last executing test programs: 6m19.291153453s ago: executing program 2 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r3, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 6m14.84349633s ago: executing program 2 (id=122): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) pipe(&(0x7f00000001c0)) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 6m13.639881045s ago: executing program 2 (id=127): setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x4, 0x1002, 0x5, 0x8, 0x1, 0x6, 0x140000, 0x2000001, 0x1a44b, 0x3, 0x40100003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0x191fa504, 0x8, 0x5, 0x3, 0xfffffff8]}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) sendmmsg$alg(r5, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x11102, 0x0) 6m11.886822105s ago: executing program 2 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x2200080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) 6m9.341436155s ago: executing program 2 (id=134): r0 = syz_open_dev$video4linux(0x0, 0x80000004, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x1000, 0x5c8, 0xa, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000000c0)=[{r3, 0x2004}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000580)={0x40f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x8, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x10, [0x0, 0x0, 0x13, 0x2]}) 6m8.943848622s ago: executing program 2 (id=138): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) 6m8.407328776s ago: executing program 32 (id=138): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) 5m11.563602814s ago: executing program 5 (id=285): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x18d6, 0x0, &(0x7f0000ffe000), 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, 0x0, 0xfe) epoll_create1(0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="09000000010000", 0x7) 5m9.011940063s ago: executing program 5 (id=287): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000500)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="001528000000b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m4.2459021s ago: executing program 5 (id=301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x7, 0x2d, 0x8d, 0x6, {0xc, 0x9, 0x5, 0x749, 0x64, 0x4, 0xff01, 0x5, 0x6, 0x9, 0xb73b, 0x6, 0x9ba5, 0x5, "6de0243c4097eeef55aab2d5a3a682e548d04d9787030dbab4f228a29df96a28"}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000010000000000bec35e2ba0ef94870ea5ee14782a159cc6bc149e1b584640905c9c8bbae836e01e2b92d9136c864e80cb6f7caefc7112e23b5b35583743ba4fa45bacc224969871715c08d03950771cd963c3055fc2cb5d8ea3c84f4b6733e0b4f6807431d79add8577280d81740a44a9cecf178c323aab6f09f5b2dedc7f7b4d58b470a00726045b9aa12be6a066b93a3b2b06960ee6183318d47f462ddcac177e9c3b77a95af99d"], 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') read$FUSE(r7, &(0x7f0000000880)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 5m1.643388015s ago: executing program 5 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000240), 0x2200080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4m59.160718003s ago: executing program 3 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 4m59.002350079s ago: executing program 5 (id=310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x41000004, 0x0) 4m58.735295226s ago: executing program 3 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40043d0d, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m57.238091733s ago: executing program 3 (id=316): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x140, 0x178, 0xc, 0x140, 0x178, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0x0, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r1 = syz_io_uring_setup(0xeac, &(0x7f0000000480)={0x0, 0x40068, 0x1000, 0x3, 0x40314}, &(0x7f0000000240), &(0x7f0000000080)) io_uring_enter(r1, 0x0, 0x464f, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x320) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 4m55.547728119s ago: executing program 5 (id=319): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0xfd45}}, 0x0) close(0x3) 4m55.250556871s ago: executing program 33 (id=319): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0xfd45}}, 0x0) close(0x3) 4m55.231232154s ago: executing program 3 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000240), 0x2200080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4m54.317557398s ago: executing program 3 (id=323): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd01c8c1c2c57f657a625a688871958b0a40088fca4f15e71a6dac908872ebd91f0dc", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc", 0xa) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xd9f}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m52.734600554s ago: executing program 3 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x2) preadv(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x86) fchdir(r6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 4m51.873922957s ago: executing program 34 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(0x0, 0x1) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x2) preadv(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x86) fchdir(r6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m21.640314719s ago: executing program 6 (id=756): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0200, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f000000b280), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) 2m21.450609182s ago: executing program 6 (id=757): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0xf4, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x24044080) socket$nl_generic(0x10, 0x3, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) 2m17.198154609s ago: executing program 6 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 2m16.518525586s ago: executing program 6 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) unshare(0x62040200) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m15.463072396s ago: executing program 6 (id=780): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40001333}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) 2m14.48375519s ago: executing program 6 (id=783): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = syz_clone(0x10027800, &(0x7f0000000100)="d109995b275615f7de48f67c16923074ef91e78b9f638a2194cf6efa2764d8", 0x1f, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="35d9c751acdf1ea044ae4016238b95c328322bfb5a3162070991e1b73a359a09ae6f080c30e8eee0f3b4c2403bb02ea7f698149dcf6aa49a") sched_getattr(r3, &(0x7f0000000280)={0x38}, 0x38, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0x118, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xec, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x406}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0xc040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r10, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 2m13.956800886s ago: executing program 35 (id=783): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = syz_clone(0x10027800, &(0x7f0000000100)="d109995b275615f7de48f67c16923074ef91e78b9f638a2194cf6efa2764d8", 0x1f, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="35d9c751acdf1ea044ae4016238b95c328322bfb5a3162070991e1b73a359a09ae6f080c30e8eee0f3b4c2403bb02ea7f698149dcf6aa49a") sched_getattr(r3, &(0x7f0000000280)={0x38}, 0x38, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0x118, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xec, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x406}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0xc040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r10, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 12.909120668s ago: executing program 7 (id=1126): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="40d5be"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.719595307s ago: executing program 1 (id=1127): socket$packet(0x11, 0x3, 0x300) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b0fb000e000000b8785d9600010000000000000000000000000000040000000000000000000000002900", "2809e8db5240f45f819e01177d3d0a8dd4992861ac0000000000000000000000000000000000000000000000000000000000000000001f00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x9) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/103, 0x67}], 0x1}, 0x1}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/208, 0xd0}], 0x2, &(0x7f0000000700)=""/192, 0xc0}, 0x8}, {{&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/121, 0x79}, 0x6}], 0x3, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x800000000000b, 0x2) r4 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r8}, 0xc) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r8}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r5}, 0xc) socket$kcm(0x1e, 0x2, 0x0) 11.348125472s ago: executing program 4 (id=1131): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x427d26e, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1779}]}, 0x5c}}, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) 11.305992325s ago: executing program 1 (id=1132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xea11, 0xffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0xfffffffffffffff7, 0x8a440) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fcntl$lock(r2, 0x5, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000029c0)=""/4092, 0xffc}, {&(0x7f00000009c0)=""/186, 0xba}, {&(0x7f0000000240)=""/129, 0x81}], 0x3}, 0x1005}], 0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/129, 0x81}, {&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f0000000bc0)=""/146, 0x92}], 0x3, &(0x7f0000000cc0)=""/85, 0x55}, 0x6}], 0x1, 0x2042, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) 9.815658257s ago: executing program 7 (id=1136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xea11, 0xffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0xfffffffffffffff7, 0x8a440) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fcntl$lock(r2, 0x5, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000029c0)=""/4092, 0xffc}, {&(0x7f00000009c0)=""/186, 0xba}, {&(0x7f0000000240)=""/129, 0x81}], 0x3}, 0x1005}], 0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/129, 0x81}, {&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f0000000bc0)=""/146, 0x92}], 0x3, &(0x7f0000000cc0)=""/85, 0x55}, 0x6}], 0x1, 0x2042, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) 9.777711776s ago: executing program 0 (id=1137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) 9.211051409s ago: executing program 4 (id=1138): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r1 = eventfd2(0x1, 0x800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0xfffffff7, r1, 0x1}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1800, 0x0, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000001d00)={&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001c40)=[{&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000700)=""/223, 0xdf}, {&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f0000001900)=""/189, 0xbd}, {&(0x7f00000019c0)=""/105, 0x69}, {&(0x7f0000001a40)=""/238, 0xee}, {&(0x7f0000001b40)=""/206, 0xce}], 0x8}, 0x10040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.206683186s ago: executing program 1 (id=1139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000500)={0x0, 0x79af, 0x3180, 0x1, 0x36}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8.622937235s ago: executing program 0 (id=1141): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) r4 = fcntl$getown(r3, 0x9) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x6, 0x10, 0x100, 0x2fc, 0x5, 0x7ff, 0x4ac, 0x1, 0x9}, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) r6 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r6, &(0x7f0000001200), 0x0, 0x4, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 8.41136593s ago: executing program 7 (id=1142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000013c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@tcp={0x4, 0x6, '+Yb', 0x118, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, {[@dstopts={0x33, 0x4, '\x00', [@generic={0x1, 0x24, "eaf4d0fd8887ae63cfd2952e5c79dd4721930899156ca9936f7d1e65b0c02ce07f308f6f"}]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x40, 0x7, 0x0, 0xf3c9, {[@timestamp={0x8, 0xa, 0x1, 0xffffffff}, @exp_fastopen={0xfe, 0x4}]}}, {"47700b9b8fa8bf607a0608b1e8ac5df92bbbc197d42b01c1345fd4c02b5057b1f0d17f0cfc28c2adf59728a43d5ff01d456ff1f1f243edc61ad8474549af944d600d235ea524f9002d7770e5a28785030a811da1abf8b5b626d48a9808cc641a9069babd9d540d4b165589fb11cf626070102a369d9881c830a07f7357821a13e82668e3ee9893e0b8e3e6c7318df195a49efee293541838ac1ae20b9797b2a312bf75dcdabcbc55884aaf66be7bd3c292c25ee9b388621f9e101f3b9387328af9ac4862"}}}}}}, 0x14e) 7.875190644s ago: executing program 7 (id=1144): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1d, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000002100210100000000000000000a0000"], 0x28}}, 0x0) 7.849757968s ago: executing program 4 (id=1146): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="40d5be"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.750532299s ago: executing program 1 (id=1147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x100000001, 0x0, 0x0, 0x9, 0x1a, 0x9, "fee8a2ab78fc179ff1f8a0e91ddaaca7bd01000080e00d9683dda1af1ea89de2c2fb0a01000000000000000003000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d07dfb420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91004ab3fde5feff0000000000000000000000ecff00", [0x9, 0x9]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c03, r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) unshare(0x6e000000) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) gettid() syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000010a306cd0c000000000001090224000100ff0000090400000203000000092100000001220b00090581030004000100aae459561fd7aa5d3c34fb145d453fc92793fae08d47b297bb9e1a11e47b0d6116855fb14e908fc2dd7aa0c34c52f03a9025cdf94284be831e967e0e3ba99c5532e93d9821c60b5433f016743f2886f4619dacea680c1fee2b48ab29496a75be14a18144d54a7a468cf212f750786888a22d3eedb7faf87ea47311c9e83ee11a5f2fdccff1a380e587cecb65747a5160be718e822d14c80508432a2ebf52445f050b5ad50360422ae88a0f6bccc41e442d4586d3b18a79569f901241bbe97719ad4dc0608aecfb89a16edb7f7ece41bc05a285c455a9fa9da02f91e039997f0cf5284413461196b495685558821ce071cf0e972335b6d16487f235a14fe17690d113922a29ce55d10b96d85d8f85ca6b338ea55fdd50156c5c8e8dc7a92f9a2b4bdac68666a8efbb1330962d6dff35cf932e5ffcc0ee4b85f6bd4581d2fd226adbacd407e75dbeff2420789f9287f3bdeb2d1e1e060a0d851118ffe298afa4f0baad6d8c7285bb22fabde92aeee62a269f7c694e43cc894ebd4c88eba2c2ec4b80f7f67b78"], 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 6.381994815s ago: executing program 8 (id=1149): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.379384066s ago: executing program 7 (id=1150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x1000, 0x5c8, 0xa, 0x6}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 5.201137316s ago: executing program 8 (id=1151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x183822, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r6, 0x0, 0x0) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r7, &(0x7f00000002c0)=[{0x0}], 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}], 0x1, 0x40800) bpf$MAP_CREATE(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$EVIOCGSW(r5, 0x5452, &(0x7f0000001440)=""/4103) mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x400008, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="e75a502ca9048f96d176be4c452508d7e7f3ed494f22cb143f20e445f25ae4fc0b75fac0786164c5b2a297fb5b5b9178e13600720534c721d8c2e206421518b5"]) 5.185854631s ago: executing program 0 (id=1152): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x2c, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000098a000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.376324246s ago: executing program 4 (id=1153): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x2c, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000098a000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.37523713s ago: executing program 1 (id=1154): io_setup(0x30, 0x0) io_submit(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x40, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="ce697b1e74"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}, @nested={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x48}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 4.216242462s ago: executing program 8 (id=1155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000013c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@tcp={0x4, 0x6, '+Yb', 0x118, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, {[@dstopts={0x33, 0x4, '\x00', [@generic={0x1, 0x21, "eaf4d0fd8887ae63cfd2952e5c79dd4721930899156ca9936f7d1e65b0c02ce07f"}]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x40, 0x7, 0x0, 0xf3c9, {[@timestamp={0x8, 0xa, 0x1, 0xffffffff}, @exp_fastopen={0xfe, 0x4}]}}, {"47700b9b8fa8bf607a0608b1e8ac5df92bbbc197d42b01c1345fd4c02b5057b1f0d17f0cfc28c2adf59728a43d5ff01d456ff1f1f243edc61ad8474549af944d600d235ea524f9002d7770e5a28785030a811da1abf8b5b626d48a9808cc641a9069babd9d540d4b165589fb11cf626070102a369d9881c830a07f7357821a13e82668e3ee9893e0b8e3e6c7318df195a49efee293541838ac1ae20b9797b2a312bf75dcdabcbc55884aaf66be7bd3c292c25ee9b388621f9e101f3b9387328af9ac4862"}}}}}}, 0x14e) 3.489259419s ago: executing program 8 (id=1156): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000380)="361d362ff382c5", 0x0, 0xe5, 0x0, 0x0, 0xc1, 0x0, &(0x7f00000006c0)="544b78ffba069bfc81d3a56c7a81fba3f73d584ed48af4bb69181ea006cd5348a373788b2d3ef606e965a378186bbbf149bda0b74794906fb1dfa6c04892fa2bbeaea64af4f752bf12e53812333e2a5d69752945cf69664f7ab7659768427d6c24b9b5fbb8482d7f9209c7c1653e83727af2b3bf4d2b9bc9e42a91b81ad30a80a978e32fd51a5a7edf9dc9dc6ab9b477dc3aa1d903a823d57f621b3c01b188e73e36bda5d2d73569b0911b3c3d37a6142e96c35b21f602318d454cb8bf163e4201"}, 0x50) 3.095806043s ago: executing program 8 (id=1157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r2, r2, 0x0) 3.029361933s ago: executing program 4 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4010) 2.999894824s ago: executing program 4 (id=1159): io_setup(0x30, 0x0) io_submit(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x40, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="ce697b1e74"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}, @nested={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x48}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.970202873s ago: executing program 0 (id=1160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.934677636s ago: executing program 8 (id=1161): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.692664883s ago: executing program 7 (id=1162): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) r4 = fcntl$getown(r3, 0x9) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x6, 0x10, 0x100, 0x2fc, 0x5, 0x7ff, 0x4ac, 0x1, 0x9}, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) r6 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r6, &(0x7f0000001200), 0x0, 0x4, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 2.54776173s ago: executing program 0 (id=1163): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_setup(0xa4f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\a\x00\x00']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.452919994s ago: executing program 0 (id=1164): r0 = syz_open_dev$video4linux(0x0, 0x80000004, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x1000, 0x5c8, 0xa, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x2004}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000580)={0x40f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x8, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x10, [0x0, 0x0, 0x13, 0x2]}) 0s ago: executing program 1 (id=1165): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): msg error -32 req 04 val 1500 [ 263.009250][ T5967] pwc: recv_control_msg error -32 req 02 val 2500 [ 263.219568][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 263.247380][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 264.164800][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 264.217280][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 264.259759][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 264.418088][ T943] usb 8-1: USB disconnect, device number 6 [ 264.460038][ T5967] pwc: Registered as video103. [ 264.532750][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 264.849328][ T5967] usb 7-1: USB disconnect, device number 5 [ 265.431900][ T5967] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 265.512552][ T943] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 265.729242][ T5967] usb 7-1: Using ep0 maxpacket: 32 [ 265.738954][ T943] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 265.751809][ T943] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.772941][ T5967] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 265.788836][ T943] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.824730][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.869202][ T5967] usb 7-1: config 0 descriptor?? [ 265.880523][ T943] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.893285][ T5967] gspca_main: sunplus-2.14.0 probing 041e:400b [ 265.917197][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.994711][ T943] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.011889][ T5898] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 266.077171][ T943] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 266.097762][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.241807][ T5898] usb 8-1: Using ep0 maxpacket: 16 [ 266.338061][ T5954] IPVS: starting estimator thread 0... [ 266.424862][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.441877][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.466240][ T8464] IPVS: using max 78 ests per chain, 187200 per kthread [ 266.606291][ T5967] gspca_sunplus: reg_w_riv err -110 [ 266.611724][ T5967] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 266.764966][ T8471] binder: 8468:8471 ioctl 4018620d 0 returned -22 [ 266.774056][ T8471] binder: 8468:8471 ioctl c018620c 0 returned -14 [ 268.593991][ T5967] usb 2-1: USB disconnect, device number 13 [ 268.787676][ T9] usb 7-1: USB disconnect, device number 6 [ 269.023804][ T8489] binder: 8483:8489 ioctl c0306201 200000000080 returned -14 [ 269.115289][ T5898] usb 8-1: unable to get BOS descriptor or descriptor too short [ 269.123098][ T5898] usb 8-1: no configurations [ 269.149139][ T8493] binder: 8491:8493 unknown command 0 [ 269.158302][ T5898] usb 8-1: can't read configurations, error -22 [ 269.174290][ T8493] binder: 8491:8493 ioctl c0306201 200000000080 returned -22 [ 269.914836][ T8503] hub 1-0:1.0: USB hub found [ 269.920652][ T8503] hub 1-0:1.0: 1 port detected [ 271.451957][ T30] audit: type=1400 audit(1759308538.499:357): avc: denied { read write } for pid=8519 comm="syz.0.547" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.085080][ T30] audit: type=1400 audit(1759308538.499:358): avc: denied { open } for pid=8519 comm="syz.0.547" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.111840][ T30] audit: type=1400 audit(1759308538.499:359): avc: denied { ioctl } for pid=8519 comm="syz.0.547" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.171886][ T2148] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 272.390278][ T2148] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.442820][ T2148] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 272.477827][ T2148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.510858][ T2148] usb 1-1: config 0 descriptor?? [ 272.575244][ T2148] pwc: Askey VC010 type 2 USB webcam detected. [ 272.671948][ T5898] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 272.708027][ T30] audit: type=1400 audit(1759308539.769:360): avc: denied { create } for pid=8534 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 272.867008][ T8529] syzkaller0: entered promiscuous mode [ 272.888335][ T8529] syzkaller0: entered allmulticast mode [ 272.912063][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 272.912099][ T30] audit: type=1400 audit(1759308539.979:361): avc: denied { create } for pid=8534 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.975081][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 273.000442][ T5898] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 273.020232][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.045303][ T5898] usb 7-1: Product: syz [ 273.049904][ T5898] usb 7-1: Manufacturer: syz [ 273.063521][ T2148] pwc: recv_control_msg error -32 req 02 val 2b00 [ 273.070745][ T2148] pwc: recv_control_msg error -32 req 02 val 2700 [ 273.083316][ T2148] pwc: recv_control_msg error -32 req 02 val 2c00 [ 273.090180][ T5898] usb 7-1: SerialNumber: syz [ 273.090976][ T2148] pwc: recv_control_msg error -32 req 04 val 1000 [ 273.103628][ T2148] pwc: recv_control_msg error -32 req 04 val 1300 [ 273.110892][ T2148] pwc: recv_control_msg error -32 req 04 val 1400 [ 273.115092][ T5898] usb 7-1: config 0 descriptor?? [ 273.148311][ T2148] pwc: recv_control_msg error -32 req 02 val 2000 [ 273.165527][ T2148] pwc: recv_control_msg error -32 req 02 val 2100 [ 273.181568][ T2148] pwc: recv_control_msg error -32 req 04 val 1500 [ 273.201566][ T2148] pwc: recv_control_msg error -32 req 02 val 2500 [ 273.203365][ T5898] hub 7-1:0.0: bad descriptor, ignoring hub [ 273.226196][ T5898] hub 7-1:0.0: probe with driver hub failed with error -5 [ 273.243349][ T5898] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.326019][ T5898] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 273.416041][ T2148] pwc: recv_control_msg error -71 req 02 val 2600 [ 273.440513][ T2148] pwc: recv_control_msg error -71 req 02 val 2900 [ 273.485462][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.505306][ T2148] pwc: recv_control_msg error -71 req 02 val 2800 [ 273.516383][ T2148] pwc: recv_control_msg error -71 req 04 val 1100 [ 273.526842][ T2148] pwc: recv_control_msg error -71 req 04 val 1200 [ 273.546779][ T2148] pwc: Registered as video103. [ 273.562407][ T2148] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 273.564287][ T5898] usb 7-1: USB disconnect, device number 7 [ 273.603492][ T2148] usb 1-1: USB disconnect, device number 9 [ 274.361776][ T5967] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 275.054889][ T5967] usb 2-1: Using ep0 maxpacket: 16 [ 277.741957][ T5898] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 277.913856][ T8583] kvm: kvm [8582]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x650000f206 [ 277.921859][ T943] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 277.923822][ T8583] kvm: kvm [8582]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x650000b206 [ 277.942068][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.953786][ T5898] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 277.965458][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.976512][ T5898] usb 7-1: config 0 descriptor?? [ 277.981990][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 277.996991][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 278.103479][ T943] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 278.122053][ T943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 278.136515][ T943] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 278.143096][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.148839][ T943] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.171197][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.178710][ T943] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.189384][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.201935][ T943] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.210931][ T9] usb 1-1: config 0 descriptor?? [ 278.224018][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 278.249255][ T943] usb 8-1: config 0 descriptor?? [ 278.264024][ T8581] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 278.422685][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 278.429855][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 278.482979][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 278.497951][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 278.513102][ T5898] pwc: recv_control_msg error -32 req 04 val 1300 [ 278.521174][ T5898] pwc: recv_control_msg error -32 req 04 val 1400 [ 278.529132][ T5967] usb 2-1: unable to get BOS descriptor or descriptor too short [ 278.539268][ T5967] usb 2-1: no configurations [ 278.557356][ T5967] usb 2-1: can't read configurations, error -22 [ 278.564498][ T5898] pwc: recv_control_msg error -32 req 02 val 2000 [ 278.583012][ T5898] pwc: recv_control_msg error -32 req 02 val 2100 [ 278.591092][ T5898] pwc: recv_control_msg error -32 req 04 val 1500 [ 278.600689][ T5898] pwc: recv_control_msg error -32 req 02 val 2500 [ 278.628044][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 278.636478][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 278.662873][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 278.669907][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 278.677239][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 278.686399][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 278.695209][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 278.697110][ T943] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 278.709948][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 278.726082][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 278.740222][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 278.748493][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 278.749788][ T943] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 278.756303][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 278.786274][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 278.802089][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 278.811795][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 278.813627][ T5898] pwc: recv_control_msg error -71 req 02 val 2600 [ 278.819947][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.834885][ T5898] pwc: recv_control_msg error -71 req 02 val 2900 [ 278.845423][ T9] pwc: Registered as video103. [ 278.851101][ T5898] pwc: recv_control_msg error -71 req 02 val 2800 [ 278.871880][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 278.872122][ T5898] pwc: recv_control_msg error -71 req 04 val 1100 [ 278.922809][ T5967] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 278.927410][ T9] usb 1-1: USB disconnect, device number 10 [ 278.941334][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.979164][ T5898] pwc: Registered as video103. [ 278.989907][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 279.051975][ T5898] usb 7-1: USB disconnect, device number 8 [ 279.083032][ T5967] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 279.091447][ T5967] usb 2-1: config 0 has no interface number 0 [ 279.099415][ T5967] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 279.144516][ T30] audit: type=1400 audit(1759308546.209:362): avc: denied { sqpoll } for pid=8580 comm="syz.7.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 279.151662][ T5967] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 279.201359][ T5967] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 279.211270][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.236424][ T5967] usb 2-1: Product: syz [ 279.248568][ T8599] binder: 8595:8599 ioctl 4018620d 0 returned -22 [ 279.256648][ T8599] binder: 8595:8599 ioctl c018620c 0 returned -14 [ 279.493324][ T5967] usb 2-1: Manufacturer: syz [ 279.591242][ T5967] usb 2-1: SerialNumber: syz [ 279.704836][ T5967] usb 2-1: config 0 descriptor?? [ 280.004554][ T5967] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 280.005383][ T8588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.087124][ T5967] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 280.338587][ T9] usb 8-1: reset high-speed USB device number 9 using dummy_hcd [ 280.395016][ T5967] usb 2-1: USB disconnect, device number 15 [ 280.885912][ T30] audit: type=1400 audit(1759308547.899:363): avc: denied { append } for pid=8614 comm="syz.0.569" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.413845][ T8629] vivid-000: ================= START STATUS ================= [ 281.421613][ T8629] vivid-000: Test Pattern: 75% Colorbar [ 281.435058][ T8629] vivid-000: Fill Percentage of Frame: 100 [ 281.440983][ T8629] vivid-000: Horizontal Movement: No Movement [ 281.447553][ T8629] vivid-000: Vertical Movement: No Movement [ 281.515726][ T2148] usb 8-1: USB disconnect, device number 9 [ 281.537812][ T8629] vivid-000: OSD Text Mode: All [ 281.543070][ T8629] vivid-000: Show Border: false [ 281.551833][ T8629] vivid-000: Show Square: false [ 281.560029][ T8629] vivid-000: Sensor Flipped Horizontally: false [ 281.568119][ T8629] vivid-000: Sensor Flipped Vertically: false [ 281.576537][ T8629] vivid-000: Insert SAV Code in Image: false [ 281.584435][ T8629] vivid-000: Insert EAV Code in Image: false [ 281.592653][ T8629] vivid-000: Insert Video Guard Band: false [ 281.620399][ T8629] vivid-000: Reduced Framerate: false [ 281.722245][ T8629] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 281.734054][ T8629] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 281.757824][ T8629] vivid-000: Enable Capture Cropping: true [ 281.764189][ T8629] vivid-000: Enable Capture Composing: true [ 281.825724][ T8638] binder: 8635:8638 ioctl 4018620d 0 returned -22 [ 281.833764][ T8638] binder: 8635:8638 ioctl c018620c 0 returned -14 [ 281.931844][ T5884] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 282.295583][ T8629] vivid-000: Enable Capture Scaler: true [ 282.322416][ T2148] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 282.423318][ T8629] vivid-000: Timestamp Source: End of Frame [ 282.429903][ T8629] vivid-000: Colorspace: sRGB [ 282.440273][ T8629] vivid-000: Transfer Function: [ 282.441974][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 282.453345][ T8629] Default [ 282.458382][ T8629] vivid-000: Y'CbCr Encoding: Default [ 282.463954][ T8629] vivid-000: HSV Encoding: Hue 0-179 [ 282.485326][ T8629] vivid-000: Quantization: Default [ 282.490483][ T8629] vivid-000: Apply Alpha To Red Only: false [ 282.496431][ T8629] vivid-000: Standard Aspect Ratio: 4x3 [ 282.502123][ T8629] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 282.509860][ T8629] vivid-000: DV Timings: 640x480p59 inactive [ 282.515887][ T8629] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 282.523276][ T8629] vivid-000: Maximum EDID Blocks: 2 [ 282.528482][ T8629] vivid-000: Limited RGB Range (16-235): false [ 282.534677][ T8629] vivid-000: Rx RGB Quantization Range: Automatic [ 282.541129][ T8629] vivid-000: Power Present: 0x00000001 [ 282.546646][ T8629] tpg source WxH: 320x240 (Y'CbCr) [ 282.551795][ T8629] tpg field: 1 [ 282.555158][ T8629] tpg crop: (0,0)/320x240 [ 282.559480][ T8629] tpg compose: (0,0)/320x240 [ 282.564099][ T8629] tpg colorspace: 8 [ 282.567906][ T8629] tpg transfer function: 0/0 [ 282.572536][ T8629] tpg Y'CbCr encoding: 0/0 [ 282.576940][ T8629] tpg quantization: 0/0 [ 282.581081][ T8629] tpg RGB range: 0/2 [ 282.585091][ T8629] vivid-000: ================== END STATUS ================== [ 282.647170][ T8618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.728289][ T2148] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.753370][ T2148] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 282.768511][ T5877] IPVS: starting estimator thread 0... [ 282.786000][ T2148] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 282.806161][ T2148] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.872873][ T8640] IPVS: using max 42 ests per chain, 100800 per kthread [ 282.954036][ T2148] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 282.963219][ T2148] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.988603][ T2148] usb 8-1: Product: syz [ 283.000896][ T2148] usb 8-1: Manufacturer: syz [ 283.011936][ T2148] usb 8-1: SerialNumber: syz [ 283.028875][ T2148] usb 8-1: config 0 descriptor?? [ 283.054181][ T2148] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input28 [ 283.367167][ T2148] usb 8-1: USB disconnect, device number 10 [ 284.189088][ T30] audit: type=1400 audit(1759308551.189:364): avc: denied { execute } for pid=8648 comm="syz.1.577" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 284.628915][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short [ 284.639920][ T5884] usb 7-1: no configurations [ 284.646017][ T5884] usb 7-1: can't read configurations, error -22 [ 284.920188][ T8648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.836352][ T8672] hub 1-0:1.0: USB hub found [ 285.842136][ T8672] hub 1-0:1.0: 1 port detected [ 286.368161][ T8668] kvm: kvm [8667]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 286.562740][ T8668] kvm: kvm [8667]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 287.146736][ T943] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 287.632438][ T943] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.670580][ T943] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.775988][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.787530][ T943] usb 1-1: config 0 descriptor?? [ 287.809365][ T943] pwc: Askey VC010 type 2 USB webcam detected. [ 288.578463][ T943] pwc: recv_control_msg error -32 req 02 val 2b00 [ 288.585806][ T943] pwc: recv_control_msg error -32 req 02 val 2700 [ 288.605960][ T943] pwc: recv_control_msg error -32 req 02 val 2c00 [ 288.625394][ T943] pwc: recv_control_msg error -32 req 04 val 1000 [ 288.638872][ T943] pwc: recv_control_msg error -32 req 04 val 1300 [ 288.646374][ T943] pwc: recv_control_msg error -32 req 04 val 1400 [ 288.710807][ T8709] binder: 8706:8709 ioctl 4018620d 0 returned -22 [ 288.718903][ T8709] binder: 8706:8709 ioctl c018620c 0 returned -14 [ 289.240842][ T8702] vivid-000: ================= START STATUS ================= [ 289.248725][ T8702] vivid-000: Test Pattern: 75% Colorbar [ 289.257328][ T8702] vivid-000: Fill Percentage of Frame: 100 [ 289.264510][ T8702] vivid-000: Horizontal Movement: No Movement [ 289.270949][ T8702] vivid-000: Vertical Movement: No Movement [ 289.279493][ T8702] vivid-000: OSD Text Mode: All [ 289.284778][ T8702] vivid-000: Show Border: false [ 289.289746][ T8702] vivid-000: Show Square: false [ 289.299788][ T8702] vivid-000: Sensor Flipped Horizontally: false [ 289.307935][ T8702] vivid-000: Sensor Flipped Vertically: false [ 289.384279][ T8702] vivid-000: Insert SAV Code in Image: false [ 289.394008][ T8702] vivid-000: Insert EAV Code in Image: false [ 289.415211][ T943] pwc: recv_control_msg error -71 req 02 val 2100 [ 289.505759][ T943] pwc: recv_control_msg error -71 req 04 val 1500 [ 289.536200][ T943] pwc: recv_control_msg error -71 req 02 val 2500 [ 289.543139][ T8702] vivid-000: Insert Video Guard Band: false [ 289.570954][ T943] pwc: recv_control_msg error -71 req 02 val 2400 [ 289.615261][ T943] pwc: recv_control_msg error -71 req 02 val 2600 [ 289.694391][ T8702] vivid-000: Reduced Framerate: false [ 289.706725][ T943] pwc: recv_control_msg error -71 req 02 val 2900 [ 289.713982][ T8702] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 289.722778][ T943] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.736975][ T8702] [ 289.739319][ T8702] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 289.747428][ T8702] vivid-000: Enable Capture Cropping: true [ 289.753308][ T8702] vivid-000: Enable Capture Composing: true [ 289.759224][ T8702] vivid-000: Enable Capture Scaler: true [ 289.765008][ T8702] vivid-000: Timestamp Source: End of Frame [ 289.770929][ T8702] vivid-000: Colorspace: sRGB [ 289.775674][ T8702] vivid-000: Transfer Function: Default [ 289.781265][ T8702] vivid-000: Y'CbCr Encoding: Default [ 289.786716][ T8702] vivid-000: HSV Encoding: Hue 0-179 [ 289.792099][ T8702] vivid-000: Quantization: Default [ 289.797240][ T8702] vivid-000: Apply Alpha To Red Only: false [ 289.803257][ T8702] vivid-000: Standard Aspect Ratio: 4x3 [ 289.808829][ T8702] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 289.816713][ T8702] vivid-000: DV Timings: 640x480p59 inactive [ 289.822833][ T8702] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 289.830174][ T8702] vivid-000: Maximum EDID Blocks: 2 [ 289.835502][ T8702] vivid-000: Limited RGB Range (16-235): false [ 289.841741][ T8702] vivid-000: Rx RGB Quantization Range: Automatic [ 289.848182][ T8702] vivid-000: Power Present: 0x00000001 [ 289.853802][ T8702] tpg source WxH: 320x240 (Y'CbCr) [ 289.858992][ T8702] tpg field: 1 [ 289.862447][ T8702] tpg crop: (0,0)/320x240 [ 289.866882][ T8702] tpg compose: (0,0)/320x240 [ 289.871521][ T8702] tpg colorspace: 8 [ 289.875392][ T8702] tpg transfer function: 0/0 [ 289.880056][ T8702] tpg Y'CbCr encoding: 0/0 [ 289.884580][ T8702] tpg quantization: 0/0 [ 289.888783][ T8702] tpg RGB range: 0/2 [ 289.892754][ T8702] vivid-000: ================== END STATUS ================== [ 290.002453][ T943] pwc: recv_control_msg error -71 req 04 val 1100 [ 290.026587][ T943] pwc: recv_control_msg error -71 req 04 val 1200 [ 290.049786][ T943] pwc: Registered as video103. [ 290.069770][ T943] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 290.202426][ T943] usb 1-1: USB disconnect, device number 11 [ 292.122582][ T8736] hub 1-0:1.0: USB hub found [ 292.128219][ T8736] hub 1-0:1.0: 1 port detected [ 293.942028][ T943] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 294.167441][ T943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.178517][ T943] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.203224][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.505026][ T5884] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 294.534769][ T943] usb 2-1: config 0 descriptor?? [ 294.564692][ T943] pwc: Askey VC010 type 2 USB webcam detected. [ 294.824725][ T8768] binder: 8762:8768 ioctl c0306201 200000000080 returned -14 [ 294.856922][ T5884] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 294.899885][ T5884] usb 8-1: config 0 has no interface number 0 [ 294.942867][ T5884] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 294.974596][ T5884] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 295.010247][ T943] pwc: recv_control_msg error -32 req 02 val 2b00 [ 295.011182][ T5884] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 295.031524][ T943] pwc: recv_control_msg error -32 req 02 val 2700 [ 295.053415][ T943] pwc: recv_control_msg error -32 req 02 val 2c00 [ 295.081132][ T943] pwc: recv_control_msg error -32 req 04 val 1000 [ 295.093816][ T943] pwc: recv_control_msg error -32 req 04 val 1300 [ 295.103389][ T943] pwc: recv_control_msg error -32 req 04 val 1400 [ 295.121313][ T943] pwc: recv_control_msg error -32 req 02 val 2000 [ 295.129612][ T943] pwc: recv_control_msg error -32 req 02 val 2100 [ 295.137132][ T943] pwc: recv_control_msg error -32 req 04 val 1500 [ 295.171814][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.213851][ T5884] usb 8-1: Product: syz [ 295.221204][ T5884] usb 8-1: Manufacturer: syz [ 295.246383][ T5884] usb 8-1: SerialNumber: syz [ 295.262722][ T5884] usb 8-1: config 0 descriptor?? [ 295.346868][ T943] pwc: recv_control_msg error -71 req 02 val 2400 [ 295.356903][ T943] pwc: recv_control_msg error -71 req 02 val 2600 [ 295.429432][ T943] pwc: recv_control_msg error -71 req 02 val 2900 [ 295.436729][ T943] pwc: recv_control_msg error -71 req 02 val 2800 [ 295.444058][ T943] pwc: recv_control_msg error -71 req 04 val 1100 [ 295.450864][ T943] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.461875][ T943] pwc: Registered as video103. [ 295.479745][ T943] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 295.489440][ T5898] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 295.514809][ T8753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.527149][ T5884] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71 [ 295.532059][ T943] usb 2-1: USB disconnect, device number 16 [ 295.561879][ T5884] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 295.578528][ T6191] udevd[6191]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 295.632412][ T5884] usb 8-1: USB disconnect, device number 11 [ 295.649029][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.677680][ T5898] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 295.708913][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.750263][ T5898] usb 7-1: config 0 descriptor?? [ 295.779174][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 296.791858][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 296.800690][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 296.824656][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 298.154806][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 298.164126][ T5898] pwc: recv_control_msg error -32 req 04 val 1300 [ 298.202840][ T5898] pwc: recv_control_msg error -32 req 04 val 1400 [ 298.416433][ T5898] pwc: recv_control_msg error -71 req 02 val 2100 [ 298.429850][ T5898] pwc: recv_control_msg error -71 req 04 val 1500 [ 298.438718][ T5898] pwc: recv_control_msg error -71 req 02 val 2500 [ 298.446553][ T5898] pwc: recv_control_msg error -71 req 02 val 2400 [ 298.461825][ T2148] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 298.572550][ T8805] vivid-000: ================= START STATUS ================= [ 298.580233][ T8805] vivid-000: Test Pattern: 75% Colorbar [ 298.585910][ T8805] vivid-000: Fill Percentage of Frame: 100 [ 298.591746][ T8805] vivid-000: Horizontal Movement: No Movement [ 298.597830][ T8805] vivid-000: Vertical Movement: No Movement [ 298.603792][ T8805] vivid-000: OSD Text Mode: All [ 298.608652][ T8805] vivid-000: Show Border: false [ 298.613756][ T8805] vivid-000: Show Square: false [ 298.618617][ T8805] vivid-000: Sensor Flipped Horizontally: false [ 298.654868][ T2148] usb 5-1: Using ep0 maxpacket: 16 [ 298.662172][ T8805] vivid-000: Sensor Flipped Vertically: false [ 298.682628][ T8805] vivid-000: Insert SAV Code in Image: false [ 298.762852][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 298.783455][ T8805] vivid-000: Insert EAV Code in Image: false [ 298.789923][ T5898] pwc: recv_control_msg error -71 req 02 val 2600 [ 298.790082][ T2148] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.807113][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.815417][ T2148] usb 5-1: Product: syz [ 298.825180][ T8805] vivid-000: Insert Video Guard Band: false [ 298.831249][ T2148] usb 5-1: Manufacturer: syz [ 298.831485][ T5898] pwc: recv_control_msg error -71 req 02 val 2900 [ 298.843999][ T8805] vivid-000: Reduced Framerate: false [ 298.849654][ T8805] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 298.862287][ T8805] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 298.870323][ T8805] vivid-000: Enable Capture Cropping: true [ 298.876360][ T8805] vivid-000: Enable Capture Composing: true [ 298.882475][ T8805] vivid-000: Enable Capture Scaler: true [ 298.888170][ T8805] vivid-000: Timestamp Source: End of Frame [ 298.894194][ T8805] vivid-000: Colorspace: sRGB [ 298.898918][ T8805] vivid-000: Transfer Function: Default [ 298.904525][ T8805] vivid-000: Y'CbCr Encoding: Default [ 298.909939][ T8805] vivid-000: HSV Encoding: Hue 0-179 [ 298.915332][ T8805] vivid-000: Quantization: Default [ 298.920537][ T8805] vivid-000: Apply Alpha To Red Only: false [ 298.926588][ T8805] vivid-000: Standard Aspect Ratio: 4x3 [ 298.932262][ T8805] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 298.940116][ T8805] vivid-000: DV Timings: 640x480p59 inactive [ 298.946346][ T8805] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 298.953774][ T8805] vivid-000: Maximum EDID Blocks: 2 [ 298.959056][ T8805] vivid-000: Limited RGB Range (16-235): false [ 298.965465][ T8805] vivid-000: Rx RGB Quantization Range: Automatic [ 298.975304][ T8805] vivid-000: Power Present: 0x00000001 [ 298.980946][ T8805] tpg source WxH: 320x240 (Y'CbCr) [ 298.986166][ T8805] tpg field: 1 [ 298.989595][ T8805] tpg crop: (0,0)/320x240 [ 298.993983][ T8805] tpg compose: (0,0)/320x240 [ 298.998799][ T8805] tpg colorspace: 8 [ 299.002735][ T8805] tpg transfer function: 0/0 [ 299.007388][ T8805] tpg Y'CbCr encoding: 0/0 [ 299.011884][ T8805] tpg quantization: 0/0 [ 299.016082][ T8805] tpg RGB range: 0/2 [ 299.020035][ T8805] vivid-000: ================== END STATUS ================== [ 299.078118][ T2148] usb 5-1: SerialNumber: syz [ 299.081733][ T5898] pwc: recv_control_msg error -71 req 02 val 2800 [ 299.097927][ T5898] pwc: recv_control_msg error -71 req 04 val 1100 [ 299.109750][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 299.112458][ T2148] usb 5-1: config 0 descriptor?? [ 299.127972][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.7.610'. [ 299.171437][ T2148] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 299.181546][ T2148] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 299.262624][ T5898] pwc: Registered as video103. [ 299.285030][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 299.331596][ T5898] usb 7-1: USB disconnect, device number 11 [ 300.136953][ T2148] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 300.377887][ T2148] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 300.386648][ T2148] em28xx 5-1:0.0: board has no eeprom [ 300.453921][ T8818] trusted_key: syz.7.615 sent an empty control message without MSG_MORE. [ 300.652331][ T2148] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 300.660394][ T2148] em28xx 5-1:0.0: dvb set to bulk mode. [ 300.667042][ T5877] em28xx 5-1:0.0: Binding DVB extension [ 300.678001][ T2148] usb 5-1: USB disconnect, device number 9 [ 300.697857][ T2148] em28xx 5-1:0.0: Disconnecting em28xx [ 300.746644][ T5877] em28xx 5-1:0.0: Registering input extension [ 300.766545][ T2148] em28xx 5-1:0.0: Closing input extension [ 300.775945][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.617'. [ 300.815291][ T2148] em28xx 5-1:0.0: Freeing device [ 300.858192][ T8826] netlink: 104 bytes leftover after parsing attributes in process `syz.6.617'. [ 302.815089][ T8845] hub 1-0:1.0: USB hub found [ 302.820982][ T8845] hub 1-0:1.0: 1 port detected [ 304.231705][ T30] audit: type=1400 audit(1759308571.269:365): avc: denied { read } for pid=8860 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.232375][ T5954] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 305.422071][ T5954] usb 8-1: device descriptor read/64, error -71 [ 305.691786][ T5954] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 305.851808][ T5954] usb 8-1: device descriptor read/64, error -71 [ 305.963169][ T5954] usb usb8-port1: attempt power cycle [ 306.322566][ T5954] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 306.379411][ T5954] usb 8-1: device descriptor read/8, error -71 [ 306.611646][ T8895] binder: 8888:8895 ioctl c0306201 200000000080 returned -14 [ 307.232718][ T5954] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 307.253055][ T5954] usb 8-1: device descriptor read/8, error -71 [ 307.374372][ T5954] usb usb8-port1: unable to enumerate USB device [ 307.623329][ T30] audit: type=1326 audit(1759308574.689:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 307.661615][ T30] audit: type=1326 audit(1759308574.709:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 307.685634][ T30] audit: type=1326 audit(1759308574.709:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 308.443139][ T30] audit: type=1326 audit(1759308574.709:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 308.466371][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.794666][ T30] audit: type=1326 audit(1759308574.709:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 308.817967][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.872233][ T30] audit: type=1326 audit(1759308574.709:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 308.908708][ T30] audit: type=1326 audit(1759308574.709:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 308.931954][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.997089][ T30] audit: type=1326 audit(1759308574.709:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 309.021779][ T30] audit: type=1326 audit(1759308574.709:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa31298eec9 code=0x7ffc0000 [ 310.611647][ T5877] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 310.905345][ T5877] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.905394][ T5877] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.905416][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.907681][ T5877] usb 8-1: config 0 descriptor?? [ 310.909896][ T5877] pwc: Askey VC010 type 2 USB webcam detected. [ 311.339023][ T5877] pwc: recv_control_msg error -32 req 02 val 2b00 [ 311.352922][ T5877] pwc: recv_control_msg error -32 req 02 val 2700 [ 311.360078][ T5877] pwc: recv_control_msg error -32 req 02 val 2c00 [ 311.367544][ T5877] pwc: recv_control_msg error -32 req 04 val 1000 [ 311.374715][ T5877] pwc: recv_control_msg error -32 req 04 val 1300 [ 311.381539][ T5877] pwc: recv_control_msg error -32 req 04 val 1400 [ 311.388872][ T5877] pwc: recv_control_msg error -32 req 02 val 2000 [ 311.396216][ T5877] pwc: recv_control_msg error -32 req 02 val 2100 [ 311.905840][ T5877] pwc: recv_control_msg error -32 req 04 val 1500 [ 311.914447][ T5877] pwc: recv_control_msg error -32 req 02 val 2500 [ 312.126611][ T5877] pwc: recv_control_msg error -71 req 02 val 2600 [ 312.164216][ T5877] pwc: recv_control_msg error -71 req 02 val 2900 [ 312.201167][ T5877] pwc: recv_control_msg error -71 req 02 val 2800 [ 312.221399][ T5877] pwc: recv_control_msg error -71 req 04 val 1100 [ 312.229474][ T5877] pwc: recv_control_msg error -71 req 04 val 1200 [ 313.053267][ T5877] pwc: Registered as video103. [ 313.059708][ T5877] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input34 [ 313.073580][ T5877] usb 8-1: USB disconnect, device number 16 [ 313.357630][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.654'. [ 315.224504][ T9004] netlink: 72 bytes leftover after parsing attributes in process `syz.1.659'. [ 315.934357][ T8982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.043611][ T9009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 316.702712][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.709135][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.935274][ T9052] random: crng reseeded on system resumption [ 318.977310][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 318.977443][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 319.356254][ T2148] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 319.621772][ T2148] usb 5-1: Using ep0 maxpacket: 16 [ 319.634462][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.683071][ T2148] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 319.711868][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.781869][ T2148] usb 5-1: Product: syz [ 319.823914][ T2148] usb 5-1: Manufacturer: syz [ 320.032736][ T2148] usb 5-1: SerialNumber: syz [ 320.082089][ T2148] usb 5-1: config 0 descriptor?? [ 320.090036][ T2148] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.106587][ T2148] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 320.297501][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 320.297518][ T30] audit: type=1400 audit(1759308587.359:390): avc: denied { write } for pid=9069 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 320.783934][ T2148] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 321.227082][ T2148] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 321.244775][ T2148] em28xx 5-1:0.0: board has no eeprom [ 321.521775][ T2148] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 321.529634][ T2148] em28xx 5-1:0.0: dvb set to bulk mode. [ 322.231184][ T2148] usb 5-1: USB disconnect, device number 10 [ 322.241913][ T5877] em28xx 5-1:0.0: Binding DVB extension [ 322.302470][ T2148] em28xx 5-1:0.0: Disconnecting em28xx [ 322.662712][ T5877] em28xx 5-1:0.0: Registering input extension [ 322.683490][ T2148] em28xx 5-1:0.0: Closing input extension [ 322.759649][ T2148] em28xx 5-1:0.0: Freeing device [ 322.941798][ T5967] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 323.120774][ T5967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.132449][ T5967] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 323.149402][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.263110][ T2148] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 323.294488][ T5967] usb 8-1: config 0 descriptor?? [ 323.349971][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 323.444031][ T2148] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.455013][ T2148] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 323.523307][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 323.560521][ T2148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 323.640889][ T2148] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.659722][ T2148] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 323.674371][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.701712][ T2148] usb 5-1: Product: syz [ 323.711923][ T2148] usb 5-1: Manufacturer: syz [ 323.716618][ T2148] usb 5-1: SerialNumber: syz [ 323.733136][ T2148] usb 5-1: config 0 descriptor?? [ 323.751205][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 323.763851][ T5967] pwc: recv_control_msg error -32 req 02 val 2700 [ 323.779195][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 323.789431][ T5967] pwc: recv_control_msg error -32 req 04 val 1000 [ 323.800363][ T5967] pwc: recv_control_msg error -32 req 04 val 1300 [ 323.810797][ T5967] pwc: recv_control_msg error -32 req 04 val 1400 [ 323.817910][ T5967] pwc: recv_control_msg error -32 req 02 val 2000 [ 323.825261][ T5967] pwc: recv_control_msg error -32 req 02 val 2100 [ 323.835651][ T5967] pwc: recv_control_msg error -32 req 04 val 1500 [ 323.850668][ T2148] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36 [ 324.133098][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 324.139975][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 324.157746][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 324.166460][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 324.175322][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 324.183346][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 324.206424][ T5967] pwc: Registered as video103. [ 324.289414][ T5898] usb 5-1: USB disconnect, device number 11 [ 324.317310][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input37 [ 325.083509][ T5967] usb 8-1: USB disconnect, device number 17 [ 325.350460][ T5932] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 325.450604][ T9127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.698'. [ 325.562392][ T5932] usb 7-1: Using ep0 maxpacket: 32 [ 325.574421][ T5932] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 325.582734][ T5932] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.607436][ T5932] usb 7-1: config 0 has no interface number 0 [ 325.614319][ T5932] usb 7-1: config 0 interface 146 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.660852][ T5932] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 325.662003][ T5898] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 325.672558][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.808887][ T5932] usb 7-1: Product: syz [ 325.840313][ T5932] usb 7-1: Manufacturer: syz [ 325.855777][ T5932] usb 7-1: SerialNumber: syz [ 325.894588][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.911551][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 325.936126][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 325.974267][ T5932] usb 7-1: config 0 descriptor?? [ 325.985476][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 326.009354][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.023788][ T5932] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 326.040847][ T5884] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 326.085137][ T5898] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 326.094558][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.102736][ T5898] usb 1-1: Product: syz [ 326.116586][ T5898] usb 1-1: Manufacturer: syz [ 326.143134][ T5898] usb 1-1: SerialNumber: syz [ 326.153393][ T5898] usb 1-1: config 0 descriptor?? [ 326.170878][ T5898] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 326.211897][ T5884] usb 8-1: Using ep0 maxpacket: 16 [ 326.234534][ T5877] usb 7-1: USB disconnect, device number 12 [ 326.420326][ T5898] usb 1-1: USB disconnect, device number 12 [ 328.191827][ T2148] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 329.051831][ T2148] usb 7-1: Using ep0 maxpacket: 32 [ 329.069259][ T2148] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.111977][ T2148] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 329.150924][ T2148] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.192240][ T2148] usb 7-1: Product: syz [ 329.196464][ T2148] usb 7-1: Manufacturer: syz [ 329.201074][ T2148] usb 7-1: SerialNumber: syz [ 329.252559][ T2148] usb 7-1: config 0 descriptor?? [ 329.442084][ T5884] usb 8-1: unable to get BOS descriptor or descriptor too short [ 329.535283][ T5884] usb 8-1: no configurations [ 329.564712][ T5884] usb 8-1: can't read configurations, error -22 [ 329.805349][ T2148] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 329.855276][ T30] audit: type=1400 audit(1759308596.869:391): avc: denied { connect } for pid=9166 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.235755][ T2148] usb 7-1: USB disconnect, device number 13 [ 331.002168][ T9181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.713'. [ 331.630333][ T9182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.809612][ T9210] binder: 9205:9210 ioctl c0306201 200000000080 returned -14 [ 332.861127][ T5954] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 333.111729][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 333.133629][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 333.162625][ T5954] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 333.180577][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.217677][ T5954] usb 2-1: Product: syz [ 333.224857][ T5954] usb 2-1: Manufacturer: syz [ 333.232841][ T5954] usb 2-1: SerialNumber: syz [ 333.247652][ T9215] binder: 9211:9215 ioctl c0306201 200000000080 returned -14 [ 333.264244][ T5954] usb 2-1: config 0 descriptor?? [ 333.457226][ T5954] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 333.469192][ T5954] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 333.687417][ T9218] trusted_key: encrypted_key: keylen parameter is missing [ 333.883950][ T9219] trusted_key: encrypted_key: keylen parameter is missing [ 333.895864][ T9219] nbd: must specify a device to reconfigure [ 334.310632][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.724'. [ 334.675914][ T5954] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 335.136062][ T5954] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 335.144337][ T5954] em28xx 2-1:0.0: board has no eeprom [ 335.331856][ T5898] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 335.412088][ T5954] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 335.424666][ T5954] em28xx 2-1:0.0: dvb set to bulk mode. [ 335.430267][ T48] em28xx 2-1:0.0: Binding DVB extension [ 335.483241][ T5898] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 335.515957][ T48] em28xx 2-1:0.0: Registering input extension [ 335.541861][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 335.563321][ T5954] usb 2-1: USB disconnect, device number 17 [ 335.601890][ T2148] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 335.602121][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 335.643064][ T5954] em28xx 2-1:0.0: Disconnecting em28xx [ 335.651539][ T5954] em28xx 2-1:0.0: Closing input extension [ 335.658347][ T5898] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.736611][ T5954] em28xx 2-1:0.0: Freeing device [ 335.750603][ T5898] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.763945][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.798748][ T5898] usb 7-1: config 0 descriptor?? [ 335.801829][ T2148] usb 1-1: Using ep0 maxpacket: 16 [ 335.804509][ T9235] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 335.826774][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 335.843691][ T2148] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 335.853067][ T2148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.871559][ T2148] usb 1-1: Product: syz [ 335.881791][ T2148] usb 1-1: Manufacturer: syz [ 335.890327][ T2148] usb 1-1: SerialNumber: syz [ 335.937874][ T2148] usb 1-1: config 0 descriptor?? [ 335.971869][ T2148] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 336.036228][ T2148] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 336.582425][ T5898] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 336.617683][ T5898] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 336.706574][ T2148] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 337.327911][ T2148] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 337.353071][ T2148] em28xx 1-1:0.0: board has no eeprom [ 337.621758][ T2148] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 337.631735][ T2148] em28xx 1-1:0.0: dvb set to bulk mode. [ 337.663434][ T9266] binder: 9263:9266 ioctl c0306201 200000000080 returned -14 [ 337.736625][ T5932] em28xx 1-1:0.0: Binding DVB extension [ 337.753891][ T2148] usb 1-1: USB disconnect, device number 13 [ 337.818718][ T2148] em28xx 1-1:0.0: Disconnecting em28xx [ 337.825306][ T5877] usb 7-1: USB disconnect, device number 14 [ 337.982358][ T5932] em28xx 1-1:0.0: Registering input extension [ 338.006214][ T2148] em28xx 1-1:0.0: Closing input extension [ 338.075256][ T2148] em28xx 1-1:0.0: Freeing device [ 338.728413][ T9280] random: crng reseeded on system resumption [ 338.894637][ T9283] random: crng reseeded on system resumption [ 340.359247][ T9307] random: crng reseeded on system resumption [ 340.551810][ T48] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 340.841930][ T48] usb 5-1: device descriptor read/64, error -71 [ 341.043352][ T2148] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 341.252242][ T48] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 341.293322][ T2148] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 341.481832][ T48] usb 5-1: device descriptor read/64, error -71 [ 341.731465][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 341.752256][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 341.765479][ T2148] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.778526][ T2148] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.801878][ T2148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.822868][ T2148] usb 1-1: config 0 descriptor?? [ 341.845810][ T9305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 341.872253][ T48] usb usb5-port1: attempt power cycle [ 341.949452][ T9318] binder: 9315:9318 ioctl c0306201 200000000080 returned -14 [ 342.353718][ T2148] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 342.411751][ T48] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 342.446531][ T2148] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 342.447280][ T48] usb 5-1: device descriptor read/8, error -71 [ 342.811787][ T48] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 342.835597][ T48] usb 5-1: device descriptor read/8, error -71 [ 342.951937][ T48] usb usb5-port1: unable to enumerate USB device [ 343.212356][ T9329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.227323][ T9329] team0: Port device bond1 added [ 343.831928][ T5898] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 344.583723][ T30] audit: type=1326 audit(1759308611.639:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 344.711756][ T30] audit: type=1326 audit(1759308611.679:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 344.786190][ T5954] usb 1-1: USB disconnect, device number 14 [ 344.853517][ T30] audit: type=1326 audit(1759308611.679:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 345.030076][ T30] audit: type=1326 audit(1759308611.679:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 345.234768][ T30] audit: type=1326 audit(1759308611.679:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 345.402628][ T30] audit: type=1326 audit(1759308611.769:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 345.520633][ T30] audit: type=1326 audit(1759308611.769:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 345.717072][ T30] audit: type=1326 audit(1759308611.769:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 345.756399][ T30] audit: type=1326 audit(1759308611.859:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7efcddf8eec9 code=0x7ffc0000 [ 345.798631][ T30] audit: type=1400 audit(1759308611.989:401): avc: denied { name_bind } for pid=9357 comm="syz.0.759" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 345.820101][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.251965][ T2148] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 346.503304][ T2148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.541094][ T2148] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 346.779382][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.342197][ T2148] usb 5-1: config 0 descriptor?? [ 347.365599][ T2148] pwc: Askey VC010 type 2 USB webcam detected. [ 347.788423][ T2148] pwc: recv_control_msg error -32 req 02 val 2b00 [ 347.797012][ T2148] pwc: recv_control_msg error -32 req 02 val 2700 [ 347.828454][ T2148] pwc: recv_control_msg error -32 req 02 val 2c00 [ 347.883817][ T2148] pwc: recv_control_msg error -32 req 04 val 1000 [ 347.890960][ T2148] pwc: recv_control_msg error -32 req 04 val 1300 [ 347.898239][ T2148] pwc: recv_control_msg error -32 req 04 val 1400 [ 347.905313][ T2148] pwc: recv_control_msg error -32 req 02 val 2000 [ 347.912478][ T2148] pwc: recv_control_msg error -32 req 02 val 2100 [ 347.919423][ T2148] pwc: recv_control_msg error -32 req 04 val 1500 [ 348.127351][ T2148] pwc: recv_control_msg error -71 req 02 val 2400 [ 348.137456][ T2148] pwc: recv_control_msg error -71 req 02 val 2600 [ 348.144788][ T2148] pwc: recv_control_msg error -71 req 02 val 2900 [ 348.154676][ T2148] pwc: recv_control_msg error -71 req 02 val 2800 [ 348.171464][ T2148] pwc: recv_control_msg error -71 req 04 val 1100 [ 348.188616][ T2148] pwc: recv_control_msg error -71 req 04 val 1200 [ 348.230579][ T9409] syz.0.771 (9409): drop_caches: 2 [ 348.312163][ T9409] syz.0.771 (9409): drop_caches: 2 [ 348.385985][ T2148] pwc: Registered as video103. [ 348.406852][ T2148] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 348.529115][ T2148] usb 5-1: USB disconnect, device number 16 [ 348.671756][ T9417] binder: 9412:9417 ioctl 4018620d 0 returned -22 [ 348.679674][ T9417] binder: 9412:9417 ioctl c018620c 0 returned -14 [ 350.970103][ T7316] syz_tun (unregistering): left allmulticast mode [ 351.083388][ T5877] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 351.281767][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 351.326785][ T5877] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 351.524238][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.544096][ T5877] usb 5-1: config 0 descriptor?? [ 351.554221][ T5877] gspca_main: sunplus-2.14.0 probing 041e:400b [ 351.841933][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 351.841952][ T30] audit: type=1400 audit(1759308618.879:404): avc: denied { read write } for pid=9449 comm="syz.0.785" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 351.933392][ T30] audit: type=1400 audit(1759308618.879:405): avc: denied { open } for pid=9449 comm="syz.0.785" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 351.961969][ T30] audit: type=1400 audit(1759308618.879:406): avc: denied { write } for pid=9449 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 352.103034][ T9455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.112055][ T9455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.264943][ T5877] gspca_sunplus: reg_w_riv err -110 [ 352.272903][ T5877] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 352.962993][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.972959][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.984408][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.017665][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.025409][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.429182][ T9471] vivid-000: ================= START STATUS ================= [ 353.442005][ T9471] vivid-000: Test Pattern: 75% Colorbar [ 353.448521][ T9471] vivid-000: Fill Percentage of Frame: 100 [ 353.454640][ T9471] vivid-000: Horizontal Movement: No Movement [ 353.462021][ T9471] vivid-000: Vertical Movement: No Movement [ 353.469399][ T9471] vivid-000: OSD Text Mode: All [ 353.495375][ T9471] vivid-000: Show Border: false [ 353.502318][ T9471] vivid-000: Show Square: false [ 353.511929][ T9471] vivid-000: Sensor Flipped Horizontally: false [ 353.539138][ T9471] vivid-000: Sensor Flipped Vertically: false [ 353.546607][ T9471] vivid-000: Insert SAV Code in Image: false [ 353.575573][ T9471] vivid-000: Insert EAV Code in Image: false [ 353.601279][ T9471] vivid-000: Insert Video Guard Band: false [ 353.698663][ T9471] vivid-000: Reduced Framerate: false [ 353.705389][ T9471] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 353.763351][ T9471] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 353.775171][ T9471] vivid-000: Enable Capture Cropping: true [ 353.788147][ T9471] vivid-000: Enable Capture Composing: true [ 353.795021][ T9471] vivid-000: Enable Capture Scaler: true [ 353.894257][ T9481] binder: 9477:9481 ioctl c0306201 200000000080 returned -14 [ 354.053976][ T9463] chnl_net:caif_netlink_parms(): no params data found [ 354.108991][ T5954] usb 5-1: USB disconnect, device number 17 [ 354.144018][ T9471] vivid-000: Timestamp Source: End of Frame [ 354.150322][ T9471] vivid-000: Colorspace: sRGB [ 354.156373][ T9471] vivid-000: Transfer Function: Default [ 354.162621][ T9471] vivid-000: Y'CbCr Encoding: Default [ 354.168482][ T9471] vivid-000: HSV Encoding: Hue 0-179 [ 354.174708][ T9471] vivid-000: Quantization: Default [ 354.179960][ T9471] vivid-000: Apply Alpha To Red Only: false [ 354.186675][ T9471] vivid-000: Standard Aspect Ratio: 4x3 [ 354.192393][ T9471] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 354.200527][ T9471] vivid-000: DV Timings: 640x480p59 inactive [ 354.207313][ T9471] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 354.215897][ T9471] vivid-000: Maximum EDID Blocks: 2 [ 354.221494][ T9471] vivid-000: Limited RGB Range (16-235): false [ 354.228436][ T9471] vivid-000: Rx RGB Quantization Range: Automatic [ 354.235347][ T9471] vivid-000: Power Present: 0x00000001 [ 354.241490][ T9471] tpg source WxH: 320x240 (Y'CbCr) [ 354.246987][ T9471] tpg field: 1 [ 354.250445][ T9471] tpg crop: (0,0)/320x240 [ 354.255694][ T9471] tpg compose: (0,0)/320x240 [ 354.260383][ T9471] tpg colorspace: 8 [ 354.264822][ T9471] tpg transfer function: 0/0 [ 354.269794][ T9471] tpg Y'CbCr encoding: 0/0 [ 354.274692][ T9471] tpg quantization: 0/0 [ 354.280328][ T9471] tpg RGB range: 0/2 [ 354.284290][ T9471] vivid-000: ================== END STATUS ================== [ 354.556269][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.692397][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.699617][ T9463] bridge_slave_0: entered allmulticast mode [ 354.714935][ T9463] bridge_slave_0: entered promiscuous mode [ 355.095151][ T5830] Bluetooth: hci0: command tx timeout [ 355.301411][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.320298][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.463487][ T9463] bridge_slave_1: entered allmulticast mode [ 355.535673][ T9463] bridge_slave_1: entered promiscuous mode [ 355.712351][ T5877] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 355.779902][ T9463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.797067][ T9463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.873377][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 355.881382][ T5877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 355.894348][ T5877] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 355.903553][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.911514][ T5877] usb 2-1: Product: syz [ 355.917202][ T5877] usb 2-1: Manufacturer: syz [ 355.922340][ T5877] usb 2-1: SerialNumber: syz [ 355.928511][ T5877] usb 2-1: config 0 descriptor?? [ 356.024719][ T9463] team0: Port device team_slave_0 added [ 356.111849][ T9463] team0: Port device team_slave_1 added [ 356.179806][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.199493][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.254007][ T9463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.279526][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.299685][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.452879][ T5877] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 356.463782][ T9463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.528834][ T9463] hsr_slave_0: entered promiscuous mode [ 356.536830][ T9463] hsr_slave_1: entered promiscuous mode [ 356.586111][ T9517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'. [ 356.596542][ T9463] debugfs: 'hsr0' already exists in 'hsr' [ 356.605513][ T9463] Cannot create hsr debugfs directory [ 357.132957][ T5954] usb 2-1: USB disconnect, device number 18 [ 357.171748][ T5830] Bluetooth: hci0: command tx timeout [ 357.215838][ T9524] syz.7.800 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 357.572891][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.800'. [ 357.780093][ T9463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 357.791809][ T9463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 357.807005][ T9463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 357.846914][ T9463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 357.981568][ T9463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.996431][ T9463] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.027919][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.035038][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.048855][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.055968][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.079503][ T9463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.144839][ T5877] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 358.204187][ T9463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.331790][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 358.338412][ T5877] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 358.349000][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.386866][ T5877] usb 1-1: config 0 descriptor?? [ 358.403848][ T5877] gspca_main: sunplus-2.14.0 probing 041e:400b [ 358.676358][ T9463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.984370][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.994489][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.116466][ T5877] gspca_sunplus: reg_w_riv err -110 [ 359.140666][ T5877] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 359.799030][ T5830] Bluetooth: hci0: command tx timeout [ 360.330912][ T9463] veth0_vlan: entered promiscuous mode [ 360.489742][ T9463] veth1_vlan: entered promiscuous mode [ 360.549319][ T9463] veth0_macvtap: entered promiscuous mode [ 360.706240][ T9463] veth1_macvtap: entered promiscuous mode [ 361.686026][ T9576] vivid-000: ================= START STATUS ================= [ 361.733204][ T9576] vivid-000: Test Pattern: 75% Colorbar [ 361.743826][ T9576] vivid-000: Fill Percentage of Frame: 100 [ 361.749825][ T9576] vivid-000: Horizontal Movement: No Movement [ 361.756029][ T9576] vivid-000: Vertical Movement: No Movement [ 361.761995][ T9576] vivid-000: OSD Text Mode: All [ 361.766936][ T9576] vivid-000: Show Border: false [ 361.773529][ T9576] vivid-000: Show Square: false [ 361.778546][ T9576] vivid-000: Sensor Flipped Horizontally: false [ 361.785168][ T9576] vivid-000: Sensor Flipped Vertically: false [ 361.791346][ T9576] vivid-000: Insert SAV Code in Image: false [ 361.798285][ T9576] vivid-000: Insert EAV Code in Image: false [ 361.806217][ T9576] vivid-000: Insert Video Guard Band: false [ 361.892040][ T5830] Bluetooth: hci0: command tx timeout [ 361.899918][ T9576] vivid-000: Reduced Framerate: false [ 361.923473][ T9576] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 361.935220][ T9463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.948143][ T9463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.958415][ T9576] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 361.971467][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.990645][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.032255][ T9576] vivid-000: Enable Capture Cropping: true [ 362.178898][ T9576] vivid-000: Enable Capture Composing: [ 362.181445][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.200979][ T9576] true [ 362.206179][ T9576] vivid-000: Enable Capture Scaler: true [ 362.249124][ T9576] vivid-000: Timestamp Source: End of Frame [ 362.256470][ T9576] vivid-000: Colorspace: sRGB [ 362.276630][ T9576] vivid-000: Transfer Function: Default [ 362.284012][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.293150][ T9576] vivid-000: Y'CbCr Encoding: Default [ 362.308187][ T9576] vivid-000: HSV Encoding: Hue 0-179 [ 362.318870][ T9576] vivid-000: Quantization: Default [ 362.333132][ T9576] vivid-000: Apply Alpha To Red Only: false [ 362.347222][ T9576] vivid-000: Standard Aspect Ratio: 4x3 [ 362.358094][ T9576] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 362.378461][ T9576] vivid-000: DV Timings: 640x480p59 inactive [ 362.385645][ T9576] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 362.416095][ T9576] vivid-000: Maximum EDID Blocks: 2 [ 362.432830][ T5954] usb 1-1: USB disconnect, device number 15 [ 362.457253][ T9576] vivid-000: Limited RGB Range (16-235): false [ 362.467962][ T9576] vivid-000: Rx RGB Quantization Range: Automatic [ 362.478853][ T9576] vivid-000: Power Present: 0x00000001 [ 362.496805][ T9576] tpg source WxH: 320x240 (Y'CbCr) [ 362.500562][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.524460][ T9576] tpg field: 1 [ 362.528889][ T9576] tpg crop: (0,0)/320x240 [ 362.548906][ T9576] tpg compose: (0,0)/320x240 [ 362.558415][ T9576] tpg colorspace: 8 [ 362.574045][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.575875][ T9576] tpg transfer function: 0/0 [ 362.587717][ T9576] tpg Y'CbCr encoding: 0/0 [ 362.595345][ T9576] tpg quantization: 0/0 [ 362.604286][ T9576] tpg RGB range: 0/2 [ 362.609683][ T9576] vivid-000: ================== END STATUS ================== [ 362.636450][ T9593] random: crng reseeded on system resumption [ 363.032246][ T5954] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 364.520232][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.540500][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.763107][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.774116][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 364.785948][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 364.841769][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 364.959684][ T9608] random: crng reseeded on system resumption [ 365.041921][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.071722][ T5954] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 365.081113][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.090874][ T5954] usb 1-1: Product: syz [ 365.095728][ T5954] usb 1-1: Manufacturer: syz [ 365.100318][ T5954] usb 1-1: SerialNumber: syz [ 365.110522][ T5954] usb 1-1: config 0 descriptor?? [ 365.128985][ T5954] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input44 [ 365.172056][ T5877] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 365.383571][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.493786][ T5954] usb 1-1: USB disconnect, device number 16 [ 365.763637][ T5877] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.932987][ T5877] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 365.953344][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.104235][ T5877] usb 2-1: config 0 descriptor?? [ 367.786016][ T5898] usb 2-1: USB disconnect, device number 19 [ 368.650677][ T9655] vivid-000: ================= START STATUS ================= [ 368.658500][ T9655] vivid-000: Test Pattern: 75% Colorbar [ 368.664216][ T9655] vivid-000: Fill Percentage of Frame: 100 [ 368.670171][ T9655] vivid-000: Horizontal Movement: No Movement [ 368.676829][ T9655] vivid-000: Vertical Movement: No Movement [ 368.682946][ T9655] vivid-000: OSD Text Mode: All [ 368.688208][ T9655] vivid-000: Show Border: false [ 368.693411][ T9655] vivid-000: Show Square: false [ 368.698321][ T9655] vivid-000: Sensor Flipped Horizontally: false [ 368.747200][ T9655] vivid-000: Sensor Flipped Vertically: [ 368.801732][ T5898] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 369.018546][ T9655] false [ 369.027364][ T9655] vivid-000: Insert SAV Code in Image: false [ 369.033735][ T9655] vivid-000: Insert EAV Code in Image: false [ 369.039848][ T9655] vivid-000: Insert Video Guard Band: false [ 369.045927][ T9655] vivid-000: Reduced Framerate: false [ 369.051422][ T9655] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 369.059298][ T9655] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 369.067568][ T9655] vivid-000: Enable Capture Cropping: true [ 369.073522][ T9655] vivid-000: Enable Capture Composing: true [ 369.079515][ T9655] vivid-000: Enable Capture Scaler: true [ 369.085358][ T9655] vivid-000: Timestamp Source: End of Frame [ 369.091475][ T9655] vivid-000: Colorspace: sRGB [ 369.096389][ T9655] vivid-000: Transfer Function: Default [ 369.102210][ T9655] vivid-000: Y'CbCr Encoding: Default [ 369.107684][ T9655] vivid-000: HSV Encoding: Hue 0-179 [ 369.113100][ T9655] vivid-000: Quantization: Default [ 369.118298][ T9655] vivid-000: Apply Alpha To Red Only: false [ 369.124305][ T9655] vivid-000: Standard Aspect Ratio: 4x3 [ 369.129941][ T9655] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 369.137926][ T9655] vivid-000: DV Timings: 640x480p59 inactive [ 369.144115][ T9655] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 369.151506][ T9655] vivid-000: Maximum EDID Blocks: 2 [ 369.156849][ T9655] vivid-000: Limited RGB Range (16-235): false [ 369.163251][ T9655] vivid-000: Rx RGB Quantization Range: Automatic [ 369.169754][ T9655] vivid-000: Power Present: 0x00000001 [ 369.175391][ T9655] tpg source WxH: 320x240 (Y'CbCr) [ 369.180555][ T9655] tpg field: 1 [ 369.183983][ T9655] tpg crop: (0,0)/320x240 [ 369.188933][ T9655] tpg compose: (0,0)/320x240 [ 369.193646][ T9655] tpg colorspace: 8 [ 369.197510][ T9655] tpg transfer function: 0/0 [ 369.202169][ T9655] tpg Y'CbCr encoding: 0/0 [ 369.206636][ T9655] tpg quantization: 0/0 [ 369.210834][ T9655] tpg RGB range: 0/2 [ 369.214808][ T9655] vivid-000: ================== END STATUS ================== [ 369.265857][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 369.277131][ T5898] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 369.293853][ T5898] usb 2-1: config 1 interface 1 has no altsetting 0 [ 369.307109][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.317926][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.326431][ T5898] usb 2-1: Product: syz [ 369.330634][ T5898] usb 2-1: Manufacturer: syz [ 369.345485][ T5898] usb 2-1: SerialNumber: syz [ 369.468289][ T9630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.598170][ T9671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.971317][ T5898] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 372.099944][ T5898] usb 2-1: USB disconnect, device number 20 [ 372.922305][ T5967] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 373.198594][ T9705] binder: 9696:9705 ioctl c0306201 200000000080 returned -14 [ 373.369382][ T5967] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.407792][ T5967] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.491873][ T5967] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.520313][ T5967] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.539210][ T5967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.590320][ T5967] usb 9-1: config 0 descriptor?? [ 374.430388][ T9721] netlink: 48 bytes leftover after parsing attributes in process `syz.4.845'. [ 374.655921][ T5967] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 374.678633][ T5967] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 374.688585][ T5967] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 374.867268][ T5967] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 376.754108][ T9733] netlink: 64 bytes leftover after parsing attributes in process `syz.8.848'. [ 376.804078][ T5967] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 377.340382][ T5967] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 377.359784][ T5967] usb 9-1: USB disconnect, device number 2 [ 377.414071][ T9739] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 377.515846][ T9740] fido_id[9740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 377.721897][ T5932] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 377.994207][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.004698][ T5932] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 378.013969][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.032665][ T5932] usb 5-1: config 0 descriptor?? [ 378.039982][ T5932] pwc: Askey VC010 type 2 USB webcam detected. [ 378.262297][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.268634][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.581016][ T5932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 378.594442][ T5932] pwc: recv_control_msg error -32 req 02 val 2700 [ 378.601548][ T5932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 378.609808][ T5932] pwc: recv_control_msg error -32 req 04 val 1000 [ 378.617075][ T5932] pwc: recv_control_msg error -32 req 04 val 1300 [ 378.624262][ T5932] pwc: recv_control_msg error -32 req 04 val 1400 [ 378.631546][ T5932] pwc: recv_control_msg error -32 req 02 val 2000 [ 378.638758][ T5932] pwc: recv_control_msg error -32 req 02 val 2100 [ 378.646132][ T5932] pwc: recv_control_msg error -32 req 04 val 1500 [ 378.653637][ T5932] pwc: recv_control_msg error -32 req 02 val 2500 [ 378.861792][ T5932] pwc: recv_control_msg error -71 req 02 val 2600 [ 378.869982][ T5932] pwc: recv_control_msg error -71 req 02 val 2900 [ 379.453674][ T5932] pwc: recv_control_msg error -71 req 02 val 2800 [ 379.461954][ T5932] pwc: recv_control_msg error -71 req 04 val 1100 [ 379.482527][ T5932] pwc: recv_control_msg error -71 req 04 val 1200 [ 379.494462][ T5932] pwc: Registered as video103. [ 379.506105][ T5932] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 379.523314][ T5932] usb 5-1: USB disconnect, device number 18 [ 380.675086][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.529565][ T5877] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 383.453826][ T5877] usb 8-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 384.051713][ T5877] usb 8-1: config 48 interface 0 altsetting 98 bulk endpoint 0x9 has invalid maxpacket 1024 [ 384.071690][ T5877] usb 8-1: config 48 interface 0 has no altsetting 0 [ 384.092894][ T5877] usb 8-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 384.101965][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.109927][ T5877] usb 8-1: Product: syz [ 384.121671][ T5877] usb 8-1: Manufacturer: syz [ 384.126280][ T5877] usb 8-1: SerialNumber: syz [ 385.262096][ T5877] usb 8-1: can't set config #48, error -71 [ 385.282777][ T5877] usb 8-1: USB disconnect, device number 20 [ 385.501723][ T5833] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 385.680785][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.834003][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 385.864523][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 385.891914][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 386.617850][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.709089][ T5833] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 386.728112][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.740195][ T5833] usb 1-1: Product: syz [ 386.757712][ T5833] usb 1-1: Manufacturer: syz [ 386.768007][ T5833] usb 1-1: SerialNumber: syz [ 386.782923][ T5833] usb 1-1: config 0 descriptor?? [ 386.897284][ T5833] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input46 [ 387.256761][ T5967] usb 1-1: USB disconnect, device number 17 [ 389.000198][ T9873] vivid-000: ================= START STATUS ================= [ 389.008156][ T9873] vivid-000: Test Pattern: 75% Colorbar [ 389.028619][ T9873] vivid-000: Fill Percentage of Frame: 100 [ 389.051817][ T9873] vivid-000: Horizontal Movement: No Movement [ 389.058110][ T9873] vivid-000: Vertical Movement: No Movement [ 389.252117][ T9873] vivid-000: OSD Text Mode: All [ 389.257856][ T9873] vivid-000: Show Border: false [ 389.264131][ T9873] vivid-000: Show Square: false [ 389.269429][ T9873] vivid-000: Sensor Flipped Horizontally: false [ 389.276491][ T9873] vivid-000: Sensor Flipped Vertically: false [ 389.283168][ T9873] vivid-000: Insert SAV Code in Image: false [ 389.290136][ T9873] vivid-000: Insert EAV Code in Image: false [ 389.296575][ T9873] vivid-000: Insert Video Guard Band: false [ 389.303003][ T9873] vivid-000: Reduced Framerate: false [ 389.309138][ T9873] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 389.317584][ T9873] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 389.326157][ T9873] vivid-000: Enable Capture Cropping: true [ 389.333073][ T9873] vivid-000: Enable Capture Composing: true [ 389.339627][ T9873] vivid-000: Enable Capture Scaler: true [ 389.345748][ T9873] vivid-000: Timestamp Source: End of Frame [ 389.352477][ T9873] vivid-000: Colorspace: sRGB [ 389.357948][ T9873] vivid-000: Transfer Function: Default [ 389.364046][ T9873] vivid-000: Y'CbCr Encoding: Default [ 389.369817][ T9873] vivid-000: HSV Encoding: Hue 0-179 [ 389.375814][ T9873] vivid-000: Quantization: Default [ 389.381199][ T9873] vivid-000: Apply Alpha To Red Only: false [ 389.387847][ T9873] vivid-000: Standard Aspect Ratio: 4x3 [ 389.393519][ T9873] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 389.402321][ T9873] vivid-000: DV Timings: 640x480p59 inactive [ 389.409089][ T9873] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 389.464169][ T9873] vivid-000: Maximum EDID Blocks: 2 [ 389.481587][ T9873] vivid-000: Limited RGB Range (16-235): false [ 389.518887][ T9873] vivid-000: Rx RGB Quantization Range: Automatic [ 389.603490][ T9873] vivid-000: Power Present: 0x00000001 [ 389.801897][ T9873] tpg source WxH: 320x240 (Y'CbCr) [ 389.807126][ T9873] tpg field: 1 [ 389.810599][ T9873] tpg crop: (0,0)/320x240 [ 389.815416][ T9873] tpg compose: (0,0)/320x240 [ 389.820099][ T9873] tpg colorspace: 8 [ 389.824664][ T9873] tpg transfer function: 0/0 [ 389.829911][ T9873] tpg Y'CbCr encoding: 0/0 [ 389.834775][ T9873] tpg quantization: 0/0 [ 389.839253][ T9873] tpg RGB range: 0/2 [ 389.849497][ T9873] vivid-000: ================== END STATUS ================== [ 390.972332][ T2148] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 391.143441][ T2148] usb 8-1: Using ep0 maxpacket: 32 [ 391.149168][ T2148] usb 8-1: no configurations [ 391.156246][ T2148] usb 8-1: can't read configurations, error -22 [ 391.454932][ T2148] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 391.622121][ T2148] usb 8-1: Using ep0 maxpacket: 32 [ 392.214465][ T2148] usb 8-1: no configurations [ 392.249488][ T2148] usb 8-1: can't read configurations, error -22 [ 392.292808][ T2148] usb usb8-port1: attempt power cycle [ 392.681854][ T2148] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 393.618526][ T2148] usb 8-1: Using ep0 maxpacket: 32 [ 393.634724][ T2148] usb 8-1: device descriptor read/all, error -71 [ 394.658905][ T9924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.892'. [ 394.888706][ T9918] syz.8.889 (9918): drop_caches: 2 [ 396.898474][ T9944] trusted_key: encrypted_key: keylen parameter is missing [ 396.908533][ T9944] trusted_key: encrypted_key: keylen parameter is missing [ 396.920595][ T9944] nbd: must specify a device to reconfigure [ 396.947428][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 397.757738][ T5967] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 397.953551][ T5967] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 397.961986][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 397.974094][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 398.066747][ T5967] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.084823][ T5967] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.107818][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.137244][ T5967] usb 8-1: config 0 descriptor?? [ 398.227173][ T9952] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 398.683274][ T5967] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 398.756484][ T5967] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 399.655357][ T9963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.228286][ T5884] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 400.427265][ T9988] netlink: 52 bytes leftover after parsing attributes in process `syz.1.907'. [ 401.510671][ T2148] usb 8-1: USB disconnect, device number 25 [ 401.761219][ T30] audit: type=1400 audit(1759308668.699:407): avc: denied { write } for pid=9997 comm="syz.7.911" name="kcm" dev="proc" ino=4026534534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 402.062864][ T9999] syz.0.909 (9999): drop_caches: 2 [ 402.161838][ T5932] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 402.351741][ T5932] usb 2-1: device descriptor read/64, error -71 [ 402.596293][T10016] random: crng reseeded on system resumption [ 402.629705][ T5932] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 403.241904][ T5932] usb 2-1: device descriptor read/64, error -71 [ 403.421959][ T5932] usb usb2-port1: attempt power cycle [ 403.875698][ T5932] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 403.923322][ T5932] usb 2-1: device descriptor read/8, error -71 [ 404.211857][ T5932] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 404.243334][ T5932] usb 2-1: device descriptor read/8, error -71 [ 404.369037][ T5932] usb usb2-port1: unable to enumerate USB device [ 404.628534][ T5967] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 404.801902][ T5967] usb 9-1: Using ep0 maxpacket: 16 [ 404.834210][ T5898] IPVS: starting estimator thread 0... [ 405.071735][T10041] IPVS: using max 78 ests per chain, 187200 per kthread [ 406.096633][T10063] binder: 10059:10063 ioctl c0306201 200000000080 returned -14 [ 408.312406][T10073] syz.7.928: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 408.401941][T10073] CPU: 0 UID: 0 PID: 10073 Comm: syz.7.928 Not tainted syzkaller #0 PREEMPT(full) [ 408.401971][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.401981][T10073] Call Trace: [ 408.401988][T10073] [ 408.401994][T10073] dump_stack_lvl+0x16c/0x1f0 [ 408.402024][T10073] warn_alloc+0x248/0x3a0 [ 408.402054][T10073] ? __pfx_warn_alloc+0x10/0x10 [ 408.402091][T10073] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 408.402118][T10073] ? __vmalloc_node_noprof+0xad/0xf0 [ 408.402142][T10073] __vmalloc_node_range_noprof+0x1019/0x14b0 [ 408.402173][T10073] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 408.402206][T10073] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.402237][T10073] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 408.402263][T10073] vmalloc_user_noprof+0x9e/0xe0 [ 408.402283][T10073] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 408.402310][T10073] vb2_vmalloc_alloc+0x135/0x3f0 [ 408.402339][T10073] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 408.402365][T10073] __vb2_queue_alloc+0x8c6/0x1280 [ 408.402403][T10073] vb2_core_reqbufs+0xa90/0xfe0 [ 408.402437][T10073] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 408.402473][T10073] ? __pfx___might_resched+0x10/0x10 [ 408.402504][T10073] ? __mutex_lock+0x1c5/0x1060 [ 408.402528][T10073] ? avc_has_extended_perms+0x47c/0x1090 [ 408.402560][T10073] vb2_reqbufs+0x1a3/0x1f0 [ 408.402585][T10073] ? __pfx_vb2_reqbufs+0x10/0x10 [ 408.402605][T10073] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 408.402634][T10073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.402661][T10073] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 408.402686][T10073] v4l_reqbufs+0x14f/0x1e0 [ 408.402704][T10073] __video_do_ioctl+0xb3d/0xfc0 [ 408.402728][T10073] ? __might_fault+0xe3/0x190 [ 408.402753][T10073] ? __pfx___video_do_ioctl+0x10/0x10 [ 408.402783][T10073] video_usercopy+0x4cd/0x1720 [ 408.402805][T10073] ? __pfx___video_do_ioctl+0x10/0x10 [ 408.402823][T10073] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 408.402847][T10073] ? __pfx_video_usercopy+0x10/0x10 [ 408.402886][T10073] v4l2_ioctl+0x1ba/0x250 [ 408.402903][T10073] ? __pfx_v4l2_ioctl+0x10/0x10 [ 408.402924][T10073] __x64_sys_ioctl+0x18b/0x210 [ 408.402949][T10073] do_syscall_64+0xcd/0x4e0 [ 408.402971][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.402990][T10073] RIP: 0033:0x7efcddf8eec9 [ 408.403005][T10073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.403022][T10073] RSP: 002b:00007efcdee67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.403039][T10073] RAX: ffffffffffffffda RBX: 00007efcde1e6270 RCX: 00007efcddf8eec9 [ 408.403049][T10073] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000007 [ 408.403060][T10073] RBP: 00007efcde011f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.403070][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.403080][T10073] R13: 00007efcde1e6308 R14: 00007efcde1e6270 R15: 00007ffeb8254388 [ 408.403102][T10073] [ 408.403186][T10073] Mem-Info: [ 408.764563][T10073] active_anon:14989 inactive_anon:0 isolated_anon:0 [ 408.764563][T10073] active_file:18379 inactive_file:40755 isolated_file:0 [ 408.764563][T10073] unevictable:768 dirty:175 writeback:0 [ 408.764563][T10073] slab_reclaimable:7672 slab_unreclaimable:104087 [ 408.764563][T10073] mapped:35618 shmem:1367 pagetables:1703 [ 408.764563][T10073] sec_pagetables:0 bounce:0 [ 408.764563][T10073] kernel_misc_reclaimable:0 [ 408.764563][T10073] free:1288611 free_pcp:16097 free_cma:0 [ 408.834836][T10073] Node 0 active_anon:55956kB inactive_anon:0kB active_file:73516kB inactive_file:162812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142472kB dirty:700kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13308kB pagetables:6672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.868575][ T5967] usb 9-1: unable to get BOS descriptor or descriptor too short [ 408.883794][ T5967] usb 9-1: no configurations [ 408.901968][ T5967] usb 9-1: can't read configurations, error -22 [ 408.921546][T10073] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.990842][T10073] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.180843][T10073] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 409.186900][T10073] Node 0 DMA32 free:1258628kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58456kB inactive_anon:0kB active_file:73516kB inactive_file:162684kB unevictable:1536kB writepending:700kB present:3129332kB managed:2547824kB mlocked:0kB bounce:0kB free_pcp:46312kB local_pcp:28260kB free_cma:0kB [ 409.311716][T10073] lowmem_reserve[]: 0 0 0 0 0 [ 409.422147][T10073] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 409.468510][T10073] lowmem_reserve[]: 0 0 0 0 0 [ 409.661740][T10073] Node 1 Normal free:3885140kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25456kB local_pcp:15328kB free_cma:0kB [ 409.862635][T10073] lowmem_reserve[]: 0 0 0 0 0 [ 409.869934][T10073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 410.082618][ T5884] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 410.460804][T10073] Node 0 DMA32: 162*4kB (UME) 366*8kB (UME) 592*16kB (UME) 786*32kB (UME) 180*64kB (UME) 157*128kB (UME) 74*256kB (UME) 23*512kB (UME) 10*1024kB (UM) 1*2048kB (U) 280*4096kB (UM) = 1259704kB [ 410.670438][T10073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 410.721745][ T5884] usb 2-1: device descriptor read/64, error -71 [ 410.728089][T10073] Node 1 Normal: 181*4kB (UE) 46*8kB (UME) 37*16kB (UME) 56*32kB (UME) 21*64kB (UME) 9*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3885140kB [ 410.891518][T10073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.991828][T10073] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 411.002785][T10073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.015192][T10073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 411.064028][ T30] audit: type=1400 audit(1759308678.089:408): avc: denied { create } for pid=10103 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 411.124767][ T5884] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 411.197616][T10073] 60496 total pagecache pages [ 411.221792][T10073] 0 pages in swap cache [ 411.248225][T10073] Free swap = 124996kB [ 411.267360][T10073] Total swap = 124996kB [ 411.271934][ T30] audit: type=1400 audit(1759308678.089:409): avc: denied { setopt } for pid=10103 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 411.291810][ T30] audit: type=1400 audit(1759308678.109:410): avc: denied { bind } for pid=10103 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 411.310918][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.371797][ T5884] usb 2-1: device descriptor read/64, error -71 [ 411.402802][T10073] 2097051 pages RAM [ 411.423499][T10073] 0 pages HighMem/MovableOnly [ 411.431945][T10073] 428453 pages reserved [ 411.520512][T10073] 0 pages cma reserved [ 411.555844][ T5884] usb usb2-port1: attempt power cycle [ 412.212103][ T30] audit: type=1400 audit(1759308679.259:411): avc: denied { bind } for pid=10113 comm="syz.8.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.311747][ T5884] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 412.357753][ T30] audit: type=1400 audit(1759308679.259:412): avc: denied { setopt } for pid=10113 comm="syz.8.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.377843][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.443947][ T5884] usb 2-1: device descriptor read/8, error -71 [ 412.772160][ T5884] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 412.826713][ T5884] usb 2-1: device descriptor read/8, error -71 [ 413.104221][ T5884] usb usb2-port1: unable to enumerate USB device [ 414.601453][T10151] binder: 10150:10151 unknown command 0 [ 414.608471][T10151] binder: 10150:10151 ioctl c0306201 200000000080 returned -22 [ 414.624176][T10151] binder: 10150:10151 ioctl 4018620d 0 returned -22 [ 414.909658][T10168] netlink: 'syz.0.958': attribute type 2 has an invalid length. [ 415.022311][ T5898] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 415.270088][ T5898] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 415.278259][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 415.291268][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 415.419538][ T5898] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.992745][ T5898] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.011865][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.026947][ T5898] usb 9-1: config 0 descriptor?? [ 416.042141][T10156] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 416.483468][ T5898] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 416.577565][ T5898] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 416.737378][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.960'. [ 417.493843][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.960'. [ 417.565135][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.960'. [ 417.860572][ T30] audit: type=1400 audit(1759308684.919:413): avc: denied { ioctl } for pid=10197 comm="syz.4.963" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 417.885969][T10203] input: syz1 as /devices/virtual/input/input49 [ 418.553871][ T2148] usb 9-1: USB disconnect, device number 5 [ 420.148107][T10220] binder: 10214:10220 ioctl c0306201 200000000080 returned -14 [ 422.599839][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 422.852028][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 424.796029][T10294] binder: 10285:10294 ioctl c0306201 200000000080 returned -14 [ 425.145058][T10299] binder: 10295:10299 ioctl c0306201 200000000080 returned -14 [ 426.701793][ T2148] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 426.798892][T10325] random: crng reseeded on system resumption [ 426.881842][ T2148] usb 8-1: Using ep0 maxpacket: 16 [ 430.152140][T10357] binder: 10352:10357 ioctl c0306201 200000000080 returned -14 [ 430.420754][ T2148] usb 8-1: unable to get BOS descriptor or descriptor too short [ 430.434567][ T2148] usb 8-1: no configurations [ 430.476726][ T2148] usb 8-1: can't read configurations, error -22 [ 431.983300][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.713031][ T30] audit: type=1400 audit(1759308699.779:414): avc: denied { create } for pid=10378 comm="syz.8.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 432.826734][ T30] audit: type=1400 audit(1759308699.809:415): avc: denied { write } for pid=10378 comm="syz.8.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 433.051833][ T2148] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 433.332353][ T2148] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.361053][ T2148] usb 8-1: config 0 has no interfaces? [ 433.460985][ T2148] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 433.567408][ T2148] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.682603][ T2148] usb 8-1: config 0 descriptor?? [ 434.222074][T10399] kvm: kvm [10398]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1e0000f1e4 [ 434.311455][T10399] kvm: kvm [10398]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x1e0000b1e4 [ 434.649734][T10414] random: crng reseeded on system resumption [ 435.159247][ T30] audit: type=1400 audit(1759308702.149:416): avc: denied { override_creds } for pid=10416 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 435.810762][ T2148] usb 8-1: USB disconnect, device number 28 [ 437.262393][ T5932] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 437.471788][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 437.666796][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.692711][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.716157][ T5932] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 437.728113][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.752299][ T5932] usb 2-1: Product: syz [ 437.756498][ T5932] usb 2-1: Manufacturer: syz [ 437.781496][ T5932] usb 2-1: SerialNumber: syz [ 437.846385][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.898588][ T5932] usb 2-1: config 0 descriptor?? [ 439.457418][ T5932] usb 2-1: USB disconnect, device number 29 [ 439.576118][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.582519][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.769596][ T5833] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 439.991827][ T5932] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 440.232392][ T5833] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 440.240690][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 440.251757][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 440.258749][ T5932] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 440.261690][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 440.278209][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.319627][ T5833] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.351898][ T5833] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.361045][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.369942][ T5932] usb 2-1: config 0 descriptor?? [ 440.383626][ T5932] gspca_main: sunplus-2.14.0 probing 041e:400b [ 440.452701][ T5833] usb 8-1: config 0 descriptor?? [ 440.462798][T10467] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 440.736703][T10478] random: crng reseeded on system resumption [ 440.945711][T10480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.958175][ T5833] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 440.979413][ T5833] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 440.982066][T10480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.129546][ T5932] gspca_sunplus: reg_w_riv err -110 [ 441.135406][ T5932] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 441.775736][ T5932] usb 8-1: USB disconnect, device number 29 [ 442.303446][T10428] Set syz1 is full, maxelem 65536 reached [ 442.612425][ T5954] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 442.773199][ T5954] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 442.784904][ T5954] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 442.802939][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 442.816092][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 442.827102][ T5954] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.846796][ T5954] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 442.856520][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.865558][ T5954] usb 9-1: Product: syz [ 442.869993][ T5954] usb 9-1: Manufacturer: syz [ 442.875442][ T5954] usb 9-1: SerialNumber: syz [ 442.906686][ T5954] usb 9-1: config 0 descriptor?? [ 442.934373][ T5954] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input51 [ 443.246949][ T5932] usb 9-1: USB disconnect, device number 6 [ 443.384575][ T5954] usb 2-1: USB disconnect, device number 30 [ 445.434268][T10528] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1043'. [ 448.653498][ T5954] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 449.211804][ T5954] usb 9-1: unable to get BOS descriptor or descriptor too short [ 449.315761][ T5954] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 449.348625][ T5954] usb 9-1: config 1 interface 1 has no altsetting 0 [ 451.050159][ T5954] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.059299][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.193639][ T30] audit: type=1400 audit(1759308718.179:417): avc: denied { bind } for pid=10597 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.322782][ T5954] usb 9-1: Product: syz [ 451.326993][ T5954] usb 9-1: Manufacturer: syz [ 451.331588][ T5954] usb 9-1: SerialNumber: syz [ 452.019488][ T5954] usb 9-1: can't set config #1, error -71 [ 452.063772][ T5954] usb 9-1: USB disconnect, device number 7 [ 453.032814][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 455.327385][ T3009] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.515700][T10654] random: crng reseeded on system resumption [ 455.670941][ T3009] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.928065][ T3009] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.484528][T10581] Set syz1 is full, maxelem 65536 reached [ 457.091877][ T5898] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 457.327660][ T3009] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.355073][ T5898] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.457537][ T5898] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.501559][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.636564][ T5898] usb 8-1: Product: syz [ 457.640809][ T5898] usb 8-1: Manufacturer: syz [ 457.685728][ T5898] usb 8-1: SerialNumber: syz [ 457.715038][ T5898] usb 8-1: config 0 descriptor?? [ 457.941254][ T5898] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 457.999951][ T3009] bridge_slave_1: left allmulticast mode [ 458.175306][ T3009] bridge_slave_1: left promiscuous mode [ 458.181060][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.247974][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.394114][ T3009] bridge_slave_0: left allmulticast mode [ 458.399902][ T3009] bridge_slave_0: left promiscuous mode [ 458.410132][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.418509][T10689] netlink: 'syz.7.1078': attribute type 2 has an invalid length. [ 459.894492][ T5967] usb 8-1: USB disconnect, device number 30 [ 460.874478][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.888519][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.902687][ T3009] bond0 (unregistering): Released all slaves [ 461.161112][ T3009] team0: Port device bond1 removed [ 461.168039][ T3009] bond1 (unregistering): Released all slaves [ 463.051979][ T3009] hsr_slave_0: left promiscuous mode [ 463.123570][ T3009] hsr_slave_1: left promiscuous mode [ 463.152273][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.159712][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.581848][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.617550][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.752995][ T5954] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 463.756813][ T3009] veth1_macvtap: left promiscuous mode [ 463.870790][ T3009] veth0_macvtap: left promiscuous mode [ 463.891325][ T3009] veth1_vlan: left promiscuous mode [ 463.897148][ T3009] veth0_vlan: left promiscuous mode [ 463.925375][ T5954] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.190989][ T5954] usb 9-1: config 0 has no interfaces? [ 464.199784][ T5954] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 464.208955][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.410195][ T5954] usb 9-1: config 0 descriptor?? [ 465.228483][T10807] binder: 10800:10807 ioctl c0306201 200000000080 returned -14 [ 465.832104][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 465.942473][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 467.981035][ T30] audit: type=1400 audit(1759308735.009:418): avc: denied { create } for pid=10816 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 468.012086][ T5932] usb 9-1: USB disconnect, device number 8 [ 470.541752][ T5932] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 470.711667][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 470.726978][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.742545][ T3009] IPVS: stop unused estimator thread 0... [ 470.751538][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.762234][ T5932] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 470.771355][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.340727][ T5932] usb 5-1: config 0 descriptor?? [ 472.804898][T10879] trusted_key: encrypted_key: keylen parameter is missing [ 472.866314][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 472.991690][ T2148] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 473.057203][ T5932] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 473.538685][ T2148] usb 8-1: device descriptor read/64, error -71 [ 473.629015][ T5932] usb 5-1: USB disconnect, device number 19 [ 473.832430][ T2148] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 473.991742][ T2148] usb 8-1: device descriptor read/64, error -71 [ 474.114406][ T2148] usb usb8-port1: attempt power cycle [ 474.411351][ T5954] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 474.487378][ T2148] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 474.617369][ T5954] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 474.628913][ T2148] usb 8-1: device descriptor read/8, error -71 [ 474.637207][ T5954] usb 9-1: config 0 has no interface number 0 [ 474.677609][ T5954] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 474.718427][ T5954] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 474.761503][ T5954] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 474.770950][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.792855][ T5954] usb 9-1: Product: syz [ 474.797506][ T5954] usb 9-1: Manufacturer: syz [ 474.802739][ T5954] usb 9-1: SerialNumber: syz [ 474.831337][ T5954] usb 9-1: config 0 descriptor?? [ 474.871696][ T2148] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 474.902437][ T2148] usb 8-1: device descriptor read/8, error -71 [ 475.012264][ T2148] usb usb8-port1: unable to enumerate USB device [ 475.099686][ T5954] usbtouchscreen 9-1:0.214: Failed to read FW rev: -71 [ 475.112717][T10910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.161914][ T5954] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 475.388221][ T5954] usb 9-1: USB disconnect, device number 9 [ 477.291772][T10977] vivid-000: ================= START STATUS ================= [ 477.299693][T10977] vivid-000: Test Pattern: 75% Colorbar [ 477.306060][T10977] vivid-000: Fill Percentage of Frame: 100 [ 477.312679][T10977] vivid-000: Horizontal Movement: No Movement [ 477.318960][T10977] vivid-000: Vertical Movement: No Movement [ 477.325635][T10977] vivid-000: OSD Text Mode: All [ 477.361800][T10977] vivid-000: Show Border: false [ 477.446319][T10977] vivid-000: Show Square: false [ 477.451424][T10977] vivid-000: Sensor Flipped Horizontally: false [ 477.471339][T10977] vivid-000: Sensor Flipped Vertically: false [ 477.495244][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 477.584323][T10977] vivid-000: Insert SAV Code in Image: false [ 477.614121][T10977] vivid-000: Insert EAV Code in Image: false [ 477.650540][T10977] vivid-000: Insert Video Guard Band: false [ 477.691966][T10977] vivid-000: Reduced Framerate: false [ 477.718505][T10977] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0 [ 477.736658][T10977] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 477.771798][T10977] vivid-000: Enable Capture Cropping: true [ 477.817101][T10977] vivid-000: Enable Capture Composing: true [ 477.893467][T10977] vivid-000: Enable Capture Scaler: true [ 477.925751][T10977] vivid-000: Timestamp Source: End of Frame [ 478.026208][T10991] trusted_key: encrypted_key: insufficient parameters specified [ 478.067028][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1144'. [ 478.080889][T10977] vivid-000: Colorspace: sRGB [ 478.088138][T10977] vivid-000: Transfer Function: Default [ 478.096267][T10977] vivid-000: Y'CbCr Encoding: Default [ 478.103223][T10977] vivid-000: HSV Encoding: Hue 0-179 [ 478.108590][T10977] vivid-000: Quantization: Default [ 478.124515][T10977] vivid-000: Apply Alpha To Red Only: false [ 478.130578][T10977] vivid-000: Standard Aspect Ratio: 14x9 [ 478.137344][T10977] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 478.145612][T10977] vivid-000: DV Timings: 640x480p59 inactive [ 478.161265][T10977] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 478.211774][ T5954] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 478.341726][ T5954] usb 5-1: device descriptor read/64, error -71 [ 478.352102][T10977] vivid-000: Maximum EDID Blocks: 2 [ 478.448018][T10977] vivid-000: Limited RGB Range (16-235): false [ 478.455607][T10977] vivid-000: Rx RGB Quantization Range: Automatic [ 478.466820][T10977] vivid-000: Power Present: 0x00000001 [ 478.472792][T10977] tpg source WxH: 320x240 (Y'CbCr) [ 478.479718][T10977] tpg field: 1 [ 478.484103][T10977] tpg crop: (0,0)/320x240 [ 478.490676][T10977] tpg compose: (0,0)/320x240 [ 478.543277][T10977] tpg colorspace: 8 [ 478.630538][T10977] tpg transfer function: 0/0 [ 478.806671][ T5954] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 478.951690][ T5954] usb 5-1: device descriptor read/64, error -71 [ 479.069201][ T5954] usb usb5-port1: attempt power cycle [ 479.170814][T10977] tpg Y'CbCr encoding: 0/0 [ 479.177340][T10977] tpg quantization: 0/0 [ 479.182736][T10977] tpg RGB range: 0/2 [ 479.188170][T10977] vivid-000: ================== END STATUS ================== [ 479.441703][ T5954] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 479.468567][ T5954] usb 5-1: device descriptor read/8, error -71 [ 479.764342][ T5954] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 479.807290][ T5954] usb 5-1: device descriptor read/8, error -71 [ 479.931458][ T5954] usb usb5-port1: unable to enumerate USB device [ 481.701706][ T5967] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 481.952321][ T5967] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.976711][ T5967] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 481.995310][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.004935][ T5967] usb 2-1: Product: syz [ 482.009072][ T5967] usb 2-1: Manufacturer: syz [ 482.033642][ T5967] usb 2-1: SerialNumber: syz [ 482.170317][ T5967] usb 2-1: config 0 descriptor?? [ 482.239173][ T5967] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 482.272763][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.653833][T11041] random: crng reseeded on system resumption [ 482.868354][T11053] netlink: 'syz.1.1154': attribute type 2 has an invalid length. [ 483.032714][ T5884] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 483.383780][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 483.402886][ T5884] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 483.412535][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.420655][ T5884] usb 5-1: Product: syz [ 483.511696][ T5884] usb 5-1: Manufacturer: syz [ 483.514867][T11066] vivid-000: ================= START STATUS ================= [ 483.543673][ T5884] usb 5-1: SerialNumber: syz [ 483.553252][T11066] vivid-000: Test Pattern: 75% Colorbar [ 483.559702][T11066] vivid-000: Fill Percentage of Frame: 100 [ 483.567485][T11066] vivid-000: Horizontal Movement: No Movement [ 483.577087][T11066] vivid-000: Vertical Movement: No Movement [ 483.593962][T11066] vivid-000: OSD Text Mode: All [ 483.599654][T11066] vivid-000: Show Border: false [ 483.605267][T11066] vivid-000: Show Square: false [ 483.610961][T11066] vivid-000: Sensor Flipped Horizontally: false [ 483.618141][T11066] vivid-000: Sensor Flipped Vertically: false [ 483.624364][T11066] vivid-000: Insert SAV Code in Image: false [ 483.631369][T11066] vivid-000: Insert EAV Code in Image: false [ 483.637834][T11066] vivid-000: Insert Video Guard Band: false [ 483.644214][T11066] vivid-000: Reduced Framerate: false [ 483.649956][T11066] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0 [ 483.658301][T11066] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 483.671658][T11066] vivid-000: Enable Capture Cropping: true [ 483.682182][T11066] vivid-000: Enable Capture Composing: true [ 483.708507][T11066] vivid-000: Enable Capture Scaler: true [ 483.714601][T11066] vivid-000: Timestamp Source: End of Frame [ 483.723344][T11066] vivid-000: Colorspace: sRGB [ 483.728210][T11066] vivid-000: Transfer Function: Default [ 483.736011][ T5884] usb 5-1: config 0 descriptor?? [ 483.754507][T11066] vivid-000: Y'CbCr Encoding: Default [ 483.761057][T11066] vivid-000: HSV Encoding: Hue 0-179 [ 483.766636][T11066] vivid-000: Quantization: Default [ 483.772130][T11066] vivid-000: Apply Alpha To Red Only: false [ 483.778306][T11066] vivid-000: Standard Aspect Ratio: 14x9 [ 483.814948][T11066] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 483.840765][T11066] vivid-000: DV Timings: 640x480p59 inactive [ 483.846988][T11066] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 483.858102][T11066] vivid-000: Maximum EDID Blocks: 2 [ 483.863607][T11066] vivid-000: Limited RGB Range (16-235): false [ 483.870272][T11066] vivid-000: Rx RGB Quantization Range: Automatic [ 483.879729][T11066] vivid-000: Power Present: 0x00000001 [ 483.885987][T11066] tpg source WxH: 320x240 (Y'CbCr) [ 483.891754][T11066] tpg field: 1 [ 483.906709][T11066] tpg crop: (0,0)/320x240 [ 483.911588][T11066] tpg compose: (0,0)/320x240 [ 483.916431][ T5884] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 483.925487][T11066] tpg colorspace: 8 [ 483.930002][T11066] tpg transfer function: 0/0 [ 483.935773][T11066] tpg Y'CbCr encoding: 0/0 [ 483.940737][T11066] tpg quantization: 0/0 [ 483.945357][T11066] tpg RGB range: 0/2 [ 483.950285][T11066] vivid-000: ================== END STATUS ================== [ 484.117712][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.652623][ C1] ------------[ cut here ]------------ [ 485.658394][ C1] ODEBUG: free active (active state 0) object: ffff8880575c1c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 485.671649][ C1] WARNING: CPU: 1 PID: 3009 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 485.681130][ C1] Modules linked in: [ 485.685186][ C1] CPU: 1 UID: 0 PID: 3009 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 485.694655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.704743][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 485.711524][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 485.717362][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 18 d0 8b 4c 89 e6 48 c7 c7 20 0d d0 8b e8 4f 1a d3 fc 90 <0f> 0b 90 90 58 83 05 86 21 b9 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 485.737001][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010286 [ 485.743095][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8179a5b8 [ 485.751068][ C1] RDX: ffff88802ffd2480 RSI: ffffffff8179a5c5 RDI: 0000000000000001 [ 485.759056][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 485.767045][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bd013c0 [ 485.775050][ C1] R13: ffffffff8b6ff940 R14: ffffffff8a3dcdf0 R15: ffffc90000a08b38 [ 485.783054][ C1] FS: 0000000000000000(0000) GS:ffff888124f71000(0000) knlGS:0000000000000000 [ 485.792062][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.798651][ C1] CR2: 00007ffcc5be6df0 CR3: 000000000df82000 CR4: 00000000003526f0 [ 485.806617][ C1] Call Trace: [ 485.809887][ C1] [ 485.812727][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 485.818360][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 485.824154][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 485.829675][ C1] ? __mod_timer+0x8f2/0xd30 [ 485.834255][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 485.840306][ C1] kfree+0x28f/0x4d0 [ 485.844186][ C1] ? lock_acquire+0x179/0x350 [ 485.848837][ C1] ? rose_timer_expiry+0x53f/0x630 [ 485.853932][ C1] rose_timer_expiry+0x53f/0x630 [ 485.858844][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 485.864284][ C1] call_timer_fn+0x19a/0x620 [ 485.868846][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 485.873943][ C1] ? mark_held_locks+0x49/0x80 [ 485.878678][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 485.884132][ C1] __run_timers+0x6ef/0x960 [ 485.888610][ C1] ? __pfx___run_timers+0x10/0x10 [ 485.893624][ C1] run_timer_base+0x114/0x190 [ 485.898275][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 485.903469][ C1] run_timer_softirq+0x1a/0x40 [ 485.908206][ C1] handle_softirqs+0x216/0x8e0 [ 485.912982][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 485.918255][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 485.923523][ C1] ? nsim_dev_trap_report_work+0x8b5/0xcf0 [ 485.929307][ C1] do_softirq+0xb2/0xf0 [ 485.933447][ C1] [ 485.936371][ C1] [ 485.939275][ C1] __local_bh_enable_ip+0x100/0x120 [ 485.944473][ C1] nsim_dev_trap_report_work+0x8b5/0xcf0 [ 485.950090][ C1] process_one_work+0x9cf/0x1b70 [ 485.955015][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 485.961143][ C1] ? __pfx_process_one_work+0x10/0x10 [ 485.966505][ C1] ? assign_work+0x1a0/0x250 [ 485.971084][ C1] worker_thread+0x6c8/0xf10 [ 485.975660][ C1] ? __kthread_parkme+0x19e/0x250 [ 485.980661][ C1] ? __pfx_worker_thread+0x10/0x10 [ 485.985752][ C1] kthread+0x3c5/0x780 [ 485.989792][ C1] ? __pfx_kthread+0x10/0x10 [ 485.994363][ C1] ? rcu_is_watching+0x12/0xc0 [ 485.999105][ C1] ? __pfx_kthread+0x10/0x10 [ 486.003691][ C1] ret_from_fork+0x56a/0x730 [ 486.008255][ C1] ? __pfx_kthread+0x10/0x10 [ 486.012843][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.017608][ C1] [ 486.020601][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.027852][ C1] CPU: 1 UID: 0 PID: 3009 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 486.037277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.047304][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 486.054058][ C1] Call Trace: [ 486.057319][ C1] [ 486.060153][ C1] dump_stack_lvl+0x3d/0x1f0 [ 486.064720][ C1] vpanic+0x6e8/0x7a0 [ 486.068674][ C1] ? __pfx_vpanic+0x10/0x10 [ 486.073172][ C1] ? debug_print_object+0x1a2/0x2b0 [ 486.078358][ C1] panic+0xca/0xd0 [ 486.082064][ C1] ? __pfx_panic+0x10/0x10 [ 486.086465][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 486.091547][ C1] check_panic_on_warn+0xab/0xb0 [ 486.096471][ C1] __warn+0xf6/0x3c0 [ 486.100337][ C1] ? debug_print_object+0x1a2/0x2b0 [ 486.105512][ C1] report_bug+0x3c3/0x580 [ 486.109814][ C1] ? debug_print_object+0x1a2/0x2b0 [ 486.115000][ C1] handle_bug+0x184/0x210 [ 486.119306][ C1] exc_invalid_op+0x17/0x50 [ 486.123783][ C1] asm_exc_invalid_op+0x1a/0x20 [ 486.128603][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 486.134419][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 18 d0 8b 4c 89 e6 48 c7 c7 20 0d d0 8b e8 4f 1a d3 fc 90 <0f> 0b 90 90 58 83 05 86 21 b9 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 486.154013][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010286 [ 486.160064][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8179a5b8 [ 486.168006][ C1] RDX: ffff88802ffd2480 RSI: ffffffff8179a5c5 RDI: 0000000000000001 [ 486.175949][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 486.183904][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bd013c0 [ 486.191848][ C1] R13: ffffffff8b6ff940 R14: ffffffff8a3dcdf0 R15: ffffc90000a08b38 [ 486.199793][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 486.205405][ C1] ? __warn_printk+0x198/0x350 [ 486.210152][ C1] ? __warn_printk+0x1a5/0x350 [ 486.214889][ C1] ? debug_print_object+0x1a1/0x2b0 [ 486.220063][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 486.225670][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 486.231465][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 486.236982][ C1] ? __mod_timer+0x8f2/0xd30 [ 486.241555][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 486.247598][ C1] kfree+0x28f/0x4d0 [ 486.251469][ C1] ? lock_acquire+0x179/0x350 [ 486.256116][ C1] ? rose_timer_expiry+0x53f/0x630 [ 486.261724][ C1] rose_timer_expiry+0x53f/0x630 [ 486.266632][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 486.272062][ C1] call_timer_fn+0x19a/0x620 [ 486.276638][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 486.281724][ C1] ? mark_held_locks+0x49/0x80 [ 486.286457][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 486.291889][ C1] __run_timers+0x6ef/0x960 [ 486.296367][ C1] ? __pfx___run_timers+0x10/0x10 [ 486.301382][ C1] run_timer_base+0x114/0x190 [ 486.306049][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 486.311232][ C1] run_timer_softirq+0x1a/0x40 [ 486.315977][ C1] handle_softirqs+0x216/0x8e0 [ 486.320741][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 486.325999][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 486.331253][ C1] ? nsim_dev_trap_report_work+0x8b5/0xcf0 [ 486.337035][ C1] do_softirq+0xb2/0xf0 [ 486.341170][ C1] [ 486.344075][ C1] [ 486.346979][ C1] __local_bh_enable_ip+0x100/0x120 [ 486.352154][ C1] nsim_dev_trap_report_work+0x8b5/0xcf0 [ 486.357793][ C1] process_one_work+0x9cf/0x1b70 [ 486.362729][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 486.368864][ C1] ? __pfx_process_one_work+0x10/0x10 [ 486.374214][ C1] ? assign_work+0x1a0/0x250 [ 486.378777][ C1] worker_thread+0x6c8/0xf10 [ 486.383367][ C1] ? __kthread_parkme+0x19e/0x250 [ 486.388390][ C1] ? __pfx_worker_thread+0x10/0x10 [ 486.393495][ C1] kthread+0x3c5/0x780 [ 486.397557][ C1] ? __pfx_kthread+0x10/0x10 [ 486.402137][ C1] ? rcu_is_watching+0x12/0xc0 [ 486.406888][ C1] ? __pfx_kthread+0x10/0x10 [ 486.411458][ C1] ret_from_fork+0x56a/0x730 [ 486.416041][ C1] ? __pfx_kthread+0x10/0x10 [ 486.420618][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.425363][ C1] [ 486.428574][ C1] Kernel Offset: disabled [ 486.432885][ C1] Rebooting in 86400 seconds..