last executing test programs: 17.62248807s ago: executing program 4 (id=5154): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xf54) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2b00, 0x12) socket$kcm(0x10, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) 13.455149751s ago: executing program 4 (id=5161): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000680)=0x7fff0000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0xdb, 0x0, '\x00', 0x5c8d}) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x251, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050ff9ff010a1003020c000821f0f3cbe89fa7495f4f"], 0x4, [{0xa7, &(0x7f0000000cc0)=ANY=[@ANYBLOB]}, {0x27, &(0x7f0000000e80)=ANY=[]}, {0x78, &(0x7f0000000d80)=@string={0x78, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 12.04293847s ago: executing program 2 (id=5162): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$dsp(r1, &(0x7f0000001080)="4a13379082a2f5fabc1e6df568c1342336dfdc3afc845ff78fc0bc807f162231f681a9aa9602d9488daaea231b5a803ce8c5ae0dadfd40736290d70210f2a11df551586d84a6bcf95fe86495499092d78fb5e3cbea301561", 0x58) 11.799542236s ago: executing program 1 (id=5163): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$dsp(r1, &(0x7f0000001080)="4a13379082a2f5fabc1e6df568c1342336dfdc3afc845ff78fc0bc807f162231f681a9aa9602d9488daaea231b5a803ce8c5ae0dadfd40736290d70210f2a11df551586d84a6bcf95fe86495499092d78fb5e3cbea301561", 0x58) 11.706663194s ago: executing program 2 (id=5166): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000680)=0x7fff0000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0xdb, 0x0, '\x00', 0x5c8d}) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x251, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050ff9ff010a1003020c000821f0f3cbe89fa7495f4f"], 0x4, [{0xa7, &(0x7f0000000cc0)=ANY=[@ANYBLOB]}, {0x27, &(0x7f0000000e80)=ANY=[]}, {0x78, &(0x7f0000000d80)=@string={0x78, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 11.588019161s ago: executing program 1 (id=5168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000100)={"09db1271593e5621d2dea10911f3adb53a553fa4f304eb9d397f4bf9af35", 0x1, 0x1, 0x1, 0x5, 0xffff, 0x5, 0x1, 0x5, [0x7, 0x0, 0x5, 0x1, 0xfffffe01, 0xfffffffe, 0x80000003, 0x6, 0x400, 0x9, 0xa, 0xfffffffb, 0x40, 0x6, 0x2, 0x2, 0xb, 0xb, 0x6]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) r5 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) 10.758453401s ago: executing program 0 (id=5169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000100)={"09db1271593e5621d2dea10911f3adb53a553fa4f304eb9d397f4bf9af35", 0x1, 0x1, 0x1, 0x5, 0xffff, 0x5, 0x1, 0x5, [0x7, 0x0, 0x5, 0x1, 0xfffffe01, 0xfffffffe, 0x80000003, 0x6, 0x400, 0x9, 0xa, 0xfffffffb, 0x40, 0x6, 0x2, 0x2, 0xb, 0xb, 0x6]}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) 10.318150614s ago: executing program 4 (id=5171): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10001, 0x0, 0x6, 0x9, 0xfffffe0000000001, 0xfa13, 0x4}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xc) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) fsopen(0x0, 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x3000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) shmctl$IPC_RMID(r3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000c40)}], 0x1}, 0x4) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000500)={0x0, @sco, @qipcrtr={0x2a, 0x3, 0x8000}, @llc={0x1a, 0x323, 0x1, 0x8, 0x7, 0x40, @multicast}, 0x4, 0x0, 0x0, 0x0, 0x8000, &(0x7f00000002c0)='netdevsim0\x00', 0x2, 0x495, 0x2}) 8.601028264s ago: executing program 2 (id=5172): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582"], 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x4, 0x8, "2aae147572dbfc8f"}}}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000200000000000000022122af0e4ccfb7b3cada00", [0x0, 0x2000000000001]}}) close_range(r0, 0xffffffffffffffff, 0x0) 7.403718951s ago: executing program 0 (id=5174): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x21}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) io_setup(0x4, 0x0) io_destroy(0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) keyctl$revoke(0x3, r3) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) 7.302591947s ago: executing program 1 (id=5175): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r5, 0x303, 0x80000000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) 7.210338262s ago: executing program 4 (id=5176): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x2) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) sendfile(r4, r3, 0x0, 0x4) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) recvmsg$can_bcm(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/173, 0xad}], 0x5, &(0x7f0000000840)=""/173, 0xad}, 0x40002000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0x4, 0x5, 0x1) 7.1797819s ago: executing program 3 (id=5177): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$dsp(r1, &(0x7f0000001080)="4a13379082a2f5fabc1e6df568c1342336dfdc3afc845ff78fc0bc807f162231f681a9aa9602d9488daaea231b5a803ce8c5ae0dadfd40736290d70210f2a11df551586d84a6bcf95fe86495499092d78fb5e3cbea301561", 0x58) 6.876484311s ago: executing program 3 (id=5178): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xf54) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2b00, 0x12) socket$kcm(0x10, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) 5.833040032s ago: executing program 0 (id=5179): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x53, 0xffffffffffffffff, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getflags(r2, 0x408) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[]) memfd_secret(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 5.202428223s ago: executing program 2 (id=5180): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2b00, 0x12) socket$kcm(0x10, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) 5.13767146s ago: executing program 3 (id=5181): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000680)=0x7fff0000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0xdb, 0x0, '\x00', 0x5c8d}) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x251, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050ff9ff010a1003020c000821f0f3cbe89fa7495f4f"], 0x4, [{0xa7, &(0x7f0000000cc0)=ANY=[@ANYBLOB]}, {0x27, &(0x7f0000000e80)=ANY=[]}, {0x78, &(0x7f0000000d80)=@string={0x78, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.33032897s ago: executing program 0 (id=5182): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$dsp(r1, &(0x7f0000001080)="4a13379082a2f5fabc1e6df568c1342336dfdc3afc845ff78fc0bc807f162231f681a9aa9602d9488daaea231b5a803ce8c5ae0dadfd40736290d70210f2a11df551586d84a6bcf95fe86495499092d78fb5e3cbea301561", 0x58) 4.21551575s ago: executing program 1 (id=5183): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000680)=0x7fff0000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0xdb, 0x0, '\x00', 0x5c8d}) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x251, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050ff9ff010a1003020c000821f0f3cbe89fa7495f4f"], 0x4, [{0xa7, &(0x7f0000000cc0)=ANY=[@ANYBLOB]}, {0x27, &(0x7f0000000e80)=ANY=[]}, {0x78, &(0x7f0000000d80)=@string={0x78, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.146366094s ago: executing program 4 (id=5184): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 4.091904304s ago: executing program 2 (id=5185): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) 4.074972001s ago: executing program 0 (id=5186): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10001, 0x0, 0x6, 0x9, 0xfffffe0000000001, 0xfa13, 0x4}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xc) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) fsopen(0x0, 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x3000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) shmctl$IPC_RMID(r3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x4) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000500)={0x0, @sco, @qipcrtr={0x2a, 0x3, 0x8000}, @llc={0x1a, 0x323, 0x1, 0x8, 0x7, 0x40, @multicast}, 0x4, 0x0, 0x0, 0x0, 0x8000, &(0x7f00000002c0)='netdevsim0\x00', 0x2, 0x495, 0x2}) 3.47870252s ago: executing program 3 (id=5187): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, @vifc_lcl_ifindex=r3, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x11, 0x2, 0x300) sendmsg$inet(r4, 0x0, 0x0) unshare(0x42000000) r5 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.659402673s ago: executing program 0 (id=5188): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000680)=0x7fff0000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0xdb, 0x0, '\x00', 0x5c8d}) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x251, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050ff9ff010a1003020c000821f0f3cbe89fa7495f4f"], 0x4, [{0xa7, &(0x7f0000000cc0)=ANY=[@ANYBLOB]}, {0x27, &(0x7f0000000e80)=ANY=[]}, {0x78, &(0x7f0000000d80)=@string={0x78, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.028322071s ago: executing program 1 (id=5189): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x21}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) io_setup(0x4, 0x0) io_destroy(0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) keyctl$revoke(0x3, r3) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) 934.341029ms ago: executing program 4 (id=5190): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xf54) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2b00, 0x12) socket$kcm(0x10, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) 110.047205ms ago: executing program 1 (id=5191): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582"], 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x4, 0x8, "2aae147572dbfc8f"}}}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000200000000000000022122af0e4ccfb7b3cada00", [0x0, 0x2000000000001]}}) close_range(r0, 0xffffffffffffffff, 0x0) 109.322769ms ago: executing program 3 (id=5192): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$dsp(r1, &(0x7f0000001080)="4a13379082a2f5fabc1e6df568c1342336dfdc3afc845ff78fc0bc807f162231f681a9aa9602d9488daaea231b5a803ce8c5ae0dadfd40736290d70210f2a11df551586d84a6bcf95fe86495499092d78fb5e3cbea301561", 0x58) 19.536087ms ago: executing program 2 (id=5193): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x53, 0xffffffffffffffff, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getflags(r2, 0x408) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[]) memfd_secret(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 0s ago: executing program 3 (id=5194): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xc) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x3000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) shmctl$IPC_RMID(r3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)}, 0x4) kernel console output (not intermixed with test programs): after dequeue, screwing up backlog [ 1857.800039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.808419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.444189][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.450582][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.842784][T26393] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1858.849851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.860109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.985811][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.002421][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.880011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.888373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.919749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.928087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.874802][T26437] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4359'. [ 1861.960028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.968363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1862.999739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.008095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.040101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.048504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.057079][T23338] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1864.227791][T23338] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.255327][T23338] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1864.386091][T23338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.447793][T23338] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1864.605972][T24882] udevd[24882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1864.610023][T23338] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1864.812147][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1864.812167][ T30] audit: type=1326 audit(1760382952.577:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1864.919728][ T30] audit: type=1326 audit(1760382952.577:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1865.079745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.088195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.249859][ T30] audit: type=1326 audit(1760382952.577:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1865.288051][ T30] audit: type=1326 audit(1760382952.577:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1865.537691][ T30] audit: type=1326 audit(1760382952.577:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1865.641891][ T30] audit: type=1326 audit(1760382952.577:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1866.047210][ T30] audit: type=1326 audit(1760382952.577:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1866.073263][ T30] audit: type=1326 audit(1760382952.577:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1866.099741][ T30] audit: type=1326 audit(1760382952.577:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1866.122334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.122586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.290389][ T30] audit: type=1326 audit(1760382952.577:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26465 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1867.159722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.168067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.879011][T23344] usb 5-1: USB disconnect, device number 69 [ 1868.210053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1868.218477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1868.994676][ T5951] kworker/1:8 (5951) used greatest stack depth: 13560 bytes left [ 1869.239782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.248102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.122457][T26520] kvm: pic: non byte read [ 1870.279953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.288251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.319864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.328253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.360064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.368463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.399753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.408068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1874.440097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1874.448462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.479711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.488023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.609951][T23344] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1876.310169][T23344] usb 5-1: Using ep0 maxpacket: 8 [ 1876.341625][T23344] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1876.350965][T23344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.390029][T23344] usb 5-1: Product: syz [ 1876.394248][T23344] usb 5-1: Manufacturer: syz [ 1876.398872][T23344] usb 5-1: SerialNumber: syz [ 1876.466423][T23344] usb 5-1: config 0 descriptor?? [ 1876.520083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1876.528433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1876.684661][T23344] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1877.303615][T23344] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1877.325388][T23344] usb 5-1: USB disconnect, device number 70 [ 1877.559786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1877.568150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.610081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.618431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.639763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.648279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1880.679897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1880.688128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.719774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.728271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.760040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.768408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.799777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.808298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1884.839973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1884.848277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.019742][T23344] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1885.351111][T23344] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 1885.389857][T23344] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 1885.459789][T23344] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 1885.564165][T23344] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1885.611262][T23344] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1885.639623][T23344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.691115][T23344] usb 5-1: config 0 descriptor?? [ 1885.879767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.888139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.003758][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1886.018335][T23344] usb 5-1: string descriptor 0 read error: -71 [ 1886.040312][T23344] usb 5-1: USB disconnect, device number 71 [ 1886.171930][T26667] GUP no longer grows the stack in syz.2.4410 (26667): 80005000-80008000 (80004000) [ 1886.211415][T26667] CPU: 0 UID: 0 PID: 26667 Comm: syz.2.4410 Not tainted syzkaller #0 PREEMPT(full) [ 1886.211446][T26667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1886.211468][T26667] Call Trace: [ 1886.211478][T26667] [ 1886.211488][T26667] dump_stack_lvl+0x189/0x250 [ 1886.211524][T26667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1886.211547][T26667] ? __pfx__printk+0x10/0x10 [ 1886.211567][T26667] ? find_vma+0xe7/0x160 [ 1886.211602][T26667] __get_user_pages+0x2470/0x2a00 [ 1886.211662][T26667] ? __gup_longterm_locked+0xc63/0x1660 [ 1886.211684][T26667] ? down_read_killable+0x1d1/0x350 [ 1886.211716][T26667] __gup_longterm_locked+0xde4/0x1660 [ 1886.211758][T26667] ? gup_fast_fallback+0x1b86/0x22d0 [ 1886.211784][T26667] gup_fast_fallback+0x1d65/0x22d0 [ 1886.211844][T26667] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1886.211876][T26667] ? is_valid_gup_args+0x11f/0x200 [ 1886.211913][T26667] ? get_user_pages_fast+0x4d/0xb0 [ 1886.211937][T26667] get_futex_key+0x938/0x1660 [ 1886.211972][T26667] ? __pfx_get_futex_key+0x10/0x10 [ 1886.211995][T26667] ? __pfx_futex_wake_mark+0x10/0x10 [ 1886.212036][T26667] futex_wake_op+0x132/0xd80 [ 1886.212080][T26667] ? __pfx_futex_wake_op+0x10/0x10 [ 1886.212125][T26667] ? __might_fault+0xb0/0x130 [ 1886.212153][T26667] do_futex+0x3bd/0x420 [ 1886.212181][T26667] ? __pfx_do_futex+0x10/0x10 [ 1886.212201][T26667] ? rcu_is_watching+0x15/0xb0 [ 1886.212231][T26667] ? __rseq_handle_notify_resume+0x384/0x1220 [ 1886.212262][T26667] __se_sys_futex_time32+0x360/0x3e0 [ 1886.212287][T26667] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 1886.212323][T26667] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1886.212348][T26667] ? rcu_is_watching+0x15/0xb0 [ 1886.212384][T26667] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1886.212410][T26667] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1886.212441][T26667] __do_fast_syscall_32+0xb6/0x2b0 [ 1886.212475][T26667] ? lockdep_hardirqs_on+0x9c/0x150 [ 1886.212502][T26667] do_fast_syscall_32+0x34/0x80 [ 1886.212527][T26667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1886.212562][T26667] RIP: 0023:0xf7f26539 [ 1886.212590][T26667] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1886.212611][T26667] RSP: 002b:00000000f53f555c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1886.212635][T26667] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 0000000000000005 [ 1886.212651][T26667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080004000 [ 1886.212665][T26667] RBP: 00000000a3020000 R08: 0000000000000000 R09: 0000000000000000 [ 1886.212679][T26667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1886.212692][T26667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1886.212726][T26667] [ 1886.920039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.928484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.008243][T26681] netlink: 'syz.3.4401': attribute type 21 has an invalid length. [ 1887.016308][T26681] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4401'. [ 1887.030128][T26681] netlink: 'syz.3.4401': attribute type 21 has an invalid length. [ 1887.038134][T26681] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4401'. [ 1887.106142][T26683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4400'. [ 1887.115523][T26683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4400'. [ 1887.127828][T26683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4400'. [ 1887.959771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.968085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1889.000092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1889.008444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.039793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.048224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.246454][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1892.246479][ T30] audit: type=1326 audit(1760382979.937:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1893.285317][ T30] audit: type=1326 audit(1760382979.937:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1893.603469][ T30] audit: type=1326 audit(1760382979.937:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1893.738894][ T30] audit: type=1326 audit(1760382979.937:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1893.801070][ T30] audit: type=1326 audit(1760382979.937:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1893.863267][ T30] audit: type=1326 audit(1760382979.937:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1893.919785][ T30] audit: type=1326 audit(1760382979.937:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1893.944496][ T30] audit: type=1326 audit(1760382979.937:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1893.967974][ T30] audit: type=1326 audit(1760382979.937:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1894.017548][ T30] audit: type=1326 audit(1760382979.937:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.4.4415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1900.339686][T23338] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1900.505076][T23338] usb 1-1: config 0 has no interfaces? [ 1900.517039][T23338] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1900.559264][T23338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.631536][T23338] usb 1-1: Product: syz [ 1900.635782][T23338] usb 1-1: Manufacturer: syz [ 1900.641232][T23338] usb 1-1: SerialNumber: syz [ 1900.649034][T23338] usb 1-1: config 0 descriptor?? [ 1900.788557][T26822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1900.816090][T26822] [U]  [ 1902.029683][T23323] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1902.229690][T23323] usb 2-1: Using ep0 maxpacket: 32 [ 1902.255118][T23323] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1902.263858][T23323] usb 2-1: config 0 has no interface number 0 [ 1902.279365][T23323] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1902.399897][T23323] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1902.413470][T23323] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1902.423406][T23323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.439718][T23323] usb 2-1: Product: syz [ 1902.454277][T23323] usb 2-1: Manufacturer: syz [ 1902.464433][T23323] usb 2-1: SerialNumber: syz [ 1902.487214][T23323] usb 2-1: config 0 descriptor?? [ 1902.503547][T26826] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1902.569905][T23338] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1902.732363][T23338] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1902.742470][T23338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.762393][T23338] usb 3-1: config 0 has no interfaces? [ 1902.925523][T26840] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4440'. [ 1902.966443][T23338] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1902.975984][T23338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.063313][T23338] usb 3-1: Product: syz [ 1903.067758][T23338] usb 3-1: Manufacturer: syz [ 1903.076981][T23338] usb 3-1: SerialNumber: syz [ 1903.086592][T23338] usb 3-1: config 0 descriptor?? [ 1903.267230][T23323] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 1903.318954][T23323] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 1903.335620][T23338] usb 3-1: USB disconnect, device number 72 [ 1903.402851][T23286] usb 1-1: USB disconnect, device number 80 [ 1903.465151][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.590234][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.746097][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.756559][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.851142][T23338] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1904.003097][T23323] usb 2-1: USB disconnect, device number 75 [ 1904.120953][T23323] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1904.292578][T23338] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1904.344411][T23338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.360683][T23338] usb 3-1: config 0 has no interfaces? [ 1904.385764][T23338] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1904.405351][T23338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.433308][T23338] usb 3-1: Product: ç—„èœæ®„ᆔ⨨贲炓췴ä¬å©«î’å‰æ‰½ïª‹á¤‘贂䀂碀ឈ뷊ﵤꦮ熸ꘗ笻駣 [ 1904.487737][T23338] usb 3-1: Manufacturer: 㸎盹簄àµä·¢ä®¥ê†áŒ²ë…¥á¢¬Ë…롦얽èƒç™…糧ꚯꞅህ먗﮵膈푨츑橢ê䞿⪼∇义閘䌟ꖠå°eꆙé’赩칤È텀⤒枖â´î¢»æ¥®è·¢ä‡·ê¦¼æ¼²è¯Ô¯î‡žåš¢ä¥‰ï½Žîš¡Õ°ì…랋槙ኔ郞ä±ì¿©ã•‚鞃䷹à²ê¤ªæºµç…°îª¦â·¯ [ 1904.588434][T23338] usb 3-1: SerialNumber: syz [ 1904.603307][T23338] usb 3-1: config 0 descriptor?? [ 1905.432336][T23338] usb 3-1: USB disconnect, device number 73 [ 1906.029149][T26871] fuse: Unknown parameter '0x0000000000000005' [ 1908.164815][T26903] netlink: 'syz.1.4447': attribute type 21 has an invalid length. [ 1908.173545][T26903] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1908.189684][T26903] netlink: 'syz.1.4447': attribute type 21 has an invalid length. [ 1908.197982][T26903] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1911.117360][T26923] netlink: 'syz.3.4453': attribute type 21 has an invalid length. [ 1911.125530][T26923] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4453'. [ 1911.136698][T26923] netlink: 'syz.3.4453': attribute type 10 has an invalid length. [ 1912.652392][T26955] input: syz0 as /devices/virtual/input/input58 [ 1917.881820][T26994] netlink: 'syz.3.4465': attribute type 16 has an invalid length. [ 1917.891565][T26994] netlink: 'syz.3.4465': attribute type 17 has an invalid length. [ 1918.130831][T26994] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1918.184220][T26994] bridge3: left promiscuous mode [ 1918.215880][T26994] vlan0: left promiscuous mode [ 1918.221353][T26994] bridge0: left promiscuous mode [ 1919.829909][T27026] vivid-000: ================= START STATUS ================= [ 1919.838109][T27026] vivid-000: Test Pattern: 75% Colorbar [ 1919.845101][T27026] vivid-000: Fill Percentage of Frame: 100 [ 1919.851715][T27026] vivid-000: Horizontal Movement: No Movement [ 1919.859650][T27026] vivid-000: Vertical Movement: Move Up [ 1919.867751][T27026] vivid-000: OSD Text Mode: All [ 1919.876339][T27026] vivid-000: Show Border: false [ 1919.885665][T27026] vivid-000: Show Square: false [ 1919.891524][T27026] vivid-000: Sensor Flipped Horizontally: false [ 1919.901074][T27026] vivid-000: Sensor Flipped Vertically: true [ 1919.908905][T27026] vivid-000: Insert SAV Code in Image: false [ 1919.916917][T27026] vivid-000: Insert EAV Code in Image: false [ 1919.924941][T27026] vivid-000: Insert Video Guard Band: false [ 1919.931355][T27026] vivid-000: Reduced Framerate: false [ 1919.937113][T27026] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1919.961776][T27026] vivid-000: S-Video 000-0 Is Connected To: None [ 1919.973317][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.989870][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.095246][T27026] vivid-000: Enable Capture Cropping: true [ 1920.152840][T27026] vivid-000: Enable Capture Composing: false [ 1920.694254][T27026] vivid-000: Enable Capture Scaler: true [ 1920.714484][T27026] vivid-000: Timestamp Source: End of Frame [ 1920.724145][T27026] vivid-000: Colorspace: SMPTE 170M [ 1920.729727][T27026] vivid-000: Transfer Function: None [ 1920.751654][T27026] vivid-000: Y'CbCr Encoding: Default [ 1920.757334][T27026] vivid-000: HSV Encoding: Hue 0-256 [ 1920.776168][T27026] vivid-000: Quantization: Default [ 1920.786414][T27026] vivid-000: Apply Alpha To Red Only: true [ 1920.802013][T27026] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 1920.811027][T27026] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1920.832015][T27026] vivid-000: DV Timings: 640x480p59 inactive [ 1920.919927][T27026] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1920.979114][T27026] vivid-000: Maximum EDID Blocks: 1 [ 1920.996344][T27026] vivid-000: Limited RGB Range (16-235): true [ 1921.237071][T27026] vivid-000: Rx RGB Quantization Range: Automatic [ 1921.301216][T27026] vivid-000: Power Present: 0x00000001 [ 1921.306790][T27026] tpg source WxH: 720x576 (R'G'B) [ 1921.312433][T27026] tpg field: 4 [ 1921.316256][T27026] tpg crop: (64,0)/256x576 [ 1921.329794][T27026] tpg compose: (0,0)/720x576 [ 1921.329819][T27026] tpg colorspace: 1 [ 1921.329830][T27026] tpg transfer function: 5/1 [ 1921.329844][T27026] tpg quantization: 0/2 [ 1921.329856][T27026] tpg RGB range: 0/1 [ 1921.329869][T27026] vivid-000: ================== END STATUS ================== [ 1921.510258][T27029] fuse: root generation should be zero [ 1921.827032][T27033] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1927.060955][T27086] fuse: Unknown parameter '0x0000000000000005' [ 1929.179688][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1929.179703][ T30] audit: type=1326 audit(1760383016.997:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27084 comm="syz.0.4483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1929.220705][T27116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4489'. [ 1929.259844][ T30] audit: type=1326 audit(1760383016.997:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27084 comm="syz.0.4483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1929.401799][T27118] netlink: 'syz.4.4490': attribute type 21 has an invalid length. [ 1929.417850][T27087] loop2: detected capacity change from 0 to 7 [ 1929.424365][T27118] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4490'. [ 1929.440841][T27087] Dev loop2: unable to read RDB block 7 [ 1929.449811][T27087] loop2: unable to read partition table [ 1929.456009][T27087] loop2: partition table beyond EOD, truncated [ 1929.501771][T27118] netlink: 'syz.4.4490': attribute type 10 has an invalid length. [ 1929.521828][T27087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1929.573525][T27118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.612417][T27118] bond0: (slave team0): Enslaving as an active interface with an up link [ 1930.270228][T27127] tipc: New replicast peer: 255.255.255.255 [ 1930.278474][T27127] tipc: Enabled bearer , priority 10 [ 1930.299996][T27128] input: syz0 as /devices/virtual/input/input59 [ 1930.439582][T27132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4491'. [ 1930.448762][T27132] tipc: Disabling bearer [ 1930.484431][T27130] lo: entered promiscuous mode [ 1930.557648][T27130] tunl0: entered promiscuous mode [ 1930.580297][T27130] gre0: entered promiscuous mode [ 1931.068153][T27130] gretap0: entered promiscuous mode [ 1931.090024][T27130] erspan0: entered promiscuous mode [ 1931.152586][T27130] ip_vti0: entered promiscuous mode [ 1931.175437][T27130] ip6_vti0: entered promiscuous mode [ 1931.207586][T27130] sit0: entered promiscuous mode [ 1931.228772][T27130] ip6tnl0: entered promiscuous mode [ 1931.241928][T27130] ip6gre0: entered promiscuous mode [ 1931.247664][T27130] syz_tun: entered promiscuous mode [ 1931.255262][T27130] ip6gretap0: entered promiscuous mode [ 1931.261465][T27130] bond0: entered promiscuous mode [ 1931.366185][T27130] bond_slave_0: entered promiscuous mode [ 1931.396860][T27130] bond_slave_1: entered promiscuous mode [ 1931.450485][T27130] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 1931.489075][T27130] nlmon0: entered promiscuous mode [ 1931.623986][T27130] caif0: entered promiscuous mode [ 1931.629099][T27130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1935.432744][T27177] netlink: 'syz.0.4501': attribute type 1 has an invalid length. [ 1936.005010][T23344] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1936.650006][T23344] usb 1-1: Using ep0 maxpacket: 32 [ 1936.702923][T23344] usb 1-1: config 102 has an invalid interface number: 95 but max is 2 [ 1936.748426][T23344] usb 1-1: config 102 has an invalid interface number: 209 but max is 2 [ 1936.809941][T23344] usb 1-1: config 102 has an invalid interface number: 148 but max is 2 [ 1936.838834][T23344] usb 1-1: config 102 has no interface number 0 [ 1936.869161][T23344] usb 1-1: config 102 has no interface number 1 [ 1936.929595][T23344] usb 1-1: config 102 has no interface number 2 [ 1936.943569][T23344] usb 1-1: config 102 interface 95 has no altsetting 0 [ 1937.008960][T23344] usb 1-1: config 102 interface 209 has no altsetting 0 [ 1937.085967][T23344] usb 1-1: config 102 interface 148 has no altsetting 0 [ 1937.233610][T23344] usb 1-1: New USB device found, idVendor=12d1, idProduct=d7d3, bcdDevice=fe.bd [ 1937.475069][T23344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.618242][T23344] usb 1-1: Product: syz [ 1937.724762][T23344] usb 1-1: Manufacturer: syz [ 1937.749691][T23344] usb 1-1: SerialNumber: syz [ 1937.779708][T23338] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1938.003290][T23344] usb 1-1: can't set config #102, error -71 [ 1938.034920][T23338] usb 2-1: config 0 has no interfaces? [ 1938.038318][T23344] usb 1-1: USB disconnect, device number 81 [ 1938.057594][T23338] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1938.084118][T23338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.111606][T23338] usb 2-1: Product: syz [ 1938.127718][T23338] usb 2-1: Manufacturer: syz [ 1938.137898][T23338] usb 2-1: SerialNumber: syz [ 1938.163153][T23338] usb 2-1: config 0 descriptor?? [ 1938.485818][T27192] kvm: kvm [27187]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1938.803944][T27208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4509'. [ 1940.668063][T23338] usb 2-1: USB disconnect, device number 76 [ 1941.403671][T27232] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1944.419030][T27261] fuse: Unknown parameter '0x0000000000000005' [ 1944.934352][T27271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1945.160378][T23338] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1945.320061][T23338] usb 3-1: Using ep0 maxpacket: 8 [ 1945.362962][T23338] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1945.380289][T23338] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1945.416161][T23338] usb 3-1: string descriptor 0 read error: -22 [ 1945.479936][T23338] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1945.502490][T23338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.558309][T23338] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1945.579831][T23344] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1945.644023][T23338] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1945.737633][T23338] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1945.782217][T23338] usb 3-1: media controller created [ 1945.800903][T23344] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 1945.809635][T23344] usb 2-1: config 0 has no interface number 0 [ 1945.842714][T23344] usb 2-1: config 0 interface 113 has no altsetting 0 [ 1945.893400][T23338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1945.901902][T23344] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1945.901936][T23344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.901958][T23344] usb 2-1: Product: syz [ 1945.901976][T23344] usb 2-1: Manufacturer: syz [ 1945.901993][T23344] usb 2-1: SerialNumber: syz [ 1946.063962][T23344] usb 2-1: config 0 descriptor?? [ 1947.020087][T23338] zl10353_read_register: readreg error (reg=127, ret==0) [ 1947.040538][T27288] sock: sock_timestamping_bind_phc: sock not bind to device [ 1947.056757][T27288] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 1947.851581][T23338] usb 3-1: USB disconnect, device number 74 [ 1949.728350][ C0] usb 2-1: NFC: Urb failure (status -71) [ 1949.736192][ C0] usb 2-1: NFC: Urb failure (status -71) [ 1949.746595][T23344] usb 2-1: NFC: Unable to get FW version [ 1949.765662][T23344] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -71 [ 1949.786377][T23344] usb 2-1: USB disconnect, device number 77 [ 1950.304751][T27313] fuse: Unknown parameter '0x0000000000000005' [ 1955.947766][T27376] fuse: Unknown parameter '0x0000000000000005' [ 1957.782687][T23338] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1958.314710][T23338] usb 3-1: config 0 has no interfaces? [ 1958.339747][T23338] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1958.356302][T23338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.400862][T23338] usb 3-1: Product: syz [ 1958.423243][T23338] usb 3-1: Manufacturer: syz [ 1958.459924][T23338] usb 3-1: SerialNumber: syz [ 1958.502390][T23338] usb 3-1: config 0 descriptor?? [ 1959.762799][T27394] kvm: kvm [27390]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1961.935880][T27437] netlink: 'syz.1.4559': attribute type 16 has an invalid length. [ 1961.944503][T27437] netlink: 'syz.1.4559': attribute type 17 has an invalid length. [ 1962.087963][T23323] usb 3-1: USB disconnect, device number 75 [ 1962.097590][T27437] gtp0: left promiscuous mode [ 1962.130667][T27437] gtp0: left allmulticast mode [ 1963.435387][T27437] veth5: left promiscuous mode [ 1965.069723][T23338] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1965.946031][T23338] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1965.956193][T23338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.969847][T23338] usb 2-1: Product: syz [ 1965.979619][T23338] usb 2-1: Manufacturer: syz [ 1965.985958][T23338] usb 2-1: SerialNumber: syz [ 1966.010663][T23338] usb 2-1: config 0 descriptor?? [ 1966.260764][T23338] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1969.032469][T23338] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1969.123538][T23338] usb 2-1: USB disconnect, device number 78 [ 1970.272118][T27516] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1970.395530][T27516] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1970.431011][T27516] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1970.431011][T27516] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1970.502275][T27516] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1970.519740][T27516] CUSE: DEVNAME unspecified [ 1970.524505][ T30] audit: type=1326 audit(1760383058.347:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27515 comm="syz.4.4582" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0 [ 1970.531237][T27525] netlink: 'syz.2.4584': attribute type 1 has an invalid length. [ 1970.627337][T27528] netlink: 'syz.0.4579': attribute type 16 has an invalid length. [ 1970.635474][T27528] netlink: 'syz.0.4579': attribute type 17 has an invalid length. [ 1970.690827][T27528] lo: left promiscuous mode [ 1970.696385][T27528] tunl0: left promiscuous mode [ 1970.704167][T27528] gre0: left promiscuous mode [ 1970.712351][T27528] gretap0: left promiscuous mode [ 1970.718656][T27528] erspan0: left promiscuous mode [ 1970.725569][T27528] ip_vti0: left promiscuous mode [ 1970.733524][T27528] ip6_vti0: left promiscuous mode [ 1970.740471][T27528] sit0: left promiscuous mode [ 1970.746594][T27528] ip6tnl0: left promiscuous mode [ 1970.753131][T27528] ip6gre0: left promiscuous mode [ 1970.760983][T27528] syz_tun: left promiscuous mode [ 1970.796155][T27528] ip6gretap0: left promiscuous mode [ 1970.812133][T27528] bond0: left promiscuous mode [ 1970.817168][T27528] bond_slave_0: left promiscuous mode [ 1970.823745][T27528] bond_slave_1: left promiscuous mode [ 1970.829725][T27528] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 1970.843111][T27528] nlmon0: left promiscuous mode [ 1970.850979][T27528] caif0: left promiscuous mode [ 1970.885822][T27528] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1970.908775][T27528] tipc: Resetting bearer [ 1971.052255][T27528] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1971.138873][T27528] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1971.205394][T27528] bridge4: left promiscuous mode [ 1971.973584][T27528] hsr1: left promiscuous mode [ 1972.166741][T27525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1972.442468][T27533] macvlan2: entered promiscuous mode [ 1972.459150][T27533] macvlan2: entered allmulticast mode [ 1972.481087][T27533] bond5: entered promiscuous mode [ 1972.487601][T27533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1972.586546][T27533] bond5: left promiscuous mode [ 1974.036097][T27569] input: syz0 as /devices/virtual/input/input60 [ 1976.306502][T27595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4597'. [ 1978.414802][T27615] netlink: 'syz.2.4599': attribute type 16 has an invalid length. [ 1978.423948][T27615] netlink: 'syz.2.4599': attribute type 17 has an invalid length. [ 1978.494152][T27615] sit1: left promiscuous mode [ 1978.503898][T27615] veth5: left promiscuous mode [ 1978.512967][T27615] gretap1: left promiscuous mode [ 1978.527552][T27615] ip6erspan0: left promiscuous mode [ 1978.535801][T27615] bridge1: left promiscuous mode [ 1978.549119][T27615] vlan2: left allmulticast mode [ 1978.556096][T27615] veth1: left allmulticast mode [ 1978.564898][T27615] tipc: Resetting bearer [ 1978.605992][T27615] syzkaller0: left promiscuous mode [ 1978.616205][T27615] syzkaller0: left allmulticast mode [ 1978.880453][T27615] hsr1: left promiscuous mode [ 1979.419764][T23338] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1979.497675][T27622] fuse: Unknown parameter '0x0000000000000005' [ 1979.585150][T23338] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1979.739879][T23338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.824443][T23338] usb 5-1: Product: syz [ 1979.828761][T23338] usb 5-1: Manufacturer: syz [ 1979.846835][T23338] usb 5-1: SerialNumber: syz [ 1979.888430][T23338] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1979.930889][T23338] r8152-cfgselector 5-1: config 0 descriptor?? [ 1981.325474][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.332202][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.756733][T27646] tipc: Enabled bearer , priority 10 [ 1982.068070][T23323] r8152-cfgselector 5-1: USB disconnect, device number 72 [ 1985.610988][T27682] fuse: Unknown parameter '0x0000000000000005' [ 1985.749729][T27687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1986.244740][T27689] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1993.794068][T27776] netlink: 'syz.4.4632': attribute type 16 has an invalid length. [ 1993.802220][T27776] netlink: 'syz.4.4632': attribute type 17 has an invalid length. [ 1994.248029][T27776] tipc: Resetting bearer [ 1994.967047][T27776] veth0_to_bond: left allmulticast mode [ 1995.060252][T27776] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1995.248651][T27776] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1995.337963][T27776] tipc: Resetting bearer [ 1995.384758][T27776] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 1995.444238][T27776] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 1997.469340][T27805] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.4641'. [ 1997.605313][T23323] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1997.623874][T27807] netlink: 'syz.4.4644': attribute type 1 has an invalid length. [ 1997.807575][T27807] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1998.361359][T23323] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1998.600811][T27810] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1998.649971][T23323] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1998.689752][T23323] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1998.698978][T23323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.700201][T27810] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1998.730800][T27801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1998.768380][T23323] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1998.788910][T27810] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 1999.146196][T27815] gretap2: entered promiscuous mode [ 1999.194085][T27815] bond7: (slave gretap2): making interface the new active one [ 1999.210232][T27815] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 1999.235467][T27817] macvlan4: entered promiscuous mode [ 1999.320339][T27817] macvlan4: entered allmulticast mode [ 1999.432886][T27817] bond7: entered promiscuous mode [ 1999.450514][T27817] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1999.494858][T27817] bond7: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 1999.541957][T27817] bond7: left promiscuous mode [ 2000.155274][T23338] usb 2-1: USB disconnect, device number 79 [ 2001.928852][T27851] netlink: 'syz.3.4650': attribute type 16 has an invalid length. [ 2001.960623][T27851] netlink: 'syz.3.4650': attribute type 17 has an invalid length. [ 2004.938557][T27868] fuse: Unknown parameter '0x0000000000000005' [ 2005.668783][T27879] input: syz0 as /devices/virtual/input/input61 [ 2006.217638][T27897] vivid-002: disconnect [ 2006.949352][T27897] vivid-002: reconnect [ 2014.544130][T27972] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2014.555372][T27972] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2014.615320][T27972] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4676'. [ 2015.350924][ T30] audit: type=1326 audit(1760383103.177:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2015.383443][ T30] audit: type=1326 audit(1760383103.197:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2015.652928][ T30] audit: type=1326 audit(1760383103.197:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2016.289703][ T30] audit: type=1326 audit(1760383103.197:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2016.382915][ T30] audit: type=1326 audit(1760383103.197:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2016.489677][ T30] audit: type=1326 audit(1760383103.197:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2016.587876][ T30] audit: type=1326 audit(1760383103.197:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2016.618249][ T30] audit: type=1326 audit(1760383103.197:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2016.648687][ T30] audit: type=1326 audit(1760383103.197:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2016.675537][ T30] audit: type=1326 audit(1760383103.197:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27983 comm="syz.4.4680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2027.905342][T28114] fuse: Unknown parameter '0x0000000000000005' [ 2028.830979][T23323] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2029.116447][T23323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2029.128907][T23323] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2029.547487][T23323] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2029.595596][T23323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.603988][T23323] usb 1-1: Product: syz [ 2029.614135][T23323] usb 1-1: Manufacturer: syz [ 2029.809966][T23323] usb 1-1: SerialNumber: syz [ 2031.029638][T23323] usb 1-1: reset high-speed USB device number 82 using dummy_hcd [ 2031.327280][T23323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2031.570925][T23338] usb 1-1: USB disconnect, device number 82 [ 2033.160176][T28165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2033.953836][T28165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2034.933529][T28187] vti0: entered promiscuous mode [ 2034.938569][T28187] vti0: entered allmulticast mode [ 2035.534967][T23344] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2035.859695][T23344] usb 5-1: Using ep0 maxpacket: 16 [ 2035.875263][T23344] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 2035.883813][T23344] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2035.894498][T23344] usb 5-1: config 0 has no interface number 0 [ 2035.915719][T23344] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2035.925010][T23344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.940071][T23344] usb 5-1: Product: syz [ 2035.944285][T23344] usb 5-1: Manufacturer: syz [ 2035.959698][T23344] usb 5-1: SerialNumber: syz [ 2035.986385][T23344] usb 5-1: config 0 descriptor?? [ 2038.379622][T23344] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2038.692336][T23344] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2038.708678][T23344] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2038.730306][T23344] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2038.739853][T23344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.759894][T23344] usb 2-1: Product: syz [ 2038.786607][T23344] usb 2-1: Manufacturer: syz [ 2038.799746][T26841] usb 5-1: USB disconnect, device number 73 [ 2038.819579][T23344] usb 2-1: SerialNumber: syz [ 2039.749646][T23344] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 2039.906450][T23344] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2040.135525][T23344] usb 2-1: USB disconnect, device number 80 [ 2040.376567][T28223] pimreg: entered allmulticast mode [ 2042.763325][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.779908][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.588802][T28245] bond3 (unregistering): Released all slaves [ 2046.079903][T28270] bond7 (unregistering): Released all slaves [ 2052.332810][ T814] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2052.701879][ T814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2052.716339][ T814] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.833474][ T814] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2052.854226][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.869192][ T814] usb 1-1: Product: syz [ 2052.875693][ T814] usb 1-1: Manufacturer: syz [ 2052.880797][ T814] usb 1-1: SerialNumber: syz [ 2052.911679][T28344] vivid-000: ================= START STATUS ================= [ 2052.921793][T28344] vivid-000: Test Pattern: 75% Colorbar [ 2052.935178][T28344] vivid-000: Fill Percentage of Frame: 100 [ 2052.946315][T28344] vivid-000: Horizontal Movement: No Movement [ 2052.954750][T28344] vivid-000: Vertical Movement: Move Up [ 2052.960838][T28344] vivid-000: OSD Text Mode: All [ 2052.969459][T28344] vivid-000: Show Border: false [ 2052.975444][T28344] vivid-000: Show Square: false [ 2052.980724][T28344] vivid-000: Sensor Flipped Horizontally: false [ 2052.989281][T28344] vivid-000: Sensor Flipped Vertically: true [ 2053.137251][T28344] vivid-000: Insert SAV Code in Image: false [ 2053.156475][T28344] vivid-000: Insert EAV Code in Image: false [ 2053.175755][T28344] vivid-000: Insert Video Guard Band: false [ 2053.194337][T28344] vivid-000: Reduced Framerate: false [ 2053.238565][T28344] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2053.261236][T28344] vivid-000: S-Video 000-0 Is Connected To: None [ 2053.269358][T28344] vivid-000: Enable Capture Cropping: true [ 2053.282646][T28344] vivid-000: Enable Capture Composing: false [ 2053.293773][T28344] vivid-000: Enable Capture Scaler: true [ 2053.510570][T28344] vivid-000: Timestamp Source: End of Frame [ 2053.524288][T28344] vivid-000: Colorspace: SMPTE 170M [ 2053.530916][T28344] vivid-000: Transfer Function: None [ 2053.536584][T28344] vivid-000: Y'CbCr Encoding: Default [ 2053.545243][T28344] vivid-000: HSV Encoding: Hue 0-256 [ 2053.554513][T28344] vivid-000: Quantization: Default [ 2053.566613][T28344] vivid-000: Apply Alpha To Red Only: true [ 2053.578504][T28344] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2053.589208][T28344] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2053.609583][T28344] vivid-000: DV Timings: 640x480p59 inactive [ 2053.617383][T28344] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2053.625241][T28344] vivid-000: Maximum EDID Blocks: 1 [ 2053.631973][T28344] vivid-000: Limited RGB Range (16-235): true [ 2053.638739][T28344] vivid-000: Rx RGB Quantization Range: Automatic [ 2053.735623][T28344] vivid-000: Power Present: 0x00000001 [ 2053.801477][T28344] tpg source WxH: 720x576 (R'G'B) [ 2053.811649][ T814] usb 1-1: reset high-speed USB device number 83 using dummy_hcd [ 2053.824554][T28344] tpg field: 4 [ 2053.835263][T28344] tpg crop: (64,0)/256x576 [ 2053.846719][T28344] tpg compose: (0,0)/720x576 [ 2053.857403][T28344] tpg colorspace: 1 [ 2053.863815][T28344] tpg transfer function: 5/1 [ 2053.870486][T28344] tpg quantization: 0/2 [ 2053.876086][T28344] tpg RGB range: 0/1 [ 2053.881671][T28344] vivid-000: ================== END STATUS ================== [ 2054.002895][ T814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2054.381238][T26841] usb 1-1: USB disconnect, device number 83 [ 2054.448875][T28361] nftables ruleset with unbound chain [ 2054.459221][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2054.459240][ T30] audit: type=1326 audit(1760383142.277:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2054.599952][ T30] audit: type=1326 audit(1760383142.277:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2054.683236][ T30] audit: type=1326 audit(1760383142.277:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2054.776767][ T30] audit: type=1326 audit(1760383142.277:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2055.157388][ T30] audit: type=1326 audit(1760383142.277:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2055.857865][ T30] audit: type=1326 audit(1760383142.277:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2055.983651][ T30] audit: type=1326 audit(1760383142.277:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2056.139672][ T30] audit: type=1326 audit(1760383142.277:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2056.175401][ T30] audit: type=1326 audit(1760383142.277:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2056.253658][ T30] audit: type=1326 audit(1760383142.277:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28357 comm="syz.1.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2060.467824][T28415] input: syz0 as /devices/virtual/input/input64 [ 2061.289631][T26841] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2062.577725][T26841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2062.604197][T26841] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2062.640755][T26841] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2062.740318][T26841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.756411][T26841] usb 2-1: Product: syz [ 2062.765122][T26841] usb 2-1: Manufacturer: syz [ 2062.770151][T26841] usb 2-1: SerialNumber: syz [ 2063.629842][T26841] usb 2-1: reset high-speed USB device number 81 using dummy_hcd [ 2063.782599][T26841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2064.189814][T26841] usb 2-1: USB disconnect, device number 81 [ 2067.047263][T28476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2067.082283][T28476] 8021q: adding VLAN 0 to HW filter on device team0 [ 2067.115500][T28476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2069.073426][T28493] input: syz0 as /devices/virtual/input/input66 [ 2070.839974][T26841] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2070.992144][T26841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2071.019863][T26841] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.043198][T26841] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2071.086197][T26841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.132312][T26841] usb 5-1: Product: syz [ 2071.152567][T26841] usb 5-1: Manufacturer: syz [ 2071.241851][T26841] usb 5-1: SerialNumber: syz [ 2071.378070][T28520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4799'. [ 2072.219737][T26841] usb 5-1: reset high-speed USB device number 74 using dummy_hcd [ 2072.456117][T26841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2072.736174][T26841] usb 5-1: USB disconnect, device number 74 [ 2078.155548][T28572] vivid-000: ================= START STATUS ================= [ 2078.179683][T28572] vivid-000: Test Pattern: 75% Colorbar [ 2078.279449][T28572] vivid-000: Fill Percentage of Frame: 100 [ 2078.286146][T28572] vivid-000: Horizontal Movement: No Movement [ 2078.296636][T28572] vivid-000: Vertical Movement: Move Up [ 2078.302601][T28572] vivid-000: OSD Text Mode: All [ 2078.307671][T28572] vivid-000: Show Border: false [ 2078.312949][T28572] vivid-000: Show Square: false [ 2078.317928][T28572] vivid-000: Sensor Flipped Horizontally: false [ 2078.325252][T28572] vivid-000: Sensor Flipped Vertically: true [ 2078.331920][T28572] vivid-000: Insert SAV Code in Image: false [ 2078.338089][T28572] vivid-000: Insert EAV Code in Image: false [ 2078.344371][T28572] vivid-000: Insert Video Guard Band: false [ 2078.350800][T28572] vivid-000: Reduced Framerate: false [ 2078.356308][T28572] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2078.374892][T28572] vivid-000: S-Video 000-0 Is Connected To: None [ 2078.384294][T28572] vivid-000: Enable Capture Cropping: true [ 2078.392618][T28572] vivid-000: Enable Capture Composing: false [ 2078.399696][T28572] vivid-000: Enable Capture Scaler: true [ 2078.406346][T28572] vivid-000: Timestamp Source: End of Frame [ 2078.412480][T28572] vivid-000: Colorspace: SMPTE 170M [ 2078.417781][T28572] vivid-000: Transfer Function: None [ 2078.435313][T28572] vivid-000: Y'CbCr Encoding: Default [ 2078.456758][T28572] vivid-000: HSV Encoding: Hue 0-256 [ 2078.464039][T28572] vivid-000: Quantization: Default [ 2078.469836][T28572] vivid-000: Apply Alpha To Red Only: true [ 2078.475985][T28572] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2078.499389][T28572] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2078.507785][T28572] vivid-000: DV Timings: 640x480p59 inactive [ 2078.514042][T28572] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2078.521869][T28572] vivid-000: Maximum EDID Blocks: 1 [ 2078.527314][T28572] vivid-000: Limited RGB Range (16-235): true [ 2078.534338][T28572] vivid-000: Rx RGB Quantization Range: Automatic [ 2078.540897][T28572] vivid-000: Power Present: 0x00000001 [ 2078.546570][T28572] tpg source WxH: 720x576 (R'G'B) [ 2078.551804][T28572] tpg field: 4 [ 2078.555219][T28572] tpg crop: (64,0)/256x576 [ 2078.559717][T28572] tpg compose: (0,0)/720x576 [ 2078.564497][T28572] tpg colorspace: 1 [ 2078.568337][T28572] tpg transfer function: 5/1 [ 2078.573096][T28572] tpg quantization: 0/2 [ 2078.577291][T28572] tpg RGB range: 0/1 [ 2078.581305][T28572] vivid-000: ================== END STATUS ================== [ 2082.203563][T28612] input: syz0 as /devices/virtual/input/input67 [ 2090.026522][T28690] use of bytesused == 0 is deprecated and will be removed in the future, [ 2090.037457][T28690] use the actual size instead. [ 2091.009105][T28697] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 2094.240230][T28726] vti0: entered promiscuous mode [ 2094.245269][T28726] vti0: entered allmulticast mode [ 2094.569607][T23338] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2094.691883][T28731] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 2094.698648][T28731] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2094.724593][T28731] vhci_hcd vhci_hcd.0: Device attached [ 2094.779137][T28731] vhci_hcd vhci_hcd.0: port 0 already used [ 2094.829258][T28731] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(17) [ 2094.836048][T28731] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2094.899727][T23338] usb 2-1: Using ep0 maxpacket: 16 [ 2094.914619][T28731] vhci_hcd vhci_hcd.0: Device attached [ 2094.942667][T23338] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 2094.951043][T23338] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.980940][T28740] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 2094.987621][T28740] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2094.995996][T28740] vhci_hcd vhci_hcd.0: Device attached [ 2095.545444][T28731] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21) [ 2095.552118][T28731] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2095.590052][T28731] vhci_hcd vhci_hcd.0: Device attached [ 2095.666696][T23338] usb 2-1: config 0 has no interface number 0 [ 2095.704186][T23338] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2095.718434][T23338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.759564][T23338] usb 2-1: Product: syz [ 2096.188207][T28748] vhci_hcd: connection closed [ 2096.190424][ T6342] vhci_hcd: stop threads [ 2096.199395][ T6342] vhci_hcd: release socket [ 2096.204342][T23338] usb 2-1: Manufacturer: syz [ 2096.210561][T23338] usb 2-1: SerialNumber: syz [ 2096.218393][T28741] vhci_hcd: connection closed [ 2096.218651][T28736] vhci_hcd: connection closed [ 2096.224606][T23338] usb 2-1: config 0 descriptor?? [ 2096.268531][T28732] vhci_hcd: connection closed [ 2096.338078][ T6342] vhci_hcd: disconnect device [ 2096.381353][ T6342] vhci_hcd: stop threads [ 2096.387904][ T6342] vhci_hcd: release socket [ 2096.393503][ T6342] vhci_hcd: disconnect device [ 2096.421470][ T6342] vhci_hcd: stop threads [ 2096.429862][ T6342] vhci_hcd: release socket [ 2096.444435][ T6342] vhci_hcd: disconnect device [ 2096.460525][ T6342] vhci_hcd: stop threads [ 2096.464970][ T6342] vhci_hcd: release socket [ 2096.649640][ T6342] vhci_hcd: disconnect device [ 2097.961429][T23338] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2098.101529][T26841] usb 2-1: USB disconnect, device number 82 [ 2098.134058][T23338] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2098.144929][T23338] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2098.183254][T23338] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2098.236515][T23338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.289615][T28192] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2098.335422][T28774] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 2098.531321][T23338] usb 5-1: config 0 descriptor?? [ 2098.533977][T28192] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2098.549136][T28192] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2098.629259][T28192] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2098.647710][T28192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.659826][T28192] usb 1-1: Product: syz [ 2098.696419][T28192] usb 1-1: Manufacturer: syz [ 2098.706531][T28192] usb 1-1: SerialNumber: syz [ 2099.485379][T28761] qrtr: Invalid version 97 [ 2099.494375][T28761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2099.512283][T28761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2099.630361][T23338] usb 5-1: string descriptor 0 read error: -71 [ 2099.647631][T23338] usb 5-1: USB disconnect, device number 75 [ 2100.209657][T28192] usb 1-1: reset high-speed USB device number 84 using dummy_hcd [ 2100.363049][T28192] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2100.583356][T28192] usb 1-1: USB disconnect, device number 84 [ 2104.250113][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.256515][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.625411][T28833] vti0: entered promiscuous mode [ 2104.630662][T28833] vti0: entered allmulticast mode [ 2104.899633][T23323] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2105.124472][T23323] usb 3-1: Using ep0 maxpacket: 16 [ 2105.421156][T23323] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 2105.429743][T23323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.449807][T23323] usb 3-1: config 0 has no interface number 0 [ 2105.523524][T23323] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2105.533577][T23323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.542043][T23323] usb 3-1: Product: syz [ 2105.546408][T23323] usb 3-1: Manufacturer: syz [ 2105.556566][T23323] usb 3-1: SerialNumber: syz [ 2105.581794][T23323] usb 3-1: config 0 descriptor?? [ 2108.092904][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4869'. [ 2108.828463][T23338] usb 3-1: USB disconnect, device number 76 [ 2109.627006][T28877] input: syz0 as /devices/virtual/input/input68 [ 2116.199065][T28934] vivid-000: ================= START STATUS ================= [ 2116.206977][T28934] vivid-000: Test Pattern: 75% Colorbar [ 2116.212741][T28934] vivid-000: Fill Percentage of Frame: 100 [ 2116.218613][T28934] vivid-000: Horizontal Movement: No Movement [ 2116.224861][T28934] vivid-000: Vertical Movement: Move Up [ 2116.230570][T28934] vivid-000: OSD Text Mode: All [ 2116.235510][T28934] vivid-000: Show Border: false [ 2116.240528][T28934] vivid-000: Show Square: false [ 2116.245484][T28934] vivid-000: Sensor Flipped Horizontally: false [ 2116.252278][T28934] vivid-000: Sensor Flipped Vertically: true [ 2116.258458][T28934] vivid-000: Insert SAV Code in Image: false [ 2116.264812][T28934] vivid-000: Insert EAV Code in Image: false [ 2116.271195][T28934] vivid-000: Insert Video Guard Band: false [ 2116.277317][T28934] vivid-000: Reduced Framerate: false [ 2116.283040][T28934] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2116.292638][T28934] vivid-000: S-Video 000-0 Is Connected To: None [ 2116.299111][T28934] vivid-000: Enable Capture Cropping: true [ 2116.305132][T28934] vivid-000: Enable Capture Composing: false [ 2116.311343][T28934] vivid-000: Enable Capture Scaler: true [ 2116.319705][T28934] vivid-000: Timestamp Source: End of Frame [ 2116.325762][T28934] vivid-000: Colorspace: SMPTE 170M [ 2116.331187][T28934] vivid-000: Transfer Function: None [ 2116.336711][T28934] vivid-000: Y'CbCr Encoding: Default [ 2116.342318][T28934] vivid-000: HSV Encoding: Hue 0-256 [ 2116.347796][T28934] vivid-000: Quantization: Default [ 2116.353110][T28934] vivid-000: Apply Alpha To Red Only: true [ 2116.359136][T28934] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2116.366082][T28934] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2116.374099][T28934] vivid-000: DV Timings: 640x480p59 inactive [ 2116.380365][T28934] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2116.387874][T28934] vivid-000: Maximum EDID Blocks: 1 [ 2116.393257][T28934] vivid-000: Limited RGB Range (16-235): true [ 2116.399752][T28934] vivid-000: Rx RGB Quantization Range: Automatic [ 2116.406344][T28934] vivid-000: Power Present: 0x00000001 [ 2116.412114][T28934] tpg source WxH: 720x576 (R'G'B) [ 2116.417337][T28934] tpg field: 4 [ 2116.420907][T28934] tpg crop: (64,0)/256x576 [ 2116.425524][T28934] tpg compose: (0,0)/720x576 [ 2116.430315][T28934] tpg colorspace: 1 [ 2116.434300][T28934] tpg transfer function: 5/1 [ 2116.439025][T28934] tpg quantization: 0/2 [ 2116.443533][T28934] tpg RGB range: 0/1 [ 2116.447652][T28934] vivid-000: ================== END STATUS ================== [ 2116.594356][T28937] vti0: entered promiscuous mode [ 2116.599886][T28937] vti0: entered allmulticast mode [ 2119.558593][T28966] vivid-000: ================= START STATUS ================= [ 2119.566927][T28966] vivid-000: Test Pattern: 75% Colorbar [ 2119.573290][T28966] vivid-000: Fill Percentage of Frame: 100 [ 2119.579414][T28966] vivid-000: Horizontal Movement: No Movement [ 2119.586346][T28966] vivid-000: Vertical Movement: Move Up [ 2119.592661][T28966] vivid-000: OSD Text Mode: All [ 2119.597782][T28966] vivid-000: Show Border: false [ 2119.603403][T28966] vivid-000: Show Square: false [ 2119.608674][T28966] vivid-000: Sensor Flipped Horizontally: false [ 2119.615943][T28966] vivid-000: Sensor Flipped Vertically: true [ 2119.631640][T28966] vivid-000: Insert SAV Code in Image: false [ 2119.638296][T28966] vivid-000: Insert EAV Code in Image: false [ 2119.645039][T28966] vivid-000: Insert Video Guard Band: false [ 2119.676078][T28966] vivid-000: Reduced Framerate: false [ 2119.690834][T28966] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2119.699761][T28966] vivid-000: S-Video 000-0 Is Connected To: None [ 2119.707861][T28966] vivid-000: Enable Capture Cropping: true [ 2119.715664][T28966] vivid-000: Enable Capture Composing: false [ 2119.723829][T28966] vivid-000: Enable Capture Scaler: true [ 2119.729973][T28966] vivid-000: Timestamp Source: End of Frame [ 2119.737229][T28966] vivid-000: Colorspace: SMPTE 170M [ 2119.745618][T28966] vivid-000: Transfer Function: None [ 2119.753601][T28966] vivid-000: Y'CbCr Encoding: Default [ 2119.762166][T28966] vivid-000: HSV Encoding: Hue 0-256 [ 2119.768186][T28966] vivid-000: Quantization: Default [ 2119.775027][T28966] vivid-000: Apply Alpha To Red Only: true [ 2119.781182][T28966] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2119.789611][T28966] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2119.797679][T28966] vivid-000: DV Timings: 640x480p59 inactive [ 2119.804873][T28966] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2119.812572][T28966] vivid-000: Maximum EDID Blocks: 1 [ 2119.818107][T28966] vivid-000: Limited RGB Range (16-235): true [ 2119.824717][T28966] vivid-000: Rx RGB Quantization Range: Automatic [ 2119.831680][T28966] vivid-000: Power Present: 0x00000001 [ 2119.837548][T28966] tpg source WxH: 720x576 (R'G'B) [ 2119.844187][T28966] tpg field: 4 [ 2119.847919][T28966] tpg crop: (64,0)/256x576 [ 2119.853467][T28966] tpg compose: (0,0)/720x576 [ 2119.858467][T28966] tpg colorspace: 1 [ 2119.863019][T28966] tpg transfer function: 5/1 [ 2119.869068][T28966] tpg quantization: 0/2 [ 2119.912679][T28966] tpg RGB range: 0/1 [ 2119.939601][T28966] vivid-000: ================== END STATUS ================== [ 2123.279016][T28996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2123.608595][T28996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2124.798018][T29011] input: syz0 as /devices/virtual/input/input69 [ 2131.389991][T28192] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2131.791831][T28192] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2131.802365][T28192] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.815069][T28192] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2131.852225][T28192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.893197][T28192] usb 5-1: Product: syz [ 2131.897428][T28192] usb 5-1: Manufacturer: syz [ 2131.923955][T28192] usb 5-1: SerialNumber: syz [ 2132.009738][T29076] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 2132.809717][T28192] usb 5-1: reset high-speed USB device number 76 using dummy_hcd [ 2132.962036][T28192] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2133.179101][T28192] usb 5-1: USB disconnect, device number 76 [ 2135.381361][ T30] audit: type=1326 audit(1760383223.207:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2135.444962][ T30] audit: type=1326 audit(1760383223.207:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2135.467451][ T30] audit: type=1326 audit(1760383223.207:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2135.530408][ T30] audit: type=1326 audit(1760383223.207:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2135.785971][ T30] audit: type=1326 audit(1760383223.227:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2135.809537][ T30] audit: type=1326 audit(1760383223.227:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2135.904207][ T30] audit: type=1326 audit(1760383223.227:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2135.981023][ T30] audit: type=1326 audit(1760383223.227:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2136.217502][ T30] audit: type=1326 audit(1760383223.227:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2136.590969][ T30] audit: type=1326 audit(1760383223.227:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29098 comm="syz.0.4926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2138.329610][T23338] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2138.570529][T23338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2138.591243][T23338] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.609742][T23338] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2138.619773][T23338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.638158][T23338] usb 2-1: Product: syz [ 2138.656474][T23338] usb 2-1: Manufacturer: syz [ 2138.672838][T23338] usb 2-1: SerialNumber: syz [ 2139.600363][T23338] usb 2-1: reset high-speed USB device number 83 using dummy_hcd [ 2140.506048][T23338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2140.863427][T26841] usb 2-1: USB disconnect, device number 83 [ 2142.296782][T29156] input: syz0 as /devices/virtual/input/input70 [ 2142.405385][T29154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2142.414639][T29154] 8021q: adding VLAN 0 to HW filter on device team0 [ 2142.601266][T29154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2148.371070][T29213] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 2153.611660][T29259] input: syz0 as /devices/virtual/input/input71 [ 2155.419122][T29278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2156.555932][T29283] random: crng reseeded on system resumption [ 2158.069628][T26841] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2158.241282][T26841] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2158.253224][T26841] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2158.263127][T26841] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2158.279245][T26841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.701677][T26841] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2159.248058][T26841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2159.403471][T26841] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.420641][T26841] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2159.435625][T26841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.448453][T26841] usb 2-1: Product: syz [ 2159.461675][T26841] usb 2-1: Manufacturer: syz [ 2159.469504][T26841] usb 2-1: SerialNumber: syz [ 2160.299771][T26841] usb 2-1: reset high-speed USB device number 84 using dummy_hcd [ 2160.564227][T26841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2161.212091][T23323] usb 2-1: USB disconnect, device number 84 [ 2161.219991][T26841] usb 1-1: USB disconnect, device number 85 [ 2161.317443][T29330] vivid-000: ================= START STATUS ================= [ 2161.327362][T29330] vivid-000: Test Pattern: 75% Colorbar [ 2161.335305][T29330] vivid-000: Fill Percentage of Frame: 100 [ 2161.342294][T29330] vivid-000: Horizontal Movement: No Movement [ 2161.349170][T29330] vivid-000: Vertical Movement: Move Up [ 2161.355302][T29330] vivid-000: OSD Text Mode: All [ 2161.362377][T29330] vivid-000: Show Border: false [ 2161.369299][T29330] vivid-000: Show Square: false [ 2161.375271][T29330] vivid-000: Sensor Flipped Horizontally: false [ 2161.387310][T29330] vivid-000: Sensor Flipped Vertically: true [ 2161.397312][T29330] vivid-000: Insert SAV Code in Image: false [ 2161.406318][T29330] vivid-000: Insert EAV Code in Image: false [ 2161.414917][T29330] vivid-000: Insert Video Guard Band: false [ 2161.421302][T29330] vivid-000: Reduced Framerate: false [ 2161.428691][T29330] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2161.437303][T29330] vivid-000: S-Video 000-0 Is Connected To: None [ 2161.446175][T29330] vivid-000: Enable Capture Cropping: true [ 2161.453291][T29330] vivid-000: Enable Capture Composing: false [ 2161.460086][T29330] vivid-000: Enable Capture Scaler: true [ 2161.466299][T29330] vivid-000: Timestamp Source: End of Frame [ 2161.475156][T29330] vivid-000: Colorspace: SMPTE 170M [ 2161.481304][T29330] vivid-000: Transfer Function: None [ 2161.487952][T29330] vivid-000: Y'CbCr Encoding: Default [ 2161.494310][T29330] vivid-000: HSV Encoding: Hue 0-256 [ 2161.501157][T29330] vivid-000: Quantization: Default [ 2161.507308][T29330] vivid-000: Apply Alpha To Red Only: true [ 2161.516260][T29330] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2161.524252][T29330] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2161.535298][T29330] vivid-000: DV Timings: 640x480p59 inactive [ 2161.543300][T29330] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2161.552294][T29330] vivid-000: Maximum EDID Blocks: 1 [ 2161.558641][T29330] vivid-000: Limited RGB Range (16-235): true [ 2161.566306][T29330] vivid-000: Rx RGB Quantization Range: Automatic [ 2161.574095][T29330] vivid-000: Power Present: 0x00000001 [ 2161.580323][T29330] tpg source WxH: 720x576 (R'G'B) [ 2161.586543][T29330] tpg field: 4 [ 2161.591095][T29330] tpg crop: (64,0)/256x576 [ 2161.596045][T29330] tpg compose: (0,0)/720x576 [ 2161.601307][T29330] tpg colorspace: 1 [ 2161.607318][T29330] tpg transfer function: 5/1 [ 2161.613294][T29330] tpg quantization: 0/2 [ 2161.619164][T29330] tpg RGB range: 0/1 [ 2161.624300][T29330] vivid-000: ================== END STATUS ================== [ 2162.802670][T29349] input: syz0 as /devices/virtual/input/input72 [ 2164.929602][T23338] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2165.101252][T23338] usb 3-1: Using ep0 maxpacket: 8 [ 2165.119073][T23338] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2165.164788][T23338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.174582][T23338] usb 3-1: Product: syz [ 2165.189602][T23338] usb 3-1: Manufacturer: syz [ 2165.195941][T23338] usb 3-1: SerialNumber: syz [ 2165.247391][T23338] usb 3-1: config 0 descriptor?? [ 2165.509686][T23338] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2165.642407][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.648927][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.741413][T26841] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2165.945258][T26841] usb 2-1: Using ep0 maxpacket: 16 [ 2167.551280][T29392] fuse: Bad value for 'fd' [ 2167.970848][T23338] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2167.991722][T23338] usb 3-1: USB disconnect, device number 77 [ 2168.967831][T29402] vivid-000: ================= START STATUS ================= [ 2168.975973][T29402] vivid-000: Test Pattern: 75% Colorbar [ 2168.982107][T29402] vivid-000: Fill Percentage of Frame: 100 [ 2168.998745][T29402] vivid-000: Horizontal Movement: No Movement [ 2169.006163][T29402] vivid-000: Vertical Movement: Move Up [ 2169.012264][T29402] vivid-000: OSD Text Mode: All [ 2169.018354][T29402] vivid-000: Show Border: false [ 2169.024077][T29402] vivid-000: Show Square: false [ 2169.029687][T29402] vivid-000: Sensor Flipped Horizontally: false [ 2169.037054][T29402] vivid-000: Sensor Flipped Vertically: true [ 2169.043860][T29402] vivid-000: Insert SAV Code in Image: false [ 2169.050830][T29402] vivid-000: Insert EAV Code in Image: false [ 2169.057608][T29402] vivid-000: Insert Video Guard Band: false [ 2169.064419][T29402] vivid-000: Reduced Framerate: false [ 2169.071668][T29402] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2169.080512][T29402] vivid-000: S-Video 000-0 Is Connected To: None [ 2169.087621][T29402] vivid-000: Enable Capture Cropping: true [ 2169.094484][T29402] vivid-000: Enable Capture Composing: false [ 2169.101504][T29402] vivid-000: Enable Capture Scaler: true [ 2169.108177][T29402] vivid-000: Timestamp Source: End of Frame [ 2169.114929][T29402] vivid-000: Colorspace: SMPTE 170M [ 2169.120910][T29402] vivid-000: Transfer Function: None [ 2169.127732][T29402] vivid-000: Y'CbCr Encoding: Default [ 2169.134362][T29402] vivid-000: HSV Encoding: Hue 0-256 [ 2169.140522][T29402] vivid-000: Quantization: Default [ 2169.146160][T29402] vivid-000: Apply Alpha To Red Only: true [ 2169.153081][T29402] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2169.160627][T29402] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2169.169501][T29402] vivid-000: DV Timings: 640x480p59 inactive [ 2169.175996][T29402] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2169.184331][T29402] vivid-000: Maximum EDID Blocks: 1 [ 2169.191860][T29402] vivid-000: Limited RGB Range (16-235): true [ 2169.198497][T29402] vivid-000: Rx RGB Quantization Range: Automatic [ 2169.206016][T29402] vivid-000: Power Present: 0x00000001 [ 2169.212468][T29402] tpg source WxH: 720x576 (R'G'B) [ 2169.217848][T29402] tpg field: 4 [ 2169.221668][T29402] tpg crop: (64,0)/256x576 [ 2169.226466][T29402] tpg compose: (0,0)/720x576 [ 2169.231456][T29402] tpg colorspace: 1 [ 2169.235507][T29402] tpg transfer function: 5/1 [ 2169.240662][T29402] tpg quantization: 0/2 [ 2169.245030][T29402] tpg RGB range: 0/1 [ 2169.249170][T29402] vivid-000: ================== END STATUS ================== [ 2169.833261][T26841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2170.092840][T26841] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2170.106936][T26841] usb 2-1: can't read configurations, error -71 [ 2171.084801][T29419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2173.085687][T28192] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2173.404026][T28192] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2173.414201][T28192] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2173.462615][T28192] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2173.472406][T28192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.486788][T28192] usb 1-1: Product: syz [ 2173.561478][T28192] usb 1-1: Manufacturer: syz [ 2173.623810][T28192] usb 1-1: SerialNumber: syz [ 2174.161522][T23323] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2174.359564][T23323] usb 2-1: Using ep0 maxpacket: 8 [ 2174.411182][T23323] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2174.429646][T23323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2174.459661][T23323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2174.491973][T23323] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2174.529690][T23323] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2174.549049][T23323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.742715][T28192] usb 1-1: reset high-speed USB device number 86 using dummy_hcd [ 2174.785144][T23323] usb 2-1: GET_CAPABILITIES returned 0 [ 2174.791690][T23323] usbtmc 2-1:16.0: can't read capabilities [ 2175.046488][T28192] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2175.155412][T28192] usb 2-1: USB disconnect, device number 87 [ 2175.283223][T23323] usb 1-1: USB disconnect, device number 86 [ 2177.841496][T29490] vivid-000: ================= START STATUS ================= [ 2177.849405][T29490] vivid-000: Test Pattern: 75% Colorbar [ 2177.855622][T29490] vivid-000: Fill Percentage of Frame: 100 [ 2177.861732][T29490] vivid-000: Horizontal Movement: No Movement [ 2177.868004][T29490] vivid-000: Vertical Movement: Move Up [ 2177.873796][T29490] vivid-000: OSD Text Mode: All [ 2177.878801][T29490] vivid-000: Show Border: false [ 2177.884050][T29490] vivid-000: Show Square: false [ 2177.889077][T29490] vivid-000: Sensor Flipped Horizontally: false [ 2177.895509][T29490] vivid-000: Sensor Flipped Vertically: true [ 2177.901692][T29490] vivid-000: Insert SAV Code in Image: false [ 2177.907968][T29490] vivid-000: Insert EAV Code in Image: false [ 2177.914286][T29490] vivid-000: Insert Video Guard Band: false [ 2177.920421][T29490] vivid-000: Reduced Framerate: false [ 2177.925965][T29490] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2177.933832][T29490] vivid-000: S-Video 000-0 Is Connected To: None [ 2177.940426][T29490] vivid-000: Enable Capture Cropping: true [ 2177.946485][T29490] vivid-000: Enable Capture Composing: false [ 2177.952672][T29490] vivid-000: Enable Capture Scaler: true [ 2177.958493][T29490] vivid-000: Timestamp Source: End of Frame [ 2177.965711][T29490] vivid-000: Colorspace: SMPTE 170M [ 2177.971440][T29490] vivid-000: Transfer Function: None [ 2177.976984][T29490] vivid-000: Y'CbCr Encoding: Default [ 2177.982577][T29490] vivid-000: HSV Encoding: Hue 0-256 [ 2177.988017][T29490] vivid-000: Quantization: Default [ 2177.993309][T29490] vivid-000: Apply Alpha To Red Only: true [ 2177.999275][T29490] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2178.006096][T29490] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2178.014079][T29490] vivid-000: DV Timings: 640x480p59 inactive [ 2178.020262][T29490] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2178.027751][T29490] vivid-000: Maximum EDID Blocks: 1 [ 2178.033196][T29490] vivid-000: Limited RGB Range (16-235): true [ 2178.039465][T29490] vivid-000: Rx RGB Quantization Range: Automatic [ 2178.046084][T29490] vivid-000: Power Present: 0x00000001 [ 2178.051850][T29490] tpg source WxH: 720x576 (R'G'B) [ 2178.057006][T29490] tpg field: 4 [ 2178.060815][T29490] tpg crop: (64,0)/256x576 [ 2178.065336][T29490] tpg compose: (0,0)/720x576 [ 2178.070089][T29490] tpg colorspace: 1 [ 2178.074008][T29490] tpg transfer function: 5/1 [ 2178.078714][T29490] tpg quantization: 0/2 [ 2178.083021][T29490] tpg RGB range: 0/1 [ 2178.087017][T29490] vivid-000: ================== END STATUS ================== [ 2181.942612][T23338] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2182.381554][T23338] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2182.919559][T23338] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.975717][T23338] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2182.985191][T23338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.996626][T23338] usb 3-1: Product: syz [ 2183.077740][T23338] usb 3-1: Manufacturer: syz [ 2183.106954][T23338] usb 3-1: SerialNumber: syz [ 2184.081221][T23338] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 2185.073655][T23338] usb 3-1: device descriptor read/all, error -71 [ 2186.325236][T23338] usb 3-1: USB disconnect, device number 78 [ 2193.522293][T29622] block device autoloading is deprecated and will be removed. [ 2194.924785][T29648] vivid-000: ================= START STATUS ================= [ 2194.933044][T29648] vivid-000: Test Pattern: 75% Colorbar [ 2194.943536][T29648] vivid-000: Fill Percentage of Frame: 100 [ 2194.949772][T29648] vivid-000: Horizontal Movement: No Movement [ 2194.956374][T29648] vivid-000: Vertical Movement: Move Up [ 2194.966762][T29648] vivid-000: OSD Text Mode: All [ 2194.972019][T29648] vivid-000: Show Border: false [ 2194.979496][T29648] vivid-000: Show Square: false [ 2194.984787][T29648] vivid-000: Sensor Flipped Horizontally: false [ 2194.991625][T29648] vivid-000: Sensor Flipped Vertically: true [ 2195.001625][T29648] vivid-000: Insert SAV Code in Image: false [ 2195.008007][T29648] vivid-000: Insert EAV Code in Image: false [ 2195.014857][T29648] vivid-000: Insert Video Guard Band: false [ 2195.022813][T29648] vivid-000: Reduced Framerate: false [ 2195.031163][T29648] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2195.040488][T29648] vivid-000: S-Video 000-0 Is Connected To: None [ 2195.049799][T29648] vivid-000: Enable Capture Cropping: true [ 2195.056080][T29648] vivid-000: Enable Capture Composing: false [ 2195.062605][T29648] vivid-000: Enable Capture Scaler: true [ 2195.069524][T29648] vivid-000: Timestamp Source: End of Frame [ 2195.079366][T29648] vivid-000: Colorspace: SMPTE 170M [ 2195.086767][T29648] vivid-000: Transfer Function: None [ 2195.094518][T29648] vivid-000: Y'CbCr Encoding: Default [ 2195.100290][T29648] vivid-000: HSV Encoding: Hue 0-256 [ 2195.109562][T29648] vivid-000: Quantization: Default [ 2195.114999][T29648] vivid-000: Apply Alpha To Red Only: true [ 2195.121704][T29648] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2195.129760][T29648] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2195.139503][T29648] vivid-000: DV Timings: 640x480p59 inactive [ 2195.145813][T29648] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2195.153904][T29648] vivid-000: Maximum EDID Blocks: 1 [ 2195.159674][T29648] vivid-000: Limited RGB Range (16-235): true [ 2195.168531][T29648] vivid-000: Rx RGB Quantization Range: Automatic [ 2195.175505][T29648] vivid-000: Power Present: 0x00000001 [ 2195.182123][T29648] tpg source WxH: 720x576 (R'G'B) [ 2195.189377][T29648] tpg field: 4 [ 2195.194652][T29648] tpg crop: (64,0)/256x576 [ 2195.199471][T29648] tpg compose: (0,0)/720x576 [ 2195.205730][T29648] tpg colorspace: 1 [ 2195.209891][T29648] tpg transfer function: 5/1 [ 2195.216999][T29648] tpg quantization: 0/2 [ 2195.222029][T29648] tpg RGB range: 0/1 [ 2195.228219][T29648] vivid-000: ================== END STATUS ================== [ 2198.015956][T23323] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 2198.046609][T23323] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2198.443850][T29671] fido_id[29671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2201.063518][T29693] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 2201.446311][T29700] futex_wake_op: syz.2.5066 tries to shift op by 32; fix this program [ 2204.508284][T29730] random: crng reseeded on system resumption [ 2204.959791][T29731] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 2205.720549][T29744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2205.727134][T29744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2205.838912][T29744] vhci_hcd vhci_hcd.0: Device attached [ 2206.064349][T29745] vhci_hcd: connection closed [ 2206.065155][ T49] vhci_hcd: stop threads [ 2206.074438][ T49] vhci_hcd: release socket [ 2206.081341][ T49] vhci_hcd: disconnect device [ 2206.130745][T26841] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 2206.138562][T26841] usb 37-1: enqueue for inactive port 0 [ 2206.287219][T26841] vhci_hcd: vhci_device speed not set [ 2206.387296][T29758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5080'. [ 2206.420456][T29758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5080'. [ 2208.577330][T29773] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5085'. [ 2210.245853][T29796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2211.375074][T29805] vivid-000: ================= START STATUS ================= [ 2211.383244][T29805] vivid-000: Test Pattern: 75% Colorbar [ 2211.389099][T29805] vivid-000: Fill Percentage of Frame: 100 [ 2211.395200][T29805] vivid-000: Horizontal Movement: No Movement [ 2211.401678][T29805] vivid-000: Vertical Movement: Move Up [ 2211.407437][T29805] vivid-000: OSD Text Mode: All [ 2211.412504][T29805] vivid-000: Show Border: false [ 2211.417575][T29805] vivid-000: Show Square: false [ 2211.422691][T29805] vivid-000: Sensor Flipped Horizontally: false [ 2211.429240][T29805] vivid-000: Sensor Flipped Vertically: true [ 2211.435873][T29805] vivid-000: Insert SAV Code in Image: false [ 2211.442509][T29805] vivid-000: Insert EAV Code in Image: false [ 2211.448780][T29805] vivid-000: Insert Video Guard Band: false [ 2211.455060][T29805] vivid-000: Reduced Framerate: false [ 2211.461038][T29805] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2211.469013][T29805] vivid-000: S-Video 000-0 Is Connected To: None [ 2211.475685][T29805] vivid-000: Enable Capture Cropping: true [ 2211.485771][T29805] vivid-000: Enable Capture Composing: false [ 2211.492104][T29805] vivid-000: Enable Capture Scaler: true [ 2211.498032][T29805] vivid-000: Timestamp Source: End of Frame [ 2211.504255][T29805] vivid-000: Colorspace: SMPTE 170M [ 2211.509795][T29805] vivid-000: Transfer Function: None [ 2211.515426][T29805] vivid-000: Y'CbCr Encoding: Default [ 2211.521122][T29805] vivid-000: HSV Encoding: Hue 0-256 [ 2211.526641][T29805] vivid-000: Quantization: Default [ 2211.532032][T29805] vivid-000: Apply Alpha To Red Only: true [ 2211.538079][T29805] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2211.545000][T29805] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2211.553109][T29805] vivid-000: DV Timings: 640x480p59 inactive [ 2211.559729][T29805] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2211.567477][T29805] vivid-000: Maximum EDID Blocks: 1 [ 2211.572996][T29805] vivid-000: Limited RGB Range (16-235): true [ 2211.579425][T29805] vivid-000: Rx RGB Quantization Range: Automatic [ 2211.586162][T29805] vivid-000: Power Present: 0x00000001 [ 2211.591958][T29805] tpg source WxH: 720x576 (R'G'B) [ 2211.597196][T29805] tpg field: 4 [ 2211.600793][T29805] tpg crop: (64,0)/256x576 [ 2211.605420][T29805] tpg compose: (0,0)/720x576 [ 2211.610227][T29805] tpg colorspace: 1 [ 2211.614229][T29805] tpg transfer function: 5/1 [ 2211.619003][T29805] tpg quantization: 0/2 [ 2211.623415][T29805] tpg RGB range: 0/1 [ 2211.627518][T29805] vivid-000: ================== END STATUS ================== [ 2212.080172][T23323] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2212.283024][T29812] vivid-000: ================= START STATUS ================= [ 2212.291102][T29812] vivid-000: Test Pattern: 75% Colorbar [ 2212.296796][T29812] vivid-000: Fill Percentage of Frame: 100 [ 2212.302781][T29812] vivid-000: Horizontal Movement: No Movement [ 2212.308917][T29812] vivid-000: Vertical Movement: Move Up [ 2212.314945][T29812] vivid-000: OSD Text Mode: All [ 2212.320061][T29812] vivid-000: Show Border: false [ 2212.324989][T29812] vivid-000: Show Square: false [ 2212.329959][T29812] vivid-000: Sensor Flipped Horizontally: false [ 2212.336365][T29812] vivid-000: Sensor Flipped Vertically: true [ 2212.342559][T29812] vivid-000: Insert SAV Code in Image: false [ 2212.348682][T29812] vivid-000: Insert EAV Code in Image: false [ 2212.354898][T29812] vivid-000: Insert Video Guard Band: false [ 2212.361050][T29812] vivid-000: Reduced Framerate: false [ 2212.366571][T29812] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2212.377519][T29812] vivid-000: S-Video 000-0 Is Connected To: None [ 2212.384222][T29812] vivid-000: Enable Capture Cropping: true [ 2212.390403][T29812] vivid-000: Enable Capture Composing: false [ 2212.396635][T29812] vivid-000: Enable Capture Scaler: true [ 2212.402746][T29812] vivid-000: Timestamp Source: End of Frame [ 2212.408894][T29812] vivid-000: Colorspace: SMPTE 170M [ 2212.414414][T29812] vivid-000: Transfer Function: None [ 2212.420434][T29812] vivid-000: Y'CbCr Encoding: Default [ 2212.426066][T29812] vivid-000: HSV Encoding: Hue 0-256 [ 2212.431658][T29812] vivid-000: Quantization: Default [ 2212.437031][T29812] vivid-000: Apply Alpha To Red Only: true [ 2212.443536][T29812] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2212.451019][T29812] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2212.459773][T29812] vivid-000: DV Timings: 640x480p59 inactive [ 2212.467351][T29812] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2212.475920][T29812] vivid-000: Maximum EDID Blocks: 1 [ 2212.482330][T29812] vivid-000: Limited RGB Range (16-235): true [ 2212.489323][T29812] vivid-000: Rx RGB Quantization Range: Automatic [ 2212.510315][T29812] vivid-000: Power Present: 0x00000001 [ 2212.517347][T29812] tpg source WxH: 720x576 (R'G'B) [ 2212.524142][T29812] tpg field: 4 [ 2212.527738][T29812] tpg crop: (64,0)/256x576 [ 2212.532455][T29812] tpg compose: (0,0)/720x576 [ 2212.538312][T29812] tpg colorspace: 1 [ 2212.543320][T29812] tpg transfer function: 5/1 [ 2212.548104][T29812] tpg quantization: 0/2 [ 2212.552946][T29812] tpg RGB range: 0/1 [ 2212.557132][T29812] vivid-000: ================== END STATUS ================== [ 2212.829625][T23323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2212.890642][T23323] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2212.973432][T23323] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2212.983709][T23323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.992259][T23323] usb 5-1: Product: syz [ 2213.005706][T23323] usb 5-1: Manufacturer: syz [ 2213.029351][T23323] usb 5-1: SerialNumber: syz [ 2213.909701][T23323] usb 5-1: reset high-speed USB device number 77 using dummy_hcd [ 2214.102342][T23323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2214.337715][T23323] usb 5-1: USB disconnect, device number 77 [ 2215.785522][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2215.785543][ T30] audit: type=1326 audit(1760383303.597:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2215.834876][ T30] audit: type=1326 audit(1760383303.597:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2215.995248][ T30] audit: type=1326 audit(1760383303.597:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2216.051648][ T30] audit: type=1326 audit(1760383303.597:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2216.711674][ T30] audit: type=1326 audit(1760383303.597:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2217.105855][ T30] audit: type=1326 audit(1760383303.597:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2217.153683][ T30] audit: type=1326 audit(1760383303.597:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2217.196588][ T30] audit: type=1326 audit(1760383303.597:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2217.251086][ T30] audit: type=1326 audit(1760383303.597:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2217.338590][ T30] audit: type=1326 audit(1760383303.597:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29832 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2218.218086][T29857] input: syz1 as /devices/virtual/input/input73 [ 2218.759611][T23323] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2218.898179][T29871] syz.3.5109 (29871): drop_caches: 2 [ 2219.209501][T23323] usb 1-1: Using ep0 maxpacket: 8 [ 2219.237176][T23323] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2219.332704][T23323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.374628][T23323] usb 1-1: Product: syz [ 2219.392502][T23323] usb 1-1: Manufacturer: syz [ 2219.397320][T23323] usb 1-1: SerialNumber: syz [ 2219.479372][T23323] usb 1-1: config 0 descriptor?? [ 2219.658789][T23323] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2219.826847][T29876] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 2219.970141][T23323] gspca_sonixj: reg_r err -71 [ 2219.974938][T23323] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 2220.045317][T23323] usb 1-1: USB disconnect, device number 87 [ 2221.118869][T29893] vivid-000: ================= START STATUS ================= [ 2221.129269][T29893] vivid-000: Test Pattern: 75% Colorbar [ 2221.140215][T29893] vivid-000: Fill Percentage of Frame: 100 [ 2221.147757][T29893] vivid-000: Horizontal Movement: No Movement [ 2221.156163][T29893] vivid-000: Vertical Movement: Move Up [ 2221.164816][T29893] vivid-000: OSD Text Mode: All [ 2221.170700][T29893] vivid-000: Show Border: false [ 2221.178331][T29893] vivid-000: Show Square: false [ 2221.185069][T29893] vivid-000: Sensor Flipped Horizontally: false [ 2221.193469][T29893] vivid-000: Sensor Flipped Vertically: true [ 2221.201085][T29893] vivid-000: Insert SAV Code in Image: false [ 2221.209510][T29893] vivid-000: Insert EAV Code in Image: false [ 2221.217702][T29893] vivid-000: Insert Video Guard Band: false [ 2221.225703][T29893] vivid-000: Reduced Framerate: false [ 2221.231943][T29893] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2221.243262][T29893] vivid-000: S-Video 000-0 Is Connected To: None [ 2221.250050][T29893] vivid-000: Enable Capture Cropping: true [ 2221.257846][T29893] vivid-000: Enable Capture Composing: false [ 2221.265773][T29893] vivid-000: Enable Capture Scaler: true [ 2221.273243][T29893] vivid-000: Timestamp Source: End of Frame [ 2221.280950][T29893] vivid-000: Colorspace: SMPTE 170M [ 2221.286659][T29893] vivid-000: Transfer Function: None [ 2221.293977][T29893] vivid-000: Y'CbCr Encoding: Default [ 2221.300868][T29893] vivid-000: HSV Encoding: Hue 0-256 [ 2221.306505][T29893] vivid-000: Quantization: Default [ 2221.314266][T29893] vivid-000: Apply Alpha To Red Only: true [ 2221.322112][T29893] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2221.329536][T29893] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2221.340794][T29893] vivid-000: DV Timings: 640x480p59 inactive [ 2221.348670][T29893] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2221.357142][T29893] vivid-000: Maximum EDID Blocks: 1 [ 2221.364544][T29893] vivid-000: Limited RGB Range (16-235): true [ 2221.371117][T29893] vivid-000: Rx RGB Quantization Range: Automatic [ 2221.380992][T29893] vivid-000: Power Present: 0x00000001 [ 2221.387246][T29893] tpg source WxH: 720x576 (R'G'B) [ 2221.396361][T29893] tpg field: 4 [ 2221.401546][T29893] tpg crop: (64,0)/256x576 [ 2221.409848][T29893] tpg compose: (0,0)/720x576 [ 2221.416469][T29893] tpg colorspace: 1 [ 2221.421005][T29893] tpg transfer function: 5/1 [ 2221.428153][T29893] tpg quantization: 0/2 [ 2221.434043][T29893] tpg RGB range: 0/1 [ 2221.438299][T29893] vivid-000: ================== END STATUS ================== [ 2221.726234][T29899] vivid-000: ================= START STATUS ================= [ 2221.736653][T29899] vivid-000: Test Pattern: 75% Colorbar [ 2221.744602][T29899] vivid-000: Fill Percentage of Frame: 100 [ 2221.750861][T29899] vivid-000: Horizontal Movement: No Movement [ 2221.757439][T29899] vivid-000: Vertical Movement: Move Up [ 2221.764649][T29899] vivid-000: OSD Text Mode: All [ 2221.770890][T29899] vivid-000: Show Border: false [ 2221.776580][T29899] vivid-000: Show Square: false [ 2221.784400][T29899] vivid-000: Sensor Flipped Horizontally: false [ 2221.791595][T29899] vivid-000: Sensor Flipped Vertically: true [ 2221.798805][T29899] vivid-000: Insert SAV Code in Image: false [ 2221.806596][T29899] vivid-000: Insert EAV Code in Image: false [ 2221.815168][T29899] vivid-000: Insert Video Guard Band: false [ 2221.822490][T29899] vivid-000: Reduced Framerate: false [ 2221.828620][T29899] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2221.837428][T29899] vivid-000: S-Video 000-0 Is Connected To: None [ 2221.846898][T29899] vivid-000: Enable Capture Cropping: true [ 2221.855603][T29899] vivid-000: Enable Capture Composing: false [ 2221.862597][T29899] vivid-000: Enable Capture Scaler: true [ 2221.870593][T29899] vivid-000: Timestamp Source: End of Frame [ 2221.877319][T29899] vivid-000: Colorspace: SMPTE 170M [ 2221.883593][T29899] vivid-000: Transfer Function: None [ 2221.890302][T29899] vivid-000: Y'CbCr Encoding: Default [ 2221.897591][T29899] vivid-000: HSV Encoding: Hue 0-256 [ 2221.904588][T29899] vivid-000: Quantization: Default [ 2221.912594][T29899] vivid-000: Apply Alpha To Red Only: true [ 2221.919511][T29899] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2221.928598][T29899] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2221.938593][T29899] vivid-000: DV Timings: 640x480p59 inactive [ 2221.945594][T29899] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2221.956592][T29899] vivid-000: Maximum EDID Blocks: 1 [ 2221.965752][T29899] vivid-000: Limited RGB Range (16-235): true [ 2221.973585][T29899] vivid-000: Rx RGB Quantization Range: Automatic [ 2221.981383][T29899] vivid-000: Power Present: 0x00000001 [ 2221.989018][T29899] tpg source WxH: 720x576 (R'G'B) [ 2221.995596][T29899] tpg field: 4 [ 2222.000596][T29899] tpg crop: (64,0)/256x576 [ 2222.006506][T29899] tpg compose: (0,0)/720x576 [ 2222.011940][T29899] tpg colorspace: 1 [ 2222.016581][T29899] tpg transfer function: 5/1 [ 2222.022594][T29899] tpg quantization: 0/2 [ 2222.028596][T29899] tpg RGB range: 0/1 [ 2222.033487][T29899] vivid-000: ================== END STATUS ================== [ 2225.168992][T29925] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 2225.746486][T29933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2225.785517][T29933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2227.083176][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.089634][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2228.495806][T29959] input: syz1 as /devices/virtual/input/input74 [ 2228.703194][T29962] vivid-000: ================= START STATUS ================= [ 2228.711053][T29962] vivid-000: Test Pattern: 75% Colorbar [ 2228.716756][T29962] vivid-000: Fill Percentage of Frame: 100 [ 2228.722944][T29962] vivid-000: Horizontal Movement: No Movement [ 2228.729172][T29962] vivid-000: Vertical Movement: Move Up [ 2228.734918][T29962] vivid-000: OSD Text Mode: All [ 2228.740147][T29962] vivid-000: Show Border: false [ 2228.745137][T29962] vivid-000: Show Square: false [ 2228.750200][T29962] vivid-000: Sensor Flipped Horizontally: false [ 2228.756690][T29962] vivid-000: Sensor Flipped Vertically: true [ 2228.763022][T29962] vivid-000: Insert SAV Code in Image: false [ 2228.769216][T29962] vivid-000: Insert EAV Code in Image: false [ 2228.775487][T29962] vivid-000: Insert Video Guard Band: false [ 2228.781741][T29962] vivid-000: Reduced Framerate: false [ 2228.787304][T29962] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2228.795258][T29962] vivid-000: S-Video 000-0 Is Connected To: None [ 2228.801904][T29962] vivid-000: Enable Capture Cropping: true [ 2228.807940][T29962] vivid-000: Enable Capture Composing: false [ 2228.814164][T29962] vivid-000: Enable Capture Scaler: true [ 2228.820083][T29962] vivid-000: Timestamp Source: End of Frame [ 2228.826822][T29962] vivid-000: Colorspace: SMPTE 170M [ 2228.832302][T29962] vivid-000: Transfer Function: None [ 2228.837802][T29962] vivid-000: Y'CbCr Encoding: Default [ 2228.844158][T29962] vivid-000: HSV Encoding: Hue 0-256 [ 2228.850220][T29962] vivid-000: Quantization: Default [ 2228.855532][T29962] vivid-000: Apply Alpha To Red Only: true [ 2228.861653][T29962] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2228.868559][T29962] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2228.876594][T29962] vivid-000: DV Timings: 640x480p59 inactive [ 2228.882932][T29962] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2228.890514][T29962] vivid-000: Maximum EDID Blocks: 1 [ 2228.896008][T29962] vivid-000: Limited RGB Range (16-235): true [ 2228.902392][T29962] vivid-000: Rx RGB Quantization Range: Automatic [ 2228.909003][T29962] vivid-000: Power Present: 0x00000001 [ 2228.914795][T29962] tpg source WxH: 720x576 (R'G'B) [ 2228.920078][T29962] tpg field: 4 [ 2228.923590][T29962] tpg crop: (64,0)/256x576 [ 2228.928244][T29962] tpg compose: (0,0)/720x576 [ 2228.933117][T29962] tpg colorspace: 1 [ 2228.937079][T29962] tpg transfer function: 5/1 [ 2228.941882][T29962] tpg quantization: 0/2 [ 2228.946225][T29962] tpg RGB range: 0/1 [ 2228.950751][T29962] vivid-000: ================== END STATUS ================== [ 2229.727208][T29974] vivid-000: ================= START STATUS ================= [ 2229.735301][T29974] vivid-000: Test Pattern: 75% Colorbar [ 2229.741296][T29974] vivid-000: Fill Percentage of Frame: 100 [ 2229.747719][T29974] vivid-000: Horizontal Movement: No Movement [ 2229.757434][T29974] vivid-000: Vertical Movement: Move Up [ 2229.763685][T29974] vivid-000: OSD Text Mode: All [ 2229.769311][T29974] vivid-000: Show Border: false [ 2229.779017][T29974] vivid-000: Show Square: false [ 2229.784791][T29974] vivid-000: Sensor Flipped Horizontally: false [ 2229.791530][T29974] vivid-000: Sensor Flipped Vertically: true [ 2229.798138][T29974] vivid-000: Insert SAV Code in Image: false [ 2229.806279][T29974] vivid-000: Insert EAV Code in Image: false [ 2229.813582][T29974] vivid-000: Insert Video Guard Band: false [ 2229.823428][T29974] vivid-000: Reduced Framerate: false [ 2229.829118][T29974] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2229.838120][T29974] vivid-000: S-Video 000-0 Is Connected To: None [ 2229.848356][T29974] vivid-000: Enable Capture Cropping: true [ 2229.854737][T29974] vivid-000: Enable Capture Composing: false [ 2229.862242][T29974] vivid-000: Enable Capture Scaler: true [ 2229.869005][T29974] vivid-000: Timestamp Source: End of Frame [ 2229.875825][T29974] vivid-000: Colorspace: SMPTE 170M [ 2229.881555][T29974] vivid-000: Transfer Function: None [ 2229.887073][T29974] vivid-000: Y'CbCr Encoding: Default [ 2229.892842][T29974] vivid-000: HSV Encoding: Hue 0-256 [ 2229.898325][T29974] vivid-000: Quantization: Default [ 2229.903796][T29974] vivid-000: Apply Alpha To Red Only: true [ 2229.910085][T29974] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2229.917000][T29974] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2229.925172][T29974] vivid-000: DV Timings: 640x480p59 inactive [ 2229.931508][T29974] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2229.939036][T29974] vivid-000: Maximum EDID Blocks: 1 [ 2229.944547][T29974] vivid-000: Limited RGB Range (16-235): true [ 2229.950949][T29974] vivid-000: Rx RGB Quantization Range: Automatic [ 2229.957598][T29974] vivid-000: Power Present: 0x00000001 [ 2229.963360][T29974] tpg source WxH: 720x576 (R'G'B) [ 2229.968586][T29974] tpg field: 4 [ 2229.972183][T29974] tpg crop: (64,0)/256x576 [ 2229.976785][T29974] tpg compose: (0,0)/720x576 [ 2229.981656][T29974] tpg colorspace: 1 [ 2229.985613][T29974] tpg transfer function: 5/1 [ 2229.990467][T29974] tpg quantization: 0/2 [ 2229.995191][T29974] tpg RGB range: 0/1 [ 2229.999251][T29974] vivid-000: ================== END STATUS ================== [ 2234.570201][T23323] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2234.830339][T23323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2234.860501][T23323] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.894882][T23323] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 2234.904230][T23323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.919673][T23323] usb 3-1: Product: syz [ 2234.924508][T23323] usb 3-1: Manufacturer: syz [ 2234.929561][T23323] usb 3-1: SerialNumber: syz [ 2236.071995][T30033] vivid-000: ================= START STATUS ================= [ 2236.079941][T30033] vivid-000: Test Pattern: 75% Colorbar [ 2236.085934][T30033] vivid-000: Fill Percentage of Frame: 100 [ 2236.094316][T30033] vivid-000: Horizontal Movement: No Movement [ 2236.103183][T30033] vivid-000: Vertical Movement: Move Up [ 2236.108832][T30033] vivid-000: OSD Text Mode: All [ 2236.115440][T30033] vivid-000: Show Border: false [ 2236.121487][T30033] vivid-000: Show Square: false [ 2236.131093][T30033] vivid-000: Sensor Flipped Horizontally: false [ 2236.139015][T30033] vivid-000: Sensor Flipped Vertically: true [ 2236.146089][T30033] vivid-000: Insert SAV Code in Image: false [ 2236.152486][T30033] vivid-000: Insert EAV Code in Image: false [ 2236.158706][T30033] vivid-000: Insert Video Guard Band: false [ 2236.165066][T30033] vivid-000: Reduced Framerate: false [ 2236.170816][T30033] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2236.178726][T30033] vivid-000: S-Video 000-0 Is Connected To: None [ 2236.185462][T30033] vivid-000: Enable Capture Cropping: true [ 2236.191665][T30033] vivid-000: Enable Capture Composing: false [ 2236.197976][T30033] vivid-000: Enable Capture Scaler: true [ 2236.204350][T30033] vivid-000: Timestamp Source: End of Frame [ 2236.210607][T30033] vivid-000: Colorspace: SMPTE 170M [ 2236.216065][T30033] vivid-000: Transfer Function: None [ 2236.221737][T30033] vivid-000: Y'CbCr Encoding: Default [ 2236.227526][T30033] vivid-000: HSV Encoding: Hue 0-256 [ 2236.233132][T30033] vivid-000: Quantization: Default [ 2236.238577][T30033] vivid-000: Apply Alpha To Red Only: true [ 2236.244696][T30033] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2236.252422][T30033] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2236.261037][T30033] vivid-000: DV Timings: 640x480p59 inactive [ 2236.267363][T30033] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2236.277215][T30033] vivid-000: Maximum EDID Blocks: 1 [ 2236.282866][T30033] vivid-000: Limited RGB Range (16-235): true [ 2236.309646][T30033] vivid-000: Rx RGB Quantization Range: Automatic [ 2236.316412][T30033] vivid-000: Power Present: 0x00000001 [ 2236.322184][T30033] tpg source WxH: 720x576 (R'G'B) [ 2236.365740][T30033] tpg field: 4 [ 2236.370636][T30033] tpg crop: (64,0)/256x576 [ 2236.376663][T30033] tpg compose: (0,0)/720x576 [ 2236.383200][T30033] tpg colorspace: 1 [ 2236.388741][T30033] tpg transfer function: 5/1 [ 2236.395055][T30033] tpg quantization: 0/2 [ 2236.399712][T30033] tpg RGB range: 0/1 [ 2236.405386][T30033] vivid-000: ================== END STATUS ================== [ 2236.490883][T23323] usb 3-1: reset high-speed USB device number 79 using dummy_hcd [ 2236.667860][T23323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2236.935788][T28192] usb 3-1: USB disconnect, device number 79 [ 2240.844369][T30084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2240.865159][T30084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2241.808306][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2241.815615][ T30] audit: type=1326 audit(1760383329.287:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2241.844780][ T30] audit: type=1326 audit(1760383329.287:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2241.950511][ T30] audit: type=1326 audit(1760383329.337:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2242.312941][ T30] audit: type=1326 audit(1760383329.337:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2242.641424][ T30] audit: type=1326 audit(1760383329.337:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2242.688684][ T30] audit: type=1326 audit(1760383329.337:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2242.817899][ T30] audit: type=1326 audit(1760383329.337:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2242.880305][ T30] audit: type=1326 audit(1760383329.337:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2242.981777][ T30] audit: type=1326 audit(1760383329.337:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2243.027628][ T30] audit: type=1326 audit(1760383329.337:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30088 comm="syz.3.5160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2243.606451][T30112] vivid-000: ================= START STATUS ================= [ 2243.616099][T30112] vivid-000: Test Pattern: 75% Colorbar [ 2243.623307][T30112] vivid-000: Fill Percentage of Frame: 100 [ 2243.631286][T30112] vivid-000: Horizontal Movement: No Movement [ 2243.638920][T30112] vivid-000: Vertical Movement: Move Up [ 2243.646865][T30112] vivid-000: OSD Text Mode: All [ 2243.651998][T30112] vivid-000: Show Border: false [ 2243.657230][T30112] vivid-000: Show Square: false [ 2243.663879][T30112] vivid-000: Sensor Flipped Horizontally: false [ 2243.670797][T30112] vivid-000: Sensor Flipped Vertically: true [ 2243.676996][T30112] vivid-000: Insert SAV Code in Image: false [ 2243.684716][T30112] vivid-000: Insert EAV Code in Image: false [ 2243.691200][T30112] vivid-000: Insert Video Guard Band: false [ 2243.699763][T30112] vivid-000: Reduced Framerate: false [ 2243.706955][T30112] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 2243.716453][T30112] vivid-000: S-Video 000-0 Is Connected To: None [ 2243.724644][T30112] vivid-000: Enable Capture Cropping: true [ 2243.730998][T30112] vivid-000: Enable Capture Composing: false [ 2243.737183][T30112] vivid-000: Enable Capture Scaler: true [ 2243.743180][T30112] vivid-000: Timestamp Source: End of Frame [ 2243.750783][T30112] vivid-000: Colorspace: SMPTE 170M [ 2243.757245][T30112] vivid-000: Transfer Function: None [ 2243.763182][T30112] vivid-000: Y'CbCr Encoding: Default [ 2243.768839][T30112] vivid-000: HSV Encoding: Hue 0-256 [ 2243.774386][T30112] vivid-000: Quantization: Default [ 2243.779810][T30112] vivid-000: Apply Alpha To Red Only: true [ 2243.785868][T30112] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 2243.793102][T30112] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2243.805316][T30112] vivid-000: DV Timings: 640x480p59 inactive [ 2243.811778][T30112] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2243.821701][T30112] vivid-000: Maximum EDID Blocks: 1 [ 2243.829910][T30112] vivid-000: Limited RGB Range (16-235): true [ 2243.836323][T30112] vivid-000: Rx RGB Quantization Range: Automatic [ 2243.845134][T30112] vivid-000: Power Present: 0x00000001 [ 2243.852640][T30112] tpg source WxH: 720x576 (R'G'B) [ 2243.859295][T30112] tpg field: 4 [ 2243.863428][T30112] tpg crop: (64,0)/256x576 [ 2243.869551][T30112] tpg compose: (0,0)/720x576 [ 2243.875008][T30112] tpg colorspace: 1 [ 2243.879597][T30112] tpg transfer function: 5/1 [ 2243.885959][T30112] tpg quantization: 0/2 [ 2243.892545][T30112] tpg RGB range: 0/1 [ 2243.897161][T30112] vivid-000: ================== END STATUS ================== [ 2246.874427][T30129] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2247.289508][T28192] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2247.549800][T28192] usb 3-1: Using ep0 maxpacket: 8 [ 2247.559302][T28192] usb 3-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 2247.575737][T28192] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 2247.608691][T28192] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2247.686806][T28192] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2247.696471][T28192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.704852][T28192] usb 3-1: Product: syz [ 2247.714326][T28192] usb 3-1: Manufacturer: syz [ 2247.722506][T28192] usb 3-1: SerialNumber: syz [ 2247.739829][T28192] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2247.751080][T28192] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 2247.764419][T28192] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 2248.066923][T30124] loop2: detected capacity change from 0 to 7 [ 2248.086459][T28192] usb 3-1: USB disconnect, device number 80 [ 2249.269571][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2249.269594][ T30] audit: type=1326 audit(1760383336.937:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2249.339690][ T30] audit: type=1326 audit(1760383336.937:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2249.400551][ T30] audit: type=1326 audit(1760383336.967:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2249.509210][ T30] audit: type=1326 audit(1760383336.967:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2249.539648][ T30] audit: type=1326 audit(1760383336.967:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2249.623606][ T30] audit: type=1326 audit(1760383336.967:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2249.897707][ T30] audit: type=1326 audit(1760383336.967:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2250.199849][ T30] audit: type=1326 audit(1760383336.967:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2250.249476][ T30] audit: type=1326 audit(1760383336.967:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2250.329483][ T30] audit: type=1326 audit(1760383336.967:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.0.5179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2255.086266][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2255.086292][ T30] audit: type=1326 audit(1760383342.907:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2255.169598][T28192] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2255.241796][ T31] INFO: task kworker/0:2:814 blocked for more than 143 seconds. [ 2255.251931][ T30] audit: type=1326 audit(1760383342.907:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2255.280375][ T31] Not tainted syzkaller #0 [ 2255.285559][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2255.297515][ T31] task:kworker/0:2 state:D stack:20472 pid:814 tgid:814 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2255.490829][ T30] audit: type=1326 audit(1760383342.937:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2255.655767][ T31] Workqueue: usb_hub_wq hub_event [ 2255.655773][T28192] usb 2-1: Using ep0 maxpacket: 8 [ 2255.655806][ T31] [ 2255.677538][ T31] Call Trace: [ 2255.682393][ T31] [ 2255.685612][ T31] __schedule+0x1798/0x4cc0 [ 2255.685638][ T30] audit: type=1326 audit(1760383342.937:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2255.685691][ T30] audit: type=1326 audit(1760383342.937:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2255.691713][ T31] ? __pfx___schedule+0x10/0x10 [ 2255.842072][T28192] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2255.852568][T28192] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2048, setting to 64 [ 2255.869690][ T30] audit: type=1326 audit(1760383342.947:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2255.919617][T28192] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2255.979732][ T30] audit: type=1326 audit(1760383342.947:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.002155][ T30] audit: type=1326 audit(1760383342.947:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.203771][T28192] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2256.213489][T28192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.235029][T28192] usb 2-1: Product: syz [ 2256.239520][T28192] usb 2-1: Manufacturer: syz [ 2256.244278][ T30] audit: type=1326 audit(1760383342.947:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.298163][T28192] usb 2-1: SerialNumber: syz [ 2256.323512][ T30] audit: type=1326 audit(1760383342.947:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30200 comm="syz.2.5193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 2256.350665][T28192] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2256.369225][ T31] ? schedule+0x91/0x360 [ 2256.454320][T28192] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2256.454314][ T31] schedule+0x165/0x360 [ 2256.454363][ T31] schedule_preempt_disabled+0x13/0x30 [ 2256.486330][ T31] __mutex_lock+0x7e6/0x1350 [ 2256.497983][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2256.509506][ T31] ? hub_event+0x21e5/0x4a20 [ 2256.521095][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2256.521138][T28192] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2256.541050][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2256.570005][T30197] loop2: detected capacity change from 0 to 7 [ 2256.623675][ T31] hub_event+0x21e5/0x4a20 [ 2256.639600][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2256.665450][T28192] usb 2-1: USB disconnect, device number 88 [ 2256.680972][ T31] ? __pfx_hub_event+0x10/0x10 [ 2256.710416][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2256.925270][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2256.930823][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2256.956397][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2256.970991][ T31] process_scheduled_works+0xae1/0x17b0 [ 2256.986723][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2257.005929][ T31] worker_thread+0x8a0/0xda0 [ 2257.021753][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2257.043114][ T31] ? __kthread_parkme+0x7b/0x200 [ 2257.058920][ T31] kthread+0x711/0x8a0 [ 2257.072474][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2257.087118][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.106224][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2257.124193][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2257.139572][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.148911][ T31] ret_from_fork+0x4bc/0x870 [ 2257.156769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2257.162853][ T31] ? __switch_to_asm+0x39/0x70 [ 2257.167789][ T31] ? __switch_to_asm+0x33/0x70 [ 2257.172763][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.177399][ T31] ret_from_fork_asm+0x1a/0x30 [ 2257.182757][ T31] [ 2257.189703][ T31] [ 2257.189703][ T31] Showing all locks held in the system: [ 2257.197558][ T31] 1 lock held by khungtaskd/31: [ 2257.203993][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2257.232792][ T31] 5 locks held by kworker/0:2/814: [ 2257.238053][ T31] #0: ffff88801cee7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2257.251474][ T31] #1: ffffc90003627ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2257.264135][ T31] #2: ffff888145f6b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2257.274002][ T31] #3: ffff888145f6e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2257.287236][ T31] #4: ffff888028944c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2257.298284][ T31] 2 locks held by getty/5585: [ 2257.303201][ T31] #0: ffff88814d9f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2257.314240][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2257.325074][ T31] 2 locks held by syz-executor/5841: [ 2257.330692][ T31] 5 locks held by kworker/1:4/5917: [ 2257.335929][ T31] #0: ffff88801cee7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2257.347706][ T31] #1: ffffc90004967ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2257.360263][ T31] #2: ffff88823beba998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2257.369261][ T31] #3: ffff888145f58518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2257.379308][ T31] #4: ffff888028944c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2257.389316][ T31] [ 2257.391839][ T31] ============================================= [ 2257.391839][ T31] [ 2257.401545][ T31] NMI backtrace for cpu 0 [ 2257.401568][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2257.401594][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2257.401608][ T31] Call Trace: [ 2257.401617][ T31] [ 2257.401627][ T31] dump_stack_lvl+0x189/0x250 [ 2257.401660][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2257.401685][ T31] ? __pfx__printk+0x10/0x10 [ 2257.401721][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2257.401754][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2257.401784][ T31] ? __pfx__printk+0x10/0x10 [ 2257.401812][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2257.401843][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2257.401876][ T31] watchdog+0xf60/0xfa0 [ 2257.401919][ T31] ? watchdog+0x1e2/0xfa0 [ 2257.401954][ T31] kthread+0x711/0x8a0 [ 2257.401980][ T31] ? __pfx_watchdog+0x10/0x10 [ 2257.402009][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.402033][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2257.402066][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2257.402092][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.402115][ T31] ret_from_fork+0x4bc/0x870 [ 2257.402148][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2257.402185][ T31] ? __switch_to_asm+0x39/0x70 [ 2257.402211][ T31] ? __switch_to_asm+0x33/0x70 [ 2257.402236][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.402260][ T31] ret_from_fork_asm+0x1a/0x30 [ 2257.402304][ T31] [ 2257.402314][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2257.548121][ C1] NMI backtrace for cpu 1 [ 2257.548145][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2257.548166][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2257.548178][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2257.548202][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2257.548219][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2257.548236][ C1] RAX: 899c3a03174e8f00 RBX: ffffffff8196bc07 RCX: 899c3a03174e8f00 [ 2257.548251][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e835a RDI: ffffffff8bc076e0 [ 2257.548264][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 2257.548278][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e1170 [ 2257.548292][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385ab58 [ 2257.548304][ C1] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 2257.548319][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2257.548332][ C1] CR2: 00000000f73bb208 CR3: 000000007ce5e000 CR4: 00000000003526f0 [ 2257.548348][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2257.548359][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2257.548371][ C1] Call Trace: [ 2257.548380][ C1] [ 2257.548388][ C1] default_idle+0x13/0x20 [ 2257.548409][ C1] default_idle_call+0x73/0xb0 [ 2257.548431][ C1] do_idle+0x1e7/0x510 [ 2257.548461][ C1] ? __pfx_do_idle+0x10/0x10 [ 2257.548495][ C1] cpu_startup_entry+0x44/0x60 [ 2257.548521][ C1] start_secondary+0x101/0x110 [ 2257.548543][ C1] common_startup_64+0x13e/0x147 [ 2257.548572][ C1] [ 2257.549123][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2257.731734][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2257.740950][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2257.751105][ T31] Call Trace: [ 2257.754395][ T31] [ 2257.757339][ T31] dump_stack_lvl+0x99/0x250 [ 2257.762032][ T31] ? __asan_memcpy+0x40/0x70 [ 2257.766639][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2257.771852][ T31] ? __pfx__printk+0x10/0x10 [ 2257.776476][ T31] vpanic+0x237/0x6d0 [ 2257.780499][ T31] ? __pfx_vpanic+0x10/0x10 [ 2257.785025][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2257.790512][ T31] panic+0xb9/0xc0 [ 2257.794347][ T31] ? __pfx_panic+0x10/0x10 [ 2257.798823][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2257.804229][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2257.810440][ T31] watchdog+0xf9f/0xfa0 [ 2257.814642][ T31] ? watchdog+0x1e2/0xfa0 [ 2257.818995][ T31] kthread+0x711/0x8a0 [ 2257.823083][ T31] ? __pfx_watchdog+0x10/0x10 [ 2257.827778][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.832389][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2257.837782][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2257.843079][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.847683][ T31] ret_from_fork+0x4bc/0x870 [ 2257.852298][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2257.857443][ T31] ? __switch_to_asm+0x39/0x70 [ 2257.862218][ T31] ? __switch_to_asm+0x33/0x70 [ 2257.866995][ T31] ? __pfx_kthread+0x10/0x10 [ 2257.871601][ T31] ret_from_fork_asm+0x1a/0x30 [ 2257.876392][ T31] [ 2257.879780][ T31] Kernel Offset: disabled [ 2257.884207][ T31] Rebooting in 86400 seconds..