfca2c1a43a7fa5791f25575eb1e5b4d85ed3e5d42f8f03f64095737b2ea7422f6dcdbcf68040a11e0e3025fdfd9bddae0fc4f531c956ef03059cf5ebb6889408dbf4c71f1dbb31cf6d4e8aa5f9fe4d78ff1963e5286ebeba05eb5a25d87d9095b321eef41cf06cbaa4f93f81846aaa8a5e67cab517eef4d646fb45b5441ec4f666d67edc79dd7b59bdef5fb0dc682114afaf094699333174c1c31e316510f80cba569b9524c1396b2c8630b32fa26751c5fea5bd6713028cc89554cfa3337d10ea257e36cd107fbd41cca03901bcead871fe41b18dcf1338927e95fe367bce6e3e108ee0e1a1fb66c712b769f524cf4f16a91ed7f1cf451e238b24d6dce5e2453f22145a7ee7a8ac756aec6c824ccb7c50df7d1eeb87f511f56b6db5a131eaeb725585ef1636aa439498423d5f9ee6aae35d65996a4191f3ded1413bc7f605430920d0551e2e1aa4a24a6c811cf971f254e1269a5f10c4b1a2a952f469dec044ac6dd90d2a5893c9719e675c33419876fb92ffa92b6fcbf77ffb39d51df19c5d0921e6ebe35bb7349f8486296ab0194485578b606d8d6572baaba169249eb6d2b8fca8f0712f83e7c0dcf1a2f03dc5223afbc5702569197ac19959bcb6490c0cda65948f3b6bddedf06718fac1622c5e02b8464da91fd7209ac98187b41eb87a65027b08a763882b48d9659c84140b83f97b33a2e707a708ca82c927d6be8eca09d1d828545454af9baeab837c0dcb53e17fcc4089c8d122713a3b9954df11efb5d50a31648af9995ce46099db6d6bf7067f8f3dd6bb2b5558f080af414d121803b7ee44ed59046af5c1e721002b783d8aafd0f2482be8b34db271ad6528666d951586601a0589e3d6f90804da1db71e179241099d2e4ed45fe41a950475710643b8897fe9cd8dda28a4f93771fba0ab22fe53af42d35fbdd094703cb1ffb9f5394c77a81c9e5cd2c045509b677117b6eb1be2d15e2fea89d31b01ca2080d3784328f0e2609124bd73011ade2660d46a73a51bac7d2f4223e9351d5d19855893348095bf2b24789410f97a5ef0d632672a6e49153cd8d849ef660acbad7d20c6da951057642072d38ffb36f8c93e0f53c8ae8f3f3c57e01c45f07d4fb7fa1eb67860b69a51088612ee12743d563eb782eef787970178c28b18f1e396"], 0xfac) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000340)={0x15, 0xf3, &(0x7f0000000500)="0047950454cc1e8e38298b6a13a0b559fa006e4097518213ab8e64eb4234b7d0715b6b98aa1f8433a7a2dff738ddd51568bbfa660bb284dd6be694983b49b1948f8ac81fdc6a25913c22b61ec54958c7e0584d4b9a083fc58c9fd511ad6460e1c0b8da6697b4f8a44b031ce474afb233a424abbf3a4e3692d74a4bb2dfa494b47ac2505923d429feeeca00950025a807ab4a92e4b56cde4b2af094d4781c9baf133ccfe71006e206ebe4286fe0a04f4cdf73bb62fd1ef2cf211feb6964a65e62d8846d2db989f9cf1326ee963a19186457684333a88e052f2a557907b71322b48de55b2e28093f1e2196a1eb3e41abbf5d3127"}) socket$netlink(0x10, 0x3, 0xe) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) syz_open_dev$video(0x0, 0x8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) 7.839616198s ago: executing program 1 (id=1392): socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) gettid() recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000000840)=""/241, 0xf1}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.815860052s ago: executing program 4 (id=1393): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20104, 0x52895}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x44000000) 7.620990096s ago: executing program 4 (id=1394): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x14000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x4, 0x10001, 0x9, 0x4, 0x4, 0x7, 0x100000001, 0xf7fffffffffffff9}, 0x0, &(0x7f00000000c0)={0x8, 0x3, 0x5, 0x7f, 0xb, 0x6, 0x1feffffffffffe, 0x8}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000a40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r8, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r9 = openat$btrfs_control(0xffffff9c, &(0x7f0000000200), 0x420400, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4040004) readv(r5, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x8, 0x1, {0xffffffffffffffff}, {0xee01}, 0xd, 0xfffffffc}) ptrace$setregset(0x4205, r10, 0x4, &(0x7f0000000140)={0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 7.300252151s ago: executing program 0 (id=1395): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendto(r0, &(0x7f00000000c0)="add97b14194e457e4571b7eb3d33849276093ada46a742cf8147fb09140ab5d44c38ceb8332fbd6ac9f6a1105f864c6d5230f93a977c5cfab14b22bc25b1bbf4b1be694ec1b77ef79aff4bc197be0875e767719244b0c5c84d0a5d8da34e5ddd481cdb3a4a3f6184f7f1ee8fc20f005e", 0x70, 0x840, &(0x7f0000000200)=@llc={0x1a, 0x321, 0x3, 0xaa, 0x0, 0x1, @remote}, 0x80) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x80108907, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_attach_bpf(r3, 0x1, 0xe, &(0x7f0000000100), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0xea5bc50b6199d77e) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xfffffffffffffed3, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x20000001) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback, 0xffffffffffffffff, 0x0, 0x2000}, 0x20) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x5, 0x8d8342) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) 6.88507561s ago: executing program 2 (id=1397): ioctl(0xffffffffffffffff, 0xbffff000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) fdatasync(r6) syz_usb_disconnect(r5) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004) 6.821427671s ago: executing program 1 (id=1398): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x100, 0x80) getdents(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(r4, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) r7 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) 5.805410761s ago: executing program 4 (id=1399): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x4}, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) r1 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffb]}, 0x8) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(r3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2004c054, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) 5.521074428s ago: executing program 0 (id=1400): sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) 4.976805378s ago: executing program 0 (id=1401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x5a, &(0x7f0000001640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffd, 0x0, 0x0, {[@timestamp={0x8, 0xfffffffffffffd6f, 0x6, 0x40}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x0, {0xff}}, 0x14}}, 0x0) 4.948840798s ago: executing program 4 (id=1402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x798, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x768, 0x2, [@TCA_FLOW_POLICE={0x438, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x50de}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x9, 0x7458, 0x5, 0x8, 0x1a0, 0x6, 0x4, 0x6, 0xfffffffc, 0x4, 0x8, 0x726b, 0x4, 0x1c, 0x7f8bf027, 0x6, 0x1, 0x5, 0xffffffff, 0x9, 0x0, 0x8, 0x2, 0x1, 0xe, 0xff, 0x8, 0x3, 0x445, 0x0, 0x7, 0x471, 0x7, 0xce5, 0x401, 0xb, 0x0, 0x2, 0x6, 0x2, 0x200, 0x1000, 0x5, 0x1ff, 0xd, 0x8, 0x9, 0x6, 0x1, 0x4, 0xd23c, 0x8, 0x6, 0x9127, 0x80, 0x9, 0xed, 0xfffffff7, 0xa49, 0x9, 0x8, 0x80000001, 0x3ff, 0x4, 0x0, 0x100, 0x9, 0x80000000, 0x9, 0x8, 0x4, 0x5, 0x7, 0x8, 0x0, 0x6, 0x9, 0x9, 0x7c09, 0x1, 0x1f2f, 0xfa, 0x80, 0xfffffffc, 0xfff, 0x0, 0x4c6, 0x3, 0xc, 0x6, 0x4, 0x9, 0x1ff, 0x3, 0x3, 0x1, 0x1c00, 0xc, 0x7fffffff, 0x4, 0x2, 0x4, 0x1, 0xffffd64a, 0x9, 0x5, 0x6539baee, 0x8, 0x2800000, 0x8, 0x12000, 0x1, 0x5, 0x80000000, 0x0, 0xfff, 0xcb, 0x101, 0x621a, 0x2, 0x2, 0xfffffffa, 0x8, 0x100, 0x0, 0x615, 0x3d41, 0x2, 0xa, 0x6, 0x9, 0xd837, 0x1, 0xfffffffc, 0x5, 0xf6bc, 0x9, 0xf9d, 0x5, 0x4, 0x3, 0x40, 0x3ff, 0x8, 0x905, 0x40, 0x200, 0x6, 0x4, 0x2, 0x8, 0x0, 0xe0000, 0x6, 0x0, 0x5, 0x8, 0x6, 0x7fffffff, 0x8000, 0x81, 0x40007, 0x8001, 0x0, 0xb, 0xffff, 0x8000, 0xfff, 0x81, 0x93, 0x6, 0x401, 0x1, 0x8, 0x2, 0x7, 0x8, 0x0, 0xcb, 0x1, 0x5, 0x1f, 0x2000000, 0x80000001, 0x3, 0x5, 0x8, 0xffffc2cb, 0x2, 0xfffffff6, 0x7, 0x5a21, 0xfffffff8, 0x5ddc, 0xa65, 0x94, 0x5, 0x80000000, 0xb, 0x5, 0x7, 0x7, 0x403, 0x1, 0xc39f, 0x10000, 0xfffffff9, 0x4, 0x4, 0x9, 0x3, 0x8, 0x1000, 0x4, 0x6, 0x9, 0x1, 0x6, 0x2, 0xdb85, 0x3, 0x2, 0x8, 0x2, 0x2, 0x3, 0x400, 0x7f, 0x80, 0x1, 0x3, 0x1, 0x8, 0x5, 0x1, 0x2, 0x4743, 0x8, 0xfd1, 0x2, 0x9, 0x4, 0x80000000, 0x0, 0x10001, 0xf6, 0x0, 0x5, 0x7f, 0x8, 0x3, 0x4, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_EMATCHES={0x304, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x1b9}, {0x2, 0x6, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xa44}, {0x7, 0x1000, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x121a}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_META={0x10, 0x3, 0x0, 0x0, {{0x3}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x7a6}, {0x5e, 0x4, 0x0, "74cd07c1"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x7f}, {0x1, 0x6, 0x8, 0x1, 0x6, 0x0, 0x8a0f2d46ac3f03b5}}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0xd, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="798d28", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="a1e4887a44fcf1c3677a", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="414fef"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9, 0x2}, {0x6, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xbb, 0x1}, {0x5, 0xb, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf000}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xd}, {0x0, 0x4, 0x2, "06045970"}}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x2, 0x8, 0x6}, {0x3, 0x0, 0x3}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf5}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5}, {0x5c, 0x6, 0x1, "28b47bd3dffe"}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x40, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6}, {0x4, 0x0, 0x5}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="68d90772", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="376c0711cb6d8c8d440f", @TCF_META_TYPE_VAR="a8e3ba628106b2dfe384"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xeab2}, {{0x4, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0xb3e8}, {0x4, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x15c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x158, 0x1, 0x0, 0x0, {{0xfffd, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4b, 0x5, "661f0d8b84f39beab84aaea62d60216c0f9a330cc17bae8c73ea8ebb272b0d11e6ab39add2ca4f348f1741f006ac74efeab04541c29a2e39968f4e306dd4fb58dd0533c7bd5120"}, @TCA_EM_IPT_MATCH_DATA={0xc9, 0x5, "691ecb6b3e31471ded75bffd427349b71c8d3d9e8463ef3c9db879ade7c677bfb053882f91c93f14189eeeb2f9b689fe33c2cb71fde080d9f64d9a0ddeb0fd23567d570bae6e0c1601c1424b0a6f39ecb873c8418f2ade27910ad7902512bb26877561965cf4ad4bec09c271e5a384a5c1b2dd10d3cebcadcec948a36c95be607e7f365f1b7c833a7960a75a6db1c36ef891780e8105936f1ec6156179d83d2e180a71688fb23901200f3b230cf813482175e0933514cff245aedfa91918507924a359d90e"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}]}}]}, 0x798}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.63858947s ago: executing program 0 (id=1403): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x1000, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0xfc, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) 3.608085173s ago: executing program 3 (id=1405): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x300, 0x1, 0x0, 0x4000007fffffff}) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000040)=0x64d) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) 3.457010642s ago: executing program 3 (id=1406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000000140)=""/158) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.392920471s ago: executing program 0 (id=1407): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x44020) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x27}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x5, 0x9, 0x400, 0x7, 0x80020100}) 3.328983341s ago: executing program 1 (id=1408): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) open$dir(0x0, 0x400000, 0x100) socket$inet(0x2b, 0x1, 0x7fffffe) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="e6", 0x1, 0x8800, &(0x7f0000000100)={0x2, 0x4e24}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.025190257s ago: executing program 4 (id=1409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601080000000000000000080c0007800800064000807a303408b49cda3800000311000300686173683a69702c706f7274000000000900020073797a3100000000050005000200000005000400000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x300, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x51) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe4) write$P9_RGETATTR(r7, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0xa0, {0x10, 0x1, 0x1}, 0x201, r8, 0xee01, 0xfffffffffffff1c5, 0x6, 0x0, 0x8, 0xf19a, 0x7, 0x9c5, 0x5, 0x800, 0x0, 0xa, 0x401, 0x2, 0x100000000, 0x3e}}, 0xa0) r9 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@report={0x1e0, 0x20, 0x2, 0x70bd2a, 0x25dfdbff, {0x32, {@in=@broadcast, @in=@remote, 0x4e20, 0x14, 0x4e24, 0x9, 0x0, 0x100, 0x20, 0x2b, r6, r8}}, [@algo_auth_trunc={0x8b, 0x14, {{'xcbc-aes-ce\x00'}, 0x1f8, 0x40, "a1aacbf1998d94a2fd303705d15e4d7ba85744fea546d7406b6d266365a3cbdbf6270eee0c8d0a4d09a081f8b8a53c32b35d196fe57262c63a5ed1acaaf4eb"}}, @etimer_thresh={0x8, 0xc, 0x8}, @lifetime_val={0x24, 0x9, {0x100000001, 0x3, 0xe, 0x1}}, @algo_comp={0xdc, 0x3, {{'lzs\x00'}, 0x4a0, "87d6a36099ef9daaacbb6a3c182fa02b763c836e66b735c241cdf9ae5f9a63c011257927541d89c8bf646ed535ad36bde6f73aa3160cb0ef356e94dedb9a176badc6df26b3502a03e94baa1f4e8eba8ee881c85e4d492522385d95edd46067ca7315681212b8e2784183768c18e9212d7ae0007ddd4336a902a609857ad1f80764c883f1c2aae858d938440389ac7987da3f850f"}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ce1d2e081aeb57e386850100030109022b"], 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.359926314s ago: executing program 3 (id=1410): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x81, 0x5200, 0x1}}, 0x20, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x6, 0x4, 0x400, 0x3, 0x4010031}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000000), 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfff, 0x0) fspick(r2, &(0x7f0000000180)='./file0\x00', 0x1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.302109087s ago: executing program 1 (id=1411): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs_stats\x00') syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="983501f3") socket$inet6(0xa, 0x800000000000002, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) 2.300831852s ago: executing program 2 (id=1412): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000005, &(0x7f0000000600)="01", 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.095694926s ago: executing program 2 (id=1413): unshare(0x2040400) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x2, 0x6, 0xfffa}, 0x31, [0x8000, 0xc95a, 0xe, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x0, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xf, 0x89d7, 0x10000008, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x5, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x1000000a, 0xf0000000, 0x8000012f, 0xfffffff9, 0x5, 0x6, 0x129432e6, 0xc6, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x2003, 0x0, 0x0, 0x5, 0x7f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x8, 0x7ff, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x800, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x2, 0x9, 0x5, 0x3, 0x8, 0x1, 0x2, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0xa, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac9, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x80009, 0x2, 0x57, 0x7, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x0, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffd, 0x80000003, 0x6, 0x4, 0xcc, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.055832553s ago: executing program 3 (id=1414): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb888defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63ddb2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede5f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0fdeed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d803be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4a96b47d4c8e3124f53bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589a05484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x101, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, 0x0, 0x2000, '\x00', 0x9, 0xffffffffffff8001, 0xb4e7, 0x3, {0x8003, 0x8}, {0x4000000000006, 0x5}, {0x0, 0x9}, {0x200000008, 0xa00}, 0x8000, 0xa, 0x0, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/81, 0x51}], 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = userfaultfd(0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0xad80) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000180)={0x0, 0x0, 0x1}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r5, &(0x7f0000000640)=[{&(0x7f0000002480)=""/4082, 0x48}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003"], 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 1.837568165s ago: executing program 1 (id=1415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffe0, 0xb}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = memfd_secret(0x0) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x6c, 0x464, 0x400, 0x70bd2a, 0x25dfdbfb, "69a6d3826a7a13233b926897f33cf28da430d49324c8aaea4a562ddaf9aa988a0c7109d6efe9186cd32fbd863719710b13322b69f644f30a46036bc5a8a857f2eeeb4fbeb23fc04ebd69448caa4e6975f5692016e466b472092e7aca", ["", "", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x40800) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) recvmmsg(r2, &(0x7f0000000b80), 0x0, 0x10060, 0x0) fcntl$dupfd(r3, 0x0, r3) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x709d27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42f55, 0x443a2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x20040040) 1.660928862s ago: executing program 1 (id=1416): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = gettid() ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000002c0)={0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r7, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xf5c, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xd}, {0x0, 0xc}}, [@algo_aead={0xd69, 0x12, {{'morus640-sse2\x00'}, 0x68e8, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0xc}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa}}]}, 0xf5c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.314201129s ago: executing program 3 (id=1417): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x214400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8080, 0x0, 0x2, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@reiserfs_5={0x14, 0x5, {0x0, 0x10000, 0x4, 0x7}}, &(0x7f0000002300), 0x600) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1.239672488s ago: executing program 3 (id=1418): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x100, 0x80) getdents(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(r4, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) r7 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) 113.027415ms ago: executing program 2 (id=1419): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000370429bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="890c0400000000002c0012800900010069"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket(0x2a, 0x2, 0x0) prctl$PR_MCE_KILL_GET(0x22) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x3}, 0x8000, 0x40, 0x252, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x0, 0x40, 0x6, 0x41}}) chdir(&(0x7f0000000540)='./cgroup\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x1}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={@dev={0xfe, 0x80, '\x00', 0x15}, @multicast2, 0x2, 0xd}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x242a03, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x10}) socket$kcm(0x2, 0xa, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="d92b93929dccfba7af58a930f942199dadfe8894122f0ab7783907487dd5f9553129b225b60c3677bad807b80a0ae8e3ca681f8c3068d9f89343f7c739629a58370a07ae9f707fb7845103b4ff1750504861cd92e74dc1d6e6d459263648eb29c3b793d81f748e8037f6285b7a8c5454379a0e0396d344f5f68623d56e2bd20db2141e7235998b3ef539779e4d15e18dbd97a4029bcae74df7f3a1f4b426b47869d0", 0xa2}, {&(0x7f0000000440)="5fcb3bfbf750996eb0bbd079fbb9db753f072d72c11788a7a8c6221bae24d46ece3069530c0f1c", 0x27}], 0x2, &(0x7f0000000440)=ANY=[], 0x48}, 0x20000000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1/file2\x00', 0x10080, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file2\x00', 0x2) inotify_init1(0x0) 0s ago: executing program 0 (id=1420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@rnullb, r3, &(0x7f0000000240)={0xe, 0x7, 0x2, 0x4, 0x3, 0x8, 0x7, 0x5, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a01010000000000000000000000061400000011"], 0x6c}}, 0x880) kernel console output (not intermixed with test programs): [ 368.573047][ T5961] usb 5-1: USB disconnect, device number 36 [ 368.778329][ T5961] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 368.901193][ T5946] usb 2-1: USB disconnect, device number 43 [ 368.904169][T10138] FAULT_INJECTION: forcing a failure. [ 368.904169][T10138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.923441][T10138] CPU: 1 UID: 0 PID: 10138 Comm: syz.0.1092 Not tainted syzkaller #0 PREEMPT(full) [ 368.923468][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.923484][T10138] Call Trace: [ 368.923492][T10138] [ 368.923500][T10138] dump_stack_lvl+0x189/0x250 [ 368.923528][T10138] ? __pfx____ratelimit+0x10/0x10 [ 368.923556][T10138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.923580][T10138] ? __pfx__printk+0x10/0x10 [ 368.923620][T10138] should_fail_ex+0x414/0x560 [ 368.923651][T10138] _copy_to_user+0x31/0xb0 [ 368.923677][T10138] simple_read_from_buffer+0xe1/0x170 [ 368.923709][T10138] proc_fail_nth_read+0x1b3/0x220 [ 368.923736][T10138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.923763][T10138] ? rw_verify_area+0x2a6/0x4d0 [ 368.923785][T10138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.923809][T10138] vfs_read+0x200/0xa30 [ 368.923839][T10138] ? seq_lseek+0x1c4/0x260 [ 368.923864][T10138] ? __pfx_vfs_read+0x10/0x10 [ 368.923891][T10138] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 368.923928][T10138] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 368.923967][T10138] ksys_read+0x145/0x250 [ 368.923996][T10138] ? __pfx_ksys_read+0x10/0x10 [ 368.924032][T10138] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.924063][T10138] __do_fast_syscall_32+0xb6/0x2b0 [ 368.924094][T10138] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.924127][T10138] do_fast_syscall_32+0x34/0x80 [ 368.924156][T10138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.924185][T10138] RIP: 0023:0xf702e539 [ 368.924202][T10138] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 368.924223][T10138] RSP: 002b:00000000f541e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 368.924245][T10138] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541e620 [ 368.924260][T10138] RDX: 000000000000000f RSI: 00000000f7394ff4 RDI: 0000000000000000 [ 368.924273][T10138] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 368.924286][T10138] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 368.924298][T10138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.924325][T10138] [ 369.563910][T10152] netlink: 'syz.1.1095': attribute type 32 has an invalid length. [ 369.609652][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 369.638258][T10152] netlink: 'syz.1.1095': attribute type 32 has an invalid length. [ 369.935586][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 369.935605][ T30] audit: type=1326 audit(1755971739.203:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 370.675249][ T30] audit: type=1326 audit(1755971739.243:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 370.742828][T10168] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1097'. [ 370.751870][ T30] audit: type=1326 audit(1755971739.243:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 370.847040][ T5961] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 370.887330][ T30] audit: type=1326 audit(1755971739.253:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 370.987092][ T30] audit: type=1326 audit(1755971739.253:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 371.046109][ T30] audit: type=1326 audit(1755971739.253:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 371.107074][ T5961] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 371.116097][ T5961] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 371.219972][ T5961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 371.237143][ T30] audit: type=1326 audit(1755971739.253:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 371.285590][ T5961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 371.949478][ T5961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 371.953886][ T30] audit: type=1326 audit(1755971739.253:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 372.298500][ T5961] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.340547][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.349009][ T30] audit: type=1326 audit(1755971739.253:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 372.367024][ T5961] usb 1-1: Product: syz [ 372.415935][ T5961] usb 1-1: Manufacturer: syz [ 372.522283][ T30] audit: type=1326 audit(1755971739.253:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10167 comm="syz.4.1097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 372.544388][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.575771][ T5961] usb 1-1: can't set config #1, error -71 [ 372.705882][ T5961] usb 1-1: USB disconnect, device number 22 [ 373.107583][ T5961] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 373.297946][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 373.306887][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.318684][ T5961] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 373.334743][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.393737][ T5961] usb 1-1: config 0 descriptor?? [ 373.710315][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 373.990065][ T5946] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 374.451302][ T5946] usb 5-1: config 0 has no interfaces? [ 374.463242][ T5946] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 374.473053][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.493762][ T5946] usb 5-1: Product: syz [ 374.498919][ T5946] usb 5-1: Manufacturer: syz [ 374.503499][ T5946] usb 5-1: SerialNumber: syz [ 374.549802][ T5946] usb 5-1: config 0 descriptor?? [ 374.978723][T10246] capability: warning: `syz.4.1108' uses 32-bit capabilities (legacy support in use) [ 375.016793][T10262] netlink: 'syz.3.1111': attribute type 32 has an invalid length. [ 375.040092][T10258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 375.058008][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 375.081695][T10262] netlink: 'syz.3.1111': attribute type 32 has an invalid length. [ 375.444848][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.487495][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.677480][ T5918] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 375.713515][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.724248][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.827287][ T5946] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 375.864850][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 375.875376][ T5918] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.886416][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.907180][ T5918] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.932815][ T5918] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 375.981997][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.997137][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.002127][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 376.023059][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.034347][ T5946] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 376.044726][ T5961] usb 1-1: USB disconnect, device number 23 [ 376.069912][ T5946] usb 3-1: config 0 has no interface number 0 [ 376.089156][ T5918] hub 2-1:1.0: bad descriptor, ignoring hub [ 376.099482][ T5946] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=d0.68 [ 376.130314][ T5918] hub 2-1:1.0: probe with driver hub failed with error -5 [ 376.150106][ T5918] cdc_wdm 2-1:1.0: skipping garbage [ 376.156908][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.165982][T10288] FAULT_INJECTION: forcing a failure. [ 376.165982][T10288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.175339][ T5918] cdc_wdm 2-1:1.0: skipping garbage [ 376.192273][ T5918] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 376.208304][ T5946] usb 3-1: Product: syz [ 376.232355][ T5946] usb 3-1: Manufacturer: syz [ 376.247096][T10288] CPU: 0 UID: 0 PID: 10288 Comm: syz.3.1117 Not tainted syzkaller #0 PREEMPT(full) [ 376.247133][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.247144][T10288] Call Trace: [ 376.247151][T10288] [ 376.247158][T10288] dump_stack_lvl+0x189/0x250 [ 376.247185][T10288] ? __pfx____ratelimit+0x10/0x10 [ 376.247210][T10288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.247228][T10288] ? __pfx__printk+0x10/0x10 [ 376.247256][T10288] should_fail_ex+0x414/0x560 [ 376.247286][T10288] _copy_to_user+0x31/0xb0 [ 376.247311][T10288] simple_read_from_buffer+0xe1/0x170 [ 376.247343][T10288] proc_fail_nth_read+0x1b3/0x220 [ 376.247366][T10288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.247389][T10288] ? rw_verify_area+0x2a6/0x4d0 [ 376.247411][T10288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.247431][T10288] vfs_read+0x200/0xa30 [ 376.247459][T10288] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 376.247482][T10288] ? __pfx_vfs_read+0x10/0x10 [ 376.247513][T10288] ? do_compat_pselect+0x27e/0x2d0 [ 376.247558][T10288] ksys_read+0x145/0x250 [ 376.247586][T10288] ? __pfx_ksys_read+0x10/0x10 [ 376.247614][T10288] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.247645][T10288] __do_fast_syscall_32+0xb6/0x2b0 [ 376.247674][T10288] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.247704][T10288] do_fast_syscall_32+0x34/0x80 [ 376.247732][T10288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.247754][T10288] RIP: 0023:0xf705e539 [ 376.247771][T10288] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 376.247788][T10288] RSP: 002b:00000000f544e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 376.247809][T10288] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f544e620 [ 376.247823][T10288] RDX: 000000000000000f RSI: 00000000f73c4ff4 RDI: 0000000000000000 [ 376.247836][T10288] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 376.247847][T10288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 376.247859][T10288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.247885][T10288] [ 376.253854][ T5946] usb 3-1: SerialNumber: syz [ 376.484082][ T5918] usb 2-1: USB disconnect, device number 44 [ 376.532026][ T5946] usb 3-1: config 0 descriptor?? [ 376.566400][ T5946] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 376.763620][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'. [ 376.845361][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.890509][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.976078][ T5946] gspca_sn9c2028: read1 error -71 [ 376.999146][ T5946] gspca_sn9c2028: read1 error -71 [ 377.029085][ T5946] gspca_sn9c2028: read1 error -71 [ 377.065872][ T5946] sn9c2028 3-1:0.123: probe with driver sn9c2028 failed with error -71 [ 377.171719][ T5946] usb 3-1: USB disconnect, device number 38 [ 377.716845][ T5946] usb 5-1: USB disconnect, device number 37 [ 378.572560][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.579180][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.038177][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1127'. [ 379.114087][T10332] gretap0: left promiscuous mode [ 379.150452][T10332] gretap0: left allmulticast mode [ 379.175578][T10332] netlink: 'syz.1.1127': attribute type 2 has an invalid length. [ 379.193757][T10332] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1127'. [ 379.386574][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 379.622682][T10351] input: syz0 as /devices/virtual/input/input26 [ 379.917242][ T5932] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 380.097170][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 380.106955][ T5932] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 380.140182][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 380.149995][ T5932] usb 2-1: can't read configurations, error -61 [ 380.317814][ T5932] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 380.477224][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 380.494644][ T5932] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 380.511565][T10365] macsec2: entered promiscuous mode [ 380.529824][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 380.534199][T10365] macsec2: entered allmulticast mode [ 380.541028][ T5932] usb 2-1: can't read configurations, error -61 [ 380.559756][ T5932] usb usb2-port1: attempt power cycle [ 380.804845][T10378] loop2: detected capacity change from 0 to 7 [ 380.829059][T10378] loop2: [ 380.832059][T10378] loop2: partition table partially beyond EOD, truncated [ 380.939171][ T5932] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 380.976269][T10384] FAULT_INJECTION: forcing a failure. [ 380.976269][T10384] name failslab, interval 1, probability 0, space 0, times 0 [ 380.992954][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 381.003295][ T5932] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 381.014575][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 381.024586][ T5932] usb 2-1: can't read configurations, error -61 [ 381.031236][T10384] CPU: 0 UID: 0 PID: 10384 Comm: syz.2.1143 Not tainted syzkaller #0 PREEMPT(full) [ 381.031252][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.031259][T10384] Call Trace: [ 381.031264][T10384] [ 381.031269][T10384] dump_stack_lvl+0x189/0x250 [ 381.031287][T10384] ? __pfx____ratelimit+0x10/0x10 [ 381.031302][T10384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.031315][T10384] ? __pfx__printk+0x10/0x10 [ 381.031332][T10384] ? __pfx___might_resched+0x10/0x10 [ 381.031345][T10384] should_fail_ex+0x414/0x560 [ 381.031362][T10384] should_failslab+0xa8/0x100 [ 381.031378][T10384] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 381.031393][T10384] ? __alloc_skb+0x112/0x2d0 [ 381.031411][T10384] __alloc_skb+0x112/0x2d0 [ 381.031428][T10384] netlink_sendmsg+0x5c6/0xb30 [ 381.031449][T10384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.031465][T10384] ? __import_iovec+0x5d4/0x7f0 [ 381.031477][T10384] ? aa_sock_msg_perm+0xf1/0x1d0 [ 381.031487][T10384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.031499][T10384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.031515][T10384] __sock_sendmsg+0x21c/0x270 [ 381.031530][T10384] ____sys_sendmsg+0x505/0x830 [ 381.031547][T10384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.031567][T10384] ___sys_sendmsg+0x21f/0x2a0 [ 381.031579][T10384] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.031608][T10384] ? __fget_files+0x2a/0x420 [ 381.031623][T10384] ? __fget_files+0x3a0/0x420 [ 381.031643][T10384] __sys_sendmsg+0x164/0x220 [ 381.031655][T10384] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.031674][T10384] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.031691][T10384] __do_fast_syscall_32+0xb6/0x2b0 [ 381.031707][T10384] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.031723][T10384] do_fast_syscall_32+0x34/0x80 [ 381.031738][T10384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.031751][T10384] RIP: 0023:0xf7f75539 [ 381.031760][T10384] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 381.031770][T10384] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 381.031789][T10384] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 381.031797][T10384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.031803][T10384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.031809][T10384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 381.031816][T10384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.031830][T10384] [ 381.577077][ T5932] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 381.639900][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 381.647851][ T5932] usb 2-1: too many configurations: 67, using maximum allowed: 8 [ 381.658352][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 381.665921][ T5932] usb 2-1: can't read configurations, error -61 [ 381.685648][ T5932] usb usb2-port1: unable to enumerate USB device [ 382.147082][ T5932] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 382.251543][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 382.251555][ T30] audit: type=1326 audit(1755971751.523:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 382.402689][ T5932] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.421543][ T5932] usb 3-1: config 0 has no interface number 0 [ 382.443455][ T30] audit: type=1326 audit(1755971751.553:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 382.466259][ T5932] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 382.475617][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.492660][ T5932] usb 3-1: Product: syz [ 382.537425][ T5932] usb 3-1: Manufacturer: syz [ 382.549922][ T5932] usb 3-1: SerialNumber: syz [ 382.578036][ T5932] usb 3-1: config 0 descriptor?? [ 382.586485][ T30] audit: type=1326 audit(1755971751.553:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=317 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 382.657952][ T30] audit: type=1326 audit(1755971751.553:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 382.847153][ T5932] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 382.866949][ T5932] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 382.890424][ T30] audit: type=1326 audit(1755971751.553:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 382.965535][ T5932] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 382.989793][ T5932] usb 3-1: media controller created [ 383.005528][ T30] audit: type=1326 audit(1755971751.553:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 383.049640][ T5918] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 383.084334][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.122151][T10405] netlink: 'syz.4.1151': attribute type 2 has an invalid length. [ 383.135852][ T30] audit: type=1326 audit(1755971751.553:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 383.163532][T10405] netlink: 'syz.4.1151': attribute type 7 has an invalid length. [ 383.175585][T10405] netlink: 85 bytes leftover after parsing attributes in process `syz.4.1151'. [ 383.214418][T10405] netlink: 130140 bytes leftover after parsing attributes in process `syz.4.1151'. [ 383.226955][ T30] audit: type=1326 audit(1755971751.553:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 383.249094][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.289518][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 383.312214][ T30] audit: type=1326 audit(1755971751.573:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 383.317028][T10405] netlink: 'syz.4.1151': attribute type 2 has an invalid length. [ 383.334377][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.377090][T10405] netlink: 'syz.4.1151': attribute type 7 has an invalid length. [ 383.387126][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 383.392653][T10405] netlink: 85 bytes leftover after parsing attributes in process `syz.4.1151'. [ 383.425003][ T30] audit: type=1326 audit(1755971751.573:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 383.437026][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 383.658739][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 383.684119][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 383.686917][ T9] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 383.746902][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 383.793797][ T5918] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 383.803554][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.833306][ T5918] usb 2-1: Product: syz [ 383.858780][ T9] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 383.880213][ T9] usb 4-1: USB disconnect, device number 23 [ 383.892634][ T5918] usb 2-1: Manufacturer: syz [ 383.898240][T10409] fuse: Unknown parameter 'subj_user' [ 383.904336][T10409] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 383.910961][T10409] PKCS7: Only support pkcs7_signedData type [ 383.944152][ T5918] usb 2-1: SerialNumber: syz [ 383.988819][ T5918] usb 2-1: config 0 descriptor?? [ 384.044394][T10411] IPVS: length: 73 != 24 [ 384.167230][ T5964] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 384.238262][ T5932] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 384.332110][ T5964] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 384.358768][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.388281][ T5964] usb 1-1: Product: syz [ 384.415641][ T5964] usb 1-1: Manufacturer: syz [ 384.432365][ T5964] usb 1-1: SerialNumber: syz [ 384.453427][ T5964] usb 1-1: config 0 descriptor?? [ 384.481428][ T5863] Bluetooth: hci5: urb ffff88802f384900 submission failed (2) [ 384.688656][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.698746][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.859411][ T5932] usb 3-1: USB disconnect, device number 39 [ 384.935866][T10426] kvm: user requested TSC rate below hardware speed [ 385.089093][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -110 [ 385.101980][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 385.112355][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 385.126408][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 385.136716][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 385.150268][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 385.159593][T10431] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1158'. [ 386.001649][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 386.012346][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 386.146633][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 386.267165][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.294525][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.417149][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.470397][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.490477][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.525990][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.537479][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.550982][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.693975][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.751336][T10440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1161'. [ 386.794947][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.847098][ T5918] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 386.853203][T10440] netlink: 'syz.2.1161': attribute type 7 has an invalid length. [ 386.868311][ T5918] input input27: Timeout waiting for response from device. [ 386.877391][T10440] netlink: 'syz.2.1161': attribute type 8 has an invalid length. [ 386.907083][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 386.919593][ T5918] usb 2-1: USB disconnect, device number 49 [ 387.242639][T10444] fuse: Bad value for 'fd' [ 387.261986][ T5918] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 387.360411][ T886] usb 1-1: USB disconnect, device number 24 [ 387.438209][ T5918] usb 2-1: config 0 has no interfaces? [ 387.486659][T10451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1165'. [ 387.499033][ T5918] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 387.516580][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.542569][ T5918] usb 2-1: Product: syz [ 387.546785][ T5918] usb 2-1: Manufacturer: syz [ 387.619656][ T5918] usb 2-1: SerialNumber: syz [ 387.634401][ T5918] usb 2-1: config 0 descriptor?? [ 387.839340][T10448] input: syz0 as /devices/virtual/input/input28 [ 388.108244][ T886] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 388.388267][ T9] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 388.515679][ T886] usb 1-1: config 0 has no interfaces? [ 388.528684][ T5964] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 388.538170][ T886] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 388.547650][ T886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.559135][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 388.577090][ T9] usb 5-1: config 0 has no interface number 0 [ 388.590454][ T886] usb 1-1: Product: syz [ 388.592841][ T9] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=ab.07 [ 388.610479][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.621154][ T886] usb 1-1: Manufacturer: syz [ 388.626846][ T886] usb 1-1: SerialNumber: syz [ 388.638997][ T886] usb 1-1: config 0 descriptor?? [ 388.648266][ T9] usb 5-1: Product: syz [ 388.672588][ T9] usb 5-1: Manufacturer: syz [ 388.690626][ T5964] usb 3-1: config 0 has no interfaces? [ 388.696422][ T9] usb 5-1: SerialNumber: syz [ 388.703853][ T5964] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 388.714297][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.757256][ T9] usb 5-1: config 0 descriptor?? [ 388.763424][ T5964] usb 3-1: Product: syz [ 388.774658][ T5964] usb 3-1: Manufacturer: syz [ 388.783394][ T9] ftdi_sio 5-1:0.67: FTDI USB Serial Device converter detected [ 388.812270][ T5964] usb 3-1: SerialNumber: syz [ 388.819729][ T9] ftdi_sio ttyUSB0: unknown device type: 0xab07 [ 388.851301][ T5964] usb 3-1: config 0 descriptor?? [ 389.010274][ T5932] usb 5-1: USB disconnect, device number 38 [ 389.029293][ T5932] ftdi_sio 5-1:0.67: device disconnected [ 389.777477][ T5918] usb 2-1: USB disconnect, device number 50 [ 390.033767][T10473] bridge_slave_0: left allmulticast mode [ 390.047757][T10473] bridge_slave_0: left promiscuous mode [ 390.053532][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.091993][T10473] bridge_slave_1: left allmulticast mode [ 390.098116][T10473] bridge_slave_1: left promiscuous mode [ 390.104031][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.121766][T10478] netlink: 'syz.4.1169': attribute type 10 has an invalid length. [ 390.219849][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'. [ 390.298970][T10473] team0: Port device team_slave_0 removed [ 390.369924][T10473] team0: Port device team_slave_1 removed [ 390.385057][T10473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.399436][T10473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.576510][T10473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.590029][T10473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.842496][T10473] macsec1: left allmulticast mode [ 390.850917][T10473] geneve1: left allmulticast mode [ 390.861932][T10502] vivid-000: ================= START STATUS ================= [ 390.880356][T10473] macsec1: left promiscuous mode [ 390.910306][T10502] vivid-000: Test Pattern: 75% Colorbar [ 390.916156][T10502] vivid-000: Fill Percentage of Frame: 100 [ 390.923631][T10502] vivid-000: Horizontal Movement: No Movement [ 390.930170][T10502] vivid-000: Vertical Movement: No Movement [ 390.936242][T10502] vivid-000: OSD Text Mode: All [ 390.941381][T10502] vivid-000: Show Border: false [ 390.946282][T10502] vivid-000: Show Square: false [ 390.951236][T10502] vivid-000: Sensor Flipped Horizontally: false [ 390.957705][T10502] vivid-000: Sensor Flipped Vertically: false [ 390.963826][T10502] vivid-000: Insert SAV Code in Image: false [ 390.969897][T10502] vivid-000: Insert EAV Code in Image: false [ 390.975920][T10502] vivid-000: Insert Video Guard Band: false [ 390.981956][T10502] vivid-000: Reduced Framerate: false [ 390.987425][T10502] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 390.996767][T10502] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 391.004879][T10502] vivid-000: Enable Capture Cropping: true grabbed [ 391.015823][T10473] bridge0: port 3(macsec1) entered disabled state [ 391.027318][T10502] vivid-000: Enable Capture Composing: true grabbed [ 391.033995][T10502] vivid-000: Enable Capture Scaler: true grabbed [ 391.040501][T10502] vivid-000: Timestamp Source: End of Frame [ 391.046448][T10502] vivid-000: Colorspace: sRGB [ 391.051215][T10502] vivid-000: Transfer Function: Default [ 391.056821][T10502] vivid-000: Y'CbCr Encoding: Default [ 391.062452][T10502] vivid-000: HSV Encoding: Hue 0-179 [ 391.067875][T10502] vivid-000: Quantization: Default [ 391.073066][T10502] vivid-000: Apply Alpha To Red Only: false [ 391.107128][T10502] vivid-000: Standard Aspect Ratio: 4x3 [ 391.112956][T10502] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 391.124758][T10502] vivid-000: DV Timings: 640x480p59 inactive [ 391.141483][T10502] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 391.339058][ T886] usb 3-1: USB disconnect, device number 40 [ 391.362981][ T5918] usb 1-1: USB disconnect, device number 25 [ 391.398546][T10502] vivid-000: Maximum EDID Blocks: 2 [ 391.501595][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 391.501608][ T30] audit: type=1326 audit(1755971760.773:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10510 comm="syz.2.1173" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x0 [ 391.681945][T10502] vivid-000: Limited RGB Range (16-235): false [ 391.692699][T10502] vivid-000: Rx RGB Quantization Range: Automatic [ 391.699683][T10502] vivid-000: Power Present: 0x00000001 [ 391.705471][T10502] tpg source WxH: 320x180 (R'G'B) [ 391.710688][T10502] tpg field: 1 [ 391.714156][T10502] tpg crop: (0,0)/320x180 [ 391.718658][T10502] tpg compose: (0,0)/320x180 [ 391.723338][T10502] tpg colorspace: 8 [ 391.727290][T10502] tpg transfer function: 0/2 [ 391.732003][T10502] tpg quantization: 0/1 [ 391.736265][T10502] tpg RGB range: 0/2 [ 391.740275][T10502] vivid-000: ================== END STATUS ================== [ 392.111094][T10521] vivid-000: ================= START STATUS ================= [ 392.120523][T10521] vivid-000: Test Pattern: 75% Colorbar [ 392.128147][T10521] vivid-000: Fill Percentage of Frame: 100 [ 392.134355][T10521] vivid-000: Horizontal Movement: No Movement [ 392.143286][T10521] vivid-000: Vertical Movement: No Movement [ 392.149402][T10521] vivid-000: OSD Text Mode: All [ 392.157826][T10521] vivid-000: Show Border: false [ 392.162883][T10521] vivid-000: Show Square: false [ 392.171837][T10521] vivid-000: Sensor Flipped Horizontally: false [ 392.181833][T10521] vivid-000: Sensor Flipped Vertically: false [ 392.188279][T10521] vivid-000: Insert SAV Code in Image: false [ 392.196701][T10521] vivid-000: Insert EAV Code in Image: false [ 392.216543][T10521] vivid-000: Insert Video Guard Band: false [ 392.232830][T10521] vivid-000: Reduced Framerate: false [ 392.242432][T10521] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 392.252536][T10521] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 392.271489][T10521] vivid-000: Enable Capture Cropping: true grabbed [ 392.399914][T10521] vivid-000: Enable Capture Composing: true grabbed [ 392.467533][T10521] vivid-000: Enable Capture Scaler: true grabbed [ 392.485536][T10521] vivid-000: Timestamp Source: End of Frame [ 392.527247][T10521] vivid-000: Colorspace: sRGB [ 392.596149][T10521] vivid-000: Transfer Function: Default [ 392.623378][T10521] vivid-000: Y'CbCr Encoding: Default [ 392.663371][T10521] vivid-000: HSV Encoding: Hue 0-179 [ 392.669868][T10521] vivid-000: Quantization: Default [ 392.676638][T10521] vivid-000: Apply Alpha To Red Only: false [ 392.683036][T10521] vivid-000: Standard Aspect Ratio: 4x3 [ 392.691779][T10521] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 392.700927][T10521] vivid-000: DV Timings: 640x480p59 inactive [ 392.708547][T10521] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 392.716731][T10521] vivid-000: Maximum EDID Blocks: 2 [ 392.723699][T10521] vivid-000: Limited RGB Range (16-235): false [ 392.733701][T10521] vivid-000: Rx RGB Quantization Range: Automatic [ 392.740293][T10521] vivid-000: Power Present: 0x00000001 [ 392.745848][T10521] tpg source WxH: 320x180 (R'G'B) [ 392.751006][T10521] tpg field: 1 [ 392.754455][T10521] tpg crop: (0,0)/320x180 [ 392.758930][T10521] tpg compose: (0,0)/320x180 [ 392.763601][T10521] tpg colorspace: 8 [ 392.767637][T10521] tpg transfer function: 0/2 [ 392.772303][T10521] tpg quantization: 0/1 [ 392.776521][T10521] tpg RGB range: 0/2 [ 392.780569][T10521] vivid-000: ================== END STATUS ================== [ 393.932196][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'. [ 394.450924][T10557] fuse: Unknown parameter '/ ' [ 395.272118][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 395.917932][T10586] vivid-000: ================= START STATUS ================= [ 395.926855][T10586] vivid-000: Test Pattern: 75% Colorbar [ 395.932872][T10586] vivid-000: Fill Percentage of Frame: 100 [ 395.939157][T10586] vivid-000: Horizontal Movement: No Movement [ 395.946711][T10586] vivid-000: Vertical Movement: No Movement [ 395.953022][T10586] vivid-000: OSD Text Mode: All [ 395.959571][T10586] vivid-000: Show Border: false [ 395.964857][T10586] vivid-000: Show Square: false [ 396.011704][T10586] vivid-000: Sensor Flipped Horizontally: false [ 396.018872][T10586] vivid-000: Sensor Flipped Vertically: false [ 396.026856][T10586] vivid-000: Insert SAV Code in Image: false [ 396.034366][T10586] vivid-000: Insert EAV Code in Image: false [ 396.042730][T10586] vivid-000: Insert Video Guard Band: false [ 396.049852][T10586] vivid-000: Reduced Framerate: false [ 396.055866][T10586] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 396.065709][T10586] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 396.074856][T10586] vivid-000: Enable Capture Cropping: true grabbed [ 396.102936][T10586] vivid-000: Enable Capture Composing: true grabbed [ 396.112657][T10586] vivid-000: Enable Capture Scaler: true grabbed [ 396.205030][T10586] vivid-000: Timestamp Source: End of Frame [ 396.213936][T10586] vivid-000: Colorspace: sRGB [ 396.219287][T10586] vivid-000: Transfer Function: Default [ 396.225386][T10586] vivid-000: Y'CbCr Encoding: Default [ 396.231265][T10586] vivid-000: HSV Encoding: Hue 0-179 [ 396.236817][T10586] vivid-000: Quantization: Default [ 396.242124][T10586] vivid-000: Apply Alpha To Red Only: false [ 396.250262][T10586] vivid-000: Standard Aspect Ratio: 4x3 [ 396.255943][T10586] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 396.263882][T10586] vivid-000: DV Timings: 640x480p59 inactive [ 396.270021][T10586] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 396.277460][T10586] vivid-000: Maximum EDID Blocks: 2 [ 396.282761][T10586] vivid-000: Limited RGB Range (16-235): false [ 396.289092][T10586] vivid-000: Rx RGB Quantization Range: Automatic [ 396.295613][T10586] vivid-000: Power Present: 0x00000001 [ 396.301532][T10586] tpg source WxH: 320x180 (R'G'B) [ 396.306636][T10586] tpg field: 1 [ 396.310116][T10586] tpg crop: (0,0)/320x180 [ 396.314512][T10586] tpg compose: (0,0)/320x180 [ 396.319388][T10586] tpg colorspace: 8 [ 396.323258][T10586] tpg transfer function: 0/2 [ 396.327938][T10586] tpg quantization: 0/1 [ 396.332153][T10586] tpg RGB range: 0/2 [ 396.336117][T10586] vivid-000: ================== END STATUS ================== [ 396.680257][T10600] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 397.060653][T10610] vivid-000: ================= START STATUS ================= [ 397.068730][T10610] vivid-000: Test Pattern: 75% Colorbar [ 397.076805][T10610] vivid-000: Fill Percentage of Frame: 100 [ 397.082994][T10610] vivid-000: Horizontal Movement: No Movement [ 397.091024][T10610] vivid-000: Vertical Movement: No Movement [ 397.099123][T10610] vivid-000: OSD Text Mode: All [ 397.105576][T10610] vivid-000: Show Border: false [ 397.115462][T10610] vivid-000: Show Square: false [ 397.129974][T10610] vivid-000: Sensor Flipped Horizontally: false [ 397.136666][T10610] vivid-000: Sensor Flipped Vertically: false [ 397.157154][T10610] vivid-000: Insert SAV Code in Image: false [ 397.164807][ T886] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 397.173880][T10610] vivid-000: Insert EAV Code in Image: false [ 397.182042][T10610] vivid-000: Insert Video Guard Band: false [ 397.197833][T10610] vivid-000: Reduced Framerate: false [ 397.207207][T10610] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 397.219152][T10610] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 397.231511][T10610] vivid-000: Enable Capture Cropping: true grabbed [ 397.239049][T10610] vivid-000: Enable Capture Composing: true grabbed [ 397.251947][T10610] vivid-000: Enable Capture Scaler: true grabbed [ 397.263033][T10610] vivid-000: Timestamp Source: End of Frame [ 397.272990][T10610] vivid-000: Colorspace: sRGB [ 397.278538][T10610] vivid-000: Transfer Function: Default [ 397.285106][T10610] vivid-000: Y'CbCr Encoding: Default [ 397.332571][T10610] vivid-000: HSV Encoding: Hue 0-179 [ 397.362583][ T886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.372747][ T886] usb 5-1: config 0 has no interface number 0 [ 397.387098][T10610] vivid-000: Quantization: Default [ 397.460260][ T886] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 397.478629][ T886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.488451][T10610] vivid-000: Apply Alpha To Red Only: false [ 397.525229][ T886] usb 5-1: Product: syz [ 397.567217][T10610] vivid-000: Standard Aspect Ratio: 4x3 [ 397.580344][T10610] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 397.659033][ T886] usb 5-1: Manufacturer: syz [ 397.667180][ T886] usb 5-1: SerialNumber: syz [ 397.697256][ T886] usb 5-1: config 0 descriptor?? [ 397.726396][T10610] vivid-000: DV Timings: 640x480p59 inactive [ 397.734680][T10610] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 397.742261][T10610] vivid-000: Maximum EDID Blocks: 2 [ 397.747834][T10610] vivid-000: Limited RGB Range (16-235): false [ 397.755650][T10610] vivid-000: Rx RGB Quantization Range: Automatic [ 397.762814][T10610] vivid-000: Power Present: 0x00000001 [ 397.770521][T10610] tpg source WxH: 320x180 (R'G'B) [ 397.776690][T10610] tpg field: 1 [ 397.781396][T10610] tpg crop: (0,0)/320x180 [ 397.789330][T10610] tpg compose: (0,0)/320x180 [ 397.794785][T10610] tpg colorspace: 8 [ 397.800563][T10610] tpg transfer function: 0/2 [ 397.806038][T10610] tpg quantization: 0/1 [ 397.829218][T10618] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1206'. [ 397.851152][T10610] tpg RGB range: 0/2 [ 397.855364][T10610] vivid-000: ================== END STATUS ================== [ 397.924308][ T886] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 397.943199][ T886] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 397.954064][ T886] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 398.030202][T10620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1206'. [ 398.080718][ T886] usb 5-1: media controller created [ 398.309490][ T886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.310163][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1207'. [ 398.365623][T10623] FAULT_INJECTION: forcing a failure. [ 398.365623][T10623] name failslab, interval 1, probability 0, space 0, times 0 [ 398.539322][T10623] CPU: 1 UID: 0 PID: 10623 Comm: syz.0.1207 Not tainted syzkaller #0 PREEMPT(full) [ 398.539350][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.539364][T10623] Call Trace: [ 398.539371][T10623] [ 398.539379][T10623] dump_stack_lvl+0x189/0x250 [ 398.539409][T10623] ? __pfx____ratelimit+0x10/0x10 [ 398.539437][T10623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.539461][T10623] ? __pfx__printk+0x10/0x10 [ 398.539494][T10623] ? __pfx___might_resched+0x10/0x10 [ 398.539518][T10623] should_fail_ex+0x414/0x560 [ 398.539548][T10623] should_failslab+0xa8/0x100 [ 398.539579][T10623] __kmalloc_noprof+0xcb/0x4f0 [ 398.539602][T10623] ? nf_tables_newset+0x132b/0x2530 [ 398.539622][T10623] ? nla_strdup+0x9d/0x140 [ 398.539646][T10623] ? trace_kmalloc+0x1f/0xd0 [ 398.539673][T10623] nla_strdup+0x9d/0x140 [ 398.539698][T10623] ? nft_rhash_estimate+0x8f/0xa0 [ 398.539726][T10623] nf_tables_newset+0x136a/0x2530 [ 398.539762][T10623] ? __pfx_nf_tables_newset+0x10/0x10 [ 398.539805][T10623] ? __nla_parse+0x40/0x60 [ 398.539824][T10623] nfnetlink_rcv+0x112f/0x2520 [ 398.539855][T10623] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 398.539884][T10623] ? ref_tracker_free+0x63a/0x7d0 [ 398.539914][T10623] ? __netlink_deliver_tap+0x807/0x850 [ 398.539930][T10623] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.539954][T10623] netlink_unicast+0x82f/0x9e0 [ 398.539972][T10623] ? __pfx_netlink_unicast+0x10/0x10 [ 398.539987][T10623] ? netlink_sendmsg+0x642/0xb30 [ 398.540001][T10623] ? skb_put+0x11b/0x210 [ 398.540013][T10623] netlink_sendmsg+0x805/0xb30 [ 398.540033][T10623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.540050][T10623] ? __import_iovec+0x5d4/0x7f0 [ 398.540061][T10623] ? aa_sock_msg_perm+0xf1/0x1d0 [ 398.540072][T10623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.540084][T10623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.540099][T10623] __sock_sendmsg+0x21c/0x270 [ 398.540115][T10623] ____sys_sendmsg+0x505/0x830 [ 398.540130][T10623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.540150][T10623] ___sys_sendmsg+0x21f/0x2a0 [ 398.540162][T10623] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.540193][T10623] ? __fget_files+0x2a/0x420 [ 398.540208][T10623] ? __fget_files+0x3a0/0x420 [ 398.540229][T10623] __sys_sendmsg+0x164/0x220 [ 398.540241][T10623] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.540261][T10623] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.540278][T10623] __do_fast_syscall_32+0xb6/0x2b0 [ 398.540294][T10623] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.540310][T10623] do_fast_syscall_32+0x34/0x80 [ 398.540324][T10623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.540338][T10623] RIP: 0023:0xf702e539 [ 398.540348][T10623] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 398.540358][T10623] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 398.540371][T10623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 398.540379][T10623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.540385][T10623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.540391][T10623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 398.540398][T10623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.540413][T10623] [ 399.725426][ T886] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 399.865400][ T886] usb 5-1: USB disconnect, device number 39 [ 399.926528][T10642] netlink: 'syz.4.1212': attribute type 10 has an invalid length. [ 400.245470][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'. [ 403.057386][ T886] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 403.290968][ T5919] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 403.459933][ T886] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 403.469174][ T886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.489111][ T886] usb 5-1: config 0 descriptor?? [ 403.534100][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.545780][ T5919] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 403.577183][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.601601][ T5919] usb 1-1: config 0 descriptor?? [ 403.717115][ T886] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 403.909028][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.937537][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.982228][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.001655][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.153337][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 404.177449][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 404.254842][ T5919] usb 1-1: USB disconnect, device number 26 [ 404.451780][T10721] syzkaller0: entered promiscuous mode [ 404.507390][T10721] syzkaller0: entered allmulticast mode [ 404.729145][T10729] syzkaller0: entered promiscuous mode [ 404.758204][ T5919] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 404.770688][T10729] syzkaller0: entered allmulticast mode [ 404.975533][ T5919] usb 1-1: config 0 has no interfaces? [ 404.988919][ T5919] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 404.998567][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.015829][ T5919] usb 1-1: Product: syz [ 405.030486][ T5919] usb 1-1: Manufacturer: syz [ 405.053620][ T5919] usb 1-1: SerialNumber: syz [ 405.091363][ T5919] usb 1-1: config 0 descriptor?? [ 405.881724][ T886] [drm:udl_init] *ERROR* Selecting channel failed [ 406.003382][ T886] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 406.023231][ T886] [drm] Initialized udl on minor 2 [ 406.040805][ T886] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 406.063301][ T886] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 406.106272][ T886] usb 5-1: USB disconnect, device number 40 [ 406.121408][ T5919] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 406.151493][ T5919] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 406.212891][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 407.276322][ T5919] usb 1-1: USB disconnect, device number 27 [ 407.861440][ T5964] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 408.138739][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 408.202508][ T5964] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 408.210777][ T5964] usb 5-1: config 0 has no interface number 0 [ 408.217516][ T5964] usb 5-1: config 0 interface 184 has no altsetting 0 [ 408.238445][ T5964] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 408.247926][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.255931][ T5964] usb 5-1: Product: syz [ 408.260438][ T5964] usb 5-1: Manufacturer: syz [ 408.265605][ T5964] usb 5-1: SerialNumber: syz [ 408.287311][ T5964] usb 5-1: config 0 descriptor?? [ 408.331204][ T5964] smsc75xx v1.0.0 [ 408.335209][ T5964] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 408.355685][ T5964] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 408.579699][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.588496][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.676936][T10772] input: syz1 as /devices/virtual/input/input29 [ 409.115160][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1244'. [ 410.666939][T10793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1248'. [ 410.748571][ T30] audit: type=1800 audit(1755971780.023:1342): pid=10793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1248" name="bus" dev="ramfs" ino=32793 res=0 errno=0 [ 410.842649][ T9] usb 5-1: USB disconnect, device number 41 [ 411.213168][T10805] tipc: Enabled bearer , priority 0 [ 411.267943][T10805] syzkaller0: entered promiscuous mode [ 411.273565][T10805] syzkaller0: entered allmulticast mode [ 411.338986][T10805] tipc: Resetting bearer [ 411.363100][T10804] tipc: Resetting bearer [ 411.414366][T10804] tipc: Disabling bearer [ 412.141564][T10820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1256'. [ 413.181785][T10834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.196699][T10834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.938697][T10840] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 413.948110][T10840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1262'. [ 417.117454][ T5919] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 417.286089][T10879] netlink: 'syz.4.1274': attribute type 3 has an invalid length. [ 417.327171][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 417.357870][ T5919] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 417.397266][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.403618][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 417.405296][ T5919] usb 1-1: Product: syz [ 417.405315][ T5919] usb 1-1: Manufacturer: syz [ 417.427732][ T5919] usb 1-1: SerialNumber: syz [ 417.445110][ T5919] usb 1-1: config 0 descriptor?? [ 417.462868][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 417.619214][ T5964] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 417.746617][T10870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.833556][T10870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.877091][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 417.942308][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.958480][ T5964] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 417.997129][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.050265][ T5964] usb 5-1: config 0 descriptor?? [ 418.350895][T10890] vivid-000: ================= START STATUS ================= [ 418.360737][T10890] vivid-000: Test Pattern: 75% Colorbar [ 418.367685][T10890] vivid-000: Fill Percentage of Frame: 100 [ 418.374779][T10890] vivid-000: Horizontal Movement: No Movement [ 418.381411][T10890] vivid-000: Vertical Movement: No Movement [ 418.387801][T10890] vivid-000: OSD Text Mode: All [ 418.393386][T10890] vivid-000: Show Border: false [ 418.406180][T10890] vivid-000: Show Square: false [ 418.424476][T10890] vivid-000: Sensor Flipped Horizontally: false [ 418.431130][T10890] vivid-000: Sensor Flipped Vertically: false [ 418.437535][T10890] vivid-000: Insert SAV Code in Image: false [ 418.445000][T10890] vivid-000: Insert EAV Code in Image: false [ 418.451685][T10890] vivid-000: Insert Video Guard Band: false [ 418.458267][T10890] vivid-000: Reduced Framerate: false [ 418.464023][T10890] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 418.472544][T10890] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 418.482360][T10890] vivid-000: Enable Capture Cropping: true grabbed [ 418.489825][T10890] vivid-000: Enable Capture Composing: true grabbed [ 418.496833][T10890] vivid-000: Enable Capture Scaler: true grabbed [ 418.504942][T10890] vivid-000: Timestamp Source: End of Frame [ 418.512714][T10890] vivid-000: Colorspace: sRGB [ 418.517820][T10890] vivid-000: Transfer Function: Default [ 418.523829][T10890] vivid-000: Y'CbCr Encoding: Default [ 418.529728][T10890] vivid-000: HSV Encoding: Hue 0-179 [ 418.536193][T10890] vivid-000: Quantization: Default [ 418.542671][T10890] vivid-000: Apply Alpha To Red Only: false [ 418.549108][T10890] vivid-000: Standard Aspect Ratio: 4x3 [ 418.555476][T10890] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 418.564345][T10890] vivid-000: DV Timings: 640x480p59 inactive [ 418.571779][T10890] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 418.581359][T10890] vivid-000: Maximum EDID Blocks: 2 [ 418.586905][T10890] vivid-000: Limited RGB Range (16-235): false [ 418.593792][T10890] vivid-000: Rx RGB Quantization Range: Automatic [ 418.606425][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.616205][T10890] vivid-000: Power Present: 0x00000001 [ 418.622368][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.631520][T10890] tpg source WxH: 320x180 (R'G'B) [ 418.641082][T10890] tpg field: 1 [ 418.654116][T10890] tpg crop: (0,0)/320x180 [ 418.675975][T10879] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 418.696821][ T5964] usbhid 5-1:0.0: can't add hid device: -71 [ 418.703224][ T5964] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 418.722537][ T5964] usb 5-1: USB disconnect, device number 42 [ 418.723633][T10890] tpg compose: (0,0)/320x180 [ 418.746126][T10890] tpg colorspace: 8 [ 418.753419][T10890] tpg transfer function: 0/2 [ 418.759776][T10890] tpg quantization: 0/1 [ 418.765019][T10890] tpg RGB range: 0/2 [ 418.769300][T10890] vivid-000: ================== END STATUS ================== [ 419.006449][T10897] vivid-000: ================= START STATUS ================= [ 419.014593][T10897] vivid-000: Test Pattern: 75% Colorbar [ 419.021224][T10897] vivid-000: Fill Percentage of Frame: 100 [ 419.027470][T10897] vivid-000: Horizontal Movement: No Movement [ 419.034415][T10897] vivid-000: Vertical Movement: No Movement [ 419.041078][T10897] vivid-000: OSD Text Mode: All [ 419.047049][T10897] vivid-000: Show Border: false [ 419.061290][T10897] vivid-000: Show Square: false [ 419.081267][T10897] vivid-000: Sensor Flipped Horizontally: false [ 419.088090][T10897] vivid-000: Sensor Flipped Vertically: false [ 419.094919][T10897] vivid-000: Insert SAV Code in Image: false [ 419.103839][T10897] vivid-000: Insert EAV Code in Image: false [ 419.110732][T10897] vivid-000: Insert Video Guard Band: false [ 419.116866][T10897] vivid-000: Reduced Framerate: false [ 419.124934][T10897] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 419.133641][T10897] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 419.143284][T10897] vivid-000: Enable Capture Cropping: true grabbed [ 419.151772][T10897] vivid-000: Enable Capture Composing: true grabbed [ 419.159701][T10897] vivid-000: Enable Capture Scaler: true grabbed [ 419.167042][T10897] vivid-000: Timestamp Source: End of Frame [ 419.173256][T10897] vivid-000: Colorspace: sRGB [ 419.178263][T10897] vivid-000: Transfer Function: Default [ 419.184145][T10897] vivid-000: Y'CbCr Encoding: Default [ 419.189731][T10897] vivid-000: HSV Encoding: Hue 0-179 [ 419.196380][T10897] vivid-000: Quantization: Default [ 419.202245][T10897] vivid-000: Apply Alpha To Red Only: false [ 419.209658][T10897] vivid-000: Standard Aspect Ratio: 4x3 [ 419.215860][T10897] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 419.229379][T10897] vivid-000: DV Timings: 640x480p59 inactive [ 419.239464][T10897] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 419.255237][T10897] vivid-000: Maximum EDID Blocks: 2 [ 419.270059][T10897] vivid-000: Limited RGB Range (16-235): false [ 419.294386][T10897] vivid-000: Rx RGB Quantization Range: Automatic [ 419.308486][T10897] vivid-000: Power Present: 0x00000001 [ 419.333400][T10897] tpg source WxH: 320x180 (R'G'B) [ 419.362037][T10897] tpg field: 1 [ 419.365480][T10897] tpg crop: (0,0)/320x180 [ 419.373485][T10897] tpg compose: (0,0)/320x180 [ 419.388932][T10897] tpg colorspace: 8 [ 419.395283][T10897] tpg transfer function: 0/2 [ 419.400107][T10897] tpg quantization: 0/1 [ 419.409398][T10897] tpg RGB range: 0/2 [ 419.415891][T10897] vivid-000: ================== END STATUS ================== [ 419.782327][T10870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.798880][T10870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.916091][ T5919] gspca_sonixj: reg_r err -32 [ 419.958297][ T5919] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 420.150647][ T5946] usb 1-1: USB disconnect, device number 28 [ 420.834038][T10915] netlink: 3537 bytes leftover after parsing attributes in process `syz.4.1279'. [ 420.863969][ T30] audit: type=1326 audit(1755971790.103:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7fc00000 [ 420.916822][ T30] audit: type=1326 audit(1755971790.123:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f06539 code=0x7fc00000 [ 421.123461][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 421.133840][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 421.257059][ T5946] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 421.407073][ T5946] usb 1-1: device descriptor read/64, error -71 [ 421.659589][ T5946] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 421.817191][ T5946] usb 1-1: device descriptor read/64, error -71 [ 421.857415][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 421.938643][ T5946] usb usb1-port1: attempt power cycle [ 422.027106][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 422.041390][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.058387][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.079477][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 422.107108][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.127942][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.163227][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 422.192735][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 422.213305][ T9] usb 4-1: Manufacturer: syz [ 422.229976][ T9] usb 4-1: config 0 descriptor?? [ 422.297492][ T5946] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 422.338433][ T5946] usb 1-1: device descriptor read/8, error -71 [ 422.452967][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 422.588889][ T5946] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 422.598148][ T9] rc_core: IR keymap rc-hauppauge not found [ 422.604068][ T9] Registered IR keymap rc-empty [ 422.627585][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.640972][ T5946] usb 1-1: device descriptor read/8, error -71 [ 422.687223][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.727881][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 422.770329][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 422.783201][ T5946] usb usb1-port1: unable to enumerate USB device [ 422.825735][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.857773][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.897256][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.927227][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.958548][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.980710][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.008001][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.042965][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.048340][T10942] netlink: 210968 bytes leftover after parsing attributes in process `syz.2.1289'. [ 423.087139][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.137325][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 423.169876][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 423.214782][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 423.452800][ T886] usb 4-1: USB disconnect, device number 24 [ 424.377473][ T886] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 424.538676][ T886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 424.551334][ T886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 424.567340][ T886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 424.595214][ T886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 424.655501][ T886] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 424.687176][ T886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.719103][ T886] usb 1-1: Product: syz [ 424.753506][ T886] usb 1-1: Manufacturer: syz [ 424.788642][ T30] audit: type=1326 audit(1755971794.043:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 424.834592][ T886] usb 1-1: SerialNumber: syz [ 424.853312][ T30] audit: type=1326 audit(1755971794.053:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 424.875412][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.884584][ T886] usb 1-1: config 0 descriptor?? [ 424.900824][ T886] kvaser_usb 1-1:0.0: error -EMSGSIZE: Cannot get software info [ 424.915752][ T30] audit: type=1326 audit(1755971794.053:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 424.975328][ T886] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 425.061120][ T30] audit: type=1326 audit(1755971794.053:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 425.092616][ T30] audit: type=1326 audit(1755971794.053:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 425.160625][T10973] vivid-000: ================= START STATUS ================= [ 425.168458][T10973] vivid-000: Test Pattern: 75% Colorbar [ 425.174007][T10973] vivid-000: Fill Percentage of Frame: 100 [ 425.209368][ T30] audit: type=1326 audit(1755971794.053:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 425.398001][T10973] vivid-000: Horizontal Movement: No Movement [ 425.398217][ T30] audit: type=1326 audit(1755971794.053:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 425.426424][ T30] audit: type=1326 audit(1755971794.053:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 425.466799][T10973] vivid-000: Vertical Movement: No Movement [ 425.472959][T10973] vivid-000: OSD Text Mode: All [ 425.479423][T10973] vivid-000: Show Border: false [ 425.484395][T10973] vivid-000: Show Square: false [ 425.489760][T10973] vivid-000: Sensor Flipped Horizontally: false [ 425.496130][T10973] vivid-000: Sensor Flipped Vertically: false [ 425.502624][T10973] vivid-000: Insert SAV Code in Image: false [ 425.510799][T10973] vivid-000: Insert EAV Code in Image: false [ 425.518078][T10973] vivid-000: Insert Video Guard Band: false [ 425.524620][T10973] vivid-000: Reduced Framerate: false [ 425.532238][T10973] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 425.545452][T10973] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 425.560919][T10973] vivid-000: Enable Capture Cropping: true grabbed [ 425.569523][T10973] vivid-000: Enable Capture Composing: true grabbed [ 425.576194][T10973] vivid-000: Enable Capture Scaler: true grabbed [ 425.595391][T10973] vivid-000: Timestamp Source: End of Frame [ 425.608238][T10973] vivid-000: Colorspace: sRGB [ 425.618284][T10973] vivid-000: Transfer Function: Default [ 425.628198][T10973] vivid-000: Y'CbCr Encoding: Default [ 425.650246][T10973] vivid-000: HSV Encoding: Hue 0-179 [ 425.664048][T10973] vivid-000: Quantization: Default [ 425.675082][T10973] vivid-000: Apply Alpha To Red Only: false [ 425.687879][T10973] vivid-000: Standard Aspect Ratio: 4x3 [ 425.698059][T10973] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 425.721699][T10973] vivid-000: DV Timings: 640x480p59 inactive [ 425.762142][T10973] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 425.780422][T10973] vivid-000: Maximum EDID Blocks: 2 [ 425.795728][T10973] vivid-000: Limited RGB Range (16-235): false [ 425.808688][T10973] vivid-000: Rx RGB Quantization Range: Automatic [ 425.820970][T10973] vivid-000: Power Present: 0x00000001 [ 425.824879][T10984] syzkaller0: entered promiscuous mode [ 425.836284][T10973] tpg source WxH: 320x180 (R'G'B) [ 425.844821][T10973] tpg field: 1 [ 425.844927][T10984] syzkaller0: entered allmulticast mode [ 425.854177][T10973] tpg crop: (0,0)/320x180 [ 425.859921][T10973] tpg compose: (0,0)/320x180 [ 425.866569][T10973] tpg colorspace: 8 [ 425.872941][T10973] tpg transfer function: 0/2 [ 425.880072][T10973] tpg quantization: 0/1 [ 425.885563][T10973] tpg RGB range: 0/2 [ 425.891391][T10973] vivid-000: ================== END STATUS ================== [ 425.927244][ T5946] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 425.970892][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 426.089148][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 426.107573][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 426.143200][ T5946] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 426.155851][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.174550][ T5946] usb 4-1: Product: syz [ 426.179855][ T5946] usb 4-1: Manufacturer: syz [ 426.185159][ T5946] usb 4-1: SerialNumber: syz [ 426.193699][ T5946] usb 4-1: config 0 descriptor?? [ 426.203848][ T5946] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 426.219217][ T5946] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 426.477419][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 426.805878][ T5946] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 427.089883][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 427.098555][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 427.111861][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 427.134754][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 427.153506][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 427.180427][ T9] usb 3-1: Product: syz [ 427.184681][ T9] usb 3-1: Manufacturer: syz [ 427.189690][ T9] usb 3-1: SerialNumber: syz [ 427.212367][ T9] usb 3-1: config 0 descriptor?? [ 427.222068][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 427.228958][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 427.242477][ T5918] usb 1-1: USB disconnect, device number 33 [ 427.354473][ T5946] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 427.365972][ T5946] em28xx 4-1:0.0: board has no eeprom [ 427.385513][T10995] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1309'. [ 427.557479][ T886] usb 3-1: USB disconnect, device number 41 [ 427.637163][ T5918] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 427.792371][ T5918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.807106][ T5918] usb 1-1: not running at top speed; connect to a high speed hub [ 427.816119][ T5918] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 427.827757][T10996] loop6: detected capacity change from 0 to 7 [ 427.835642][T10996] Dev loop6: unable to read RDB block 7 [ 427.841463][T10996] loop6: unable to read partition table [ 427.847665][T10996] loop6: partition table beyond EOD, truncated [ 427.853858][T10996] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 427.863322][ T5918] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 427.873741][ T5918] usb 1-1: config 17 has no interface number 0 [ 427.880414][ T5918] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 427.891445][ T5918] usb 1-1: config 17 interface 8 has no altsetting 0 [ 427.905828][ T5918] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 427.916740][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.932524][ T5918] usb 1-1: Product: syz [ 427.936838][ T5918] usb 1-1: Manufacturer: syz [ 427.941595][ T5918] usb 1-1: SerialNumber: syz [ 428.085922][T11000] gretap1: entered promiscuous mode [ 428.091368][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 428.091387][ T30] audit: type=1326 audit(1755971797.353:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.091444][ T30] audit: type=1326 audit(1755971797.353:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.093874][ T30] audit: type=1326 audit(1755971797.363:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.114206][T11000] gretap1: entered allmulticast mode [ 428.191815][ T5918] usb 1-1: selecting invalid altsetting 0 [ 428.211045][ T30] audit: type=1326 audit(1755971797.363:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.252627][ T5918] usb 1-1: USB disconnect, device number 34 [ 428.280086][ T30] audit: type=1326 audit(1755971797.363:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.367387][ T30] audit: type=1326 audit(1755971797.413:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.456707][ T30] audit: type=1326 audit(1755971797.413:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.500827][ T30] audit: type=1326 audit(1755971797.413:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.540989][ T6716] udevd[6716]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.640193][T10980] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 428.657558][ T30] audit: type=1326 audit(1755971797.413:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.698749][ T886] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 428.707805][ T5946] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 428.719513][ T30] audit: type=1326 audit(1755971797.413:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 428.751446][ T5946] em28xx 4-1:0.0: dvb set to bulk mode. [ 428.761361][ T9] em28xx 4-1:0.0: Binding DVB extension [ 428.786453][T11019] vivid-000: ================= START STATUS ================= [ 428.794357][T11019] vivid-000: Test Pattern: 75% Colorbar [ 428.799579][ T5946] usb 4-1: USB disconnect, device number 25 [ 428.830746][T11019] vivid-000: Fill Percentage of Frame: 100 [ 428.839009][ T5946] em28xx 4-1:0.0: Disconnecting em28xx [ 428.847284][T11019] vivid-000: Horizontal Movement: No Movement [ 428.853397][T11019] vivid-000: Vertical Movement: No Movement [ 428.857066][ T886] usb 5-1: Using ep0 maxpacket: 16 [ 428.873636][T11019] vivid-000: OSD Text Mode: All [ 428.879157][ T886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.879202][ T886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.879230][ T886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.879251][ T886] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 428.880722][ T886] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.939877][ T9] em28xx 4-1:0.0: Registering input extension [ 428.946307][ T5946] em28xx 4-1:0.0: Closing input extension [ 428.954154][T11019] vivid-000: Show Border: false [ 428.962880][T11019] vivid-000: Show Square: false [ 428.971428][T11019] vivid-000: Sensor Flipped Horizontally: false [ 428.978720][T11019] vivid-000: Sensor Flipped Vertically: false [ 428.985695][T11019] vivid-000: Insert SAV Code in Image: false [ 429.005739][T11019] vivid-000: Insert EAV Code in Image: [ 429.008623][ T5946] em28xx 4-1:0.0: Freeing device [ 429.021489][T11019] false [ 429.025732][ T886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 429.037449][T11019] vivid-000: Insert Video Guard Band: false [ 429.055450][T11019] vivid-000: Reduced Framerate: false [ 429.065007][ T886] usb 5-1: SerialNumber: syz [ 429.070294][T11019] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 429.081095][T11019] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 429.098418][T11019] vivid-000: Enable Capture Cropping: true grabbed [ 429.111608][T11019] vivid-000: Enable Capture Composing: true grabbed [ 429.123650][T11019] vivid-000: Enable Capture Scaler: true grabbed [ 429.143927][T11019] vivid-000: Timestamp Source: End of Frame [ 429.150052][T11019] vivid-000: Colorspace: sRGB [ 429.154972][T11019] vivid-000: Transfer Function: Default [ 429.165267][T11019] vivid-000: Y'CbCr Encoding: Default [ 429.189189][T11019] vivid-000: HSV Encoding: Hue 0-179 [ 429.242378][ T886] hub 5-1:1.0: bad descriptor, ignoring hub [ 429.257847][ T886] hub 5-1:1.0: probe with driver hub failed with error -5 [ 429.274511][ T886] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 429.281351][T11019] vivid-000: Quantization: Default [ 429.298265][T11019] vivid-000: Apply Alpha To Red Only: false [ 429.319700][T11019] vivid-000: Standard Aspect Ratio: 4x3 [ 429.334057][T11019] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 429.351145][T11019] vivid-000: DV Timings: 640x480p59 inactive [ 429.358816][T11019] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 429.372631][T11019] vivid-000: Maximum EDID Blocks: 2 [ 429.387103][T11019] vivid-000: Limited RGB Range (16-235): false [ 429.397427][T11019] vivid-000: Rx RGB Quantization Range: Automatic [ 429.408443][T11019] vivid-000: Power Present: 0x00000001 [ 429.418329][T11019] tpg source WxH: 320x180 (R'G'B) [ 429.424925][T11019] tpg field: 1 [ 429.430511][T11019] tpg crop: (0,0)/320x180 [ 429.437442][T11019] tpg compose: (0,0)/320x180 [ 429.445111][T11019] tpg colorspace: 8 [ 429.450567][T11019] tpg transfer function: 0/2 [ 429.458265][T11019] tpg quantization: 0/1 [ 429.463756][T11019] tpg RGB range: 0/2 [ 429.469297][T11019] vivid-000: ================== END STATUS ================== [ 429.647485][ T5919] usb 5-1: USB disconnect, device number 43 [ 429.836199][T11038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 430.074728][ T886] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 430.157215][T11048] vivid-000: ================= START STATUS ================= [ 430.166363][T11048] vivid-000: Test Pattern: 75% Colorbar [ 430.172479][T11048] vivid-000: Fill Percentage of Frame: 100 [ 430.183024][T11048] vivid-000: Horizontal Movement: No Movement [ 430.190540][T11048] vivid-000: Vertical Movement: No Movement [ 430.228267][T11048] vivid-000: OSD Text Mode: All [ 430.234376][T11048] vivid-000: Show Border: false [ 430.241316][T11048] vivid-000: Show Square: false [ 430.250736][T11048] vivid-000: Sensor Flipped Horizontally: false [ 430.269030][T11048] vivid-000: Sensor Flipped Vertically: false [ 430.275546][T11048] vivid-000: Insert SAV Code in Image: false [ 430.282920][T11048] vivid-000: Insert EAV Code in Image: false [ 430.309912][T11048] vivid-000: Insert Video Guard Band: false [ 430.315986][T11048] vivid-000: Reduced Framerate: false [ 430.341692][T11048] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 430.354771][ T886] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 430.361873][T11052] tipc: New replicast peer: 255.255.255.255 [ 430.364045][ T886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.385111][T11052] tipc: Enabled bearer , priority 10 [ 430.391886][T11048] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 430.402937][T11048] vivid-000: Enable Capture Cropping: true grabbed [ 430.414476][ T886] usb 1-1: config 0 descriptor?? [ 430.424426][T11048] vivid-000: Enable Capture Composing: true grabbed [ 430.431297][T11048] vivid-000: Enable Capture Scaler: true grabbed [ 430.439972][T11048] vivid-000: Timestamp Source: End of Frame [ 430.445922][T11048] vivid-000: Colorspace: sRGB [ 430.450755][T11048] vivid-000: Transfer Function: Default [ 430.456340][T11048] vivid-000: Y'CbCr Encoding: Default [ 430.463997][T11048] vivid-000: HSV Encoding: Hue 0-179 [ 430.474119][T11048] vivid-000: Quantization: Default [ 430.495050][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 430.505580][ T886] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 430.522218][T11048] vivid-000: Apply Alpha To Red Only: false [ 430.539287][T11055] netlink: 'syz.4.1326': attribute type 7 has an invalid length. [ 430.547753][T11052] netlink: 'syz.3.1325': attribute type 14 has an invalid length. [ 430.552088][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 430.585730][T11048] vivid-000: Standard Aspect Ratio: 4x3 [ 430.628797][T11048] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 430.658917][T11048] vivid-000: DV Timings: 640x480p59 inactive [ 430.666680][T11048] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 430.675360][T11048] vivid-000: Maximum EDID Blocks: 2 [ 430.682843][T11048] vivid-000: Limited RGB Range (16-235): false [ 430.813459][T11048] vivid-000: Rx RGB Quantization Range: Automatic [ 430.846339][T11048] vivid-000: Power Present: 0x00000001 [ 430.855133][T11048] tpg source WxH: 320x180 (R'G'B) [ 430.864315][T11048] tpg field: 1 [ 430.868205][T11048] tpg crop: (0,0)/320x180 [ 430.877699][T11048] tpg compose: (0,0)/320x180 [ 430.886415][T11048] tpg colorspace: 8 [ 430.890365][T11048] tpg transfer function: 0/2 [ 430.894986][T11048] tpg quantization: 0/1 [ 430.899224][T11048] tpg RGB range: 0/2 [ 430.903145][T11048] vivid-000: ================== END STATUS ================== [ 431.398961][ T9] tipc: Node number set to 2098794483 [ 431.784713][T11074] netlink: 'syz.2.1329': attribute type 153 has an invalid length. [ 431.793375][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1329'. [ 431.837168][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 432.068084][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 432.079451][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 432.090600][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 432.206052][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.221607][ T5919] usb 1-1: USB disconnect, device number 35 [ 432.249742][ T9] usb 4-1: config 0 descriptor?? [ 432.484789][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 432.620331][ T9] ath6kl: Failed to submit usb control message: -71 [ 432.627278][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 432.649437][ T9] ath6kl: Unable to send get target info: -71 [ 432.667333][ T9] ath6kl: Failed to init ath6kl core: -71 [ 432.702379][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 432.727755][ T9] usb 4-1: USB disconnect, device number 26 [ 432.942616][T11088] vivid-000: ================= START STATUS ================= [ 432.950527][T11088] vivid-000: Test Pattern: 75% Colorbar [ 432.958610][T11088] vivid-000: Fill Percentage of Frame: 100 [ 432.966552][T11088] vivid-000: Horizontal Movement: No Movement [ 432.977019][T11088] vivid-000: Vertical Movement: No Movement [ 432.984357][T11088] vivid-000: OSD Text Mode: All [ 432.996779][T11088] vivid-000: Show Border: false [ 433.024731][T11088] vivid-000: Show Square: false [ 433.030492][T11088] vivid-000: Sensor Flipped Horizontally: false [ 433.036955][T11088] vivid-000: Sensor Flipped Vertically: false [ 433.046207][T11088] vivid-000: Insert SAV Code in Image: false [ 433.058931][T11088] vivid-000: Insert EAV Code in Image: false [ 433.066693][T11088] vivid-000: Insert Video Guard Band: false [ 433.077026][T11088] vivid-000: Reduced Framerate: false [ 433.100811][T11088] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 433.109435][T11088] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 433.124085][T11088] vivid-000: Enable Capture Cropping: true grabbed [ 433.131586][T11088] vivid-000: Enable Capture Composing: true grabbed [ 433.142993][T11088] vivid-000: Enable Capture Scaler: true grabbed [ 433.149608][T11088] vivid-000: Timestamp Source: End of Frame [ 433.158144][T11088] vivid-000: Colorspace: sRGB [ 433.163016][T11088] vivid-000: Transfer Function: Default [ 433.171967][T11088] vivid-000: Y'CbCr Encoding: Default [ 433.180119][T11088] vivid-000: HSV Encoding: Hue 0-179 [ 433.187100][T11088] vivid-000: Quantization: Default [ 433.194209][T11088] vivid-000: Apply Alpha To Red Only: false [ 433.201807][T11088] vivid-000: Standard Aspect Ratio: 4x3 [ 433.209898][T11088] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 433.217893][T11088] vivid-000: DV Timings: 640x480p59 inactive [ 433.225854][T11088] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 433.234919][T11088] vivid-000: Maximum EDID Blocks: 2 [ 433.242194][T11088] vivid-000: Limited RGB Range (16-235): false [ 433.250027][T11088] vivid-000: Rx RGB Quantization Range: Automatic [ 433.256770][T11088] vivid-000: Power Present: 0x00000001 [ 433.263956][T11088] tpg source WxH: 320x180 (R'G'B) [ 433.269995][T11088] tpg field: 1 [ 433.276238][T11088] tpg crop: (0,0)/320x180 [ 433.282296][T11088] tpg compose: (0,0)/320x180 [ 433.288193][T11088] tpg colorspace: 8 [ 433.292188][T11088] tpg transfer function: 0/2 [ 433.296932][T11088] tpg quantization: 0/1 [ 433.302942][T11088] tpg RGB range: 0/2 [ 433.307009][T11088] vivid-000: ================== END STATUS ================== [ 433.530133][T11093] vivid-000: ================= START STATUS ================= [ 433.552954][T11093] vivid-000: Test Pattern: 75% Colorbar [ 433.962532][T11093] vivid-000: Fill Percentage of Frame: 100 [ 433.999053][T11093] vivid-000: Horizontal Movement: No Movement [ 434.048249][T11093] vivid-000: Vertical Movement: No Movement [ 434.054497][T11093] vivid-000: OSD Text Mode: All [ 434.064814][T11093] vivid-000: Show Border: false [ 434.071111][T11093] vivid-000: Show Square: false [ 434.077141][T11093] vivid-000: Sensor Flipped Horizontally: false [ 434.084914][T11093] vivid-000: Sensor Flipped Vertically: false [ 434.092535][T11093] vivid-000: Insert SAV Code in Image: false [ 434.099713][T11093] vivid-000: Insert EAV Code in Image: false [ 434.105980][T11093] vivid-000: Insert Video Guard Band: false [ 434.112156][T11093] vivid-000: Reduced Framerate: false [ 434.117842][T11093] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 434.126794][T11093] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 434.191205][T11093] vivid-000: Enable Capture Cropping: true grabbed [ 434.198831][T11093] vivid-000: Enable Capture Composing: true grabbed [ 434.205952][T11093] vivid-000: Enable Capture Scaler: true grabbed [ 434.212910][T11093] vivid-000: Timestamp Source: End of Frame [ 434.219265][T11093] vivid-000: Colorspace: sRGB [ 434.225040][T11093] vivid-000: Transfer Function: Default [ 434.231101][T11093] vivid-000: Y'CbCr Encoding: Default [ 434.237297][T11093] vivid-000: HSV Encoding: Hue 0-179 [ 434.242875][T11093] vivid-000: Quantization: Default [ 434.248390][T11093] vivid-000: Apply Alpha To Red Only: false [ 434.254441][T11093] vivid-000: Standard Aspect Ratio: 4x3 [ 434.260446][T11093] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 434.268663][T11093] vivid-000: DV Timings: 640x480p59 inactive [ 434.275389][T11093] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 434.283255][T11093] vivid-000: Maximum EDID Blocks: 2 [ 434.288968][T11093] vivid-000: Limited RGB Range (16-235): false [ 434.295425][T11093] vivid-000: Rx RGB Quantization Range: Automatic [ 434.302325][T11093] vivid-000: Power Present: 0x00000001 [ 434.308256][T11093] tpg source WxH: 320x180 (R'G'B) [ 434.313451][T11093] tpg field: 1 [ 434.316933][T11093] tpg crop: (0,0)/320x180 [ 434.328787][T11093] tpg compose: (0,0)/320x180 [ 434.334357][T11093] tpg colorspace: 8 [ 434.339079][T11093] tpg transfer function: 0/2 [ 434.343834][T11093] tpg quantization: 0/1 [ 434.348693][T11093] tpg RGB range: 0/2 [ 434.352719][T11093] vivid-000: ================== END STATUS ================== [ 434.596110][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 434.629146][T11107] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1338'. [ 434.654580][T11107] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 434.724464][T11110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 434.945750][T11119] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 434.970837][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 435.059932][ T5964] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 435.076183][T11124] tipc: Enabling of bearer rejected, failed to enable media [ 435.152961][ T9] usb 2-1: config 0 has no interfaces? [ 435.164720][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 435.182361][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.210782][ T9] usb 2-1: Product: syz [ 435.215241][ T9] usb 2-1: Manufacturer: syz [ 435.223932][ T9] usb 2-1: SerialNumber: syz [ 435.239084][ T5964] usb 1-1: Using ep0 maxpacket: 16 [ 435.245017][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 435.258654][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 435.265559][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.279814][ T5946] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 435.287777][ T5964] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 435.315735][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.335060][ T5964] usb 1-1: config 0 descriptor?? [ 435.477135][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 435.484131][ T5946] usb 5-1: unable to get BOS descriptor or descriptor too short [ 435.493283][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 435.507204][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 435.518321][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 435.528507][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 435.538487][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 435.550518][ T5946] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 435.560683][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 435.571437][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 48059, setting to 1024 [ 435.583046][ T5946] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 435.597691][ T5946] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 435.608519][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.620785][ T5946] usb 5-1: Product: syz [ 435.625062][ T5946] usb 5-1: Manufacturer: syz [ 435.631016][ T5946] usb 5-1: SerialNumber: syz [ 435.642207][ T5946] usb 5-1: config 0 descriptor?? [ 435.656575][T11122] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 435.672481][ T5946] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.748924][ T5946] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 435.841077][ T7375] udevd[7375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.891422][ T886] r8152-cfgselector 2-1: USB disconnect, device number 51 [ 435.918079][ T5946] usb 5-1: USB disconnect, device number 44 [ 436.052735][ T5964] usbhid 1-1:0.0: can't add hid device: -71 [ 436.061043][ T5964] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 436.092594][ T5964] usb 1-1: USB disconnect, device number 36 [ 436.277170][ T5919] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 436.317060][ T5932] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 436.443298][ T5919] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.451721][ T5919] usb 3-1: config 0 has no interface number 0 [ 436.465133][ T5919] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 436.497958][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.509632][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 436.517765][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 436.528845][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 436.541317][ T5919] usb 3-1: Product: syz [ 436.547695][ T5932] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 436.568379][ T5919] usb 3-1: Manufacturer: syz [ 436.573490][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 436.582182][ T5919] usb 3-1: SerialNumber: syz [ 436.605814][ T5932] usb 4-1: Product: syz [ 436.622976][ T5932] usb 4-1: Manufacturer: syz [ 436.625549][ T5919] usb 3-1: config 0 descriptor?? [ 436.653408][ T5932] usb 4-1: SerialNumber: syz [ 436.707475][ T5932] usb 4-1: config 0 descriptor?? [ 436.717592][ T5932] hub 4-1:0.0: bad descriptor, ignoring hub [ 436.733636][ T5932] hub 4-1:0.0: probe with driver hub failed with error -5 [ 436.928334][ T5932] usb 4-1: USB disconnect, device number 27 [ 436.942190][ T5919] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 437.057747][ T5919] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 437.081251][T11151] vivid-000: ================= START STATUS ================= [ 437.089218][T11151] vivid-000: Test Pattern: 75% Colorbar [ 437.094819][T11151] vivid-000: Fill Percentage of Frame: 100 [ 437.100818][T11151] vivid-000: Horizontal Movement: No Movement [ 437.107131][T11151] vivid-000: Vertical Movement: No Movement [ 437.113479][T11151] vivid-000: OSD Text Mode: All [ 437.119128][T11151] vivid-000: Show Border: false [ 437.147251][T11151] vivid-000: Show Square: false [ 437.153166][T11151] vivid-000: Sensor Flipped Horizontally: false [ 437.159539][T11151] vivid-000: Sensor Flipped Vertically: false [ 437.165723][T11151] vivid-000: Insert SAV Code in Image: false [ 437.171825][T11151] vivid-000: Insert EAV Code in Image: false [ 437.177981][T11151] vivid-000: Insert Video Guard Band: false [ 437.183937][T11151] vivid-000: Reduced Framerate: false [ 437.189445][T11151] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 437.197310][T11151] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 437.205411][T11151] vivid-000: Enable Capture Cropping: true grabbed [ 437.212102][T11151] vivid-000: Enable Capture Composing: true grabbed [ 437.218819][T11151] vivid-000: Enable Capture Scaler: true grabbed [ 437.225322][T11151] vivid-000: Timestamp Source: End of Frame [ 437.231355][T11151] vivid-000: Colorspace: sRGB [ 437.236081][T11151] vivid-000: Transfer Function: Default [ 437.241731][T11151] vivid-000: Y'CbCr Encoding: Default [ 437.247234][T11151] vivid-000: HSV Encoding: Hue 0-179 [ 437.252583][T11151] vivid-000: Quantization: Default [ 437.257826][T11151] vivid-000: Apply Alpha To Red Only: false [ 437.263762][T11151] vivid-000: Standard Aspect Ratio: 4x3 [ 437.269468][T11151] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 437.277504][T11151] vivid-000: DV Timings: 640x480p59 inactive [ 437.283535][T11151] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 437.290950][T11151] vivid-000: Maximum EDID Blocks: 2 [ 437.296199][T11151] vivid-000: Limited RGB Range (16-235): false [ 437.302477][T11151] vivid-000: Rx RGB Quantization Range: Automatic [ 437.309082][T11151] vivid-000: Power Present: 0x00000001 [ 437.314581][T11151] tpg source WxH: 320x180 (R'G'B) [ 437.319700][T11151] tpg field: 1 [ 437.323090][T11151] tpg crop: (0,0)/320x180 [ 437.327527][T11151] tpg compose: (0,0)/320x180 [ 437.332150][T11151] tpg colorspace: 8 [ 437.335984][T11151] tpg transfer function: 0/2 [ 437.340662][T11151] tpg quantization: 0/1 [ 437.344840][T11151] tpg RGB range: 0/2 [ 437.348826][T11151] vivid-000: ================== END STATUS ================== [ 437.463668][ T5919] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 437.475787][ T5919] usb 3-1: media controller created [ 437.544309][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.644792][ T5919] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 439.647289][ T5918] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 439.761668][ T5919] usb 3-1: USB disconnect, device number 42 [ 439.837115][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 439.887056][ T5918] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 439.919346][ T5918] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.963186][ T5918] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 439.984938][ T5918] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.001149][ T5918] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.021780][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.028121][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.038571][ T5918] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 440.047716][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.110841][T11184] netlink: 'syz.2.1359': attribute type 15 has an invalid length. [ 440.137544][T11184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1359'. [ 440.151227][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 440.200274][T11185] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1360'. [ 440.233541][T11185] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 440.285554][ T5918] usb 2-1: GET_CAPABILITIES returned 0 [ 440.297191][ T5918] usbtmc 2-1:16.0: can't read capabilities [ 440.417992][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 440.613355][T11179] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 440.614349][ T5932] usb 2-1: USB disconnect, device number 52 [ 440.637543][ T5918] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 441.239819][T11179] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1357'. [ 441.379271][ T5918] usb 5-1: config 0 has no interfaces? [ 441.387816][ T5918] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 441.397296][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.405308][ T5918] usb 5-1: Product: syz [ 441.437163][ T886] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 441.498392][ T5918] usb 5-1: Manufacturer: syz [ 441.503117][ T5918] usb 5-1: SerialNumber: syz [ 441.525783][ T5918] r8152-cfgselector 5-1: Unknown version 0x0000 [ 441.532533][ T5918] r8152-cfgselector 5-1: config 0 descriptor?? [ 441.538837][ T5919] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 441.629794][ T886] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 441.649531][ T886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.697781][ T886] usb 1-1: config 0 descriptor?? [ 441.711445][ T5919] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 441.725193][ T886] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 441.737106][ T5919] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 441.748107][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.767990][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 441.839355][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 441.859730][ T886] r8152-cfgselector 5-1: USB disconnect, device number 45 [ 441.883708][ T5919] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 441.895307][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 441.903502][ T5919] usb 4-1: Product: syz [ 441.910439][ T5919] usb 4-1: Manufacturer: syz [ 441.942505][ T5919] cdc_wdm 4-1:1.0: skipping garbage [ 441.947982][ T5919] cdc_wdm 4-1:1.0: skipping garbage [ 441.974104][ T5919] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 441.986519][ T5919] cdc_wdm 4-1:1.0: Unknown control protocol [ 442.357168][ T886] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 442.533974][ T5964] usb 1-1: USB disconnect, device number 37 [ 442.567108][ T5932] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 442.707093][ T5932] usb 3-1: device descriptor read/64, error -71 [ 442.760993][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 442.767281][ T5964] usb 4-1: USB disconnect, device number 28 [ 442.767619][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 442.779566][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 442.789012][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 442.803188][ T886] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.817206][ T886] usb 2-1: config 0 has no interface number 0 [ 442.860162][ T886] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 442.871234][ T886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.999350][ T5932] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 443.013111][ T886] usb 2-1: Product: syz [ 443.022840][ T886] usb 2-1: Manufacturer: syz [ 443.030859][ T886] usb 2-1: SerialNumber: syz [ 443.045850][ T886] usb 2-1: config 0 descriptor?? [ 443.147165][ T5932] usb 3-1: device descriptor read/64, error -71 [ 443.258395][ T5932] usb usb3-port1: attempt power cycle [ 443.275724][ T886] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 443.301203][ T886] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 443.361480][ T886] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 443.375442][ T886] usb 2-1: media controller created [ 443.565070][T11253] vivid-000: ================= START STATUS ================= [ 443.637464][ T5932] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 443.658969][ T5932] usb 3-1: device descriptor read/8, error -71 [ 443.666409][T11253] vivid-000: Test Pattern: 75% Colorbar [ 443.672581][T11253] vivid-000: Fill Percentage of Frame: 100 [ 443.678969][T11253] vivid-000: Horizontal Movement: No Movement [ 443.685125][T11253] vivid-000: Vertical Movement: No Movement [ 443.692752][T11253] vivid-000: OSD Text Mode: All [ 443.706404][ T886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.741653][T11253] vivid-000: Show Border: false [ 443.754410][T11253] vivid-000: Show Square: false [ 443.759839][T11253] vivid-000: Sensor Flipped Horizontally: false [ 443.766158][T11253] vivid-000: Sensor Flipped Vertically: false [ 443.772491][T11253] vivid-000: Insert SAV Code in Image: false [ 443.778570][T11253] vivid-000: Insert EAV Code in Image: false [ 443.784654][T11253] vivid-000: Insert Video Guard Band: false [ 443.790658][T11253] vivid-000: Reduced Framerate: false [ 443.796081][T11253] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 443.803850][T11253] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 443.837269][T11253] vivid-000: Enable Capture Cropping: true grabbed [ 443.843860][T11253] vivid-000: Enable Capture Composing: true grabbed [ 443.850645][T11253] vivid-000: Enable Capture Scaler: true grabbed [ 443.858900][T11253] vivid-000: Timestamp Source: End of Frame [ 443.864942][T11253] vivid-000: Colorspace: sRGB [ 443.869773][T11253] vivid-000: Transfer Function: Default [ 443.875366][T11253] vivid-000: Y'CbCr Encoding: Default [ 443.880862][T11253] vivid-000: HSV Encoding: Hue 0-179 [ 443.886249][T11253] vivid-000: Quantization: Default [ 443.891517][T11253] vivid-000: Apply Alpha To Red Only: false [ 443.897528][T11253] vivid-000: Standard Aspect Ratio: 4x3 [ 443.903114][T11253] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 443.910979][T11253] vivid-000: DV Timings: 4096x2160p60 inactive [ 443.917268][T11253] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 443.924596][T11253] vivid-000: Maximum EDID Blocks: 2 [ 443.930151][T11253] vivid-000: Limited RGB Range (16-235): false [ 443.936467][T11253] vivid-000: Rx RGB Quantization Range: Automatic [ 443.942996][T11253] vivid-000: Power Present: 0x00000001 [ 443.948583][T11253] tpg source WxH: 320x180 (R'G'B) [ 443.953625][T11253] tpg field: 1 [ 443.957135][T11253] tpg crop: (0,0)/320x180 [ 443.961482][T11253] tpg compose: (0,0)/320x180 [ 443.966131][T11253] tpg colorspace: 8 [ 443.970005][T11253] tpg transfer function: 0/2 [ 443.974613][T11253] tpg quantization: 0/1 [ 443.978817][T11253] tpg RGB range: 0/2 [ 443.982759][T11253] vivid-000: ================== END STATUS ================== [ 444.131196][ T5932] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 444.178615][ T5932] usb 3-1: device descriptor read/8, error -71 [ 444.289189][ T5932] usb usb3-port1: unable to enumerate USB device [ 444.926269][T11266] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 444.934299][T11266] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1377'. [ 445.026058][T11268] binder: 11264:11268 ioctl c01cf509 80000080 returned -22 [ 445.059177][T11268] delete_channel: no stack [ 445.418917][T11278] syzkaller1: entered promiscuous mode [ 445.426831][T11278] syzkaller1: entered allmulticast mode [ 445.598212][ T886] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 445.736521][ T886] usb 2-1: USB disconnect, device number 53 [ 446.136332][ T5918] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 446.309809][T11295] block nbd0: Attempted send on invalid socket [ 446.316021][T11295] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 446.672903][ T5918] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 446.694671][ T5918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.727080][ T5932] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 446.758561][ T5918] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.773998][ T5918] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 446.783482][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.810966][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 446.830889][ T5918] usb 5-1: invalid MIDI out EP 0 [ 446.889076][ T5932] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 446.901732][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.974310][ T5932] usb 4-1: config 0 descriptor?? [ 447.004313][ T5932] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 447.074976][ T5918] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 447.654695][ T5932] usb 4-1: USB disconnect, device number 29 [ 447.985823][T11300] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 448.475869][ T5932] usb 5-1: USB disconnect, device number 46 [ 449.867154][ T5932] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 449.999581][T11353] vivid-000: ================= START STATUS ================= [ 450.008364][T11353] vivid-000: Test Pattern: 75% Colorbar [ 450.014877][T11353] vivid-000: Fill Percentage of Frame: 100 [ 450.022392][T11353] vivid-000: Horizontal Movement: No Movement [ 450.029032][T11353] vivid-000: Vertical Movement: No Movement [ 450.036734][T11353] vivid-000: OSD Text Mode: All [ 450.041920][T11353] vivid-000: Show Border: false [ 450.047124][T11353] vivid-000: Show Square: false [ 450.055863][T11353] vivid-000: Sensor Flipped Horizontally: false [ 450.077153][T11353] vivid-000: Sensor Flipped Vertically: false [ 450.085766][T11353] vivid-000: Insert SAV Code in Image: false [ 450.096752][T11353] vivid-000: Insert EAV Code in Image: false [ 450.103197][ T5932] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 450.116941][T11353] vivid-000: Insert Video Guard Band: [ 450.117541][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.131110][T11353] false [ 450.430060][T11353] vivid-000: Reduced Framerate: false [ 450.435464][T11353] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 450.504841][ T5932] usb 4-1: Product: syz [ 450.509149][ T5946] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 450.531209][ T5932] usb 4-1: Manufacturer: syz [ 450.541258][ T5932] usb 4-1: SerialNumber: syz [ 450.586346][ T5932] usb 4-1: config 0 descriptor?? [ 450.704676][ T5932] usb 4-1: selecting invalid altsetting 3 [ 450.749389][ T5932] comedi comedi5: could not set alternate setting 3 in high speed [ 450.785671][ T5932] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 450.813378][ T5946] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 450.830549][ T5946] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 450.860028][ T5932] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 450.883089][T11333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.913748][T11353] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 450.918140][T11333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.929846][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 451.130164][T11353] [ 451.154929][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 451.177123][T11353] vivid-000: Enable Capture Cropping: true grabbed [ 451.242964][T11353] vivid-000: Enable Capture Composing: [ 451.244956][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 451.254027][T11353] true grabbed [ 451.293831][T11353] vivid-000: Enable Capture Scaler: true grabbed [ 451.330051][T11353] vivid-000: Timestamp Source: End of Frame [ 451.336007][T11353] vivid-000: Colorspace: sRGB [ 451.344335][T11353] vivid-000: Transfer Function: Default [ 451.351091][T11353] vivid-000: Y'CbCr Encoding: Default [ 451.356658][T11353] vivid-000: HSV Encoding: Hue 0-179 [ 451.364052][T11353] vivid-000: Quantization: Default [ 451.371147][T11353] vivid-000: Apply Alpha To Red Only: false [ 451.377508][T11353] vivid-000: Standard Aspect Ratio: 4x3 [ 451.384101][T11353] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 451.391954][T11353] vivid-000: DV Timings: 4096x2160p60 inactive [ 451.398219][T11353] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 451.405562][T11353] vivid-000: Maximum EDID Blocks: 2 [ 451.410845][T11353] vivid-000: Limited RGB Range (16-235): false [ 451.417114][T11353] vivid-000: Rx RGB Quantization Range: Automatic [ 451.423652][T11353] vivid-000: Power Present: 0x00000001 [ 451.429363][T11353] tpg source WxH: 320x180 (R'G'B) [ 451.434520][T11353] tpg field: 1 [ 451.439475][T11353] tpg crop: (0,0)/320x180 [ 451.446096][T11353] tpg compose: (0,0)/320x180 [ 451.452037][ T5946] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 451.461941][T11353] tpg colorspace: 8 [ 451.466211][T11353] tpg transfer function: 0/2 [ 451.471156][T11353] tpg quantization: 0/1 [ 451.475398][T11353] tpg RGB range: 0/2 [ 451.481462][T11353] vivid-000: ================== END STATUS ================== [ 451.537583][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 451.564477][ T5946] usb 3-1: Product: syz [ 451.576836][T11333] netlink: 'syz.3.1396': attribute type 5 has an invalid length. [ 451.592398][ T5946] usb 3-1: Manufacturer: syz [ 451.721390][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 451.728788][T11333] netlink: 'syz.3.1396': attribute type 3 has an invalid length. [ 451.746622][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 451.762790][T11333] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.1396'. [ 451.781141][ T5946] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 451.793808][ T5946] cdc_wdm 3-1:1.0: Unknown control protocol [ 451.830145][ T5918] usb 4-1: USB disconnect, device number 30 [ 452.031518][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.038165][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.047321][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.053967][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.060342][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.066967][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.073272][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.079857][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.086133][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.092719][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.099020][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.105610][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.111897][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.118501][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.124778][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.131409][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.137753][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.144370][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.150642][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 452.157250][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 452.164658][ T886] usb 3-1: USB disconnect, device number 47 [ 452.170608][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 453.166782][T11397] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1408'. [ 453.176684][T11395] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1408'. [ 453.348753][T11399] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1409'. [ 453.787157][ T5946] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 453.917093][ T5946] usb 5-1: device descriptor read/64, error -71 [ 453.967140][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 454.073070][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 454.085147][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 454.098012][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 454.113237][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 454.123363][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 454.133205][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 454.142932][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 454.142969][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.161371][ T5946] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 454.197567][ T9] usb 1-1: config 0 descriptor?? [ 454.223504][ T9] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 454.310579][ T5946] usb 5-1: device descriptor read/64, error -71 [ 454.427361][ T5946] usb usb5-port1: attempt power cycle [ 454.507098][ T5918] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 454.562611][T11421] bond0: entered promiscuous mode [ 454.570125][T11421] bond0: entered allmulticast mode [ 454.677798][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 454.690016][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.704182][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.856853][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.910312][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.926128][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.937951][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.959034][ T886] usb 1-1: USB disconnect, device number 38 [ 454.997107][ T5946] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 455.027729][ T5946] usb 5-1: device descriptor read/8, error -71 [ 455.062373][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 455.062392][ T30] audit: type=1326 audit(1755971824.333:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.111990][T11430] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 455.202413][T11430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.316040][ T5918] usb 3-1: GET_CAPABILITIES returned 0 [ 455.329337][ T5918] usbtmc 3-1:16.0: can't read capabilities [ 455.344290][ T30] audit: type=1326 audit(1755971824.333:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.383579][ T30] audit: type=1326 audit(1755971824.333:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.409914][ T30] audit: type=1326 audit(1755971824.333:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.432730][ T5946] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 455.462799][ T30] audit: type=1326 audit(1755971824.333:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.525798][ T5946] usb 5-1: device descriptor read/8, error -71 [ 455.543165][ T30] audit: type=1326 audit(1755971824.333:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.605997][ T30] audit: type=1326 audit(1755971824.333:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.628369][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.648021][ T5946] usb usb5-port1: unable to enumerate USB device [ 455.656462][ T30] audit: type=1326 audit(1755971824.333:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.678523][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.686488][ T30] audit: type=1326 audit(1755971824.333:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 455.785998][T11440] vivid-000: ================= START STATUS ================= [ 455.796921][T11440] vivid-000: Test Pattern: 75% Colorbar [ 455.804407][T11440] vivid-000: Fill Percentage of Frame: 100 [ 455.812624][T11440] vivid-000: Horizontal Movement: No Movement [ 455.821963][T11440] vivid-000: Vertical Movement: No Movement [ 455.828485][T11440] vivid-000: OSD Text Mode: All [ 455.838051][T11440] vivid-000: Show Border: false [ 455.845032][T11440] vivid-000: Show Square: false [ 455.853606][T11440] vivid-000: Sensor Flipped Horizontally: false [ 455.865448][T11440] vivid-000: Sensor Flipped Vertically: false [ 455.871824][T11440] vivid-000: Insert SAV Code in Image: false [ 455.880863][T11440] vivid-000: Insert EAV Code in Image: false [ 455.889381][T11440] vivid-000: Insert Video Guard Band: false [ 455.896377][T11440] vivid-000: Reduced Framerate: false [ 455.905459][T11440] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 455.919069][T11440] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 455.941721][T11440] vivid-000: Enable Capture Cropping: true grabbed [ 455.951170][T11440] vivid-000: Enable Capture Composing: true grabbed [ 455.961701][T11440] vivid-000: Enable Capture Scaler: true grabbed [ 455.969137][T11440] vivid-000: Timestamp Source: End of Frame [ 455.982297][T11440] vivid-000: Colorspace: sRGB [ 455.987672][T11440] vivid-000: Transfer Function: Default [ 455.995442][T11440] vivid-000: Y'CbCr Encoding: Default [ 456.003777][T11440] vivid-000: HSV Encoding: Hue 0-179 [ 456.009589][T11440] vivid-000: Quantization: Default [ 456.018610][T11440] vivid-000: Apply Alpha To Red Only: false [ 456.025344][T11440] vivid-000: Standard Aspect Ratio: 4x3 [ 456.032578][T11440] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 456.048695][T11440] vivid-000: DV Timings: 4096x2160p60 inactive [ 456.061653][ T886] usb 3-1: USB disconnect, device number 48 [ 456.137316][T11440] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 456.200587][T11440] vivid-000: Maximum EDID Blocks: 2 [ 456.237876][T11440] vivid-000: Limited RGB Range (16-235): false [ 456.249072][T11432] bond1 (unregistering): Released all slaves [ 456.255194][T11440] vivid-000: Rx RGB Quantization Range: Automatic [ 456.263866][T11440] vivid-000: Power Present: 0x00000001 [ 456.269461][T11440] tpg source WxH: 320x180 (R'G'B) [ 456.274543][T11440] tpg field: 1 [ 456.279522][T11440] tpg crop: (0,0)/320x180 [ 456.284013][T11440] tpg compose: (0,0)/320x180 [ 456.288714][T11440] tpg colorspace: 8 [ 456.292674][T11440] tpg transfer function: 0/2 [ 456.297525][T11440] tpg quantization: 0/1 [ 456.301716][T11440] tpg RGB range: 0/2 [ 456.305811][T11440] vivid-000: ================== END STATUS ================== [ 456.459132][T11430] [ 456.461489][T11430] ============================================ [ 456.467637][T11430] WARNING: possible recursive locking detected [ 456.473794][T11430] syzkaller #0 Not tainted [ 456.478196][T11430] -------------------------------------------- [ 456.484333][T11430] syz.1.1416/11430 is trying to acquire lock: [ 456.490386][T11430] ffff88805750cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 456.501357][T11430] [ 456.501357][T11430] but task is already holding lock: [ 456.508710][T11430] ffff88805750cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 456.518573][T11430] and the lock comparison function returns 0: [ 456.524627][T11430] [ 456.524627][T11430] other info that might help us debug this: [ 456.532685][T11430] Possible unsafe locking scenario: [ 456.532685][T11430] [ 456.540121][T11430] CPU0 [ 456.543392][T11430] ---- [ 456.546659][T11430] lock(&dev_instance_lock_key#20); [ 456.551946][T11430] lock(&dev_instance_lock_key#20); [ 456.557234][T11430] [ 456.557234][T11430] *** DEADLOCK *** [ 456.557234][T11430] [ 456.565453][T11430] May be due to missing lock nesting notation [ 456.565453][T11430] [ 456.573761][T11430] 2 locks held by syz.1.1416/11430: [ 456.578950][T11430] #0: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 456.587920][T11430] #1: ffff88805750cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 456.598198][T11430] [ 456.598198][T11430] stack backtrace: [ 456.604079][T11430] CPU: 1 UID: 0 PID: 11430 Comm: syz.1.1416 Not tainted syzkaller #0 PREEMPT(full) [ 456.604100][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.604113][T11430] Call Trace: [ 456.604122][T11430] [ 456.604130][T11430] dump_stack_lvl+0x189/0x250 [ 456.604154][T11430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.604173][T11430] ? __pfx__printk+0x10/0x10 [ 456.604197][T11430] ? print_lock_name+0xde/0x100 [ 456.604221][T11430] print_deadlock_bug+0x28b/0x2a0 [ 456.604239][T11430] validate_chain+0x1a3f/0x2140 [ 456.604260][T11430] ? rcu_is_watching+0x15/0xb0 [ 456.604280][T11430] __lock_acquire+0xab9/0xd20 [ 456.604305][T11430] ? __netdev_update_features+0xcb1/0x1be0 [ 456.604325][T11430] lock_acquire+0x120/0x360 [ 456.604347][T11430] ? __netdev_update_features+0xcb1/0x1be0 [ 456.604370][T11430] __mutex_lock+0x187/0x1350 [ 456.604394][T11430] ? __netdev_update_features+0xcb1/0x1be0 [ 456.604415][T11430] ? do_raw_spin_lock+0x121/0x290 [ 456.604435][T11430] ? __netdev_update_features+0xcb1/0x1be0 [ 456.604481][T11430] ? __pfx___mutex_lock+0x10/0x10 [ 456.604509][T11430] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 456.604530][T11430] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.604558][T11430] __netdev_update_features+0xcb1/0x1be0 [ 456.604582][T11430] ? __pfx___netdev_update_features+0x10/0x10 [ 456.604603][T11430] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 456.604631][T11430] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 456.604658][T11430] ? __lock_acquire+0xab9/0xd20 [ 456.604683][T11430] ? do_raw_spin_lock+0x121/0x290 [ 456.604704][T11430] netdev_update_features+0x6d/0xe0 [ 456.604727][T11430] ? __pfx_netdev_update_features+0x10/0x10 [ 456.604755][T11430] macsec_notify+0x2f5/0x660 [ 456.604774][T11430] ? __pfx_macsec_notify+0x10/0x10 [ 456.604793][T11430] notifier_call_chain+0x1b3/0x3e0 [ 456.604813][T11430] netdev_features_change+0x85/0xc0 [ 456.604835][T11430] ? __pfx_netdev_features_change+0x10/0x10 [ 456.604858][T11430] ? security_capable+0x7e/0x2e0 [ 456.604883][T11430] dev_ethtool+0x1536/0x19b0 [ 456.604905][T11430] ? __pfx_dev_ethtool+0x10/0x10 [ 456.604926][T11430] ? dev_load+0x21/0x1f0 [ 456.604949][T11430] dev_ioctl+0x392/0x1150 [ 456.604972][T11430] compat_sock_ioctl+0xc3b/0xc80 [ 456.604994][T11430] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 456.605016][T11430] ? __fget_files+0x3a0/0x420 [ 456.605040][T11430] ? __fget_files+0x2a/0x420 [ 456.605064][T11430] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 456.605087][T11430] __ia32_compat_sys_ioctl+0x543/0x840 [ 456.605108][T11430] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 456.605131][T11430] ? __se_sys_futex_time32+0x360/0x3e0 [ 456.605152][T11430] ? fd_install+0x97/0x540 [ 456.605179][T11430] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.605202][T11430] __do_fast_syscall_32+0xb6/0x2b0 [ 456.605229][T11430] do_fast_syscall_32+0x34/0x80 [ 456.605254][T11430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.605274][T11430] RIP: 0023:0xf707e539 [ 456.605290][T11430] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 456.605305][T11430] RSP: 002b:00000000f500955c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 456.605324][T11430] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000008946 [ 456.605336][T11430] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.605347][T11430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.605357][T11430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 456.605368][T11430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.605384][T11430] [ 456.959147][ C1] vkms_vblank_simulate: vblank timer overrun