last executing test programs: 13.529193566s ago: executing program 4 (id=3271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000900000000000000c0267dc798000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 10.494763386s ago: executing program 4 (id=3275): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r7, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.087632559s ago: executing program 0 (id=3278): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x1b, 0x0, 0x7}, {0xf, 0xb, 0x80, 0x80000001}, {0xfff9, 0x5, 0x5, 0x400}]}) unshare(0x26020480) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011616f9886ff8308eb1d7c1bbdbe3160578f5afdf94b51089f6ab00ada4e5605b2e72655b3cc4c"], 0xb4}}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file1/../file0\x00', 0xa440, 0x34) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0x3, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0xd, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x800, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0xfa, 0x3, 0x7a, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r5, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0x17) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r9, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x9c, 0x2e, 0xb, 0x70bd26, 0x4000, {0x19}, [@typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x7d, 0x73, 0x0, 0x0, @binary="de0fd967e3a7d0cac41b87ad02227ca1d87d4d312d40b15e781cf0b23656c125d601d9d3195225ffb79ae200f41ff3d9eb9f65e56d4dfce0c8ab1d0898d570ec197554fc37570c879e5a944e56a8914f96f746bb5f5a5cdfcd33566b4a93763e472acc89f87d49638399cab89b161d6c39a16de02646fdf881"}]}, 0xffa4}}, 0x4040080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000000000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000020010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timer_create(0x3, 0x0, &(0x7f0000003240)) 9.91744316s ago: executing program 2 (id=3279): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_setup(0x3e13, &(0x7f0000000080)={0x0, 0x62b2, 0x8500, 0x1, 0x105}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x389000, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(r1, 0x0, 0x0) renameat2(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x39, 0x0, &(0x7f0000000880)={&(0x7f0000000100)="c4a251de4e000faef2f2a5c42345460647f27a0541d9fd660f6a44adefe139f3410f11cd470f01fa", 0x0, 0x0}, 0x8, &(0x7f00000008c0)) 9.262884282s ago: executing program 1 (id=3280): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) 8.811630721s ago: executing program 0 (id=3281): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delsa={0x30, 0x11, 0x2, 0x70bd26, 0x25dfdbff, {@in=@empty, 0x4d2, 0x2, 0x32}, [@etimer_thresh={0x8, 0xc, 0x4}]}, 0x30}}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000bb18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000500000000000000740000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f837974fd76b540a8d000000b7030010a4160000850000004b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x80002, 0x0) syz_clone(0x80000000, &(0x7f0000000240)="db3d036ed9d2331decb333c178ffb3211378b3e2d46858f35ce9b7743efe58d97aace3368670ac8e8eaf35f643ad46bafac108a350626e67", 0x38, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)="24748e6bd3b89564dc0d469eb161be70c50890ffddd55df1d674250609e63da6b029ce16059e78fb3eb369b690c41af418d4e96c3efade67578ff0e0f4292c5fc5494860becedf6689455767a7e98ae68196d7966d7bc8f31365f022a0ff91b7694a5222eb5570e1a18d7f4b014baabac5df9b7549087269bb2e26b528ba159abde0ecfeddbca3d37da1f361313a953044ba16ac28a1b52fdd1989e3c8ba42f7d7099f3894f59c3c3ce764b8228372762cca3bcb2c9e49b57ae242beed36237020bfe6efecd9fb269ed5d9f2bdc1526ec7b23e2178abdc5813460bbf384028") 8.216593921s ago: executing program 1 (id=3282): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="c7ed0a79b7014892f2ef5cd15625408bd1f05d3badebf8a6891ec43c37", 0x1d}], 0x1) ftruncate(r0, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff00001400110064766d727031000000000000000000"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) io_setup(0x8, &(0x7f0000000040)=0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) r6 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r7 = dup(r6) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r7, 0x207a98, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) syz_usb_connect$uac1(0x2, 0xd0, &(0x7f0000000200)=ANY=[], &(0x7f0000000400)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x110, 0x1, 0x2, 0x10, 0x40, 0x1}, 0x83, &(0x7f0000000100)={0x5, 0xf, 0x83, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0x6, 0x11b8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "dd40be02c3e1b2f5e3897abd0c1616db"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x39, 0x5, 0x6, 0x6, 0x4}, @generic={0x55, 0x10, 0x3, "811a5ddaea3afb520a7eb7808926e1dd7035fc38174287fc7d79f3db61e2846c31e61cb6a276584c6ad52c6837d2809024d929a31309921fdfd703b6282b88da62241486835fdc5183a229e93739bb312918"}]}, 0x3, [{0x6d, &(0x7f0000000300)=@string={0x6d, 0x3, "d7b106a879d2634eb1866fbdcee90a42155fb62b08ba900fc1f12f807b53e06cdb74d0d254c1489278964460f6f6f1df48da6f6d33cf0c0a39f952c1ec91414439bddb3403b44fed62a36198070fd1344ece0ed8a61bf39d50cd3ec1d7859c83929537f167c80b30edf543"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100020000000853240001400001020301090224fdeedf8aeef3c798a00000000000050122437b8f000000000002000008000000004b6aeb63d9228807c48a920a7e4bf3a353f9c36644ac16e7b464bb970bf3717ff8e5d597c92c503ee9a88fe3fef35e588c8bef68bcb9cbb7ac977d0e7f28d67a0de030a9b1f81c12c9"], &(0x7f0000000b40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x75, 0x3, 0x4, 0x8, 0xc6}, 0x117, &(0x7f00000004c0)={0x5, 0xf, 0x117, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7ffb176, 0xff00, 0x7, [0x0]}, @generic={0xd1, 0x10, 0x0, "3457698d0e0439f2f8fe8d73ef2efca58d6e57e4bd9bf6512b5ee03e0449846d8401c419f75a3152ba153ce6133b102c393ad4775fce46b252712d371ce9b32dfdab13925a76d36e6cb5d2d6cf6b0d8de6bbcc49c5e47e3d838aa8fc36c84e5c4d2de90b981bf8519db2643d9123ede48856c5a5abec4278d1582bd35cac5328efd9d713847471f177f33f346fdcba0bba3708d3a0d5a971faf5034597bdf2e30f39e53210d6ac4b2e5e6950b8aa7e3c9a78af1dc5b42464b1821781818e62d2eea81cae4bcbfb16ab070c5459f1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5d, 0xfb, 0xf1d}, @ssp_cap={0x24, 0x10, 0xa, 0xf9, 0x6, 0x80, 0xf00, 0x1e, [0x7, 0x7e30, 0x3f00, 0x3fff, 0xcf, 0xcf]}, @ptm_cap={0x3}]}, 0x8, [{0x54, &(0x7f0000000600)=@string={0x54, 0x3, "110697578cb7fa436bdf079930b1581bc2e7f001e5321c1ba276d69c14a4e3de4b4968e8a73f2b2583714150f69be059d429c200b255ee5334085ceb68dc1da2e6b6529955150876b1574c2624c74bb93a9c"}}, {0x58, &(0x7f0000000680)=@string={0x58, 0x3, "5090f5586e903247cbc3e6a8c73098843d82632963c7c03139d3a9db5b1d8884bb4c1b2be5c26bd508f09e6c3cc449cf1b670049e3fe2a48eabeedd3d4b49bce3eb93c327fc6dbcfefb669abec0176a8aa837c0a3a2f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x100a}}, {0xca, &(0x7f0000000740)=@string={0xca, 0x3, "b0175aafb92d0506748f3843552efebe2bd21306363b30eeb36cf518159f42d20500e103d9c68e6a77219b388569b3e5b7fbc06b3092c9e9009b3de0d586c0f470c5c6bba5a2fd04c3a9a6130f2956feb2914293c4603eae2e64c0ac9472ca35539819426da8102761743a622e1c4e05ced07382b0a7fe5ab2bab61dbb7d0e97331058fd1c3f60c5d812ad4ca9af8cb6a1905589d47475389a375305fd92a62c6396dfa3ecc97337fcb26df721de6e6ea3b9e53145a4b6bb3cb55d9b07640860f78e1d606c9a6006"}}, {0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="100388aa41cd92e396783d956ea69f959a74f8a60d8e6c3d3339de9f703abc202a899090e05fe487566670be846a770f94e2891dcef4e4b5255bf3fd47a0456b6a"]}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x9e, &(0x7f0000000980)=@string={0x9e, 0x3, "0db83f8e40979e5dddb07434909dd12970863f328fdfbcf8d6120c6b2f105445e5351fecb352293df910e47955f9d529830205a49e05db338a8cd239de13fc4cf43530a54657264db5544b091a9242e797626107d522dfaf8bb3d0e6cabf89ded52a99ad18a968ad86ad52f9fabb0ee240ea809394454b7d9453fc622337881ab85c60f6e0962667b3facbc5ede31411e961c619d801d2b9291d40c3"}}, {0xe6, &(0x7f0000000a40)=@string={0xe6, 0x3, "0bd99c6b368997653b05a529674a533510921c25549bc9314e6edff366e3f301f68834f0844d3be3ba896f4ca3fd81e467264ccd235531f625a6f18195f9bb6a0dead7e8394dd3b068184bb95f059beddccb4fbce0f93c90f8c9524ec60a077f6e42dc75d751ae7661f3973b05b73b88d061e5a250c0f55b8f42b7c755fe0fd79febffdf2451872e2aaa25ad9cb8646c46a9594ee26e7842c8e058fc06a1d48335bcbcc25983eacabd9c2a36fa535c11cd47ddf2ef07b20457e5a193ef06b720329ab50dd3b586dcee49b089b688fc16d1dc06a43a87d61c2a67372a405fc59e7c9fde2f"}}]}) syz_usb_control_io(r5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r11, r11, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r4, 0x1, &(0x7f0000000c40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x32, r12, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x2}]) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) socket$inet6_udplite(0xa, 0x2, 0x88) 8.082653576s ago: executing program 2 (id=3283): openat$ppp(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000008020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0xa0}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f0000005c40)=""/213, 0xcc}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/98, 0x62}, {&(0x7f0000000640)=""/121, 0x79}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000740)=""/68, 0x44}], 0xa, &(0x7f0000000880)=""/179, 0xb3}, 0x5}, {{&(0x7f0000000940)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x1}, {{&(0x7f0000001a00)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a80)=""/51, 0x33}], 0x1, &(0x7f0000001b00)=""/164, 0xffffffffffffff64}, 0x3}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/246, 0xf6}, {&(0x7f0000001cc0)=""/244, 0xf4}, {&(0x7f0000001dc0)=""/52, 0x34}, {&(0x7f0000001e00)=""/172, 0xac}, {&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f00000000c0)=""/40, 0x26}], 0x6, &(0x7f0000002040)=""/87, 0x57}, 0xa}, {{&(0x7f00000020c0)=@caif, 0x80, &(0x7f0000003280)=[{&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/227, 0xe3}], 0x3, &(0x7f00000032c0)=""/107, 0x6b}, 0x3}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000003340)=""/4096, 0x101a}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/57, 0x39}, {&(0x7f0000005380)=""/140, 0x8c}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/96, 0x60}, {&(0x7f0000005500)}, {&(0x7f0000005540)=""/112, 0x70}], 0x8, &(0x7f0000005640)=""/213, 0xd5}}, {{&(0x7f0000005740)=@l2, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)=""/124, 0x7c}], 0x1, &(0x7f0000005880)=""/9, 0x9}}], 0x7, 0x0, &(0x7f0000005a80)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000005b00)={0xe3c, 0xb777, @name="453335883ae40037679e564346f4e03e1bbda9030edc64b4b764ed7f3de121f5"}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000005ac0)={0x4, 0x1, 0xfc, 0x8}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250f000000080034000600000008000300", @ANYRES32=r2], 0x2c}}, 0x80) r6 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f0000005500)=0x2091201) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x2, 0x0) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3880, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) dup(r8) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) 7.961495622s ago: executing program 4 (id=3284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xfecc) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x400, 0x1348}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) (async) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) 7.717170358s ago: executing program 4 (id=3285): syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r3, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000000008000, 0x0, 0xd4}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000008000100004001"], 0x24}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)="1d9de0ccf3678f43db0934b548ab5787a140c9341efcd419de9bacc88d7433bc3cad0b0c184f9a70ada3b45a8c36c16893f95ab1570059742250d120a846e28301", 0x41}], 0x1}}], 0x1, 0x4001c20) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000180)={0x7fff, 0x1, 0x3, 0x8, 0x2, "24365e49a95c911c"}) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES16=r6, @ANYRES8=r5], 0x84}}, 0x4004004) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6.90831771s ago: executing program 2 (id=3287): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b096892e0ff0200475400000800", 0xe, 0x2c000800, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 6.721144054s ago: executing program 3 (id=3288): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) socket(0x21, 0x80801, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r4, r5, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, 0x0, 0x36) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) 6.391222839s ago: executing program 2 (id=3289): socket(0x1e, 0x4, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000380)=[r1], &(0x7f0000000180)=[0x6], &(0x7f0000000580)=[r2, r2], &(0x7f00000003c0), 0x0, 0x1}) 5.81996254s ago: executing program 2 (id=3290): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000340)={0xe, 0x3, {0x7, @struct={0x1, 0xd}, 0x0, 0x7db, 0x7, 0x4, 0x2, 0x9, 0x50, @struct={0x8761, 0x5}, 0x9, 0x49, [0x4, 0x0, 0x4, 0x2, 0x602, 0x8]}, {0x401, @struct={0x7ff, 0x7f}, 0x0, 0x5e, 0x2, 0x5, 0x8, 0x100000000, 0x6c, @struct={0x2, 0x9}, 0x7, 0x4, [0x4165, 0xd, 0x0, 0x6, 0xffffffffffffff19, 0x8]}, {0x1, @struct={0x2, 0x1}, 0x0, 0x8, 0x101, 0x0, 0x9, 0x7, 0x0, @struct={0x6, 0x9}, 0x0, 0x200, [0xe, 0x5, 0x200000000000000, 0x7, 0xffffffffffffffff, 0x55]}, {0x2, 0x0, 0x57fe}}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x40, {0x9, 0x21, 0x39f, 0x1, 0x1, {0x22, 0x234}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x5, 0xf5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf8, 0x0, 0xc1}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x2, 0xf0, 0x81, 0x40, 0x8e}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7d, 0x2, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xfa, 0xa7, 0xfffc}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "17f007eeeac1b033192493ddb1d3951c"}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2c09}}, {0xdc, &(0x7f0000000780)=@string={0xdc, 0x3, "90507d673333cd045db91827b1d48379bf0830976179781f9ab5d623cdcdf4a3b51beffc35186fad41796d17c08bdfb8881b721e409ed88571c3a35138650e2c5257e64ac807d9fc7b6186116488e283d66c4c329003ec3f7d65c54d31436aedb139daeb2ea88db5459d54db0dd3b79734fc8052fcbd4305a69181fec48a3e731e4156e06f4e6b2aef767a8f71348040398175a52f68732c0c70bcfb421b28c0b5036be2bfac2cdb3eb036a4ff94955b72516b1b427dfae98a031f6da278c8047cacb8f70f4665fd8ddeaa9ba1069c04ccc451ba9f26b0d9b1b8"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r2, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003f4ffffff3d2e69000000000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000002b000000fc0100000000000000000000feff000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480004"], 0x184}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000740)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0x3, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000040)=""/95) 5.179411546s ago: executing program 0 (id=3291): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) r1 = dup(r0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[@routing={0x84}]}}}}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 4.901424439s ago: executing program 1 (id=3292): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) recvfrom$inet6(r1, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 4.538971322s ago: executing program 1 (id=3293): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x81, 0x4}}, 0x10) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x80000, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r6, &(0x7f00000002c0)=ANY=[], 0x78) sendfile(r5, r6, &(0x7f00000001c0), 0x8) fcntl$addseals(r6, 0x409, 0x8) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x3) 4.530979012s ago: executing program 0 (id=3294): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) r5 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x6a, 0x3, 0x20000000, 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = dup(r6) write$uinput_user_dev(r7, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0xa, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)=0x40) close_range(r8, 0xffffffffffffffff, 0x0) read$FUSE(r7, &(0x7f0000002c40)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=""/90, 0x0, &(0x7f0000000540), 0x20000000, r7}, 0x38) r9 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route(r9, 0x0, 0x0) 3.505545407s ago: executing program 3 (id=3295): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x20000000) writev(r2, &(0x7f0000003480)=[{&(0x7f00000021c0)="81b46305", 0x4}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) r7 = inotify_init() r8 = dup(r7) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x23, 0x0, &(0x7f0000001080)) setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000000000)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 2.861080239s ago: executing program 4 (id=3296): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x7f}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0x72}, {0x6, 0x0, 0xfd}]}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040048) 2.759713282s ago: executing program 2 (id=3297): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000240)={0x6a, 0xfb, 0x8}) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x0, 0x57, @private0, @empty, 0x40, 0x0, 0xffffffff, 0xb}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)='\r', 0x1}]) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r2, 0x4, 0x2, 0x81, 0xcf54, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x6d, 0x300}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000040010000000400ae"], 0x18}}, 0x4000) recvmmsg(r5, &(0x7f0000006dc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/144, 0x90}], 0x4, &(0x7f0000000540)=""/210, 0xd2}, 0x4}, {{&(0x7f00000006c0)=@pppol2tpv3in6, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000740)}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/74, 0x4a}, {&(0x7f0000001b40)=""/131, 0x83}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000001a80)=""/160, 0xa0}, {&(0x7f0000005ac0)=""/242, 0xf2}], 0x9, &(0x7f0000000740)=""/48, 0x30}, 0x4}, {{&(0x7f0000001d40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/49, 0x31}, {&(0x7f0000001e00)=""/59, 0x3b}, {&(0x7f0000001e40)=""/212, 0xd4}, {&(0x7f0000001f40)=""/201, 0xc9}, {&(0x7f0000004080)=""/55, 0x37}], 0x6, &(0x7f0000004140)=""/112, 0x70}, 0x2}, {{&(0x7f00000041c0)=@x25, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005600)=""/166, 0xa6}, {&(0x7f0000004300)=""/150, 0x96}, {&(0x7f00000043c0)=""/114, 0x72}, {0xffffffffffffffff}, {0x0}, {&(0x7f0000004240)=""/173, 0xad}, {&(0x7f0000005500)=""/217, 0xd9}, {&(0x7f00000059c0)=""/196, 0xc4}, {&(0x7f00000056c0)=""/106, 0x6a}, {&(0x7f0000005740)=""/119, 0x77}], 0xa, &(0x7f0000005880)=""/192, 0xc0}, 0x9}, {{&(0x7f0000005940)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006d00)=""/191, 0xbf}, 0x5}], 0x5, 0x12104, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x1000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r6 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)={0xfffffbba, 0x401}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x4000010, 0xffffffffffffffff, 0xffffe000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x42) r9 = accept4(r8, 0x0, 0x0, 0x40000) accept4$alg(r9, 0x0, 0x0, 0x80800) 1.171358797s ago: executing program 3 (id=3298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 883.407633ms ago: executing program 3 (id=3299): socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x103041) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x897, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) 792.788603ms ago: executing program 1 (id=3300): socket(0x1e, 0x4, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000380)=[r1], &(0x7f0000000180)=[0x6], &(0x7f0000000580)=[r2, r2], &(0x7f00000003c0), 0x0, 0x1}) 565.372872ms ago: executing program 4 (id=3301): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x1, 0x0, &(0x7f0000003240)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x10, 0x0) fanotify_mark(r2, 0x201, 0x4000003e, r1, 0x0) fanotify_mark(r2, 0x441, 0x103f, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/151) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x1}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000002c0)={0x7, 0x32314752, 0x1, @discrete={0x7fff, 0xffffff7d}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r1, 0x0, &(0x7f0000000280)='./file0\x00', 0x40}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80001) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e24, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xeb2}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000740)={0x0, {{0xa, 0x4e22, 0x2, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) capget(&(0x7f0000000100)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000240)={0x7fff, 0x9, 0x8, 0x2, 0x2, 0xd5f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20000004) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 564.464805ms ago: executing program 1 (id=3302): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000280)={0x0, 0x45885, 0x80, 0x0, 0x8}, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008000300e000f15f060015000600"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @mss={0x2, 0x5}, @window={0x3, 0xc, 0x4}, @window={0x3, 0x7}, @timestamp, @sack_perm, @mss], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00"], 0x6c}}, 0x0) socket(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000240), 0x2, 0x3) socket(0x10, 0x3, 0x0) 560.735481ms ago: executing program 3 (id=3303): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) recvfrom$inet6(r1, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 375.395438ms ago: executing program 3 (id=3304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x100, 0x7, 0x5, 0x6, 0x400, 0x28d1, 0x6, 0xfff]}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x45}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x633}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x76}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000801}, 0x80000) r2 = socket(0xa, 0x1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = socket$key(0xf, 0x3, 0x2) sendfile(r2, r3, &(0x7f0000000180), 0xffffffffffff2a7c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000980)={'gretap0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0xbc432a55f67a4f4f, 0x7, 0xfffffffb, 0x2, {{0x6, 0x4, 0x3, 0x29, 0x18, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@ra={0x94, 0x4}]}}}}}) sendmsg$inet(r3, &(0x7f0000000a80)={&(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000200)="c4087ccf219a04e4b6ec9ac73415fc14be39782cb65018b4c7d92fd16c0bac441ea4710ad7b9754d69e977a45a3be0057eab07c3d9b72a62cf002bc6d0d500da3bfddf38c83c67a7ee1972565c176b9bac1a583288eb68974d10cba03ddf8a301c2b7df8000ffb53ff0a004bd98b17da6cce5b96bffa86849935db02652eb2d254d68ec6d13f49053dff09e6505002ddad6610c49747fc8472687ae2f698b8da72e421a94b63", 0xa6}, {&(0x7f00000002c0)="3aca4f3768e8ebbf7c1a8cdadb9a870e7d6f7159a2b7a70cb82592c5b0e82e693c735b41e322d1bd4acbb3aaf28fa44e2c79c049e9fde625600ea1d4ef78d3fd6035af7074119d839eb76b142c8a27e7d447f46e923f677e43c6ed0a5a685ce7cd2cf79a2ede64c03fb8f7f761fa422858cb440278248b213a7669e4017563dd2509e29b40", 0x85}, {&(0x7f0000000380)="c60d191234788a57948ee5a45ae7b6ca2753238b03e5e87792125025f5c5651460acaaf2e85614852a86a29ccb8ffb0878a0dd41bcd87c944b2c8d4ef33bd2cef3825b9b0060cdc18fee2b69a06db77d7bd891a23bddad8783c4751e760b37d571af3141303b5c970dc6ed35d97eb1ecdd85f2f725686c832df5f22fd049cabcf7d06e801300239b2d82906da34738658ae3b99c6013006edf", 0x99}, {&(0x7f0000000440)="c93f84c84b9f0ea47381a44674d868916e7a684c9b02ef979e88246bc6fc04909fc3592e495a0fd5b77cce8c612eb4630a584331764e164e6903df3fc6d88ea1768ead241a3a9e6cda2a9cdb7d434e69f4df528921", 0x55}, {&(0x7f00000004c0)="18e534515e04472d930ee5a2a219485f2e358ea3161a7f58121e2148731aead9902d216b1646a6d1fdac38c68185a13d6207deeebc127fbe259c8a6d912fcd45f7cc0d001ff2bbb898e04d3581a4562e5970a055c41d9899fa37597640fe5a14114ecab6383448674aa5ec62853fb148cc9eadaeb24a954a1f514634b4aa776da8d829750a642304a1752acc450f0ddd5fbdb57c4ecd32d2ba0166f53af0d17e7b67ff2d9c785b1b847db406c020a3b322e4ac354ae128b2089c945a5612704eee79bea3505a29b9944c28cf5c609a369422fa8ce6a9f29c4879363d50f2a673c95c020857b0", 0xe6}, {&(0x7f00000005c0)="f618c04c0329f1e9f0115dae383231581e9b654aadff4e550893d94ed985318bc69d9d54d494cc75bc3460ca1f4d312a793445b043ed37d80133eed9c58bf46ab0a1c000de2e1663b714f6", 0x4b}, {&(0x7f0000000640)="3811642a7b8d6e90fca5beefab1ab3adad9d895cc92689272f4039f565cc64f434dc240288acea8958a3bd4ec55fa6b8d9e1d5d11f835a108e8c9ca65e451ed8a34e007013b5a9cab42db51640c0026f8b108466a7e05f9d60c4bd5d54fcad00ee949c7da36c2251cab6db5201a8dc1b250d8cd05978958cd2df48288e1bc7e2fc893bfb2fde51c2df91cf6b2ffac0009fbd3f7106098753a1894a10cc6a3d900337453805544e57c09f00a62782d8d9c3e51336", 0xb4}, {&(0x7f0000000700)="72ba73ecf8308be71d0963845ca3a3059f8904e95ff120338efc71dde6e705595173d0fa4f08b1b76af3acf412399f436c32549a28fa5dcfb0edf584a87da0bf18a5b3a68d941d8d29964dade2180f162c971a42f7dbce42ac2bc7be8945b52bdb6a2741996cef681da18def127eb4006f4014748a546914918842c2c6a4a1f449b78e326165e0deffcbf8031e443a6e33a0bcad07bca4ebefd65087c6f19857e62cbb0ca3d2533fc194279af2f8d7ada4942dd1bd7d46b86598cfe1d2fe48", 0xbf}, {&(0x7f00000007c0)="3a5731161e4175165d67021057d2a99d21a9ff61c3642f2ca2759e806e90998f7e3f7d1d798f0b1ff0047326b081f4fc7ab2c01b308d42317862127d15612cb77d547df4f5b5ab93c44c09701ee03dee21731994a8e602a287178b1dc347b9c16eb11faad348e5969805373cfa76a73fec8f9d9f63db71fe40d4c36e99397a01554f270ea4506bf8662bc2f8704632e101b5afe44483a9758d666d2e1b380715882ca0a5140173054963", 0xaa}], 0x9, &(0x7f00000009c0)=[@ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x0, 0x6, "49d55573"}, {0x1, 0xe, "e78f2b22b9c1213a2b6cd369"}, {0x2, 0x10, "9758d1a3bac75924013a7b025460"}, {0x1, 0x10, "8600ed5f1d84641981ffdce4cd23"}]}, @rr={0x7, 0x2b, 0x26, [@multicast1, @multicast2, @rand_addr=0x64010100, @empty, @rand_addr=0x64010102, @loopback, @local, @multicast2, @multicast2, @multicast1]}, @lsrr={0x83, 0x13, 0xa3, [@broadcast, @broadcast, @multicast1, @broadcast]}, @rr={0x7, 0x7, 0x3a, [@loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0xb8}, 0x1) syz_io_uring_setup(0x309c, &(0x7f0000000ac0)={0x0, 0x1e99, 0x92c, 0x1, 0x333}, &(0x7f0000000b40), &(0x7f0000000b80)) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000bc0), 0x90100, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000c00), 0x101d00, 0x0) syz_io_uring_setup(0x759a, &(0x7f0000000c40)={0x0, 0xfbf6, 0x20, 0x2, 0x8, 0x0, r0}, &(0x7f0000000cc0), &(0x7f0000000d00)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000fc0)={&(0x7f0000000d40)="8a77554d752ec94bb7a0f44d42f011", &(0x7f0000000d80)=""/196, &(0x7f0000000e80)="4728392022a5fd54af48d3c636abc59a8bb785007c03b5fa0916a6890ef75ba975f3d8a84a30bcc3b94b92e34b188b951f25560b57f6f079e9a8776e7ff06c5f9211d79d150d78b1f5d1221ae88e8e21ce0515258507cc59ed7c30be1e92f109be3896ea1a6c44", &(0x7f0000000f00)="14dac86226a711afa81a61e8fd6626c2d071a733e882901c0b6603a264ef69e13695772b9ac271c98f86848cce0c3c658acb7af4c1736f79cf4ee499b36dfa6c0735e76d5d1bc04d0aa5dc975761e7d63c3b2faeeb57e42fc5a50cf95d9a9e54436c47041a6943261dad1f29952b793661ee88fb4b065470acd30747644afe9b51ab8b", 0x4, r3, 0x4}, 0x38) connect$inet6(r2, &(0x7f0000001000)={0xa, 0x4e24, 0x9, @private2, 0x3}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x900, 0x0) openat$cgroup_ro(r6, &(0x7f0000001080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000010c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001100)={'wg2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100, '\x00', r8, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f00000011c0)=""/66, &(0x7f0000001240)=0x42) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000001280)={0x1, 0x0, 0x800080}) syz_clone(0x28000000, &(0x7f00000012c0)="4c917509922c9110a9090b43df55c461ec97fa1fdb6a9daf6ed2cac41f7aaa99d2fa0ed79daa7a3d553fa442a1ddcafac107472e7ed89fe0ecb6fc7cc0377e0f855dad95405e1986690c06ff2f390d09a6736c531140ebc26c37d83e17e1b876d18a5b5f9c22eb7f6827c11c02fae172b7ca0a59d0b31fe9de4be95a29c166603fdbc54b17e4f28e97d8af44bb55afae776e7f3fb538854e19122998bf0ad3c60265a348805cefae0600", 0xaa, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)="8b9c083f766bdeaf9b7aa91f602d1e5b1fbd2c204c6d076f68d9ac7bfd9568e4632b06867311fda4993e041394b55d493c37fcebc1072eff9b4ab7e48ba55d6e67395b8f") getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001480)={0x0, 0xff, "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"}, &(0x7f00000015c0)=0x107) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000001600)={r9, 0x4}, &(0x7f0000001640)=0x8) syz_emit_ethernet(0x1e, &(0x7f0000001680)={@random="b72b0d3f3bf0", @remote, @void, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "a2dab67f9ad21473"}}}}, &(0x7f00000016c0)={0x1, 0x1, [0x6fa, 0x591, 0xb31, 0xd94]}) 340.805316ms ago: executing program 0 (id=3305): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9139}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/76, 0x4c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf250700", @ANYRES32, @ANYBLOB='\b'], 0x20}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x294, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x264, 0x2, [@TCA_GRED_LIMIT={0x4, 0x5, 0xb96}, @TCA_GRED_PARMS={0x0, 0x1, {0x1, 0x0, 0xfffffff9, 0x5, 0x3ff, 0x8, 0x148, 0x8, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x3, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x40, 0x5, 0x8, 0x5, 0x1005, 0x7, 0x9, 0x3d, 0xc88a, 0x20, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0xfffffffffffffe93, 0x2, "00559446a386a6437f9b8e0b240a39da782ff0f4d94bc93cf96924149ce0daab8c929f675a06bb6f8c3b5d7c255f2aea9eb0bb26b7813e99f62f1c3a448051f2795358ca7deea38bc54f318137f4e0dcb8638368f710005fefbce63cc4558556cbe799ba955e7350cc37aa572ce87310b2612eeffe4cd38bf8b4318bb73db294a108330d0534ef7679b8365253821be0d2f419761499165762da9eb2b8f7db0cad2b6ae42d340bd631fca1a59b71fdc4ab63aaba4787601311c280d25ba58d6de1257ed22599757a49fd3be6371d096fe15115d8d68f1132dd29eb8a5afb8a709fb88f161127e9806600d3fdce7324c2a0d6c02a1a289afb3ac7ebfeac2f3dd4"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x294}}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="2f3d43f0fc94da98245523cc997c9a47caf12bf63d1751cf5235c6b8ab3cf9cf676f4b82310b1576b25cc04c80bf5eaccde15ba531c5aaf4ebf9d51127c2ef7bc9", 0x41}, {&(0x7f0000000300)="9e28b1217c0d4cf37c40671436e33bff170536da7c3893a323c9d65ae66fafd418c22b246f6d4aea543097e2544a933df945d73dc3e66dd72212f364563936c2ff644f2084a5706474c6b0780a0146e7d799b9fc824e3f2dce3f9d45b71ceb77904c13959fce092f27ef6a1036d3c3422bf2a4f1cc6afe0a2da401e8f41aa7", 0x7f}, {&(0x7f0000000180)="5ed2a4eb011b03f904aee4e7af81c31a459688c9b1d27074994e6d1d347bff0f32544a2f602d", 0x26}, {&(0x7f0000000440)="345254ba2ced5defa9ba8280dc7e780cb0192c03530f0432a2456b12686d52a9b5c5363984bad6d458d54a61029a0548357865040f86e40986e6bf417a352947c9e5202cb28454bafdc151f450a5cbc054e7688761352bf40d40610874e5f9292c89c8d790980666a62b6092799ff5475c0a30cd77b7ba6f5d10c614fc71ae3a786e", 0x82}, {&(0x7f0000000500)="d23a7c70685c367d2fd73ead127d27cf3b42077b4ede293d30c6fa492216d1bc172c1d6c884b977db17ba32276a12e6c1243df5461920c5f678641a5bae11f413980a993b8fb99acd29e8f8341eb373678199b04984f92005a382df34d57477b58969f3d219ce151d2ed31a50ad3bed001cf43b758c2a9e64fcbb84faf14d46bdbe05d99b47622c26ab086c74a9f993f6abebeb5a0840df49ad01f5e5d910f58175f0f0b3f43c4a952a1f172531e466310c742ed1c9c71c2370e63e7a792b33f0e6f", 0xc2}], 0x5, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff910}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff92}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @remote}}}], 0xc8}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x2, 0x0, 0x1}, 0x2}}, 0x18) 0s ago: executing program 0 (id=3306): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0xdf, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000004c0)={0xfffffffe, 0x7fff, 0x8}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e107581db3d5c2500dce610d40a76d487547b6ceb5b78a0fa506f3e4a004b044faafea32d9bacadc40594708249b080cc3e6eaf350e4cb0242031566414c42", 0x3f}], 0x1, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r3]}}], 0x20, 0x4}}, {{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000400)="0ea7832238c8bf2fb3d8e572324236e0ac6b65e7cc4a64e86b6cc3462da70d42b4cb62da205f5f17ab995d81caa183f6c43465c8434921f58870b59cf6bee24de744bc4d079a522c4f6f072892c522b8cd7055f97d7b", 0x56}], 0x1, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r2, 0xffffffffffffffff, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r3, r3, r2, r3, r1, r2, r2, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r1]}}, @cred={{0x1c}}], 0xc0, 0x8000}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000700)="39baf95e5958955ca819d2c81dff6d1c03966f89880fdef93728d2cb4da91e06582c32570e5f2bfd8afdcf8ffe420185b6f78bc8efe548452bc7d58799", 0x3d}, {&(0x7f0000000900)="22da18a87608ba6dbd0df1b027dabcb10578e8df40d5be3f69fac2ec7c19c2ce80d67a52b70cdad18aecf8b1c69ec5c7ab3b7833cf49a849ad4cbdb45b7203795b38b13350c39e212ca46cc2655ee54f79d6f8fd93eb64ed48ed2603aa73f9bf35c15d1d198c27eb439397fd143a", 0x6e}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000000980)="2f805caf71ebdb38f48f031ac54031fbb954aa0fbedd758654395bc97d00dafe639f24afa881ef2bb90727bb4d9802a393f743b66e35857a5460e74ef9565b9a7ad73362ab65c7bfb081db677958bcd3d4fa945378de5c48946d8c2335097cee557a8b3eb52c90ef1133bce0f1a6c6382d14115412688b5924f64c769419c4b8aca6510ca93a2ec5a4bae7c73fb7886d45538eb3aeaae2d44dd2f10554c0ea543953dbe9f8d7ba0ebf7153eed33b2d22a1efdb4553150a2bdc1c1282cbfd48b25ad67f552e521cef6b6f79cdc586", 0xce}, {&(0x7f0000000a80)="807584ea5f4c4eb2cfc1d45c259ba162e263bf10cae4a3d8e5578e8e515ed465354c84bc5dab0fd0d77dc37b1ba8897409df3737bfe5b0c298ccf43815c292b6fb0a92471cffd6c916e04ed77ac4dea7088f5a214acb17de93b8d4e756ac2c1c5ea77708821352c0603176623c2583d128f5712ba1b2b83208f82d765b6433", 0x7f}, {&(0x7f0000001b80)="a11543dfd06803d657791c7a9cfdc9c335bdc15e295da9c66ac65b017ec824344d92a5a9cdc866ed91b06633ce1c1b8b2065cc71531c15d4c3e12145dccc2306b1b6788f12e2af57f60bbea0c1a15dd0f55adc61cf2bddf95cc3938dadf6239f49a9ce9403e92bd92d7345bfced9", 0x6e}, {&(0x7f0000001c00)="f4374d02120c3247ddefd26de77bef5e51c08698cac3e6e1c444dc57222286a11314f7112474e3f1d902166e8d70cd18c496813da391d43ab60d5462b65582fc180934a56c8c9834bdaf3817a09d2ac498b9a9b0a0c567d748fa25a96adf514902f8792f669c4802a73b4a1fdb70f3186131aa9d4754cd788a3ebac7c204f5686b8de7183b226922f6d64ee2d02880e6b41edbfee45a352dfacb2a93b313a2df8df17cd45f6c1d9b97aa1733f0a8d982133248b363b973436aa15a641dedd3ddcf82d163d4ef223b2ab20ac6c55fd2f956ea46c6b30364cd", 0xd8}, {&(0x7f0000001d00)="c0b3ff86b1177e384094bd17d04fc89275bb35b149d4b625f53cb8012f653f82e328816255763abda537a60ccbd4397dece2ea20a3417f9172f85f83c761a1a77e143888989980862a53b18a26994cb221abb0d6354bf6e945e3167a38b2c4564fc2685ac6f07ea440aef77fa875e430f651919ad511223411c27f0e6432056292ed1ff25817b4a8141f19932c5e759fa529e0643ba84e472bff2870a42742ddad013e3004e345d483839fe35bcae91220fd0e88b1c5179db8f0b9e5e53d9f5fc2ecb05fb8a599ce9e96b04e6d42bd5ee18fbda5eafb8cc846ea40bbf5155c89be3c7f02faccde4a26471b8d5b9a17cd77c2c464dc5fe2d492c4066584774f36dbeebbd1fe9a08a379ceab31db297d7072b321a19cf5f74ea1436a1590ecc9648f3f7e6b6e0b33df829f0322c88b66bd4a075dcff5fb1f08850c2437bd3107089a086d0b866fb3d2ad88cc2264e8a77d74a21aea3f11289268daaaa895e5390d537f7ba63012adc51423dd723ecc3f724c7361b2049584828e6b8725f3ed34b209c2e26a8e0d5f25471df5c7eb5404734a0edd7e43199d4d72d706fb57713accc1c8b0827750a0606ca0e2194aa63eb16a1dcf57f49a6483781457d99a691e4cc8757f0ba0bafabc0a4489eda29575b600601674f8714f496f64fe8896686866c9c0e007a7e274bc2fe2334262315f7b642e3098632c777c917b1493189955de907bb82dd06a47fa10b42d295c5ac53207046fa1851c750787d304d92ca65311238555002f8d72cbae0d6105ad3b04fd553718007fa053e7423c12478d69e5cbdb38db3b9e78cc83dc752e5f62703ccecef9da666170b67a86b1ec993ba1a467317429cc01bd49682626f17bf75e77afc98930c57be737a202cd240cd87e4e239bced6b7293e522ab9357852f92d6b2195f3e385ac0d9ed21da6a0bc288dfb838782967617c49fc8a024622d95a4235c77729ee5cd6d39e544821b1acb0ffd8e73d2789547733fa4316f94004e7e99159d5a10551dc3ef0b7f8a52ee1fa7f708a41f526e8cac1a636989f72be60c070e8fa9241caff629a0bb5753d76aa50e0c7ca25e347ba900faff305e705d02ac76dc9e0369f3e708ffeac9991266fbba881eb76327471eeb149e3722721cea0434a0e12a40fcbb56b8b6eec8571b09c4c339d53913cd5eea792e5eca6ee1a4375d8e9f9db79a814d5e47e3dbb3d7b1a718bc89cad8006a142f4931e2c7c2b911161a5216c5c1f80cebac913b8268c1c306ee48f49ed0afc6b94205f0ec973f3c992af89eccb24947d836de6c35840035052902ff69f55fe04c5ae9c905a5cf0b7026a16dd587405608a24bcdf712cfb276dbf319cff77b334d0821f559e70b824a02d4857d2bcbf5ce10b99487ee8331a3d780c59e637ce8372974513e42231b4216819e96882af98d3b70844e9c21d9c9d63f2b9c6c505696419d709e7ea956782a4cfa53cfe02c780f570af8da7c4e75eb5caaa424eda4134474b63ba7dcb1bae8352c5b9996685a789cbfb9da8550cef581e8d2227177859be9312b887b8529f16a6d9d3f44da7cf443f1e2073783c7d946cd6d22e27b5d13740c370e9ce3ae1c2c2a50f576719b034d0b0f6e16ca359c7053455234c4bbf80e96e8be6dbe183e0749743f249709f6554c7d557d0b17d105343d447fcc234d653ecfa6c0cf03ff046960daabda66fd478305a649373ce54f6d6e93d1a87d2e94c7c555897e7c000cb995b62e1e351b2d2eced7352e1d19d98caebc7df6af03890c8eb459a4c697bb0572ac024e05dec9317acc3ea7a3c5adf7b55a27f29ab19e9d1af3c07d503c7525f90aa5369a185cb83cae7c37c94ba3e241c60f845ee8a35759777392ecd0fcb1c76714f8239d9762d6e39fe455da3aa4b808b3fad2e36fc7a6c5e293e0771a9d98c84c1133ddefc19cd0968802cc509ee847403fd9ad53b44fe4b4ad5f66dcb0c0542be26626ac877332c82402658053716ee08a0fd325c028f9734b6b16c7b05001a9ec7aaac165b2f28330f8ee781a17d22a9dc667c0c32e228cdb9ab76ebdcebe92de1307281816804dd88c8dcadd69caeedb2398e00e46bfb860518ffb142f67a0bc550e6917308619906dc4f4ab8a457de8603b0b1ac60e13ce5816b7a53ef703552d8e70bf908fea5ecec99624fad28c4ea9efa7ced64ad8aecd4432837ff5b12f95e57e95afe9a537594456441c753ef33fbc0eb69f4730c63a9ed1200d0dbcdd95177d2b45dca916696c969a15444f4b2198eed6a4faffe1fbd678d12ce20240364268be64c79eac6a20a3b70ae81fe253d04d8d4046270eb34ec6a36dc873b94e31b74c8ecc332999bc1081d5adf83e26dadde82f4fe3830c3791dced08d73a03ac92de9bad4a4141ecff9ad3c1782e8864dbeced2d77ac22625b155a5caca6920a59a3cb65a654b4e184dbe0b139eff188145f27b264fbf4b8b71ad2e03b8adf71a3ef7d5d89edfdc1e34067632b5cb563a552d59d4531ce740e68eaaedc86deb687897043192ba05d4af5eabdc427a392cd3f65515eed5dd332f6fea6acf34cf072ad75208115931cb2a017509e2e5e29ad44eb3967213766feebfb4b93740e6cebdc8ed5754de0132a7fdd8a036ce01e240bdf9e8170ad257108471793552aebc969a2e2a1a2a6a9ce2e2c53d59cf2d4df82b12445efe8df459dc1af1fbafbb0898a3bbc7df05a5630076a7c4dd2a1f28811c4025e1ffa956ed8e8eaa61cdbbd3cb3cccf34395d47db4ae4a102a91e727438a37d412bb95c8a976320d2ab0b772678bd83b579797300445c9b9b8654e6bea8877f1206ba919144300b93a0169d0f8792efd76761750c2989b36b4b5d0431cce9f0a8f404c47233411050a60676c9574459ce3d1f468e253b144ba2ee9f79b5acfc1fb3e20f1b19b37d9bd72eccabe3bfb22aea7a27b09cc0ed82cf8b2cfeb96c2e80d3a48e30e208b80df33dc740ddca04c9d4e62c1188307934f4af1a87b1eaa2a3cd6397b96977e0e030fa51deb59ac9fd4f3943496bdad3653c44d2baa0b37a906ee7d92d4d24dd836a82716a8f6b575b9f343e24621200a35e770a6629d16b83b88f2b773d15265ae3ea1f1dcded6e18c88b9030831c3836c8b4ca94e1aecbb03010d618072ce7e238eb8631d8004229ab4b5d1394808202267c590567bee49268c73f176e0dd054eab70c334c75bba9acc2ca1267f22849b97bf3863fd77573e49ef351f93260ee6ef8efe2cd793332eae1035e45f4ba3fd90be263b684bb06f0a07b5ce981e8bbdeac4742451a5250d39466eafbcaed6c8d5f432cd29624ae1fa23242837dfc7761412f1c7c16f61b7d9488cf98463314c257e219167a0f369748f495fb360c0013aa36a4f7f504cd442bae8ca4263b0784c3c8904306f8b75b226c3a481286c7b22cb77f2fc0358f248b9a79449dc30ce1942fb555c8d3789205322a1faea574b2cb62e6f5fe46b963ccb9ab54c819923b020e2afd6c6fdec6edfc98779aaf8e60b37d3336c34f6d57d9de04445b0183d40ccb09e3fd4531128a91fad5449f3dfed605e340243cd4ecbff74781eb5ba2f6dc401df74fd3daa44230a2fb5198442477b7a7520e0baed12c7a3d359b340a0ce16c28864abb5eeb466b9bc165c7664a50325a203a39347f63a1bfb9841d6e10c46befcac52d580b6426ab1a065d8d822b6fcbbec26d8b1094ae5ccb36e848d46572fb056cbfeb204207bb11a897da1b3920395d6f494d56ded71ad01081afeeb223ec50f414b8b05347c74021c21336506eab50f631e33283d309fb36945652de2b70ec5d400834b3bc7c81fdabb649a9d50c805a91a85ebe16ba5a99e29923cc5213d198a1141dfb85232235a8498d8ce0c3c5c66abe180a3768734b00ebd3326e1de7b154be5430072b2922de6c0546765a743a59e46551aef30dd5e7feb5083d2eb5aca8f4631736355ca7453e8c15f90e0b65679c653472b3bf348760f8ee0b98551dbf3cbfa74581691d7d6df693134529c87466aa485aff1b4468ede2a455991904cda2fcbe7b0fcc89d807261cf7b764856fda1ad6768d9d4350170876b1aea23335522a03e5a88e2c245740c4484075399ea9cc24a14cb0cce770e5fd9cd7bd197639edd13ac19cb8cc605b35f56806a345e74c163d42912d8e50737a7d404174a5508565c55686f7adf59781fba787e279be9dbd8354c3b5116e0e2bc2eb87909029f1525311f06799f5445a714a09d665e640cb882a4a5e3d2d0c551c23cabe7ec5e18544807af912b2188bb29dde1c417949eeaa4cc8ec2ec00035fbcc2248b2ebe9977bcea1b34999ca17ef322dfb650bc11dc38bfd753981409b3ff67b7a442e8962cdea4d6fc2e8147622425ca48a16169dac8add6ba05279c19cf6436ff986f13b433043bb8267c4e88896be55d8ba61f306fcfb272ccee36639ef07385f131c4a7872df3687758fc01d03bcaee2067ea4401b44c3363139adedce8a30988af037bf62b2773232c11858bc12f74ef59d8f91f345b927dc25c725bf2d34fc504c73c25849efbb107be2453b03af00b5e434c1918d6f40825a0a7d011446cd9a01a47895fc5a902da72f64205bd0dee707c86d2422721687a86746c13e1d8e15398792c94c0d72737e7b006d1afba1b049b58e3fb60e4f659143fc9efb1f25762c056b2c4974a37769d5417c27b4f011aa0051d567844d6d661c2bc1cace1083074741e6c0a6bfc70d205e05bde5385c39c1cb40354e5a961b829409f4b063df471dc8d5acbbd8a698f01c11309c535fd7a02f50052ab9377001173d43664a3cd2982962a44166b9e3dd7444556fd4c5478efe38a6679780639a5972207beba1aec326aa38c1302cc44df31696ff9743d24b37dba71b6515d717b271c0df994ab4189e5e7d1ec04df81c7e89449c0f1626c201609c9906c4862c91e86f38022ab9cadd50bdb2c78147a24af23bb2f09abea2f12861e4cb762a4406223ad10acbb8428a09dceed272bd9dd04d658305db2c77ca24f6da5de5eefbbc42e2bf4b26150e0c14376404e7e78cea838075dec233b05a2fe25be2b1a22cc1c90cb7dde163fe12423d017991c7d767349830b5504e90718b45fed3cc1c2a4429c33bab1ae27d41463948017221cd2073263529accef26991c2da7cd8db94bd3f59e3873df6536ed1044fc4834f60344439a9720c5a952326d8dec2a75423d4efbf999d5e2814794ca76950abf786ddb517ab92013f5b4d0316d914aaed614336859086887f167b7b96298229fe5fae70c79999fb3eba159a86a9eca4b4320c85c2a4b02b619f35e097230e9585a4304e97523f80cef9e52113f4e3002e3571d422d43de0d27e05a4a094178d8e8200181988c7a75a4935cfc204caf739e25cfe8261d3514eefd01313b2ebd8c83336bff2e275305bd7a0998378e65ef1648efec94e0fdf67ac455789728889e0074d1d99ea9fe5aad12334b4548921f90d99a5522646eed7e159be98b77251471d975e2464ecf4cf70bdf75589ae92b61d6b1c924bac56b23a1fb3056552e5ae1d11e4f349f4323e4829d65551bc2aa07a22fe13492c79539b7be4cc97a5d0c8b22992d5f7f6d61ff355af9a02ff6b2e8c90d1667b8bda1e0730fabfee7fad9b0a7274d2d9ef5e28ae6680a55061f22a169df1d612d66b93671db9dbec62d082297761f5976af7ba60d7db482ea47230de1750ca82f4ee44f4a41ee34320a84d214b07d4ba17102b0959acbf06aaeea440f4c1f8b3d27bc0f9a7b3ed8351c314b86ca19b9178fa144f", 0x1000}], 0x8, &(0x7f0000002d80)=[@rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, r0, r2, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x160, 0x200000d1}}, {{&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000002f80)="d9c3a7706ad552d810dacc7b691479a508bb8134e035ad297ae23cefc8c070b6666d502377c91cf66b350a99978f08a00e03fbdb3918", 0x36}, {&(0x7f0000002fc0)="ec6ae7d52229d74306bd4cd87b240cb04713caa9dc7426e463cb8cec62fc6e01d6da0c7bc6d6847f2b8bbc25d8ccf3075961a15973713cfeb34d77355f67", 0x3e}, {&(0x7f0000003000)="fcb06e2cba9d51373a223ea1c711da5b2dd1ed9e771777d707f19d3ceeb7831324ce5ace408779fd1cf6104dc5e56fa99df96a94b0bd43ff58ca139bbe3363b08f8392687dd424e6dcb02d4b1de0f47b05c4594c7ca8d85b79f84b61278053d062120c7535b70541eb8f3b71d2947cce5644df2e0baaf99b2593804cc37fb199a31d51a5ec00c7d903653f469cd7d93d9f6183d1bd2d04f58c9419a76ea1f8ad183c9a182bb27b", 0xa7}, {&(0x7f00000030c0)="c2038172621a27b67f1b1ad3b2ddbfd58e81ddcf0d8cf833574abc27c1c7b55f93530c8756762f9981208ab00ffd2eb8efed84bac6d54e457de286481022b9a22ff2d6bd98fde23cb534ac565cde5e417c47f9e6bfa97712df1bd4a10b5f35119d34962fa772386450033e79d0a0a7b9f219b50bf8fb29f2c67f364f5f5b6c67d45c13", 0x83}, {&(0x7f0000003180)="d9368f1e313ce626159b5b27d0b220c6ca1e84f62b3214220d222eb0298c2c5c18958175befb8ea1c6ae93ed74dd51af30f669d3be8293651c218344b1fc6ef7ff79bdf7d64c2f56ae273800e8b0ceb75348775caef1eb534349838326f162a2f855cdf248e612c6ae850fbf77d80bd4c0f00232ada9ad5e438b1d69cc8cec4ce68dfe7e9879fb872ceaadc1e4", 0x8d}, {&(0x7f0000003240)="a2a4926fbf50fb270b5e9ad74b0d85cb77908eacadee0d5024269df4180e", 0x1e}, {&(0x7f0000003280)="921499566474b66e988e41c595959251b859f6878e03915699d7dc1c51a0d5edaafc26eb12c3ac01d60b983d651bca430ea2e7bbe2a4073b6e2a855ed41b115a0e8779db82808ded7f34162665530bc6d2cf3aa51bb32ae858c9d1ca14a0179a54fd65a2b06771e33a74271ad80c81682392f53229e66299438295631133290d86c13b", 0x83}], 0x7, &(0x7f00000033c0), 0x0, 0x20000001}}, {{&(0x7f0000003400)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003480)="4f4a4c4dbf74fee658596bb1bedc271af2f0431e57e541b789a2f2268bbe4bc66dccee76dcd02c9f6c5311981a3d7eda860426568eed45e9205c4f5ef30233359dbae617685c7f5560775d6381d29e19b9ec20bb8caa5e56fda729e9c9357aad75c711b6646c39ccf24c0c0d0664d1c65b5a014b873ffce3bd43aeceebd0", 0x7e}, {&(0x7f0000003500)="f46415", 0x3}], 0x2, &(0x7f0000003580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x40020}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003600)="35b4075a2f14fe654c070fcee4e5ba88a7007d46550e939d09c9440af01c830701edfb006eeb2048dad39e4258175bc91bebd97f65f3690d4f68442f2318cba5dade818f040c2f6a3e10d04fb99fa07eb6bb7e61bf3b7596c523e411d7c60cfc0f39127b74b99e8d68f00c88d00a293bcc6968fea48a214ec2db8102579d0e6b1edb8567f5c5fbe21d", 0x89}, {&(0x7f00000036c0)="ed1669a48c46064c1ccdce8003c3da457961cddebf7585769ea1ed46d41e324e657e8c59aa3a3de586489405a4f567f22f38ff2d517575bc80ab919dbef9bfd32aa4c592362efa493b44c58a9ebcd6ece01cde7a14d6668335709f5ab6cc456bba021034418242e6e3747a1fccfde186dc4f5c3fc8ba1a2aa1d65a9a5dd0011dbd8886471c2ae6314091ae41e8e26b21020ef2414ae3138e781ed398ed65c89342709da19ce2d7325b0942daa64cced352ecdcb410186a29c9b14129824e4f9d898ec9898102f97380472a865080c75af2acc62b3d0182eb2daeb15266f2c25065e85f27398e14987f9b102c7aaeda2ce520681d3e00", 0xf6}, {&(0x7f00000037c0)="8ba289aa4130e179b400903ebcf43e531580878d7bbea19e160033da07f47b142d8432ed3d8fcc91856ed442913ce0d1a0ec7486d102ef91144d782a30e440d9ea5daea2fd45e65ef6c46cf3686f13ad042e21f5a6610ac43ea25fea943c78f395aa944cd5c98c372bc6baa926005102e4b67cc76f9d31a65b5354ea9805f9245040926a6d8c44985fa4acc9727619b96789ba1ccbdfdb9f411cce8683c124bb5c06e6b900a776a56e9b50cc4b99f53f53a189b7f2ccbfdda4", 0xb9}, {&(0x7f0000003880)="681321c3210c6ef1178707953cb6312c8a52cf9f2999ea0fc80055bcad18fe3d895c28887ead778e5f4fac40ac346e2cba48d7fac14bbb1babfcb36ce9ef", 0x3e}, {&(0x7f00000038c0)="8f8284a0e3ea0018f0324340e98308178003f92399f2f2ef7154fa445ada6ec04cf94b8380bf985ecb78413e95b6ee5868b3b789c3", 0x35}, {&(0x7f0000003900)="4f66939e827e0d540cb1996f2d54659259d2f9bb4f1ae1932e88cbfb391f8923009c836c62e34778cf64d8a9e64b8a999d4e202ee32ea6f1e15946c116ae58261b43ee040a862f2e9d9ff2f02a8b9bf9be02b033b5fe8e277d8b41b856e587d25fbb7d988cf5223e2ff6c54b0547b4db9e0a7f64d352fc81ccfc6880e7a4a390ed879283e9b02732cecf66dfad5856fc5d87c2edd92467814ef7953d40d86cd29e6456f27b7eeb46b4f4a5fac3f6bb11e6bdde43f5352824ba9dba37c09559f98051ba33ee7e513f48c0f6cd593821e43e3f", 0xd2}, {&(0x7f0000003a00)="8c43ec67ea8cc77a8a36cfec421f20f4fa9c73404ab53b4c1c40418dfae3c3cedcdd6734cc407609d03f5fb8bd24076ad2b87143956169db2a3d1823b54ff2c5bc0c21ed8b4ca99ca7033fbf3ef262d88d1a8099e8146e85e461ba057a5183fca1a03cb7237a593173c6483b3b642161be359a6cf586caf403ece7f3acc95cd94c176c0e6e3fde65b15c", 0x8a}, {&(0x7f0000000500)="1602aba41ce405efc9f4560e2b0b98df2e726757759fe6f8e3ccb8bdb24104805d9251dcfaf46dfaee15e6634821c4bee739f9bf921315337a6d1cac25f7d539cc8f9e3f53daf29ba424931642d6817fd5522184ef00"/101, 0x65}], 0x8, 0x0, 0x0, 0x24000000}}], 0x6, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) mmap(&(0x7f00007b0000/0x3000)=nil, 0x3000, 0x200000c, 0x810, r0, 0x96ece000) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) landlock_create_ruleset(&(0x7f0000000300)={0x2114, 0x0, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) r8 = dup(0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) kernel console output (not intermixed with test programs): 907] usb 2-1: Manufacturer: syz [ 818.014444][ T5907] cdc_wdm 2-1:1.0: skipping garbage [ 818.020020][ T5907] cdc_wdm 2-1:1.0: skipping garbage [ 818.027828][ T5907] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 818.033895][ T5907] cdc_wdm 2-1:1.0: Unknown control protocol [ 818.220448][ T1343] dummy0: left allmulticast mode [ 818.261031][ T1343] bridge0: port 3(dummy0) entered disabled state [ 818.316655][ T1343] bridge_slave_1: left allmulticast mode [ 818.332662][ T1343] bridge_slave_1: left promiscuous mode [ 818.363299][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.445771][ T1343] bridge_slave_0: left allmulticast mode [ 818.461780][ T1343] bridge_slave_0: left promiscuous mode [ 818.479454][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.525174][T13164] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 818.585392][ T977] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 818.705516][T15373] Bluetooth: hci1: command tx timeout [ 818.735203][T13164] usb 5-1: unable to get BOS descriptor or descriptor too short [ 818.765100][T13164] usb 5-1: config 255 has an invalid interface number: 119 but max is 0 [ 818.785383][T13164] usb 5-1: config 255 has no interface number 0 [ 818.795236][ T977] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 818.804406][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.825130][T13164] usb 5-1: config 255 interface 119 has no altsetting 0 [ 818.848973][T13164] usb 5-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=d4.8c [ 818.861933][ T977] usb 1-1: config 0 descriptor?? [ 818.902135][ T977] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 818.925117][T13164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.947220][T13164] usb 5-1: Product: syz [ 818.958266][T13164] usb 5-1: Manufacturer: syz [ 818.968604][T13164] usb 5-1: SerialNumber: syz [ 819.337138][ T977] gp8psk: usb in 128 operation failed. [ 819.527858][T13164] rndis_host 5-1:255.119: invalid descriptor buffer length [ 819.536691][T13164] usb 5-1: bad CDC descriptors [ 819.542472][T13164] cdc_acm 5-1:255.119: invalid descriptor buffer length [ 819.575106][T13164] usb 5-1: USB disconnect, device number 88 [ 819.635687][ T977] gp8psk: usb in 146 operation failed. [ 819.642643][ T977] gp8psk: failed to get FW version [ 819.653629][ T977] gp8psk: FPGA Version = 173 [ 819.980519][ T977] gp8psk: usb in 138 operation failed. [ 820.002335][ T977] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 820.038908][ T977] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 820.078221][ T977] usb 1-1: USB disconnect, device number 82 [ 820.188425][T13164] usb 2-1: USB disconnect, device number 78 [ 820.765147][T13164] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 820.795831][T15373] Bluetooth: hci1: command tx timeout [ 820.965387][T13164] usb 2-1: Using ep0 maxpacket: 32 [ 821.004458][T13164] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 821.018422][T13164] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 821.045173][T13164] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 821.078943][T13164] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 821.169412][T13164] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 821.192454][T13164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.913947][T15892] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[15892] [ 822.880764][T15373] Bluetooth: hci1: command tx timeout [ 822.973126][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.050980][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.069108][ T1343] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 823.080169][ T1343] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 823.098361][ T1343] bond0 (unregistering): Released all slaves [ 823.159204][T15823] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.188860][T15823] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.269937][T15823] bridge_slave_0: entered allmulticast mode [ 823.295936][T15823] bridge_slave_0: entered promiscuous mode [ 823.514462][ T1343] tipc: Disabling bearer [ 823.522981][ T1343] tipc: Disabling bearer [ 823.562092][T15823] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.579727][ T1343] tipc: Left network mode [ 823.631888][T15823] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.646080][T15823] bridge_slave_1: entered allmulticast mode [ 823.667369][T15823] bridge_slave_1: entered promiscuous mode [ 823.748776][ T1343] IPVS: stopping backup sync thread 10551 ... [ 823.855731][ T5907] usb 2-1: USB disconnect, device number 79 [ 824.091656][T15907] netlink: 'syz.4.3039': attribute type 11 has an invalid length. [ 824.393398][T15823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.507913][T15823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.588265][T15920] kvm: MWAIT instruction emulated as NOP! [ 824.733779][T15916] tipc: Started in network mode [ 824.754086][T15916] tipc: Node identity 7f000001, cluster identity 4711 [ 824.762582][T15916] tipc: New replicast peer: 0.0.0.0 [ 824.775236][T15916] tipc: Enabled bearer , priority 10 [ 824.931544][T15823] team0: Port device team_slave_0 added [ 824.954159][T15823] team0: Port device team_slave_1 added [ 825.385098][ T5850] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 825.488583][T15823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.510483][T15823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.597114][ T5850] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 825.615201][T15823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.626373][ T5850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.677303][T15823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.684844][ T5850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 825.720152][T15823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.768034][ T5907] tipc: Node number set to 2130706433 [ 825.785381][ T5850] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 825.825193][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 825.843457][ T5850] usb 5-1: Product: syz [ 825.868428][ T5850] usb 5-1: Manufacturer: syz [ 825.875060][T15823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.030896][ T1343] hsr_slave_0: left promiscuous mode [ 826.053554][ T1343] hsr_slave_1: left promiscuous mode [ 826.088193][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.132931][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.186322][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.204539][ T5907] usb 5-1: USB disconnect, device number 89 [ 826.234722][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.416991][ T1343] veth1_to_batadv: left promiscuous mode [ 826.422836][ T1343] veth1_macvtap: left promiscuous mode [ 826.485167][ T1343] veth0_macvtap: left promiscuous mode [ 826.505282][ T1343] veth1_vlan: left promiscuous mode [ 826.531734][ T1343] veth0_vlan: left promiscuous mode [ 826.575345][T15944] x_tables: duplicate entry at hook 3 [ 826.595065][ T5850] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 826.805142][ T5850] usb 1-1: Using ep0 maxpacket: 16 [ 826.879626][ T5850] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 826.945797][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.953906][ T5850] usb 1-1: Product: syz [ 827.013250][ T5850] usb 1-1: Manufacturer: syz [ 827.013887][T15949] netlink: 'syz.4.3047': attribute type 2 has an invalid length. [ 827.023194][ T5850] usb 1-1: SerialNumber: syz [ 827.079539][ T5850] usb 1-1: config 0 descriptor?? [ 827.085498][T15949] netlink: 'syz.4.3047': attribute type 8 has an invalid length. [ 827.124108][T15949] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3047'. [ 827.134664][ T5850] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 827.561461][T15940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.639598][ T5850] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 827.649431][T15940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.774203][ T1343] team0 (unregistering): Port device team_slave_1 removed [ 828.919269][ T1343] team0 (unregistering): Port device team_slave_0 removed [ 829.625180][ T5907] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 829.682636][ T1212] usb 1-1: USB disconnect, device number 83 [ 829.808854][ T5907] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 829.817799][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.829657][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 829.843879][ T5907] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 829.853877][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 829.874024][ T5907] usb 2-1: Product: syz [ 829.887190][ T5907] usb 2-1: Manufacturer: syz [ 830.175147][T15961] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 830.338433][ T5907] usb 2-1: USB disconnect, device number 80 [ 830.535804][ T5928] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 830.563591][T15823] hsr_slave_0: entered promiscuous mode [ 830.581073][T15823] hsr_slave_1: entered promiscuous mode [ 830.588405][T15823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.598312][T15823] Cannot create hsr debugfs directory [ 830.697919][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 830.731276][ T5928] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 830.759482][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 830.786275][ T5928] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 830.804155][ T5928] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 830.831438][ T5928] usb 1-1: Manufacturer: syz [ 830.850399][ T5928] usb 1-1: config 0 descriptor?? [ 830.872322][ T5928] smsusb:smsusb_probe: board id=9, interface number 0 [ 830.895671][ T5928] smsusb:smsusb_probe: Device initialized with return code -19 [ 830.913163][ T5850] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 831.093189][ T5850] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 831.105534][ T5850] usb 4-1: config 0 has no interface number 0 [ 831.137722][T15968] vivid-000: ================= START STATUS ================= [ 831.147933][ T5850] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 831.165185][T15968] vivid-000: Test Pattern: 75% Colorbar [ 831.171057][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.181349][T15968] vivid-000: Fill Percentage of Frame: 100 [ 831.195098][ T5850] usb 4-1: Product: syz [ 831.199379][ T5850] usb 4-1: Manufacturer: syz [ 831.209728][T15968] vivid-000: Horizontal Movement: No Movement [ 831.220318][ T5850] usb 4-1: SerialNumber: syz [ 831.231934][T15968] vivid-000: Vertical Movement: No Movement [ 831.241543][ T5850] usb 4-1: config 0 descriptor?? [ 831.260318][T15968] vivid-000: OSD Text Mode: All [ 831.266308][ T5969] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 831.286618][T15968] vivid-000: Show Border: false [ 831.296470][T15968] vivid-000: Show Square: false [ 831.306899][T15968] vivid-000: Sensor Flipped Horizontally: false [ 831.330178][T15968] vivid-000: Sensor Flipped Vertically: false [ 831.342057][T15968] vivid-000: Insert SAV Code in Image: false [ 831.352931][T15968] vivid-000: Insert EAV Code in Image: false [ 831.364609][T15968] vivid-000: Insert Video Guard Band: true [ 831.373612][T15968] vivid-000: Reduced Framerate: false [ 831.389931][T15968] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 831.428878][T15968] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 831.439788][ T5969] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 831.463082][T15968] vivid-000: Enable Capture Cropping: true grabbed [ 831.465137][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.484108][ T5850] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 831.490633][T15968] vivid-000: Enable Capture Composing: true grabbed [ 831.530609][ T5969] usb 2-1: config 0 descriptor?? [ 831.540541][ T5850] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 831.549536][T15968] vivid-000: Enable Capture Scaler: true grabbed [ 831.569631][ T5969] cp210x 2-1:0.0: cp210x converter detected [ 831.578464][ T5850] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 831.591886][T15968] vivid-000: Timestamp Source: End of Frame [ 831.613621][T15968] vivid-000: Colorspace: SMPTE 170M [ 831.618080][ T5850] usb 4-1: media controller created [ 831.632563][T15968] vivid-000: Transfer Function: Default [ 831.650703][T15968] vivid-000: Y'CbCr Encoding: Default [ 831.663664][T15968] vivid-000: HSV Encoding: Hue 0-179 [ 831.689828][T15968] vivid-000: Quantization: Default [ 831.714416][T15968] vivid-000: Apply Alpha To Red Only: false [ 831.741653][T15968] vivid-000: Standard Aspect Ratio: 4x3 [ 831.746838][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.783441][T15968] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 831.818015][T15968] vivid-000: DV Timings: 640x480p59 inactive [ 831.845419][T15968] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 831.891663][T15968] vivid-000: Maximum EDID Blocks: 2 [ 831.942947][T15968] vivid-000: Limited RGB Range (16-235): true [ 832.012731][T15968] vivid-000: Rx RGB Quantization Range: Automatic [ 832.061022][T15968] vivid-000: Power Present: 0x00000001 [ 832.084655][T15968] tpg source WxH: 720x576 (Y'CbCr) [ 832.104122][T15968] tpg field: 4 [ 832.114297][T15968] tpg crop: (0,0)/64x64 [ 832.142416][T15968] tpg compose: (0,0)/16x16 [ 832.171642][T15968] tpg colorspace: 1 [ 832.193901][T15968] tpg transfer function: 0/1 [ 832.210715][T15968] tpg Y'CbCr encoding: 0/1 [ 832.266290][ T5969] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 832.275086][T15968] tpg quantization: 0/2 [ 832.290980][T15968] tpg RGB range: 0/1 [ 832.309532][T15968] vivid-000: ================== END STATUS ================== [ 832.326305][ T5969] usb 2-1: cp210x converter now attached to ttyUSB0 [ 832.431650][ T977] usb 1-1: USB disconnect, device number 84 [ 832.541213][T15823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 832.587286][T15823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 832.727421][T15823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 832.747015][T15823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 832.806541][ T5850] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 832.845376][ T5907] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 832.925294][ T5850] usb 4-1: USB disconnect, device number 95 [ 833.115293][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 833.132630][ T5907] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 833.141424][T15823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.154577][ T5907] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 833.164129][ T5907] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 833.192898][ T5907] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 833.204140][T15823] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.208088][ T5907] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 833.222479][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.269994][T11357] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.277293][T11357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.384916][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.392181][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.481207][T15823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 833.532800][T15823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 833.893757][T16030] @: renamed from syz_tun (while UP) [ 834.393439][T13164] usb 2-1: USB disconnect, device number 81 [ 834.404180][T13164] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 834.524718][T13164] cp210x 2-1:0.0: device disconnected [ 834.581698][T15823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.996210][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3060'. [ 835.007847][T16043] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 835.031878][T15823] veth0_vlan: entered promiscuous mode [ 835.194690][T15823] veth1_vlan: entered promiscuous mode [ 835.404225][T15823] veth0_macvtap: entered promiscuous mode [ 835.570786][T15823] veth1_macvtap: entered promiscuous mode [ 835.820305][T15823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.014143][T15823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.161531][T15823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.212869][T15823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.243619][T16009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.275066][T15823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.284126][T15823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.299633][ T1212] usb 5-1: USB disconnect, device number 90 [ 836.874504][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.914062][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.131444][T11357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.170028][T11357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.595042][ T977] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 837.645054][ T5969] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 837.795063][ T977] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 837.817650][ T977] usb 2-1: config 0 has an invalid descriptor of length 153, skipping remainder of the config [ 837.837344][ T977] usb 2-1: config 0 has no interface number 0 [ 837.843674][ T977] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 837.855483][ T977] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 837.873328][ T977] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 837.887781][ T5969] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 837.899450][ T5969] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 837.962858][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.981878][ T5969] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 838.002200][ T5969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 838.074577][ T5969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 838.095178][ T977] usb 2-1: Product: syz [ 838.099419][ T977] usb 2-1: Manufacturer: syz [ 838.104060][ T977] usb 2-1: SerialNumber: syz [ 838.113366][ T977] usb 2-1: config 0 descriptor?? [ 838.278968][ T5969] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 838.359489][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 838.366236][ T977] ljca 2-1:0.84: bulk endpoints not found [ 838.403964][ T977] usb 2-1: USB disconnect, device number 82 [ 838.410288][ T5969] usb 1-1: Product: syz [ 838.414589][ T5969] usb 1-1: Manufacturer: syz [ 838.432386][ T5969] cdc_wdm 1-1:1.0: skipping garbage [ 838.438041][ T5969] cdc_wdm 1-1:1.0: skipping garbage [ 838.482385][ T5969] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 838.509347][ T5969] cdc_wdm 1-1:1.0: Unknown control protocol [ 838.515235][ T5907] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 838.639893][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.646538][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.652862][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.659465][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.665819][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.672455][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.678726][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.685336][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.691590][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.698298][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.704645][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.711328][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.717618][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.724229][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.730529][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.737147][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.743582][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.750182][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.756514][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 838.763385][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 838.772133][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 838.780949][ T5969] usb 1-1: USB disconnect, device number 85 [ 838.826881][ T5907] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 838.855447][ T5907] usb 4-1: config 0 has no interface number 0 [ 838.883822][ T5907] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 838.897225][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.906265][ T5907] usb 4-1: Product: syz [ 838.933715][ T5907] usb 4-1: Manufacturer: syz [ 838.939807][ T5907] usb 4-1: SerialNumber: syz [ 838.954090][ T5907] usb 4-1: config 0 descriptor?? [ 839.176071][ T5907] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 839.200203][ T5907] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 839.251213][ T5907] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 839.262413][ T5907] usb 4-1: media controller created [ 839.311955][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 840.389434][ T5907] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 840.575182][ T5969] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 840.615105][ T5907] usb 4-1: USB disconnect, device number 96 [ 840.765583][ T5969] usb 1-1: Using ep0 maxpacket: 16 [ 840.781342][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 840.793398][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 840.802614][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 840.828992][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 840.835087][ T977] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 840.841510][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.855203][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 840.936565][ T5969] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 840.976803][T10281] syz_tun (unregistering): left allmulticast mode [ 840.989429][ T977] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 840.999100][ T977] usb 2-1: config 0 has no interface number 0 [ 840.999120][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.014772][ T977] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 841.033753][ T977] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 841.053798][ T977] usb 2-1: config 0 interface 230 has no altsetting 0 [ 841.071728][ T5969] usb 1-1: Product: syz [ 841.074915][ T977] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 841.079057][ T5969] usb 1-1: Manufacturer: syz [ 841.106689][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.117849][ T977] usb 2-1: Product: syz [ 841.122153][ T977] usb 2-1: Manufacturer: syz [ 841.132254][ T977] usb 2-1: SerialNumber: syz [ 841.145459][ T977] usb 2-1: config 0 descriptor?? [ 841.153399][T16129] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 841.155266][ T5969] usb 1-1: SerialNumber: syz [ 841.161668][T16129] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 841.199085][ T5969] usb 1-1: config 0 descriptor?? [ 841.215883][ T977] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 841.241460][ T5969] em28xx 1-1:0.0: audio device (2040:0264): interface 0, class 1 [ 841.260964][ T977] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 841.339358][ T1343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.464047][ T24] usb 1-1: USB disconnect, device number 86 [ 841.486505][ T5928] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 841.547705][ T1343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.657482][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 841.721759][ T1343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.743682][ T5928] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 841.776312][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.809045][ T5928] usb 4-1: Product: syz [ 841.845293][ T5928] usb 4-1: Manufacturer: syz [ 841.849978][ T5928] usb 4-1: SerialNumber: syz [ 841.900909][ T5928] usb 4-1: config 0 descriptor?? [ 841.928694][ T5928] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 841.945900][ T1343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.741023][ T5928] gspca_ov534_9: reg_w failed -71 [ 842.923618][T16137] chnl_net:caif_netlink_parms(): no params data found [ 842.948382][T15373] Bluetooth: hci3: command tx timeout [ 843.078634][ T5928] gspca_ov534_9: Unknown sensor 0000 [ 843.078744][ T5928] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 843.124572][ T5928] usb 4-1: USB disconnect, device number 97 [ 843.154680][ T1343] bridge_slave_1: left promiscuous mode [ 843.193696][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.293601][ T1343] bridge_slave_0: left allmulticast mode [ 843.332946][ T1343] bridge_slave_0: left promiscuous mode [ 843.390293][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.647907][ T977] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 843.727089][ T977] usb 2-1: USB disconnect, device number 83 [ 844.513742][T16192] usb usb8: usbfs: process 16192 (syz.0.3085) did not claim interface 0 before use [ 844.570775][T16192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3085'. [ 845.035242][T15373] Bluetooth: hci3: command tx timeout [ 845.426776][ T5969] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 845.505475][ T5928] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 845.592296][ T5969] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 845.603135][ T5969] usb 3-1: config 0 has no interface number 0 [ 845.613174][ T5969] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 845.622542][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.635032][ T5969] usb 3-1: Product: syz [ 845.639253][ T5969] usb 3-1: Manufacturer: syz [ 845.644070][ T5969] usb 3-1: SerialNumber: syz [ 845.692222][ T5969] usb 3-1: config 0 descriptor?? [ 845.742039][ T5928] usb 1-1: config 0 has no interfaces? [ 845.802224][ T5928] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 845.860773][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.883046][ T5928] usb 1-1: Product: syz [ 845.887858][ T5928] usb 1-1: Manufacturer: syz [ 845.892744][ T5928] usb 1-1: SerialNumber: syz [ 845.917532][ T5928] usb 1-1: config 0 descriptor?? [ 845.982806][ T5969] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 845.993693][ T5969] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 846.004825][ T5969] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 846.030850][ T5969] usb 3-1: media controller created [ 846.095078][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.205006][T16208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.216148][T16208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.119899][T15373] Bluetooth: hci3: command tx timeout [ 847.191756][ T5969] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 847.407213][ T5969] usb 3-1: USB disconnect, device number 93 [ 847.629114][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.640200][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.663959][ T1343] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 847.679160][ T1343] bond0 (unregistering): Released all slaves [ 848.069847][ T1343] bond1 (unregistering): Released all slaves [ 848.275255][T14696] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 848.338692][ T1343] tipc: Left network mode [ 848.447274][T14696] usb 3-1: config 0 has no interfaces? [ 848.464834][T14696] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 848.474756][T14696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.495091][T14696] usb 3-1: Product: syz [ 848.499355][T14696] usb 3-1: Manufacturer: syz [ 848.503984][T14696] usb 3-1: SerialNumber: syz [ 848.517122][T14696] usb 3-1: config 0 descriptor?? [ 848.555936][ T1343] IPVS: stopping master sync thread 11431 ... [ 848.595070][T13157] usb 1-1: USB disconnect, device number 87 [ 848.615259][ T1212] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 848.775800][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.786247][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.799108][T16137] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.811824][T16137] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.819698][T16137] bridge_slave_0: entered allmulticast mode [ 848.829819][T16137] bridge_slave_0: entered promiscuous mode [ 848.852143][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.863590][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.887918][T16137] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.931586][ T1212] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 848.947348][T16137] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.971101][T16137] bridge_slave_1: entered allmulticast mode [ 848.992177][ T1212] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 849.014165][T16137] bridge_slave_1: entered promiscuous mode [ 849.041430][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.072886][ T1212] usb 4-1: config 0 descriptor?? [ 849.187283][T15373] Bluetooth: hci3: command tx timeout [ 849.569182][ T1212] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 849.610242][ T1212] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 849.899128][T16137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.929831][T16257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.940588][T16257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.992563][T16254] tipc: Enabling of bearer rejected, already enabled [ 849.992833][ T977] usb 4-1: USB disconnect, device number 98 [ 850.015731][T16255] plantronics 0003:047F:FFFF.0030: usb_submit_urb(ctrl) failed: -19 [ 850.086094][T16252] fido_id[16252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 850.103652][T16137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.639944][T16137] team0: Port device team_slave_0 added [ 850.745777][ T1343] hsr_slave_0: left promiscuous mode [ 850.752712][ T1343] hsr_slave_1: left promiscuous mode [ 850.771034][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.862018][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.883175][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.893057][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.947393][ T1343] veth1_macvtap: left promiscuous mode [ 850.953149][ T1343] veth0_macvtap: left promiscuous mode [ 850.959738][ T1343] veth1_vlan: left promiscuous mode [ 850.965558][ T1343] veth0_vlan: left promiscuous mode [ 851.030864][T14696] usb 3-1: USB disconnect, device number 94 [ 851.656340][ T1212] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 851.817285][ T1212] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 851.840446][ T1212] usb 1-1: config 0 has no interface number 0 [ 851.851330][ T1212] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 851.879542][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.913589][ T1212] usb 1-1: Product: syz [ 851.917951][ T1212] usb 1-1: Manufacturer: syz [ 851.923467][ T1212] usb 1-1: SerialNumber: syz [ 851.949249][ T1212] usb 1-1: config 0 descriptor?? [ 852.158830][ T1212] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 852.211983][ T1212] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 852.241859][ T1212] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 852.250144][ T1212] usb 1-1: media controller created [ 852.308931][ T1343] team0 (unregistering): Port device team_slave_1 removed [ 852.328978][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 852.456726][ T1343] team0 (unregistering): Port device team_slave_0 removed [ 853.155361][T13157] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 853.315440][T13157] usb 3-1: Using ep0 maxpacket: 32 [ 853.331233][T13157] usb 3-1: config 0 has an invalid interface number: 4 but max is 1 [ 853.339841][T13157] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.361401][T13157] usb 3-1: config 0 has no interface number 1 [ 853.371702][T13157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 853.389148][T13157] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 853.400313][T13157] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 853.456842][ T1212] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 853.504050][T13157] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 853.518971][T13157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.541772][T13157] usb 3-1: Product: syz [ 853.550254][T13157] usb 3-1: Manufacturer: syz [ 853.573840][T13157] usb 3-1: SerialNumber: syz [ 853.588504][ T1212] usb 1-1: USB disconnect, device number 88 [ 853.611710][T13157] usb 3-1: config 0 descriptor?? [ 853.693470][T16137] team0: Port device team_slave_1 added [ 853.976443][T16137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.983471][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.036693][T16137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.138452][T16137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.238137][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.344258][T16137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.687241][T16137] hsr_slave_0: entered promiscuous mode [ 855.885020][T16137] hsr_slave_1: entered promiscuous mode [ 855.892775][T16137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 856.005268][T16137] Cannot create hsr debugfs directory [ 856.017769][T16303] tipc: Enabling of bearer rejected, failed to enable media [ 856.915419][ T1212] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 857.113695][ T1212] usb 1-1: config 0 has no interfaces? [ 857.255244][T13157] cxacru 3-1:0.0: cxacru_bind: interface has incorrect endpoints [ 857.298746][T13157] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 857.321727][ T1212] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 857.383498][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.405294][T13157] cxacru 3-1:0.4: cxacru_bind: interface has incorrect endpoints [ 857.465189][T13157] cxacru 3-1:0.4: usbatm_usb_probe: bind failed: -19! [ 857.479223][ T1212] usb 1-1: Product: syz [ 857.505881][ T1212] usb 1-1: Manufacturer: syz [ 857.510565][ T1212] usb 1-1: SerialNumber: syz [ 857.526906][T13157] usb 3-1: USB disconnect, device number 95 [ 857.648301][ T1212] usb 1-1: config 0 descriptor?? [ 857.979136][T16322] netlink: 'syz.2.3108': attribute type 10 has an invalid length. [ 858.519009][T16322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.594371][T16322] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 858.638006][T16334] tipc: Enabling of bearer rejected, already enabled [ 858.854665][T16335] tipc: Enabling of bearer rejected, failed to enable media [ 859.235068][T14696] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 859.395209][T14696] usb 3-1: Using ep0 maxpacket: 32 [ 859.435145][T14696] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 859.462696][T16137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.473710][T14696] usb 3-1: config 0 has no interface number 0 [ 859.511596][T14696] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 859.536168][T16137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 859.565568][T14696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.596111][T16137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 859.645424][T14696] usb 3-1: Product: syz [ 859.649754][T14696] usb 3-1: Manufacturer: syz [ 859.654404][T14696] usb 3-1: SerialNumber: syz [ 859.673802][T16137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 859.685453][T14696] usb 3-1: config 0 descriptor?? [ 859.693209][T14696] smsc95xx v2.0.0 [ 859.775045][ T5969] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 859.945516][ T5969] usb 4-1: Using ep0 maxpacket: 32 [ 859.982247][ T5969] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 860.015037][ T5969] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 860.032882][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 860.062107][ T5969] usb 4-1: Product: syz [ 860.075142][ T5969] usb 4-1: Manufacturer: syz [ 860.079844][ T5969] usb 4-1: SerialNumber: syz [ 860.115452][ T5969] usb 4-1: config 0 descriptor?? [ 860.120688][T14696] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 860.154144][T16343] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 860.159810][T16137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.175555][T14696] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 860.185575][ T5969] hub 4-1:0.0: bad descriptor, ignoring hub [ 860.191652][ T5969] hub 4-1:0.0: probe with driver hub failed with error -5 [ 860.213746][ T1212] usb 1-1: USB disconnect, device number 89 [ 860.276704][T16137] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.345623][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.352880][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.404580][T16343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.416169][T16343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.432434][T14696] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 860.459334][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.466684][T11353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.473974][T14696] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 860.535301][ T5969] usb 4-1: USB disconnect, device number 99 [ 860.717398][T16137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.941494][T16137] veth0_vlan: entered promiscuous mode [ 860.992313][T16137] veth1_vlan: entered promiscuous mode [ 861.136995][ T977] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 861.146640][T16137] veth0_macvtap: entered promiscuous mode [ 861.177933][T16137] veth1_macvtap: entered promiscuous mode [ 861.219600][T16137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.249307][T16137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.272957][T16137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.294473][T16137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.334257][T16137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.358445][T16137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.422684][ T977] usb 1-1: config 0 has no interfaces? [ 861.600719][ T977] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 861.660186][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.744154][ T977] usb 1-1: Product: syz [ 861.769794][ T977] usb 1-1: Manufacturer: syz [ 861.780611][ T5969] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 861.800544][ T977] usb 1-1: SerialNumber: syz [ 861.917365][ T977] usb 1-1: config 0 descriptor?? [ 861.922208][T16390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3111'. [ 862.065890][ T5969] usb 4-1: config 0 has no interfaces? [ 862.097804][ T5969] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 862.173927][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.173995][T11353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.230467][ T5969] usb 4-1: Product: syz [ 862.243888][ T5969] usb 4-1: Manufacturer: syz [ 862.263737][T11353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.274126][ T5969] usb 4-1: SerialNumber: syz [ 862.307618][ T5969] usb 4-1: config 0 descriptor?? [ 862.638947][ T5969] IPVS: starting estimator thread 0... [ 862.691272][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.701188][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.725217][T16397] IPVS: using max 45 ests per chain, 108000 per kthread [ 863.062497][ T5969] usb 3-1: USB disconnect, device number 96 [ 863.668035][T16413] tipc: Started in network mode [ 863.674038][T16413] tipc: Node identity 7f000001, cluster identity 4711 [ 863.685030][T16413] tipc: New replicast peer: 0.0.0.0 [ 863.693103][T16413] tipc: Enabled bearer , priority 10 [ 863.707616][T16413] ptrace attach of "./syz-executor exec"[15823] was attempted by ""[16413] [ 864.805223][ T977] tipc: Node number set to 2130706433 [ 865.232164][ T5928] usb 1-1: USB disconnect, device number 90 [ 865.302616][T13164] usb 4-1: USB disconnect, device number 100 [ 866.503666][T16445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3126'. [ 866.803139][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 866.815784][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 866.824873][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 866.833299][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 866.845361][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 866.897520][T16455] FAULT_INJECTION: forcing a failure. [ 866.897520][T16455] name failslab, interval 1, probability 0, space 0, times 0 [ 866.979153][T16455] CPU: 0 UID: 0 PID: 16455 Comm: syz.4.3128 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 866.979184][T16455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 866.979198][T16455] Call Trace: [ 866.979207][T16455] [ 866.979217][T16455] dump_stack_lvl+0x189/0x250 [ 866.979256][T16455] ? __pfx____ratelimit+0x10/0x10 [ 866.979289][T16455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.979320][T16455] ? __pfx__printk+0x10/0x10 [ 866.979350][T16455] ? __pfx___might_resched+0x10/0x10 [ 866.979389][T16455] ? fs_reclaim_acquire+0x7d/0x100 [ 866.979420][T16455] should_fail_ex+0x414/0x560 [ 866.979454][T16455] should_failslab+0xa8/0x100 [ 866.979481][T16455] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 866.979503][T16455] ? __alloc_skb+0x112/0x2d0 [ 866.979534][T16455] __alloc_skb+0x112/0x2d0 [ 866.979564][T16455] netlink_ack+0x146/0xa50 [ 866.979592][T16455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 866.979619][T16455] ? ref_tracker_free+0x63a/0x7d0 [ 866.979646][T16455] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 866.979675][T16455] ? __pfx_nl80211_post_doit+0x10/0x10 [ 866.979704][T16455] ? __pfx_ref_tracker_free+0x10/0x10 [ 866.979744][T16455] netlink_rcv_skb+0x28c/0x470 [ 866.979770][T16455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 866.979802][T16455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 866.979847][T16455] ? down_read+0x1ad/0x2e0 [ 866.979872][T16455] genl_rcv+0x28/0x40 [ 866.979899][T16455] netlink_unicast+0x75b/0x8d0 [ 866.979936][T16455] netlink_sendmsg+0x805/0xb30 [ 866.979972][T16455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.980002][T16455] ? aa_sock_msg_perm+0x94/0x160 [ 866.980031][T16455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.980057][T16455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.980084][T16455] __sock_sendmsg+0x219/0x270 [ 866.980110][T16455] ____sys_sendmsg+0x505/0x830 [ 866.980144][T16455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.980182][T16455] ? import_iovec+0x74/0xa0 [ 866.980209][T16455] ___sys_sendmsg+0x21f/0x2a0 [ 866.980239][T16455] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.980308][T16455] ? __fget_files+0x2a/0x420 [ 866.980331][T16455] ? __fget_files+0x3a0/0x420 [ 866.980374][T16455] __x64_sys_sendmsg+0x19b/0x260 [ 866.980405][T16455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.980444][T16455] ? __pfx_ksys_write+0x10/0x10 [ 866.980462][T16455] ? rcu_is_watching+0x15/0xb0 [ 866.980488][T16455] ? do_syscall_64+0xbe/0x3b0 [ 866.980512][T16455] do_syscall_64+0xfa/0x3b0 [ 866.980530][T16455] ? lockdep_hardirqs_on+0x9c/0x150 [ 866.980560][T16455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.980581][T16455] ? clear_bhb_loop+0x60/0xb0 [ 866.980606][T16455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.980625][T16455] RIP: 0033:0x7fe43478e929 [ 866.980646][T16455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.980664][T16455] RSP: 002b:00007fe435689038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.980687][T16455] RAX: ffffffffffffffda RBX: 00007fe4349b5fa0 RCX: 00007fe43478e929 [ 866.980702][T16455] RDX: 0000000020000090 RSI: 0000200000000180 RDI: 0000000000000003 [ 866.980717][T16455] RBP: 00007fe435689090 R08: 0000000000000000 R09: 0000000000000000 [ 866.980730][T16455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.980743][T16455] R13: 0000000000000000 R14: 00007fe4349b5fa0 R15: 00007fe434adfa28 [ 866.980776][T16455] [ 867.317883][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.062664][ T9933] @ (unregistering): left allmulticast mode [ 868.099512][T16468] veth0_to_batadv: entered promiscuous mode [ 868.111942][T16468] veth0_to_batadv: left promiscuous mode [ 868.347073][T16473] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3131'. [ 868.356611][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3131'. [ 868.365667][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3131'. [ 868.576268][ T1036] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.617004][ T5928] IPVS: starting estimator thread 0... [ 868.639582][ T1036] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.715312][T16480] IPVS: using max 45 ests per chain, 108000 per kthread [ 868.765028][ T5928] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 868.945341][ T5842] Bluetooth: hci4: command tx timeout [ 868.974065][ T1036] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.000166][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.011946][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.042173][ T5928] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 869.064657][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.168906][ T1036] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.404105][ T5928] usb 5-1: config 0 descriptor?? [ 869.744152][T16491] tipc: Enabling of bearer rejected, already enabled [ 869.935376][ T977] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 870.157611][ T977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.279383][ T977] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.298859][ T1036] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.313545][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.319910][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.361243][ T1036] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.436908][ T977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 870.446210][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 870.454336][ T977] usb 1-1: SerialNumber: syz [ 870.491471][ T977] cdc_ether 1-1:1.0: skipping garbage [ 870.510358][ T977] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 870.546507][ T977] usb-storage 1-1:1.0: USB Mass Storage device detected [ 870.648496][ T977] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 870.787600][T16456] chnl_net:caif_netlink_parms(): no params data found [ 871.025462][T15373] Bluetooth: hci4: command tx timeout [ 871.095481][ T1036] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.127640][ T1036] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.290145][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 871.299318][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 871.760745][T16506] netlink: 'syz.2.3139': attribute type 2 has an invalid length. [ 871.768631][T16506] netlink: 'syz.2.3139': attribute type 8 has an invalid length. [ 871.801672][T16506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3139'. [ 871.850656][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.862990][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.880274][T16456] bridge_slave_0: entered allmulticast mode [ 871.901429][T16456] bridge_slave_0: entered promiscuous mode [ 871.931485][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.943783][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.974823][T16456] bridge_slave_1: entered allmulticast mode [ 871.999323][T16456] bridge_slave_1: entered promiscuous mode [ 872.027691][T16506] syz_tun: entered allmulticast mode [ 872.311501][ T5928] usbhid 5-1:0.0: can't add hid device: -71 [ 872.338686][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 872.397065][T15373] Bluetooth: hci5: command 0x0406 tx timeout [ 872.458889][ T5928] usb 5-1: USB disconnect, device number 91 [ 873.100913][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.122974][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.155352][ T5842] Bluetooth: hci4: command tx timeout [ 873.352361][T13164] usb 1-1: USB disconnect, device number 91 [ 873.643878][T16456] team0: Port device team_slave_0 added [ 873.785899][T16456] team0: Port device team_slave_1 added [ 873.822343][ T1036] bridge_slave_1: left allmulticast mode [ 873.838248][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 873.838271][ T30] audit: type=1326 audit(1749381013.838:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43478e929 code=0x7ffc0000 [ 873.876083][ T30] audit: type=1326 audit(1749381013.838:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43478e929 code=0x7ffc0000 [ 873.883391][ T1036] bridge_slave_1: left promiscuous mode [ 873.928892][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.941374][ T30] audit: type=1326 audit(1749381013.838:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fe43478e929 code=0x7ffc0000 [ 873.983281][ T30] audit: type=1326 audit(1749381013.978:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43478e929 code=0x7ffc0000 [ 874.007687][T13164] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 874.023478][ T1036] bridge_slave_0: left allmulticast mode [ 874.040606][ T1036] bridge_slave_0: left promiscuous mode [ 874.048546][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.052233][ T30] audit: type=1326 audit(1749381013.978:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43478e929 code=0x7ffc0000 [ 874.079205][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.128369][ T30] audit: type=1326 audit(1749381014.088:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe43478e929 code=0x7ffc0000 [ 874.176709][ T30] audit: type=1326 audit(1749381014.088:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43478e929 code=0x7ffc0000 [ 874.209044][T13164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 874.221032][T13164] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 874.251438][T13164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 874.262603][ T30] audit: type=1326 audit(1749381014.088:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe43478e929 code=0x7ffc0000 [ 874.305825][T13164] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 874.319107][T13164] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 874.332234][ T30] audit: type=1326 audit(1749381014.088:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe43478e963 code=0x7ffc0000 [ 874.365274][T13164] usb 1-1: Manufacturer: syz [ 874.387177][T13164] usb 1-1: config 0 descriptor?? [ 874.397503][T13164] smsusb:smsusb_probe: board id=9, interface number 0 [ 874.417799][ T30] audit: type=1326 audit(1749381014.128:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16521 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe43478e963 code=0x7ffc0000 [ 874.460909][T13164] smsusb:smsusb_probe: Device initialized with return code -19 [ 874.729353][T16520] vivid-000: ================= START STATUS ================= [ 874.752879][T16520] vivid-000: Test Pattern: 75% Colorbar [ 874.775198][T16520] vivid-000: Fill Percentage of Frame: 100 [ 874.814169][T16520] vivid-000: Horizontal Movement: No Movement [ 874.842274][T16520] vivid-000: Vertical Movement: No Movement [ 874.854523][T16520] vivid-000: OSD Text Mode: All [ 874.894261][T16520] vivid-000: Show Border: false [ 874.912483][T16520] vivid-000: Show Square: false [ 874.921486][T16520] vivid-000: Sensor Flipped Horizontally: false [ 874.930932][T16520] vivid-000: Sensor Flipped Vertically: false [ 874.943083][T16520] vivid-000: Insert SAV Code in Image: false [ 874.983070][T16520] vivid-000: Insert EAV Code in Image: false [ 875.051170][T16520] vivid-000: Insert Video Guard Band: true [ 875.062863][T16520] vivid-000: Reduced Framerate: false [ 875.070422][T16520] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 875.083124][T16520] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 875.093371][T16520] vivid-000: Enable Capture Cropping: true grabbed [ 875.110466][T16520] vivid-000: Enable Capture Composing: true grabbed [ 875.120808][T16520] vivid-000: Enable Capture Scaler: true grabbed [ 875.138901][T16520] vivid-000: Timestamp Source: End of Frame [ 875.169752][T16520] vivid-000: Colorspace: SMPTE 170M [ 875.189253][T16520] vivid-000: Transfer Function: Default [ 875.190592][ T5842] Bluetooth: hci4: command tx timeout [ 875.219017][T16520] vivid-000: Y'CbCr Encoding: Default [ 875.236496][T16520] vivid-000: HSV Encoding: Hue 0-179 [ 875.265521][T16520] vivid-000: Quantization: Default [ 875.277572][T16520] vivid-000: Apply Alpha To Red Only: false [ 875.297825][T16520] vivid-000: Standard Aspect Ratio: 4x3 [ 875.312443][T16520] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 875.345329][T16520] vivid-000: DV Timings: 640x480p59 inactive [ 875.367913][T16520] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 875.386384][T16520] vivid-000: Maximum EDID Blocks: 2 [ 875.410538][T16520] vivid-000: Limited RGB Range (16-235): true [ 875.446616][T16520] vivid-000: Rx RGB Quantization Range: Automatic [ 875.501484][T16520] vivid-000: Power Present: 0x00000001 [ 875.556994][T16520] tpg source WxH: 720x576 (Y'CbCr) [ 875.562208][T16520] tpg field: 4 [ 875.579752][T16520] tpg crop: (0,0)/64x64 [ 875.610282][T16520] tpg compose: (0,0)/16x16 [ 875.615184][T16520] tpg colorspace: 1 [ 875.621011][T16520] tpg transfer function: 0/1 [ 875.655292][T16520] tpg Y'CbCr encoding: 0/1 [ 875.668001][T16520] tpg quantization: 0/2 [ 875.672327][T16520] tpg RGB range: 0/1 [ 875.679943][T16520] vivid-000: ================== END STATUS ================== [ 875.742814][T16551] ptrace attach of "./syz-executor exec"[15374] was attempted by "./syz-executor exec"[16551] [ 876.171142][T16555] kvm: pic: non byte write [ 876.211504][T16555] kvm: pic: non byte write [ 876.828159][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.863272][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.876158][ T1036] bond0 (unregistering): Released all slaves [ 876.903830][ T1036] bond1 (unregistering): Released all slaves [ 876.949428][T16526] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 877.087055][ T977] usb 1-1: USB disconnect, device number 92 [ 877.143736][T16562] tipc: Enabling of bearer rejected, already enabled [ 877.286219][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.293234][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.355169][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.379077][ T1036] tipc: Disabling bearer [ 877.405278][ T1036] tipc: Left network mode [ 877.438852][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.453715][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.540704][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.945571][T16456] hsr_slave_0: entered promiscuous mode [ 878.009420][T16456] hsr_slave_1: entered promiscuous mode [ 878.053711][T16456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.105105][T16456] Cannot create hsr debugfs directory [ 878.577188][ T1036] hsr_slave_0: left promiscuous mode [ 878.606369][ T1036] hsr_slave_1: left promiscuous mode [ 878.620657][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.655016][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.779184][ T1036] veth1_to_batadv: left promiscuous mode [ 878.796664][ T1036] veth1_macvtap: left promiscuous mode [ 878.828972][ T1036] veth0_macvtap: left promiscuous mode [ 878.843928][ T1036] veth1_vlan: left promiscuous mode [ 878.857566][ T1036] veth0_vlan: left promiscuous mode [ 880.479272][T16623] futex_wake_op: syz.2.3162 tries to shift op by -33; fix this program [ 880.942882][T16627] fuse: Bad value for 'fd' [ 881.396069][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 881.472354][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 882.154802][T16619] tipc: Started in network mode [ 882.162667][T16619] tipc: Node identity 7f000001, cluster identity 4711 [ 882.173435][T16619] tipc: New replicast peer: 0.0.0.0 [ 882.180975][T16619] tipc: Enabled bearer , priority 10 [ 882.222989][T16623] netdevsim netdevsim2: Direct firmware load for . [ 882.222989][T16623] failed with error -2 [ 882.251528][T16623] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 882.251528][T16623] [ 882.375106][ T5969] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 882.591661][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.646349][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.665020][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 882.689264][ T5969] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 882.736159][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.760750][ T5969] usb 4-1: config 0 descriptor?? [ 883.111496][T16651] netlink: 'syz.4.3171': attribute type 2 has an invalid length. [ 883.191182][ T5969] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 883.221993][T16655] ptrace attach of "./syz-executor exec"[15069] was attempted by "./syz-executor exec"[16655] [ 883.291576][ T5969] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 883.305398][T13164] tipc: Node number set to 2130706433 [ 883.656340][T16664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.713198][T16664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.777479][ T5969] usb 4-1: USB disconnect, device number 101 [ 884.277051][T16456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 884.377627][T16456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 884.443336][T16456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 884.474042][T16456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 885.155740][T16687] tipc: Enabling of bearer rejected, already enabled [ 885.364157][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.433630][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.498918][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.506185][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.541684][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.548963][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.695879][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 885.730810][T16698] fuse: Bad value for 'fd' [ 886.143435][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.301872][T16696] netlink: 'syz.2.3177': attribute type 21 has an invalid length. [ 886.316528][T16696] netlink: 'syz.2.3177': attribute type 1 has an invalid length. [ 886.385261][ T977] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 886.471143][T16456] veth0_vlan: entered promiscuous mode [ 886.550582][T16456] veth1_vlan: entered promiscuous mode [ 886.645048][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 886.672606][ T977] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 886.687907][ T977] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 886.731890][ T977] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 886.752979][T16456] veth0_macvtap: entered promiscuous mode [ 886.758992][ T977] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 886.782367][ T977] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 886.829114][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.850438][T16456] veth1_macvtap: entered promiscuous mode [ 886.962019][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.008528][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.059942][T16456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.138736][T16456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.175140][T16456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.204500][T16456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.392113][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'. [ 887.450577][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 887.450598][ T30] audit: type=1326 audit(1749381027.448:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.0.3182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cb0d8e929 code=0x0 [ 887.478660][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.160181][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.174854][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.600023][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.616868][T16740] ptrace attach of "./syz-executor exec"[15069] was attempted by "./syz-executor exec"[16740] [ 888.627730][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.375351][T14696] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 889.545141][T14696] usb 2-1: Using ep0 maxpacket: 8 [ 889.608907][T14696] usb 2-1: config 3 has an invalid interface number: 144 but max is 1 [ 889.653997][T14696] usb 2-1: config 3 has an invalid interface number: 132 but max is 1 [ 889.713923][T16700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.726399][T13157] usb 5-1: USB disconnect, device number 92 [ 889.745792][T14696] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 889.820164][T14696] usb 2-1: config 3 has no interface number 0 [ 889.887851][T14696] usb 2-1: config 3 has no interface number 1 [ 889.904298][T14696] usb 2-1: config 3 interface 144 altsetting 94 endpoint 0x3 has an invalid bInterval 178, changing to 7 [ 889.981696][T14696] usb 2-1: config 3 interface 132 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 890.046787][T14696] usb 2-1: config 3 interface 144 has no altsetting 0 [ 890.081601][T14696] usb 2-1: config 3 interface 132 has no altsetting 0 [ 890.116612][T14696] usb 2-1: New USB device found, idVendor=10c4, idProduct=8665, bcdDevice=9a.47 [ 890.148273][T14696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.193571][T14696] usb 2-1: Product: 紭荫麹᭘㿽견큔젫ꌛ➍⋰ᛟᏂ斲⽯輅娄ꡠ墿ᣎ伯ﵸ争熠늀䅃ꢫ泙⃳龆삝즬긂競＼乙㕱䪟軆顈꽲꣟붊뺐긜啁︬檿泖ⓡ䭑쫳ﺕꐼ盵㰛൯쨙䮞璝㗌䙦樌啤拐釽욞绗뤠᎓ᜫ림⼣嬁 [ 890.317673][T14696] usb 2-1: Manufacturer: 䳽㲳밦阖兡贆唴쓧╸䖺䩊똾⾿ﶥ眵⻨呌椬晆㦳땢೮㒒㥤靺⻓ڊཛ䚒ୋ呮끣Ɒ栠錉餠 [ 890.430358][T14696] usb 2-1: SerialNumber: syz [ 890.750117][T14696] cp210x 2-1:3.144: cp210x converter detected [ 890.802599][T14696] cp210x 2-1:3.144: failed to get vendor val 0x370b size 1: -71 [ 890.832879][T14696] cp210x 2-1:3.144: querying part number failed [ 890.851825][T14696] usb 2-1: cp210x converter now attached to ttyUSB0 [ 890.895172][T14696] cp210x 2-1:3.132: cp210x converter detected [ 890.933669][T14696] cp210x 2-1:3.132: failed to get vendor val 0x370b size 1: -71 [ 891.025150][T14696] cp210x 2-1:3.132: querying part number failed [ 891.075719][T14696] usb 2-1: cp210x converter now attached to ttyUSB1 [ 891.125333][T14696] usb 2-1: USB disconnect, device number 84 [ 891.185714][T14696] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 891.245769][T14696] cp210x 2-1:3.144: device disconnected [ 891.274445][T14696] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 891.333760][T14696] cp210x 2-1:3.132: device disconnected [ 891.635752][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 892.875130][T15373] Bluetooth: hci0: command 0x0406 tx timeout [ 893.319744][T16819] loop6: detected capacity change from 0 to 63 [ 893.376665][T16819] buffer_io_error: 1 callbacks suppressed [ 893.376687][T16819] Buffer I/O error on dev loop6, logical block 0, async page read [ 893.445321][T16819] Buffer I/O error on dev loop6, logical block 1, async page read [ 893.500775][T16819] Buffer I/O error on dev loop6, logical block 2, async page read [ 893.535309][T16819] Buffer I/O error on dev loop6, logical block 3, async page read [ 893.585925][T16819] Buffer I/O error on dev loop6, logical block 0, async page read [ 893.625237][T16819] Buffer I/O error on dev loop6, logical block 1, async page read [ 893.655352][T16819] Buffer I/O error on dev loop6, logical block 2, async page read [ 893.695220][T16819] Buffer I/O error on dev loop6, logical block 3, async page read [ 893.725466][T16819] Buffer I/O error on dev loop6, logical block 0, async page read [ 893.733473][T16819] Buffer I/O error on dev loop6, logical block 1, async page read [ 895.205072][T13157] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 895.216573][T16860] ptrace attach of "./syz-executor exec"[16137] was attempted by "./syz-executor exec"[16860] [ 895.439896][T16867] netlink: 'syz.3.3209': attribute type 2 has an invalid length. [ 895.448092][T16867] netlink: 'syz.3.3209': attribute type 8 has an invalid length. [ 895.456259][T16867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3209'. [ 895.475391][T13157] usb 3-1: Using ep0 maxpacket: 16 [ 895.795032][T13157] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 895.945135][T16865] syz_tun: entered allmulticast mode [ 895.970599][T13157] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 896.044171][T13157] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.054133][T13157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.081488][T13157] usb 3-1: Product: syz [ 896.117987][T13157] usb 3-1: Manufacturer: syz [ 896.122658][T13157] usb 3-1: SerialNumber: syz [ 896.615601][ T5928] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 896.780373][T16865] syz_tun: left allmulticast mode [ 896.843449][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.924473][T16886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3214'. [ 896.952624][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 896.983053][T16886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 896.990447][T16886] IPv6: NLM_F_CREATE should be set when creating new route [ 896.998289][ T5928] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 897.032002][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.090390][ T5928] usb 2-1: config 0 descriptor?? [ 897.181044][ T5928] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 897.194315][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3215'. [ 897.236106][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 897.288479][ T5928] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 897.536498][T13157] usb 3-1: 0:2 : does not exist [ 897.552415][ T5928] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 897.578677][T16893] bridge_slave_1: left allmulticast mode [ 897.584808][T16893] bridge_slave_1: left promiscuous mode [ 897.591241][T16893] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.622193][T13157] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 897.624301][ T5928] usb 2-1: media controller created [ 897.749986][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.755878][T13157] usb 3-1: USB disconnect, device number 97 [ 897.863123][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.023635][T16893] bridge_slave_0: left allmulticast mode [ 898.030255][T16893] bridge_slave_0: left promiscuous mode [ 898.072858][T16893] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.107630][ T5928] dvb-usb: bulk message failed: -22 (6/0) [ 898.130442][ T5928] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 898.210350][ T5928] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input66 [ 898.292081][ T5928] dvb-usb: schedule remote query interval to 150 msecs. [ 898.306138][ T5928] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 898.341862][T16906] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3213'. [ 898.393423][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 898.466767][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 898.472684][ T5928] dvb-usb: error while querying for an remote control event. [ 898.667848][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 898.673670][ T5928] dvb-usb: error while querying for an remote control event. [ 898.837920][ T5928] usb 2-1: USB disconnect, device number 85 [ 898.883775][ T5928] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 899.201351][T16931] netlink: 'syz.2.3225': attribute type 2 has an invalid length. [ 899.215325][T16931] netlink: 'syz.2.3225': attribute type 8 has an invalid length. [ 899.229438][T16931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3225'. [ 900.210062][T16942] @: renamed from syz_tun (while UP) [ 901.185354][T13164] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 901.369533][T13164] usb 1-1: Using ep0 maxpacket: 16 [ 901.431882][T13164] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 901.722646][T13164] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.781200][T13164] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 902.034801][T13164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.112317][T13164] usb 1-1: Product: syz [ 902.252948][T13164] usb 1-1: Manufacturer: syz [ 902.302987][T13164] usb 1-1: SerialNumber: syz [ 902.496544][ T5928] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 902.536384][T16965] ptrace attach of "./syz-executor exec"[15374] was attempted by "./syz-executor exec"[16965] [ 902.793314][ T5928] usb 3-1: config 0 has no interfaces? [ 902.819253][ T5928] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 902.852627][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.919210][ T5928] usb 3-1: Product: syz [ 902.949666][ T5928] usb 3-1: Manufacturer: syz [ 903.002720][ T5928] usb 3-1: SerialNumber: syz [ 903.087446][ T5928] usb 3-1: config 0 descriptor?? [ 904.221771][T13164] usb 1-1: 0:2 : does not exist [ 904.301923][T13164] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 904.494168][T13164] usb 1-1: USB disconnect, device number 93 [ 904.725425][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.377149][ T5907] usb 3-1: USB disconnect, device number 98 [ 905.536397][T16989] net_ratelimit: 1 callbacks suppressed [ 905.536412][T16989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.595400][T13164] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 905.613981][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3238'. [ 905.625142][T14696] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 905.632876][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'. [ 905.777232][T13164] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.795210][T14696] usb 2-1: Using ep0 maxpacket: 32 [ 905.803339][T13164] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 905.818569][T14696] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 905.819740][T13164] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 905.877114][T13164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.885056][T14696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.893031][T13164] usb 4-1: config 0 descriptor?? [ 905.924001][T14696] usb 2-1: config 0 has no interface number 0 [ 905.935995][T13164] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 905.944724][T13164] dvb-usb: bulk message failed: -22 (3/0) [ 905.991914][T13164] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 906.005015][T14696] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 906.038665][T13164] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 906.049319][T14696] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 906.051955][T13164] usb 4-1: media controller created [ 906.075439][T14696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.078720][T13164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.083560][T14696] usb 2-1: Product: syz [ 906.083581][T14696] usb 2-1: Manufacturer: syz [ 906.083598][T14696] usb 2-1: SerialNumber: syz [ 906.137361][T13164] dvb-usb: bulk message failed: -22 (6/0) [ 906.171204][T13164] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 906.195842][T14696] usb 2-1: config 0 descriptor?? [ 906.211264][T13164] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 906.274565][T14696] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 906.300957][T14696] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 906.303103][T13164] dvb-usb: schedule remote query interval to 150 msecs. [ 906.368853][T13164] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 906.425116][ T5969] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 906.458241][T16987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.485729][T16987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.515147][T14696] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 906.526030][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 906.531874][ T977] dvb-usb: error while querying for an remote control event. [ 906.640072][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 906.661203][ T5969] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 906.691701][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 906.707084][T14696] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 906.715358][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 906.733697][ T977] dvb-usb: error while querying for an remote control event. [ 906.779737][T14696] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 906.813024][ T5969] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 906.822868][T14696] usb 2-1: USB disconnect, device number 86 [ 906.838364][ T5969] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 906.852987][T14696] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 906.903475][ T5969] usb 3-1: Manufacturer: syz [ 906.951433][ T5969] usb 3-1: config 0 descriptor?? [ 906.962578][ T5969] smsusb:smsusb_probe: board id=9, interface number 0 [ 906.985205][ T5969] smsusb:smsusb_probe: Device initialized with return code -19 [ 906.995541][T13164] dvb-usb: bulk message failed: -22 (1/0) [ 907.005897][T13164] dvb-usb: error while querying for an remote control event. [ 907.146933][T16998] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3236'. [ 907.162783][ T5850] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 907.179089][T16994] vivid-000: ================= START STATUS ================= [ 907.185093][T13164] dvb-usb: bulk message failed: -22 (1/0) [ 907.189608][T16994] vivid-000: Test Pattern: 75% Colorbar [ 907.211109][T16994] vivid-000: Fill Percentage of Frame: 100 [ 907.219459][T13164] dvb-usb: error while querying for an remote control event. [ 907.233491][ T5850] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.265096][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 907.277703][T16994] vivid-000: Horizontal Movement: No Movement [ 907.304226][T16994] vivid-000: Vertical Movement: No Movement [ 907.336843][T16994] vivid-000: OSD Text Mode: All [ 907.394410][T16994] vivid-000: Show Border: false [ 907.418597][T16994] vivid-000: Show Square: false [ 907.438632][T16994] vivid-000: Sensor Flipped Horizontally: false [ 907.488797][T13164] dvb-usb: bulk message failed: -22 (1/0) [ 907.515124][T13164] dvb-usb: error while querying for an remote control event. [ 907.536074][T16994] vivid-000: Sensor Flipped Vertically: false [ 907.542751][T16994] vivid-000: Insert SAV Code in Image: false [ 907.566500][T16994] vivid-000: Insert EAV Code in Image: false [ 907.591021][T16994] vivid-000: Insert Video Guard Band: true [ 907.610399][T16994] vivid-000: Reduced Framerate: false [ 907.685119][T13164] dvb-usb: bulk message failed: -22 (1/0) [ 907.691047][T13164] dvb-usb: error while querying for an remote control event. [ 907.704077][ T5907] usb 4-1: USB disconnect, device number 102 [ 907.729635][T16994] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 907.795355][T16994] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 907.836907][ T5907] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 907.871158][T16994] vivid-000: Enable Capture Cropping: true grabbed [ 907.925016][T16994] vivid-000: Enable Capture Composing: true grabbed [ 907.990256][T16994] vivid-000: Enable Capture Scaler: true grabbed [ 908.027893][T16994] vivid-000: Timestamp Source: End of Frame [ 908.034607][T16994] vivid-000: Colorspace: SMPTE 170M [ 908.134091][T16994] vivid-000: Transfer Function: Default [ 908.214990][T16994] vivid-000: Y'CbCr Encoding: Default [ 908.220464][T16994] vivid-000: HSV Encoding: Hue 0-179 [ 908.238843][T17018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.300735][T16994] vivid-000: Quantization: Default [ 908.417762][T16994] vivid-000: Apply Alpha To Red Only: false [ 908.444175][T16994] vivid-000: Standard Aspect Ratio: 4x3 [ 908.450145][T16994] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 908.471306][T16994] vivid-000: DV Timings: 640x480p59 inactive [ 908.615693][T16994] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 908.669039][T16994] vivid-000: Maximum EDID Blocks: 2 [ 908.893997][T16994] vivid-000: Limited RGB Range (16-235): true [ 908.947862][T16994] vivid-000: Rx RGB Quantization Range: Automatic [ 908.986418][T16994] vivid-000: Power Present: 0x00000001 [ 908.991990][T16994] tpg source WxH: 720x576 (Y'CbCr) [ 909.061319][T16994] tpg field: 4 [ 909.106194][T16994] tpg crop: (0,0)/64x64 [ 909.141647][T16994] tpg compose: (0,0)/16x16 [ 909.172257][T16994] tpg colorspace: 1 [ 909.180058][T16994] tpg transfer function: 0/1 [ 909.209960][T16994] tpg Y'CbCr encoding: 0/1 [ 909.239184][T16994] tpg quantization: 0/2 [ 909.263190][T16994] tpg RGB range: 0/1 [ 909.289447][T16994] vivid-000: ================== END STATUS ================== [ 909.417040][ T5969] usb 3-1: USB disconnect, device number 99 [ 909.537666][T17029] fuse: Bad value for 'fd' [ 909.606563][T17033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.678067][T17033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.732764][T17033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.745230][ T977] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 909.784317][T17033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.835356][ T5907] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 909.933558][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.956790][T17037] ptrace attach of "./syz-executor exec"[15374] was attempted by "./syz-executor exec"[17037] [ 910.002504][ T977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 910.057928][ T5907] usb 3-1: config 2 has an invalid interface number: 211 but max is 0 [ 910.073897][ T977] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 910.088620][ T5907] usb 3-1: config 2 has no interface number 0 [ 910.097216][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.105548][ T5907] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 910.138221][ T5907] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 910.150782][ T977] usb 5-1: config 0 descriptor?? [ 910.177379][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 910.195062][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.203248][ T5907] usb 3-1: Product: syz [ 910.207784][ T5907] usb 3-1: Manufacturer: syz [ 910.212428][ T5907] usb 3-1: SerialNumber: syz [ 910.239863][T17032] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 910.259179][ T5907] em28xx 3-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 910.298133][ T5907] em28xx 3-1:2.211: Device initialization failed. [ 910.328513][ T5907] em28xx 3-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 910.452896][ T5969] usb 3-1: USB disconnect, device number 100 [ 912.126483][ T5969] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 912.369990][ T5850] usb 5-1: USB disconnect, device number 93 [ 912.380594][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 912.421046][ T5969] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 912.515276][ T5969] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.564804][ T5969] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.595760][ T5969] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 912.662798][ T5969] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 912.730058][ T5907] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 912.800426][ T5969] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 912.843711][ T5969] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.853801][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 912.876317][ T5969] usb 3-1: SerialNumber: syz [ 912.903194][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.915334][ T5969] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 912.949707][ T5907] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 912.988323][T17069] tipc: Enabling of bearer rejected, already enabled [ 912.996531][ T5907] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 913.014569][T17069] ptrace attach of "./syz-executor exec"[15374] was attempted by ""[17069] [ 913.015081][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.138131][ T24] usb 3-1: USB disconnect, device number 101 [ 913.140223][ T5907] usb 1-1: config 0 descriptor?? [ 913.167448][ T5907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 913.175649][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 913.208171][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 913.226122][ T5907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 913.295267][ T5928] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 913.301007][ T5907] usb 1-1: media controller created [ 913.409142][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 913.501939][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 913.520391][ T5907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 913.526922][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 913.539852][ T5928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 913.567779][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input68 [ 913.589107][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 913.603954][ T5907] dvb-usb: schedule remote query interval to 150 msecs. [ 913.623135][ T5907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 913.664478][ T5928] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 913.704440][ T5928] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 913.743660][ T5928] usb 2-1: Manufacturer: syz [ 913.752214][ T5928] usb 2-1: config 0 descriptor?? [ 913.760600][ T5928] smsusb:smsusb_probe: board id=9, interface number 0 [ 913.776837][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 913.777208][ T5928] smsusb:smsusb_probe: Device initialized with return code -19 [ 913.840607][ T5907] dvb-usb: error while querying for an remote control event. [ 913.969379][T17063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3256'. [ 914.005458][T17071] vivid-000: ================= START STATUS ================= [ 914.063044][T17071] vivid-000: Test Pattern: 75% Colorbar [ 914.076568][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 914.080114][T17063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3256'. [ 914.082522][ T5907] dvb-usb: error while querying for an remote control event. [ 914.093313][T17071] vivid-000: Fill Percentage of Frame: 100 [ 914.165204][T17078] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3256'. [ 914.176806][T17071] vivid-000: Horizontal Movement: No Movement [ 914.220021][T17071] vivid-000: Vertical Movement: No Movement [ 914.246786][T17071] vivid-000: OSD Text Mode: All [ 914.265066][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 914.296680][T17071] vivid-000: Show Border: false [ 914.310743][T17071] vivid-000: Show Square: false [ 914.335162][T17071] vivid-000: Sensor Flipped Horizontally: false [ 914.345428][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 914.354331][T17071] vivid-000: Sensor Flipped Vertically: false [ 914.357025][ T5907] dvb-usb: error while querying for an remote control event. [ 914.407263][T17071] vivid-000: Insert SAV Code in Image: false [ 914.413873][T17074] kvm: pic: non byte write [ 914.440441][T17071] vivid-000: Insert EAV Code in Image: false [ 914.505075][T17071] vivid-000: Insert Video Guard Band: true [ 914.519372][T17071] vivid-000: Reduced Framerate: false [ 914.564854][T17071] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 914.566080][T13164] dvb-usb: bulk message failed: -22 (1/0) [ 914.573061][T17071] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 914.573093][T17071] vivid-000: Enable Capture Cropping: true grabbed [ 914.573124][T17071] vivid-000: Enable Capture Composing: true [ 914.624465][T13164] dvb-usb: error while querying for an remote control event. [ 914.645064][ T24] usb 1-1: USB disconnect, device number 94 [ 914.666613][T17071] grabbed [ 914.669737][T17071] vivid-000: Enable Capture Scaler: true grabbed [ 914.725380][T17084] netlink: 'syz.4.3261': attribute type 2 has an invalid length. [ 914.743382][T17071] vivid-000: Timestamp Source: End of Frame [ 914.762300][T17084] netlink: 'syz.4.3261': attribute type 8 has an invalid length. [ 914.805342][T17084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3261'. [ 914.807065][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 914.814614][T17071] vivid-000: Colorspace: [ 914.837864][T17085] syz_tun: entered allmulticast mode [ 914.847666][T17071] SMPTE 170M [ 914.847694][T17071] vivid-000: Transfer Function: Default [ 914.847723][T17071] vivid-000: Y'CbCr Encoding: Default [ 914.847748][T17071] vivid-000: HSV Encoding: Hue 0-179 [ 914.847774][T17071] vivid-000: Quantization: Default [ 914.847800][T17071] vivid-000: Apply Alpha To Red Only: false [ 914.847825][T17071] vivid-000: Standard Aspect Ratio: 4x3 [ 914.847859][T17071] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 914.847893][T17071] vivid-000: DV Timings: 640x480p59 inactive [ 914.847926][T17071] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 914.847952][T17071] vivid-000: Maximum EDID Blocks: 2 [ 914.847978][T17071] vivid-000: Limited RGB Range (16-235): true [ 914.848004][T17071] vivid-000: Rx RGB Quantization Range: Automatic [ 914.848031][T17071] vivid-000: Power Present: 0x00000001 [ 915.013530][T17071] tpg source WxH: 720x576 (Y'CbCr) [ 915.025267][T17071] tpg field: 4 [ 915.028822][T17071] tpg crop: (0,0)/64x64 [ 915.033250][T17071] tpg compose: (0,0)/16x16 [ 915.058210][T17071] tpg colorspace: 1 [ 915.073801][T17071] tpg transfer function: 0/1 [ 915.113706][T17071] tpg Y'CbCr encoding: 0/1 [ 915.128636][T17071] tpg quantization: 0/2 [ 915.145007][T17071] tpg RGB range: 0/1 [ 915.170878][T17071] vivid-000: ================== END STATUS ================== [ 915.255836][ T24] usb 2-1: USB disconnect, device number 87 [ 916.403028][ T5850] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 916.565000][ T5907] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 916.685065][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 916.722517][ T5850] usb 5-1: config 3 has an invalid interface number: 144 but max is 1 [ 916.730993][ T5850] usb 5-1: config 3 has an invalid interface number: 132 but max is 1 [ 916.747876][ T5850] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 916.766935][ T5850] usb 5-1: config 3 has no interface number 0 [ 916.782692][ T5850] usb 5-1: config 3 has no interface number 1 [ 916.795041][ T5850] usb 5-1: config 3 interface 144 altsetting 94 endpoint 0x3 has an invalid bInterval 178, changing to 7 [ 916.812687][ T5850] usb 5-1: config 3 interface 132 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 916.835030][ T5850] usb 5-1: config 3 interface 144 has no altsetting 0 [ 916.835132][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 916.844158][ T5850] usb 5-1: config 3 interface 132 has no altsetting 0 [ 916.874781][ T5850] usb 5-1: New USB device found, idVendor=10c4, idProduct=8665, bcdDevice=9a.47 [ 916.891904][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.924691][ T5850] usb 5-1: Product: 紭荫麹᭘㿽견큔젫ꌛ➍⋰ᛟᏂ斲⽯輅娄ꡠ墿ᣎ伯ﵸ争熠늀䅃ꢫ泙⃳龆삝즬긂競＼乙㕱䪟軆顈꽲꣟붊뺐긜啁︬檿泖ⓡ䭑쫳ﺕꐼ盵㰛൯쨙䮞璝㗌䙦樌啤拐釽욞绗뤠᎓ᜫ림⼣嬁 [ 917.000657][ T5850] usb 5-1: Manufacturer: 䳽㲳밦阖兡贆唴쓧╸䖺䩊똾⾿ﶥ眵⻨呌椬晆㦳땢೮㒒㥤靺⻓ڊཛ䚒ୋ呮끣Ɒ栠錉餠 [ 917.059378][ T5850] usb 5-1: SerialNumber: syz [ 917.161569][T17104] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 917.176333][T17105] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 917.190072][T17104] IPVS: set_ctl: invalid protocol: 8483 255.111.117.112:12078 [ 917.281935][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.302448][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.327140][ T5850] cp210x 5-1:3.144: cp210x converter detected [ 917.345001][ T5907] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.360644][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.379225][ T5850] cp210x 5-1:3.144: failed to get vendor val 0x370b size 1: -71 [ 917.389667][ T5907] usb 1-1: Product: syz [ 917.411258][ T5850] cp210x 5-1:3.144: querying part number failed [ 917.420668][ T5907] usb 1-1: Manufacturer: syz [ 917.423874][ T5850] usb 5-1: cp210x converter now attached to ttyUSB0 [ 917.443735][ T5850] cp210x 5-1:3.132: cp210x converter detected [ 917.474223][ T5850] cp210x 5-1:3.132: failed to get vendor val 0x370b size 1: -71 [ 917.482833][ T5907] usb 1-1: SerialNumber: syz [ 917.534379][ T5850] cp210x 5-1:3.132: querying part number failed [ 917.564724][T17108] FAULT_INJECTION: forcing a failure. [ 917.564724][T17108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.584858][T17108] CPU: 0 UID: 0 PID: 17108 Comm: syz.3.3267 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 917.584894][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 917.584908][T17108] Call Trace: [ 917.584917][T17108] [ 917.584926][T17108] dump_stack_lvl+0x189/0x250 [ 917.584965][T17108] ? __pfx____ratelimit+0x10/0x10 [ 917.584996][T17108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.585026][T17108] ? __pfx__printk+0x10/0x10 [ 917.585049][T17108] ? __might_fault+0xb0/0x130 [ 917.585082][T17108] should_fail_ex+0x414/0x560 [ 917.585116][T17108] _copy_from_iter+0x1db/0x16f0 [ 917.585156][T17108] ? policy_nodemask+0x27c/0x720 [ 917.585177][T17108] ? __pfx__copy_from_iter+0x10/0x10 [ 917.585213][T17108] ? set_page_refcounted+0xa0/0x1e0 [ 917.585242][T17108] af_alg_sendmsg+0x1436/0x22e0 [ 917.585268][T17108] ? __pfx___might_resched+0x10/0x10 [ 917.585317][T17108] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 917.585343][T17108] ? __pfx_aa_sk_perm+0x10/0x10 [ 917.585366][T17108] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 917.585401][T17108] ? aa_sock_msg_perm+0x94/0x160 [ 917.585429][T17108] ? skcipher_sendmsg+0x26/0xf0 [ 917.585457][T17108] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 917.585488][T17108] __sock_sendmsg+0x219/0x270 [ 917.585514][T17108] __sys_sendto+0x3bd/0x520 [ 917.585543][T17108] ? __pfx___sys_sendto+0x10/0x10 [ 917.585564][T17108] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 917.585601][T17108] ? __fget_files+0x3a0/0x420 [ 917.585639][T17108] ? ksys_write+0x22a/0x250 [ 917.585663][T17108] ? __pfx_ksys_write+0x10/0x10 [ 917.585690][T17108] __x64_sys_sendto+0xde/0x100 [ 917.585719][T17108] do_syscall_64+0xfa/0x3b0 [ 917.585750][T17108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.585770][T17108] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 917.585791][T17108] ? clear_bhb_loop+0x60/0xb0 [ 917.585824][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.585844][T17108] RIP: 0033:0x7fc78198e929 [ 917.585864][T17108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.585883][T17108] RSP: 002b:00007fc782833038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 917.585907][T17108] RAX: ffffffffffffffda RBX: 00007fc781bb5fa0 RCX: 00007fc78198e929 [ 917.585922][T17108] RDX: 00000000ffffffbc RSI: 0000200000000000 RDI: 0000000000000004 [ 917.585936][T17108] RBP: 00007fc782833090 R08: 0000000000000000 R09: 0000000000000000 [ 917.585950][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 917.585963][T17108] R13: 0000000000000000 R14: 00007fc781bb5fa0 R15: 00007fc781cdfa28 [ 917.585997][T17108] [ 917.846876][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.862655][ T5850] usb 5-1: cp210x converter now attached to ttyUSB1 [ 917.879688][ T5850] usb 5-1: USB disconnect, device number 94 [ 918.135564][ T5850] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 918.143892][ T5850] cp210x 5-1:3.144: device disconnected [ 918.238914][ T5850] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 918.268928][ T5850] cp210x 5-1:3.132: device disconnected [ 918.775684][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3270'. [ 918.785099][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3270'. [ 919.813642][ T5907] usb 1-1: 0:2 : does not exist [ 919.833506][ T5907] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 919.915737][T13164] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 919.962118][ T5907] usb 1-1: USB disconnect, device number 95 [ 920.073294][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.092584][T13164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.113769][T13164] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 920.134410][T13164] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 920.165462][T13164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.214743][T13164] usb 2-1: config 0 descriptor?? [ 920.257854][T13164] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 920.274861][T13164] dvb-usb: bulk message failed: -22 (3/0) [ 920.292602][T13164] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 920.325674][T13164] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 920.344243][T13164] usb 2-1: media controller created [ 920.358043][T13164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 920.447917][T13164] dvb-usb: bulk message failed: -22 (6/0) [ 920.501107][T13164] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 920.555341][T13164] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 920.593100][T13164] dvb-usb: schedule remote query interval to 150 msecs. [ 920.643598][T13164] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 920.805030][T13164] dvb-usb: bulk message failed: -22 (1/0) [ 920.855207][T13164] dvb-usb: error while querying for an remote control event. [ 920.953474][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3272'. [ 920.980641][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3272'. [ 921.027778][T13164] dvb-usb: bulk message failed: -22 (1/0) [ 921.101733][T13164] dvb-usb: error while querying for an remote control event. [ 921.266823][T17137] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3272'. [ 921.277693][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3272'. [ 921.555069][T13164] dvb-usb: bulk message failed: -22 (1/0) [ 921.563783][T13164] dvb-usb: error while querying for an remote control event. [ 921.640358][ T5850] usb 2-1: USB disconnect, device number 88 [ 921.680961][ T5850] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 921.778525][T17149] tipc: Enabling of bearer rejected, already enabled [ 921.814211][T17149] ptrace attach of "./syz-executor exec"[16137] was attempted by ""[17149] [ 921.831339][ T5907] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 922.067792][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 922.114003][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 922.175276][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 922.192468][ T30] audit: type=1326 audit(1749381062.188:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e9b32ab19 code=0x7ffc0000 [ 922.264867][ T5907] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 922.326618][ T5907] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 922.334807][ T5907] usb 4-1: Manufacturer: syz [ 922.392488][ T30] audit: type=1326 audit(1749381062.188:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b38e929 code=0x7ffc0000 [ 922.485099][ T30] audit: type=1326 audit(1749381062.188:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e9b32ab19 code=0x7ffc0000 [ 922.507378][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.514309][ T5907] usb 4-1: config 0 descriptor?? [ 922.523918][ T5907] smsusb:smsusb_probe: board id=9, interface number 0 [ 922.551318][ T5907] smsusb:smsusb_probe: Device initialized with return code -19 [ 922.601568][ T30] audit: type=1326 audit(1749381062.188:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b38e929 code=0x7ffc0000 [ 922.623958][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.733145][T17142] vivid-000: ================= START STATUS ================= [ 922.741020][T17142] vivid-000: Test Pattern: 75% Colorbar [ 922.752153][T17142] vivid-000: Fill Percentage of Frame: 100 [ 922.758777][ T30] audit: type=1326 audit(1749381062.188:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e9b32ab19 code=0x7ffc0000 [ 922.793988][T17142] vivid-000: Horizontal Movement: No Movement [ 922.884995][T17142] vivid-000: Vertical Movement: No Movement [ 922.891002][T17142] vivid-000: OSD Text Mode: All [ 922.893702][ T30] audit: type=1326 audit(1749381062.188:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e9b32ab19 code=0x7ffc0000 [ 922.994034][T17142] vivid-000: Show Border: false [ 923.009151][ T30] audit: type=1326 audit(1749381062.188:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b38e929 code=0x7ffc0000 [ 923.044391][T17142] vivid-000: Show Square: false [ 923.096088][T17142] vivid-000: Sensor Flipped Horizontally: false [ 923.102523][T17142] vivid-000: Sensor Flipped Vertically: false [ 923.121764][ T30] audit: type=1326 audit(1749381062.188:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b38e929 code=0x7ffc0000 [ 923.144368][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.168181][T17142] vivid-000: Insert SAV Code in Image: false [ 923.174270][T17142] vivid-000: Insert EAV Code in Image: false [ 923.255352][ T30] audit: type=1326 audit(1749381062.188:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e9b32ab19 code=0x7ffc0000 [ 923.277417][T17142] vivid-000: Insert Video Guard Band: true [ 923.277673][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.347306][ T30] audit: type=1326 audit(1749381062.188:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9b38e929 code=0x7ffc0000 [ 923.404862][T17142] [ 923.409031][T17142] vivid-000: Reduced Framerate: false [ 923.455136][T17142] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 923.469551][T17142] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 923.545187][T17142] vivid-000: Enable Capture Cropping: true grabbed [ 923.620089][T17142] vivid-000: Enable Capture Composing: true grabbed [ 923.675408][T17142] vivid-000: Enable Capture Scaler: true grabbed [ 923.690932][T17142] vivid-000: Timestamp Source: End of Frame [ 923.715073][T17142] vivid-000: Colorspace: SMPTE 170M [ 923.738960][T17142] vivid-000: Transfer Function: Default [ 923.784123][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3282'. [ 923.793371][T17142] vivid-000: Y'CbCr Encoding: Default [ 923.804345][T17142] vivid-000: HSV Encoding: Hue 0-179 [ 923.824666][T17142] vivid-000: Quantization: Default [ 923.848217][T17142] vivid-000: Apply Alpha To Red Only: false [ 923.854487][T17142] vivid-000: Standard Aspect Ratio: 4x3 [ 923.881673][T17142] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 923.914044][T17142] vivid-000: DV Timings: 640x480p59 inactive [ 923.930232][T17142] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 923.942477][T17142] vivid-000: Maximum EDID Blocks: 2 [ 923.960824][T17142] vivid-000: Limited RGB Range (16-235): true [ 923.975272][T17142] vivid-000: Rx RGB Quantization Range: Automatic [ 923.995168][T17142] vivid-000: Power Present: 0x00000001 [ 924.016621][T17142] tpg source WxH: 720x576 (Y'CbCr) [ 924.016649][T17142] tpg field: 4 [ 924.016661][T17142] tpg crop: (0,0)/64x64 [ 924.016678][T17142] tpg compose: (0,0)/16x16 [ 924.016701][T17142] tpg colorspace: 1 [ 924.016711][T17142] tpg transfer function: 0/1 [ 924.016725][T17142] tpg Y'CbCr encoding: 0/1 [ 924.016737][T17142] tpg quantization: 0/2 [ 924.016750][T17142] tpg RGB range: 0/1 [ 924.016763][T17142] vivid-000: ================== END STATUS ================== [ 924.025913][ T5969] usb 4-1: USB disconnect, device number 103 [ 924.086073][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 924.145847][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 924.417231][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 924.427297][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 924.441873][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 924.455026][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 924.527560][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 924.565011][ T5850] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 924.611581][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 924.639883][T11357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 924.649018][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 924.655359][T11357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 924.670352][ T5907] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 924.715012][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 924.758348][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.795030][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 924.831296][ T5907] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 924.840804][ T5850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.855217][ T5850] usb 5-1: config 0 has no interfaces? [ 924.905760][ T24] usb 2-1: config 0 descriptor?? [ 924.916099][ T5850] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 924.944451][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.041084][ T5850] usb 5-1: config 0 descriptor?? [ 925.130963][ T5907] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 925.135236][T17166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.155713][T17166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.187331][T17166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.205403][T17166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.387841][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 926.865765][ T5907] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 926.889985][T13164] usb 2-1: USB disconnect, device number 89 [ 926.905476][T13164] usblp0: removed [ 926.948702][T17202] random: crng reseeded on system resumption [ 927.029674][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.043906][ T5907] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 927.083465][ T5907] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 927.118589][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.131997][ T5907] usb 3-1: config 0 descriptor?? [ 927.151259][ T5907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 927.177870][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 927.201582][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 927.248338][ T5907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 927.264086][ T5907] usb 3-1: media controller created [ 927.278574][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 927.320204][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 927.349654][ T5907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 927.390066][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70 [ 927.417985][ T5907] dvb-usb: schedule remote query interval to 150 msecs. [ 927.430853][ T5907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 927.586098][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 927.592132][ T5907] dvb-usb: error while querying for an remote control event. [ 927.765143][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 927.778681][ T977] dvb-usb: error while querying for an remote control event. [ 927.955018][ T5907] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 927.995169][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 928.001176][ T977] dvb-usb: error while querying for an remote control event. [ 928.024077][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3290'. [ 928.033291][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3290'. [ 928.128058][T17200] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3290'. [ 928.160625][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'. [ 928.177360][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 928.184007][ T977] dvb-usb: error while querying for an remote control event. [ 928.219454][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.249997][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 928.268955][ T977] usb 3-1: USB disconnect, device number 102 [ 928.311721][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 928.324228][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 928.373356][ T5907] usb 1-1: SerialNumber: syz [ 928.460652][ T5907] cdc_ether 1-1:1.0: skipping garbage [ 928.475255][ T5907] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 928.494548][ T5907] usb-storage 1-1:1.0: USB Mass Storage device detected [ 928.515367][ T5907] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 928.559641][ T977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 928.827231][T17181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.925971][ T24] usb 5-1: USB disconnect, device number 95 [ 928.955013][ T5907] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 929.108160][ T5907] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 929.119407][ T5907] usb 4-1: config 0 has no interface number 0 [ 929.139838][ T5907] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 929.185246][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 929.201223][ T5907] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 929.247252][ T5907] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 929.282484][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.328021][ T5907] usb 4-1: config 0 descriptor?? [ 929.377022][ T24] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 929.387019][T17221] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 929.432762][ T5907] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 929.465347][ T5928] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 929.554372][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 929.564365][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.577852][ T24] usb 5-1: Product: syz [ 929.589296][ T24] usb 5-1: Manufacturer: syz [ 929.597459][ T24] usb 5-1: SerialNumber: syz [ 929.690753][ T5907] usb 4-1: USB disconnect, device number 104 [ 929.696956][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 929.709761][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 929.720050][ T5928] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 929.730704][ T24] usb 5-1: config 0 descriptor?? [ 929.775896][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 929.838958][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 929.879983][ T5928] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 929.889912][ T5928] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 929.986801][ T5928] usb 3-1: Manufacturer: syz [ 930.161949][ T5928] usb 3-1: config 0 descriptor?? [ 930.189292][ T5928] smsusb:smsusb_probe: board id=9, interface number 0 [ 930.200575][ T5928] smsusb:smsusb_probe: Device initialized with return code -19 [ 930.391234][T17226] vivid-000: ================= START STATUS ================= [ 930.399370][T17226] vivid-000: Test Pattern: 75% Colorbar [ 930.408060][T17226] vivid-000: Fill Percentage of Frame: 100 [ 930.431079][T17226] vivid-000: Horizontal Movement: No Movement [ 930.487740][T17226] vivid-000: Vertical Movement: No Movement [ 930.553611][T17226] vivid-000: OSD Text Mode: All [ 930.607595][ T24] gspca_sunplus: reg_r err -71 [ 930.612596][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 930.615648][T17226] vivid-000: Show Border: false [ 930.668040][T17226] vivid-000: Show Square: false [ 930.668348][ T24] usb 5-1: USB disconnect, device number 96 [ 930.755533][T17226] vivid-000: Sensor Flipped Horizontally: false [ 930.805586][T17226] vivid-000: Sensor Flipped Vertically: false [ 930.871016][T17226] vivid-000: Insert SAV Code in Image: false [ 930.920282][T17226] vivid-000: Insert EAV Code in Image: false [ 930.969057][T17226] vivid-000: Insert Video Guard Band: true [ 931.011825][T17226] vivid-000: Reduced Framerate: false [ 931.053368][T17226] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 931.090221][T17236] syz_tun: entered allmulticast mode [ 931.101872][T17226] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 931.115518][T17226] vivid-000: Enable Capture Cropping: true grabbed [ 931.133589][T17235] syz_tun: left allmulticast mode [ 931.142224][T17226] vivid-000: Enable Capture Composing: true grabbed [ 931.178973][T17226] vivid-000: Enable Capture Scaler: true grabbed [ 931.215255][T17226] vivid-000: Timestamp Source: End of Frame [ 931.262227][T17226] vivid-000: Colorspace: SMPTE 170M [ 931.344829][T17226] vivid-000: Transfer Function: Default [ 931.351316][T17226] vivid-000: Y'CbCr Encoding: Default [ 931.422350][T17226] vivid-000: HSV Encoding: Hue 0-179 [ 931.461581][ T5907] usb 1-1: USB disconnect, device number 96 [ 931.510031][T17226] vivid-000: Quantization: Default [ 931.531204][T17226] vivid-000: Apply Alpha To Red Only: false [ 931.569592][T17226] vivid-000: Standard Aspect Ratio: 4x3 [ 931.598788][T17226] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 931.642855][T17226] vivid-000: DV Timings: 640x480p59 inactive [ 931.655890][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 931.680595][T17226] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 931.700204][T17254] netlink: 'syz.0.3305': attribute type 5 has an invalid length. [ 931.726911][T17226] vivid-000: Maximum EDID Blocks: 2 [ 931.751918][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.758609][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.761184][T17226] vivid-000: Limited RGB Range (16-235): true [ 931.848921][T17226] vivid-000: Rx RGB Quantization Range: Automatic [ 931.879257][T17226] vivid-000: Power Present: 0x00000001 [ 931.899930][T17226] tpg source WxH: 720x576 (Y'CbCr) [ 931.924599][T17226] tpg field: 4 [ 931.940614][T17226] tpg crop: (0,0)/64x64 [ 931.956759][T17226] tpg compose: (0,0)/16x16 [ 931.979558][T17226] tpg colorspace: 1 [ 931.996514][T17226] tpg transfer function: 0/1 [ 932.018170][T17226] tpg Y'CbCr encoding: 0/1 [ 932.048529][T17226] tpg quantization: 0/2 [ 932.064033][T17226] tpg RGB range: 0/1 [ 932.068579][T17226] vivid-000: ================== END STATUS ================== [ 932.077345][T17230] ================================================================== [ 932.085729][T17230] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.094366][T17230] Write of size 720 at addr ffffc9000bf59e10 by task vivid-000-vid-c/17230 [ 932.102970][T17230] [ 932.105308][T17230] CPU: 0 UID: 0 PID: 17230 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 932.105343][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 932.105356][T17230] Call Trace: [ 932.105364][T17230] [ 932.105372][T17230] dump_stack_lvl+0x189/0x250 [ 932.105409][T17230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.105439][T17230] ? __pfx__printk+0x10/0x10 [ 932.105461][T17230] ? __pfx__printk+0x10/0x10 [ 932.105480][T17230] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 932.105509][T17230] ? __virt_addr_valid+0xdc/0x5c0 [ 932.105532][T17230] print_report+0xd2/0x2b0 [ 932.105557][T17230] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.105576][T17230] kasan_report+0x118/0x150 [ 932.105597][T17230] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.105619][T17230] kasan_check_range+0x2b0/0x2c0 [ 932.105641][T17230] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.105661][T17230] __asan_memcpy+0x40/0x70 [ 932.105688][T17230] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.105740][T17230] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 932.105768][T17230] ? finish_task_switch+0x18b/0x950 [ 932.105804][T17230] ? rcu_is_watching+0x15/0xb0 [ 932.105826][T17230] ? __schedule+0x1713/0x4d00 [ 932.105860][T17230] ? __lock_acquire+0xab9/0xd20 [ 932.105890][T17230] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 932.105927][T17230] ? cgroup_freezing+0x2ad/0x360 [ 932.105954][T17230] vivid_thread_vid_cap+0x8da/0x10d0 [ 932.105994][T17230] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 932.106028][T17230] ? __pfx_autoremove_wake_function+0x10/0x10 [ 932.106053][T17230] ? __kthread_parkme+0x7b/0x200 [ 932.106073][T17230] ? __kthread_parkme+0x1a1/0x200 [ 932.106094][T17230] kthread+0x70e/0x8a0 [ 932.106118][T17230] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 932.106146][T17230] ? __pfx_kthread+0x10/0x10 [ 932.106168][T17230] ? _raw_spin_unlock_irq+0x23/0x50 [ 932.106195][T17230] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.106223][T17230] ? __pfx_kthread+0x10/0x10 [ 932.106245][T17230] ret_from_fork+0x3f9/0x770 [ 932.106273][T17230] ? __pfx_ret_from_fork+0x10/0x10 [ 932.106302][T17230] ? __switch_to_asm+0x39/0x70 [ 932.106321][T17230] ? __switch_to_asm+0x33/0x70 [ 932.106349][T17230] ? __pfx_kthread+0x10/0x10 [ 932.106371][T17230] ret_from_fork_asm+0x1a/0x30 [ 932.106400][T17230] [ 932.106408][T17230] [ 932.331776][T17230] The buggy address belongs to the virtual mapping at [ 932.331776][T17230] [ffffc9000bf59000, ffffc9000bf5b000) created by: [ 932.331776][T17230] vb2_vmalloc_alloc+0xef/0x340 [ 932.349670][T17230] [ 932.352007][T17230] The buggy address belongs to the physical page: [ 932.358424][T17230] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804b477000 pfn:0x4b477 [ 932.368486][T17230] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 932.375614][T17230] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 932.384346][T17230] raw: ffff88804b477000 0000000000000000 00000001ffffffff 0000000000000000 [ 932.392943][T17230] page dumped because: kasan: bad access detected [ 932.399361][T17230] page_owner tracks the page as allocated [ 932.405116][T17230] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 17226, tgid 17225 (syz.2.3297), ts 930387836877, free_ts 930387815394 [ 932.424520][T17230] post_alloc_hook+0x240/0x2a0 [ 932.429485][T17230] get_page_from_freelist+0x21e4/0x22c0 [ 932.435053][T17230] __alloc_frozen_pages_noprof+0x181/0x370 [ 932.440874][T17230] alloc_pages_bulk_noprof+0x560/0x710 [ 932.446345][T17230] alloc_pages_bulk_mempolicy_noprof+0x341/0x1650 [ 932.452769][T17230] __vmalloc_node_range_noprof+0x733/0x12f0 [ 932.458756][T17230] vmalloc_user_noprof+0xad/0xf0 [ 932.463710][T17230] vb2_vmalloc_alloc+0xef/0x340 [ 932.468574][T17230] __vb2_queue_alloc+0x9bf/0x15a0 [ 932.473603][T17230] vb2_core_reqbufs+0xc31/0x1420 [ 932.478633][T17230] __vb2_init_fileio+0x318/0xff0 [ 932.483578][T17230] __vb2_perform_fileio+0x284/0x1600 [ 932.488874][T17230] vb2_fop_read+0x273/0x360 [ 932.493382][T17230] v4l2_read+0x19c/0x2c0 [ 932.497632][T17230] vfs_readv+0x5aa/0x850 [ 932.501894][T17230] __x64_sys_preadv+0x197/0x2a0 [ 932.506752][T17230] page last free pid 17226 tgid 17225 stack trace: [ 932.513257][T17230] __free_frozen_pages+0xc71/0xe70 [ 932.518380][T17230] kasan_populate_vmalloc+0x18a/0x1a0 [ 932.523774][T17230] alloc_vmap_area+0xd51/0x1490 [ 932.528978][T17230] __get_vm_area_node+0x1f8/0x300 [ 932.534098][T17230] __vmalloc_node_range_noprof+0x301/0x12f0 [ 932.539997][T17230] vmalloc_user_noprof+0xad/0xf0 [ 932.544946][T17230] vb2_vmalloc_alloc+0xef/0x340 [ 932.549823][T17230] __vb2_queue_alloc+0x9bf/0x15a0 [ 932.554944][T17230] vb2_core_reqbufs+0xc31/0x1420 [ 932.559924][T17230] __vb2_init_fileio+0x318/0xff0 [ 932.564867][T17230] __vb2_perform_fileio+0x284/0x1600 [ 932.570166][T17230] vb2_fop_read+0x273/0x360 [ 932.574673][T17230] v4l2_read+0x19c/0x2c0 [ 932.578923][T17230] vfs_readv+0x5aa/0x850 [ 932.583205][T17230] __x64_sys_preadv+0x197/0x2a0 [ 932.588061][T17230] do_syscall_64+0xfa/0x3b0 [ 932.592576][T17230] [ 932.594995][T17230] Memory state around the buggy address: [ 932.600627][T17230] ffffc9000bf59f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 932.608693][T17230] ffffc9000bf59f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 932.616776][T17230] >ffffc9000bf5a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 932.624872][T17230] ^ [ 932.628958][T17230] ffffc9000bf5a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 932.637026][T17230] ffffc9000bf5a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 932.645092][T17230] ================================================================== [ 932.653263][ C0] vkms_vblank_simulate: vblank timer overrun [ 932.684330][T17230] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 932.691604][T17230] CPU: 1 UID: 0 PID: 17230 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 932.703781][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 932.713835][T17230] Call Trace: [ 932.717111][T17230] [ 932.720042][T17230] dump_stack_lvl+0x99/0x250 [ 932.724638][T17230] ? __asan_memcpy+0x40/0x70 [ 932.729416][T17230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.734612][T17230] ? __pfx__printk+0x10/0x10 [ 932.739223][T17230] panic+0x2db/0x790 [ 932.743162][T17230] ? __pfx_panic+0x10/0x10 [ 932.747606][T17230] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 932.753502][T17230] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 932.759834][T17230] ? print_memory_metadata+0x314/0x400 [ 932.765302][T17230] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.770930][T17230] check_panic_on_warn+0x89/0xb0 [ 932.775957][T17230] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.781683][T17230] end_report+0x78/0x160 [ 932.786027][T17230] kasan_report+0x129/0x150 [ 932.790574][T17230] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.796238][T17230] kasan_check_range+0x2b0/0x2c0 [ 932.801189][T17230] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.806818][T17230] __asan_memcpy+0x40/0x70 [ 932.811233][T17230] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 932.816703][T17230] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 932.822436][T17230] ? finish_task_switch+0x18b/0x950 [ 932.827637][T17230] ? rcu_is_watching+0x15/0xb0 [ 932.832409][T17230] ? __schedule+0x1713/0x4d00 [ 932.837351][T17230] ? __lock_acquire+0xab9/0xd20 [ 932.842223][T17230] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 932.848396][T17230] ? cgroup_freezing+0x2ad/0x360 [ 932.853344][T17230] vivid_thread_vid_cap+0x8da/0x10d0 [ 932.858645][T17230] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 932.864367][T17230] ? __pfx_autoremove_wake_function+0x10/0x10 [ 932.870431][T17230] ? __kthread_parkme+0x7b/0x200 [ 932.875365][T17230] ? __kthread_parkme+0x1a1/0x200 [ 932.880385][T17230] kthread+0x70e/0x8a0 [ 932.884447][T17230] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 932.890171][T17230] ? __pfx_kthread+0x10/0x10 [ 932.894774][T17230] ? _raw_spin_unlock_irq+0x23/0x50 [ 932.899987][T17230] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.905187][T17230] ? __pfx_kthread+0x10/0x10 [ 932.909773][T17230] ret_from_fork+0x3f9/0x770 [ 932.914362][T17230] ? __pfx_ret_from_fork+0x10/0x10 [ 932.919483][T17230] ? __switch_to_asm+0x39/0x70 [ 932.924248][T17230] ? __switch_to_asm+0x33/0x70 [ 932.929007][T17230] ? __pfx_kthread+0x10/0x10 [ 932.933611][T17230] ret_from_fork_asm+0x1a/0x30 [ 932.938378][T17230] [ 932.941739][T17230] Kernel Offset: disabled [ 932.946083][T17230] Rebooting in 86400 seconds..