last executing test programs: 7m27.562548458s ago: executing program 0 (id=1246): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 7m26.841292431s ago: executing program 0 (id=1251): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) creat(0x0, 0x84) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) write$snapshot(r0, &(0x7f0000000340)="e6a0d70a9f9eb9892d6df78eb8c12aa318fe20e689b45f0d7e7573bc213f71fe5b7dcd8046d15243a016b2969e9469cbf8860cffd3b4cb5366f1dac5ca78a3cc917fdaf7763773203ee9f7028bdee01ffe9f6360a7905b5ffbf4f7cb8f471ca9e3c4badee94487e3e93813b8519ff3389d30b5e395f27e021c8cfd7d1c5f46b1afd88642bfd7dd36a4695ab5de89616e55206da3b1549b97c9c5ce2f0903c58fdd82ad6ad7cbd7af438d4f539220c3b9aeb08bde510c129d2d53ccfae55c8a2b11f386fd12c22e3a54fdfbba0295f300c3e5", 0xd2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) 7m22.986449046s ago: executing program 0 (id=1266): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045007, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRESOCT=0x0, @ANYRES32], 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) socket$inet(0xa, 0x801, 0x84) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r4, 0xffffffffffffffff}) close_range(r1, r2, 0x0) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m21.137289624s ago: executing program 0 (id=1273): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 7m20.041656418s ago: executing program 0 (id=1280): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000014) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='net/wireless\x00') read$FUSE(r7, &(0x7f00000095c0)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 7m19.915580517s ago: executing program 0 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m19.353919899s ago: executing program 32 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m37.40488959s ago: executing program 2 (id=1723): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) ftruncate(r0, 0x5) 5m37.152950545s ago: executing program 2 (id=1726): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x87}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) syz_usb_ep_read(r0, 0x9, 0xf0, &(0x7f0000000400)=""/240) syz_usb_connect$midi(0x1, 0x9d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x1, 0x1, 0x6, 0xd0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x4, [@midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x40, 0x2, [{0x2}, {0x9, 0x20}], 0x3}], [{{0x9, 0x5, 0x0, 0x1, 0x20, 0x9, 0x40, 0x8, {0x14, 0x25, 0x1, 0x10, "6622a662fd7f38637bc94518598a25ac"}}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x6, 0x0, 0xd, {0xd, 0x25, 0x1, 0x9, "fd8e34981148e60b37"}}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xb3, 0x9, 0x40, {0x5, 0x25, 0x1, 0x1, "ef"}}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x6d, 0x1, 0x4, {0x5, 0x25, 0x1, 0x1, "a7"}}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x9, 0x0, 0x9, {0x4}}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x2, 0x7, 0x4, {0x9, 0x25, 0x1, 0x5, "043d6d7b56"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x202, 0x3, 0x5, 0x9, 0x10, 0x5a}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m36.140730411s ago: executing program 2 (id=1742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x8fb9, 0xfffffffc, 0x2, 0x953, 0x8001, 0x1}}, {0x6, 0x2, [0xa]}}]}]}, 0x70}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0xa6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 5m35.592989036s ago: executing program 2 (id=1733): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_submit(r5, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m34.589291978s ago: executing program 2 (id=1735): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r0) tkill(r0, 0x13) 5m33.280223522s ago: executing program 2 (id=1741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 5m32.397178384s ago: executing program 33 (id=1741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 2m25.826152024s ago: executing program 5 (id=2407): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4, 0x80, @dev={0xfe, 0x80, '\x00', 0x37}, 0x5}, 0x1c) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000500)) 2m25.74529757s ago: executing program 5 (id=2408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 2m25.532797142s ago: executing program 5 (id=2411): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) fcntl$setlease(r1, 0x400, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000440)={0x2}) fcntl$setlease(r1, 0x400, 0x2) landlock_restrict_self(r0, 0xe) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xc, 0x13, r2, 0x83000000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r3, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 2m24.573313743s ago: executing program 5 (id=2416): epoll_create1(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0xb, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xaa24, 0xc000, 0x3, 0x1fa}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x6633, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) close(r0) 2m23.374750682s ago: executing program 5 (id=2423): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x48040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000980)={0xe0, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x56}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa8, 0xbe, "55bfab68756c65415e1b4e9dfe799911fc0fbd9c5052b51b7ae8ded1fdc04c8d233e5ba121e1b96bbfd375e322792e730379c0cd4de66725c7a46f70dab6f29485fc7386e39ffafde69b263e4f8b3aefe2a7023d79643e8be287baf8ef59511eff563837e4a9d40423dca1fb39a498279f4bf1efb73254bc4e56a10e5b1df2cf385aa8115f767cf4170d620a76955404b06e7047c6fde756d6eb9fe740d0bb63c120cea7"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x193}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 2m22.794350699s ago: executing program 5 (id=2426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=';\x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT=r4], 0x20) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r0, 0x0, 0x44004) 2m21.840765491s ago: executing program 34 (id=2426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=';\x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT=r4], 0x20) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r0, 0x0, 0x44004) 9.862777897s ago: executing program 6 (id=2872): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) socket$packet(0x11, 0x2, 0x300) sendmsg$WG_CMD_GET_DEVICE(r1, 0x0, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r2 = dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) 9.018875552s ago: executing program 1 (id=2877): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0xffffffff}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x48081) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x5, 0x1c, 0x7b, 0x41, 0x6, 0x9, 0x8, 0x44, 0x0, 0x7, 0x7, 0xfe, 0x9, 0xc1}, 0xe) 8.761272176s ago: executing program 1 (id=2878): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xe939, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x100000000) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x42054) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2282, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) 8.683476998s ago: executing program 7 (id=2879): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x84) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="1201010200000040"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x0, 0xf5, 0x81, 0x89, 0x2c}}]}}]}}, 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb2e, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf, 0xab, {0x8, 0x25, 0x1, 0x81, 0x33, 0xfa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3, 0xe, 0x8}}}}}}}}]}}, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x20001, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000340)) 8.457316912s ago: executing program 1 (id=2880): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x2, "9087"}, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000400)={0xa, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8002) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r7, r6, 0x0) syz_usb_control_io(r4, 0x0, 0x0) 7.058734897s ago: executing program 6 (id=2884): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000020) mknod(0x0, 0x8000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x2000000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3}, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {0x0, 0x4, 0x9, 0xfd, 0x0, 0x0, 0x0, 0x10, 0x2}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r4, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x30, {0x7, 0x8000000000000003}, 0xb}, 0x1) 6.777913553s ago: executing program 7 (id=2885): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023893) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000080)=0xa3f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xfc, 0x10, 0xc, {0x8, 0xb, 0x1, 0x5, 0x1, 0x21, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x3, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 6.643406285s ago: executing program 3 (id=2886): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000020) mknod(0x0, 0x8000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x2000000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3}, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {0x0, 0x4, 0x9, 0xfd, 0x0, 0x0, 0x0, 0x10, 0x2}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r4, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x30, {0x7, 0x8000000000000003}, 0xb}, 0x1) 6.407851961s ago: executing program 6 (id=2887): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r2, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x14014) 6.095322228s ago: executing program 3 (id=2888): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0xc0045b0f, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000340)={[{0x4fba, 0x7, 0xfd, 0x7, 0x98, 0xf6, 0x1, 0x1, 0x9, 0x2, 0x5, 0x6, 0x8}, {0x10, 0x401, 0xf2, 0xa6, 0x7, 0x6, 0x31, 0x15, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xc, 0x4c, 0x8, 0x4, 0x4, 0x1b, 0x7, 0x0, 0x6, 0x6}], 0x8}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6d, 0xf, 0x5, 0x7fff, 0x1}}) syz_usb_connect$cdc_ncm(0x3, 0x7c, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1, 0x20, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "736bd857c49a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x7e1, 0x5, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x15}, [@mdlm_detail={0x4, 0x24, 0x13, 0x6}, @mdlm_detail={0x4, 0x24, 0x13, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x88}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3df, 0x4, 0xe, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0x2, 0x4, 0x6}}}}}}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xff) 5.138929952s ago: executing program 1 (id=2890): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8895}, 0x24000000) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = io_uring_setup(0x120, &(0x7f0000000340)={0x0, 0x4ca0, 0x200, 0x3, 0x15c}) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f0000000440), 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0x0, 0x0, 0x240008d0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x1c, 0x49, 0x4, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, r5, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x56592a445bc89e6d) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 3.708627142s ago: executing program 1 (id=2891): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x30, 0x30, 0x8, "419cd49991b5b586"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000500)={0x0, 0xc, 0xe2, "220cbca8bfca0f94131f434f3d28e145b5c2b938311311a471be49b02cbe494d9f8bc6f587b1845492f9e7a6e037b4e9b17fcb461364ea30670a6cfc058118b635254d80216c54cc57b52e7155f9027b6603cb180d1bdd5444ec5df6b5bfaf9e702f16f8200d053695547ae37fa848797a1435003d74aa692178935dc91f315258061d20eb06f8603ac1c13503ef6635904cd8772e18234d0c93fb8a21ec1064e4903abca9af9862ad542005f9c78eb06f41329310ffaae3f283f18d3e3b0edb21df89a144facc9adc39814fe44d658e5cbab8333075d406144fcf5b6826ab6f9611"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000000780), 0x0}) 3.5700458s ago: executing program 3 (id=2892): unshare(0x6a040000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x200000000010001, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xf520a000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1044) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b27, &(0x7f0000000040)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x20, 0x15, 0x3b, "8173bb2d605a834edbcaea2efafad2539d1d90bede58f4126d5ae54aaed42b306659d5ff24399dc95ef3baa3d27feec07e39dc96357277dc64dd03"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xcb}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x2, 0x4, 0x2, 0x9, 0x8, 0x0, 0x7c5b, 0x8, 0x1, 0x8, 0x6, 0x7ff}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) 3.529183395s ago: executing program 7 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2501000000060006004e200000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c64a1553b6e901b9ff2f518c78042fb54208000500010000000800050001"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000000400)={0x0, 0x8048fd, 0x4000, 0x3, 0x110}, 0x1) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x1, 0xf0}, 0xfe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r9, 0x0, r10, 0x0, 0x38f9, 0x0) fcntl$setstatus(r10, 0x4, 0x6c00) fcntl$setstatus(r10, 0x4, 0x2400) write(r8, &(0x7f0000000040), 0xffffff4a) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3.449463228s ago: executing program 6 (id=2894): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2141}, {r2, 0x1}], 0x2, 0x8000004) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.445742577s ago: executing program 4 (id=2895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.082265345s ago: executing program 4 (id=2896): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x2, 0x2, 0x1}}, 0x50) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1e2) openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x1a8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x60081, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000001880)={0x3, r1, 0xfff, 0x3ff, 0x2, 0x944}) 2.782787083s ago: executing program 4 (id=2897): socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.594390491s ago: executing program 4 (id=2898): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000020) mknod(0x0, 0x8000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x2000000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3}, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {0x0, 0x4, 0x9, 0xfd, 0x0, 0x0, 0x0, 0x10, 0x2}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r4, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x30, {0x7, 0x8000000000000003}, 0xb}, 0x1) 2.53671191s ago: executing program 7 (id=2899): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff"], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959", 0x3b}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1", 0x38}, {&(0x7f0000000700)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d", 0xc}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000080)={0x28, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa61}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.199319633s ago: executing program 4 (id=2900): ftruncate(0xffffffffffffffff, 0x6800000000000000) unshare(0x28000600) r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x400003e}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xa, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0xffffffd8) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) 2.184923633s ago: executing program 7 (id=2901): socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x84, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6af, 0x7, 0x88a8}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r5 = msgget$private(0x0, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r5, 0x2, 0x0) 1.986191351s ago: executing program 3 (id=2902): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x400, 0x61) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 1.240284794s ago: executing program 6 (id=2903): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 1.022892929s ago: executing program 6 (id=2904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r9, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) 818.336632ms ago: executing program 3 (id=2905): r0 = fsopen(&(0x7f0000000240)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x406, r2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000022c0)={0x4002}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000002280)={0x20000008}) r6 = socket$netlink(0x10, 0x3, 0xb) epoll_create1(0x80000) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000}, 0xc) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000440)={0x0, 0x0, 0x80000}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r9, r8, 0x0) timer_create(0x4, &(0x7f0000000040)={0x0, 0x3f}, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0x60000011}) 521.590215ms ago: executing program 1 (id=2906): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r2, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x14014) 453.505281ms ago: executing program 3 (id=2907): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000600)={0x974f8b87cdb0aefb, 0x31, 0x4, "d4e61e58"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 153.774448ms ago: executing program 4 (id=2908): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1e2) openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x1a8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x60081, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000001880)={0x3, r1, 0xfff, 0x3ff, 0x2, 0x944}) 0s ago: executing program 7 (id=2909): socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): n process `syz.6.2502'. [ 691.239977][T13929] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 691.371579][T13922] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 691.403644][T13929] usb 2-1: Using ep0 maxpacket: 16 [ 691.434762][T13929] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 691.490019][T13929] usb 2-1: config 0 has no interface number 0 [ 691.499014][T13929] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 691.512592][T13929] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 691.530327][T13929] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 691.539940][T13922] usb 7-1: Using ep0 maxpacket: 16 [ 691.542603][T13929] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 691.556902][T13922] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.572255][T13929] usb 2-1: Product: syz [ 691.585825][T13922] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.595583][T13929] usb 2-1: Manufacturer: syz [ 691.608284][T13929] usb 2-1: SerialNumber: syz [ 691.616853][T13922] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.640859][T13929] usb 2-1: config 0 descriptor?? [ 691.649886][T13929] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 691.651594][T13922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.666189][T13929] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 691.679328][T13929] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 691.691915][T13929] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 691.710151][ T5943] tipc: Resetting bearer [ 691.727106][T13929] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 691.736129][T13922] usb 7-1: Product: syz [ 691.741462][T13922] usb 7-1: Manufacturer: syz [ 691.746180][T13922] usb 7-1: SerialNumber: syz [ 691.774433][T13929] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 691.790619][T13922] usb 7-1: 0:2 : does not exist [ 691.799394][T13929] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 691.812917][T13929] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 691.830355][T13929] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 691.843761][T13929] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 692.474201][T13929] usb 7-1: USB disconnect, device number 21 [ 692.703625][T13922] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 692.879971][T13922] usb 5-1: Using ep0 maxpacket: 16 [ 692.898724][T13922] usb 5-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 692.914404][T13933] usb 2-1: USB disconnect, device number 62 [ 692.942722][T13922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 692.957213][T13933] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 692.982097][T13922] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.007943][T13933] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 693.020116][T13922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.062446][T13922] usb 5-1: Product: syz [ 693.110838][T13922] usb 5-1: Manufacturer: syz [ 693.121881][T13933] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 693.137763][T13922] usb 5-1: SerialNumber: syz [ 693.260057][T13933] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 693.277079][T13922] usb 5-1: 0:2 : does not exist [ 693.314424][T13933] keyspan 2-1:0.107: device disconnected [ 693.473122][T13922] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 693.740246][T13922] usb 5-1: USB disconnect, device number 56 [ 693.875641][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.310264][T13922] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 694.353339][ T30] audit: type=1326 audit(1783283376.392:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 694.463796][ T30] audit: type=1326 audit(1783283376.392:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 694.510354][T13922] usb 4-1: Using ep0 maxpacket: 32 [ 694.536931][T13922] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 694.578236][ T30] audit: type=1326 audit(1783283376.392:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 694.607329][T13922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 694.653700][T13922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 694.687107][T13922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 694.724769][ T30] audit: type=1326 audit(1783283376.392:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 694.771892][T13922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 694.845017][T13922] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 694.859030][ T30] audit: type=1326 audit(1783283376.422:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 694.891204][T13922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.927655][T13922] usb 4-1: Product: syz [ 694.947003][T13922] usb 4-1: Manufacturer: syz [ 694.969225][T13922] usb 4-1: SerialNumber: syz [ 694.991644][ T30] audit: type=1326 audit(1783283376.462:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 695.046269][T13922] usb 4-1: config 0 descriptor?? [ 695.100092][ T30] audit: type=1326 audit(1783283376.462:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 695.129514][ T30] audit: type=1326 audit(1783283376.462:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 695.188755][ T30] audit: type=1326 audit(1783283376.462:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 695.254737][ T30] audit: type=1326 audit(1783283376.462:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.6.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739a19de59 code=0x7ffc0000 [ 695.394703][T13922] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 695.412797][T14547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.477359][T14547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.272684][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.318262][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.346137][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.388036][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.414373][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.444901][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.467242][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.499138][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.540974][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.564347][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.595599][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.616873][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.658317][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.697452][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.729925][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.753663][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.780387][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.826447][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.847126][T13922] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 696.889519][T13922] input input55: Timeout waiting for response from device. [ 696.998071][T13922] usb 4-1: USB disconnect, device number 60 [ 697.441287][T13922] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 697.631276][T13922] usb 4-1: Using ep0 maxpacket: 16 [ 697.648117][T13922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.691257][T13922] usb 4-1: config 0 has no interfaces? [ 697.708407][T13922] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 697.745568][T13922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.791024][T13922] usb 4-1: config 0 descriptor?? [ 698.411940][T13928] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 698.610211][T13928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.685521][T13928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 698.815430][T13928] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.891690][T13928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 698.947976][T13928] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 698.980656][T13928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.035400][T13928] usb 5-1: Product: syz [ 699.053176][T13928] usb 5-1: Manufacturer: syz [ 699.078182][T13928] usb 5-1: SerialNumber: syz [ 699.112363][T13928] usb 5-1: config 0 descriptor?? [ 699.136031][T13928] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 699.354786][T13928] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 699.384122][T13928] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 699.415449][T13928] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 700.237711][T13933] usb 4-1: USB disconnect, device number 61 [ 700.611950][T13922] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 700.759946][T13933] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 700.813914][T13922] usb 7-1: config 0 has no interfaces? [ 700.823916][T13922] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 700.839956][T13922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.849235][T13922] usb 7-1: Product: syz [ 700.854790][T13922] usb 7-1: Manufacturer: syz [ 700.865173][T13922] usb 7-1: SerialNumber: syz [ 700.873261][T13922] usb 7-1: config 0 descriptor?? [ 700.880998][T13928] usb 5-1: USB disconnect, device number 57 [ 700.930151][T13933] usb 4-1: Using ep0 maxpacket: 8 [ 700.976000][T13933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.028706][T13933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 701.077732][T13933] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 701.153159][T13933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.207944][T13933] usb 4-1: config 0 descriptor?? [ 701.322646][T13922] usb 7-1: USB disconnect, device number 22 [ 701.441514][T14638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.492951][T14638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.579022][T14638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.654638][T13933] usbhid 4-1:0.0: can't add hid device: -71 [ 701.677363][T13933] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 701.736693][T13933] usb 4-1: USB disconnect, device number 62 [ 702.194609][T14658] sctp: [Deprecated]: syz.6.2538 (pid 14658) Use of int in max_burst socket option. [ 702.194609][T14658] Use struct sctp_assoc_value instead [ 702.983194][T14664] No memory to map [ 703.002891][T14670] program syz.6.2542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.310166][T13922] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 703.489994][T13928] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 703.500146][T13922] usb 7-1: Using ep0 maxpacket: 16 [ 703.519542][T13922] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.547979][T13922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 703.581068][T13922] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 703.601303][T13922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.662945][T13922] usb 7-1: config 0 descriptor?? [ 703.701301][T13928] usb 8-1: Using ep0 maxpacket: 32 [ 703.731986][T13928] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 703.769581][T13928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.803708][T13928] usb 8-1: Product: syz [ 703.823862][T13928] usb 8-1: Manufacturer: syz [ 703.843223][T13928] usb 8-1: SerialNumber: syz [ 703.870223][T13928] usb 8-1: config 0 descriptor?? [ 704.196122][T13922] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 704.644215][T14695] syzkaller1: entered promiscuous mode [ 704.668334][T14695] syzkaller1: entered allmulticast mode [ 705.108031][T13922] usb 7-1: USB disconnect, device number 23 [ 705.420864][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 705.420883][ T30] audit: type=1326 audit(1783283387.462:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14676 comm="syz.7.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efecc59de59 code=0x0 [ 705.532824][T13928] usb 8-1: USB disconnect, device number 3 [ 705.874768][T14706] sg_write: data in/out 211/120 bytes for SCSI command 0x0-- guessing data in; [ 705.874768][T14706] program syz.1.2551 not setting count and/or reply_len properly [ 706.049933][T13929] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 706.209944][T13929] usb 4-1: Using ep0 maxpacket: 8 [ 706.223391][T13929] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 706.243159][T13929] usb 4-1: config 0 has no interface number 0 [ 706.257253][T13929] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 706.284889][T13929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.310809][T13929] usb 4-1: Product: syz [ 706.315246][T13929] usb 4-1: Manufacturer: syz [ 706.320588][T13929] usb 4-1: SerialNumber: syz [ 706.328592][T13929] usb 4-1: config 0 descriptor?? [ 706.360243][T13928] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 706.523423][T13928] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 706.546835][T14703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.555425][T13928] usb 7-1: config 0 has no interface number 0 [ 706.567998][T13929] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 706.580055][T13928] usb 7-1: config 0 interface 1 altsetting 149 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 706.598591][T13929] uvcvideo 4-1:0.31: No valid video chain found. [ 706.614849][T13928] usb 7-1: config 0 interface 1 has no altsetting 0 [ 706.627502][T13929] usb 4-1: USB disconnect, device number 63 [ 706.638611][T13928] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 706.674012][T13928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.702947][T13928] usb 7-1: config 0 descriptor?? [ 706.751601][T13928] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 707.080999][T13929] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 707.200764][T13926] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 707.240024][T13929] usb 2-1: Using ep0 maxpacket: 8 [ 707.280155][T13929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.302677][T13929] usb 2-1: config 0 has no interfaces? [ 707.314430][T13929] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 707.334506][T13929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.358927][T13929] usb 2-1: config 0 descriptor?? [ 707.369963][T13926] usb 8-1: Using ep0 maxpacket: 32 [ 707.389627][T13926] usb 8-1: config 0 has an invalid interface number: 158 but max is 0 [ 707.419265][T13926] usb 8-1: config 0 has no interface number 0 [ 707.446015][T13926] usb 8-1: too many endpoints for config 0 interface 158 altsetting 194: 59, using maximum allowed: 30 [ 707.464153][T13929] usb 7-1: USB disconnect, device number 24 [ 707.470517][T13926] usb 8-1: config 0 interface 158 altsetting 194 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 707.497752][T13926] usb 8-1: config 0 interface 158 has no altsetting 0 [ 707.521369][T13926] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 707.538253][T13926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.557686][T13926] usb 8-1: Product: syz [ 707.563350][T13926] usb 8-1: Manufacturer: syz [ 707.571668][T13926] usb 8-1: SerialNumber: syz [ 707.593948][T13926] usb 8-1: config 0 descriptor?? [ 707.727805][T14731] xt_TCPMSS: Only works on TCP SYN packets [ 708.044463][T13926] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 708.060759][T13926] gspca_ov534_9: reg_w failed -71 [ 708.480285][T13926] gspca_ov534_9: Unknown sensor 0000 [ 708.480387][T13926] ov534_9 8-1:0.158: probe with driver ov534_9 failed with error -22 [ 708.521953][T13926] usb 8-1: USB disconnect, device number 4 [ 709.883341][T13926] usb 2-1: USB disconnect, device number 63 [ 710.796056][T14778] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2571'. [ 711.151480][T14787] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 711.166628][T14787] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 711.179759][T14787] tipc: Resetting bearer [ 711.518382][T13929] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 711.540091][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 711.720065][T13929] usb 2-1: Using ep0 maxpacket: 8 [ 711.736890][T13929] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 711.754890][T13929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.776661][T13929] usb 2-1: Product: syz [ 711.789389][T13929] usb 2-1: Manufacturer: syz [ 711.806910][T13929] usb 2-1: SerialNumber: syz [ 711.829372][T13929] usb 2-1: config 0 descriptor?? [ 711.854562][T13929] gspca_main: se401-2.14.0 probing 047d:5003 [ 712.428881][T14196] hid_parser_main: 19 callbacks suppressed [ 712.428900][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.467597][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.488571][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.533650][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.554293][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.593070][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.618613][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.649988][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.668571][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.692929][T14196] hid-generic 0006:0008:0001.001C: unknown main item tag 0x0 [ 712.720078][T14196] hid-generic 0006:0008:0001.001C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 712.740004][T13929] usb 2-1: reset high-speed USB device number 64 using dummy_hcd [ 713.187250][T13929] gspca_se401: read req failed req 0x06 error -71 [ 713.216011][T13929] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 713.238185][T13929] usb 2-1: USB disconnect, device number 64 [ 713.437504][T14821] syzkaller0: entered promiscuous mode [ 713.451056][T14821] syzkaller0: entered allmulticast mode [ 714.113988][T14196] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 714.275200][T13926] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 714.311283][T14196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 714.336030][T14196] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 714.377101][T14196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 714.431104][T14196] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 714.468232][T14196] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 714.499588][T14196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.530718][T13926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.587361][T14196] usb 7-1: config 0 descriptor?? [ 714.655189][T13926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 714.676653][T13926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 714.738783][T13926] usb 5-1: Product: syz [ 714.749282][T13926] usb 5-1: Manufacturer: syz [ 714.769560][T13926] usb 5-1: SerialNumber: syz [ 714.820860][T14196] hdpvr 7-1:0.0: firmware version 0x1e dated [ 715.326966][T14841] syzkaller0: entered promiscuous mode [ 715.369327][T14841] syzkaller0: entered allmulticast mode [ 715.387657][T14842] xt_cgroup: path and classid specified [ 715.560719][T14196] hdpvr 7-1:0.0: Could not setup controls [ 715.582754][T14196] hdpvr 7-1:0.0: registering videodev failed [ 715.629921][T14200] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 715.666934][T14196] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 715.732974][T14196] usb 7-1: USB disconnect, device number 25 [ 715.798590][T14200] usb 4-1: Using ep0 maxpacket: 8 [ 715.834407][T14200] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 715.862764][T14200] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 715.887897][T14200] usb 4-1: config 0 has no interface number 0 [ 715.906089][T14200] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.938949][T14200] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 715.996450][T14200] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 716.046106][T14200] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 716.095151][T14200] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 716.117533][T14200] usb 4-1: Product: syz [ 716.137564][T14200] usb 4-1: Manufacturer: syz [ 716.175385][T14200] usb 4-1: config 0 descriptor?? [ 716.205195][T14844] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 716.801324][T14862] syzkaller0: entered promiscuous mode [ 716.808033][T14862] syzkaller0: entered allmulticast mode [ 716.858427][T14200] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input56 [ 717.733987][T13922] usb 5-1: USB disconnect, device number 58 [ 718.988981][T13922] usb 4-1: USB disconnect, device number 64 [ 718.989192][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 719.211450][T14886] tipc: Resetting bearer [ 719.294700][T14886] 0: reclassify loop, rule prio 0, protocol 800 [ 719.323369][T14885] tipc: Resetting bearer [ 720.275579][ T8216] tipc: Resetting bearer [ 721.669162][T14914] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2611'. [ 721.714428][T14914] ALSA: mixer_oss: invalid OSS volume '' [ 721.739289][T14914] ALSA: mixer_oss: invalid OSS volume '' [ 721.761872][T14914] ALSA: mixer_oss: invalid OSS volume '' [ 721.812876][T14914] ALSA: mixer_oss: invalid OSS volume '' [ 721.892941][T14914] ALSA: mixer_oss: invalid OSS volume '' [ 721.902144][T14914] ALSA: mixer_oss: invalid OSS volume '' [ 721.917594][T14914] ALSA: mixer_oss: invalid OSS volume '+--' [ 721.937223][T14914] ALSA: mixer_oss: invalid OSS volume '+--' [ 721.954500][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 721.978664][T14914] ALSA: mixer_oss: invalid OSS volume '/8' [ 721.980303][T14200] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 722.006444][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 722.030046][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 722.037089][T14914] ALSA: mixer_oss: invalid OSS volume '+--' [ 722.040262][T13926] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 722.055584][T14914] ALSA: mixer_oss: invalid OSS volume '+--' [ 722.062219][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 722.094417][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.112322][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.120175][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.136124][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.142617][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.166891][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.183791][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.201997][T14200] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.212858][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.228683][T14200] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 722.228709][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.228728][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.281095][T14200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 722.308542][T13926] usb 7-1: config 1 has an invalid interface number: 188 but max is 0 [ 722.309351][T14200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 722.327013][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.327036][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.360064][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.366479][T13926] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.366506][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.387780][T14200] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 722.404888][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.412464][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.419321][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.421879][T13926] usb 7-1: config 1 has no interface number 0 [ 722.437727][T14200] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 722.447729][T14200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 722.458965][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.465947][T14200] usb 5-1: Product: syz [ 722.470695][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.476095][T13926] usb 7-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.493702][T14200] usb 5-1: Manufacturer: syz [ 722.500216][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.511901][T14200] usb 5-1: SerialNumber: syz [ 722.530815][T13926] usb 7-1: config 1 interface 188 has no altsetting 0 [ 722.535722][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.563852][T14200] usb 5-1: config 0 descriptor?? [ 722.572190][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.598710][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.602752][T13926] usb 7-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 722.628857][T14922] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 722.649022][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.659184][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.666754][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.667825][T13926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.708077][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.716667][T13926] usb 7-1: Product: syz [ 722.718753][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.733000][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.748372][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.754875][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.758970][T13926] usb 7-1: Manufacturer: syz [ 722.767871][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.774392][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.784804][T14200] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 722.806413][T14200] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 722.809977][T13926] usb 7-1: SerialNumber: syz [ 722.819618][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.849277][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.864093][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.882392][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.902622][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.920618][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.930261][T13928] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 722.966009][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.980995][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 722.998486][T14200] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 723.009242][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.021948][T14200] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 723.037779][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.055906][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.064937][T14200] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 723.080203][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.089958][T13928] usb 4-1: Using ep0 maxpacket: 32 [ 723.101715][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.141481][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.157831][T13928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 723.184547][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.197992][T13928] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 723.208587][T14200] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 723.238582][T13928] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 723.285772][T13928] usb 4-1: can't read configurations, error -71 [ 723.308235][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.335507][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.372385][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.402492][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.434991][T14914] ALSA: mixer_oss: invalid OSS volume '/24' [ 723.465872][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.477150][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2616'. [ 723.489699][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.517338][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.539800][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.558095][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.586076][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.615398][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.629892][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.656866][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.675407][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.692814][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.725626][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.732421][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.739002][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.745841][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.752338][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.758743][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.768140][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.786268][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.792858][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.801280][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.825428][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.844281][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.872390][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.892901][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.907119][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.932898][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.957451][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 723.981090][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 723.994917][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.013532][T14200] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 724.027623][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.044857][T14200] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 724.061596][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.086752][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.129727][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.157694][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.185919][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.212536][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.244750][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.277126][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.285719][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.293291][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.301445][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.308134][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.323407][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.344107][T14914] ALSA: mixer_oss: invalid OSS volume '+--' [ 724.365080][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.393211][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.420682][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.442503][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.454450][T13928] usb 5-1: USB disconnect, device number 59 [ 724.469955][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.495129][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.527741][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.559253][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.591772][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.612580][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.636161][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.655152][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.677315][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.698453][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.724159][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.746035][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.780235][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.800180][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.812041][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.835610][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.843109][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.852910][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.861359][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.868533][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.875285][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.882796][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.890346][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.896503][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.903757][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.912444][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.918546][T14914] ALSA: mixer_oss: invalid OSS volume '|--' [ 724.926860][T14914] ALSA: mixer_oss: invalid OSS volume '/32' [ 724.933364][T14914] ALSA: mixer_oss: invalid OSS volume '' [ 724.988808][T13926] usb 7-1: unknown interface protocol 0xc1, assuming v1 [ 725.005393][T13926] usb 7-1: cannot find UAC_HEADER [ 725.155132][T13926] snd-usb-audio 7-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 725.182206][T13926] usb 7-1: USB disconnect, device number 26 [ 725.223695][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.472896][T14962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2625'. [ 725.530110][T13926] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 725.652389][T14961] kvm: user requested TSC rate below hardware speed [ 725.689611][T14961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 725.731081][T13926] usb 7-1: Using ep0 maxpacket: 8 [ 725.758081][T13926] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.789414][T13926] usb 7-1: config 0 has no interfaces? [ 725.808019][T13926] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 725.808053][T14961] tipc: Enabling of bearer rejected, failed to enable media [ 725.836452][T13926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.867715][T13926] usb 7-1: config 0 descriptor?? [ 726.330421][T13928] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 726.433253][T14979] syzkaller0: entered promiscuous mode [ 726.439009][T14979] syzkaller0: entered allmulticast mode [ 726.475237][T13929] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 726.501468][T13928] usb 4-1: Using ep0 maxpacket: 32 [ 726.508968][T13928] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 726.518865][T13928] usb 4-1: config 0 has no interface number 0 [ 726.526409][T13928] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.538093][T13928] usb 4-1: config 0 interface 85 has no altsetting 0 [ 726.548557][T13928] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 726.562366][T13928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.573632][T13928] usb 4-1: Product: syz [ 726.578535][T13928] usb 4-1: Manufacturer: syz [ 726.583986][T13928] usb 4-1: SerialNumber: syz [ 726.593079][T13928] usb 4-1: config 0 descriptor?? [ 726.632676][T13929] usb 5-1: config 3 has an invalid interface number: 3 but max is 1 [ 726.660171][T13929] usb 5-1: config 3 has an invalid interface number: 50 but max is 1 [ 726.692658][T13929] usb 5-1: config 3 has no interface number 0 [ 726.708850][T13929] usb 5-1: config 3 has no interface number 1 [ 726.719389][T13929] usb 5-1: config 3 interface 3 has no altsetting 0 [ 726.738409][T13929] usb 5-1: config 3 interface 50 has no altsetting 0 [ 726.755770][T13929] usb 5-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 726.771778][T13929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.784917][T13929] usb 5-1: Product: syz [ 726.789221][T13929] usb 5-1: Manufacturer: syz [ 726.798768][T13929] usb 5-1: SerialNumber: syz [ 727.068120][T13929] usb 5-1: unknown number of interfaces: 2 [ 727.084310][T13929] usb 5-1: USB disconnect, device number 60 [ 727.231374][T13928] appletouch 4-1:0.85: Geyser mode initialized. [ 727.251072][T13928] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input57 [ 727.572384][T13922] usb 4-1: USB disconnect, device number 67 [ 727.615514][T13922] appletouch 4-1:0.85: input: appletouch disconnected [ 727.691525][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 727.786980][T15001] netlink: 'syz.4.2634': attribute type 10 has an invalid length. [ 727.979540][T15001] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 727.999037][T15001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.031311][T15001] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 728.087291][T15001] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 728.123003][T13926] usb 7-1: USB disconnect, device number 27 [ 728.207695][ T30] audit: type=1326 audit(1783283410.242:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639059de59 code=0x7ffc0000 [ 728.343518][ T30] audit: type=1326 audit(1783283410.242:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639059de59 code=0x7ffc0000 [ 728.491522][ T30] audit: type=1326 audit(1783283410.242:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f639059de59 code=0x7ffc0000 [ 728.635101][ T30] audit: type=1326 audit(1783283410.242:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639059de59 code=0x7ffc0000 [ 728.781873][ T30] audit: type=1326 audit(1783283410.282:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639059de59 code=0x7ffc0000 [ 728.928854][ T30] audit: type=1326 audit(1783283410.332:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f639055e68e code=0x7ffc0000 [ 729.078856][ T30] audit: type=1326 audit(1783283410.352:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f639055e68e code=0x7ffc0000 [ 729.197399][ T30] audit: type=1326 audit(1783283410.362:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f639055e68e code=0x7ffc0000 [ 729.344485][ T30] audit: type=1326 audit(1783283410.362:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f639055e68e code=0x7ffc0000 [ 729.444573][ T30] audit: type=1326 audit(1783283410.372:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f639055e68e code=0x7ffc0000 [ 730.053143][T15028] tipc: Resetting bearer [ 730.072819][T15023] kvm: kvm [15022]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 730.091437][T15023] kvm: kvm [15022]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 730.132664][T15028] 0: reclassify loop, rule prio 0, protocol 800 [ 730.161226][T15027] tipc: Resetting bearer [ 730.535414][T15038] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2644'. [ 731.177147][ T5940] tipc: Resetting bearer [ 731.620921][T13928] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 731.701721][T14200] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 731.791883][T13928] usb 2-1: Using ep0 maxpacket: 16 [ 731.823401][T13928] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 731.862069][T13928] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 731.888963][T13928] usb 2-1: config 8 has no interface number 0 [ 731.900024][T14200] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 731.909519][T13928] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 731.927836][T14200] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.949544][T13928] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 731.976113][T14200] usb 4-1: config 0 has no interfaces? [ 732.002753][T14200] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 732.021099][T13928] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid wMaxPacketSize 0 [ 732.037503][T14200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.051332][T13928] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 732.084888][T14200] usb 4-1: config 0 descriptor?? [ 732.110193][T13928] usb 2-1: config 8 interface 206 has no altsetting 0 [ 732.150455][T13928] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 732.179727][T13928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.211650][T13928] usb 2-1: Product: syz [ 732.226849][T13928] usb 2-1: Manufacturer: syz [ 732.250201][T13928] usb 2-1: SerialNumber: syz [ 732.570142][T13922] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 732.740171][T13922] usb 7-1: Using ep0 maxpacket: 32 [ 732.757042][T13922] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.784808][T13922] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.823503][T13922] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 732.838515][T13922] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 732.872794][T13922] usb 7-1: Product: syz [ 732.885829][T13922] usb 7-1: Manufacturer: syz [ 732.919528][T13922] hub 7-1:4.0: USB hub found [ 733.118390][T13928] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 733.156756][T13922] hub 7-1:4.0: 5 ports detected [ 733.168379][T13928] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 733.184132][T13922] hub 7-1:4.0: insufficient power available to use all downstream ports [ 733.219249][T13928] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 733.290330][T13928] usb 2-1: USB disconnect, device number 65 [ 733.334244][T13928] garmin_gps 2-1:8.206: device disconnected [ 733.487291][T13922] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 733.509590][T13922] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 733.583581][T13922] usb 7-1: USB disconnect, device number 28 [ 734.852781][T13922] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 735.020733][T13922] usb 5-1: Using ep0 maxpacket: 8 [ 735.028298][T13928] usb 4-1: USB disconnect, device number 68 [ 735.040337][T13933] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 735.057611][T13922] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 735.078264][T13922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.115165][T13922] usb 5-1: config 0 has no interfaces? [ 735.129077][T13922] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 735.144617][T13922] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 735.164518][T13922] usb 5-1: Product: syz [ 735.174388][T13922] usb 5-1: Manufacturer: syz [ 735.195309][T13922] usb 5-1: config 0 descriptor?? [ 735.227164][T13933] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.254407][T13933] usb 8-1: config 0 has no interfaces? [ 735.274265][T13933] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 735.293045][T13933] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.314938][T13933] usb 8-1: Product: syz [ 735.325957][T13933] usb 8-1: Manufacturer: syz [ 735.340176][T13933] usb 8-1: SerialNumber: syz [ 735.353803][T13933] usb 8-1: config 0 descriptor?? [ 735.459651][T15079] bond5: (slave dummy0): Releasing active interface [ 735.478561][T15079] dummy0: left promiscuous mode [ 735.653110][T15085] netlink: 11870 bytes leftover after parsing attributes in process `syz.7.2659'. [ 735.708416][T13933] usb 8-1: USB disconnect, device number 5 [ 735.900084][T14200] usb 5-1: USB disconnect, device number 61 [ 736.501214][T13928] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 736.699936][T13928] usb 4-1: Using ep0 maxpacket: 8 [ 736.724722][T13928] usb 4-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 736.767456][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 736.793105][T13928] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 736.829068][T13928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 736.849664][T13928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 736.861575][T13928] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 736.863268][T15114] vivid-000: ================= START STATUS ================= [ 736.901518][T13928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 736.917541][T13928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.935217][T15114] vivid-000: Test Pattern: 75% Colorbar [ 736.951981][T13928] usb 4-1: Product: syz [ 736.956989][T15119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2667'. [ 736.970969][T13928] usb 4-1: Manufacturer: syz [ 736.978764][T13928] usb 4-1: SerialNumber: syz [ 737.003914][T15114] vivid-000: Fill Percentage of Frame: 100 [ 737.011949][T13928] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 737.036406][T15114] vivid-000: Horizontal Movement: Move Right Fast [ 737.049495][T15114] vivid-000: Vertical Movement: Move Down Slow [ 737.067368][T13928] usbtest 4-1:1.0: Linux user mode ISO test driver [ 737.077811][T13928] usbtest 4-1:1.0: high-speed {control iso-in} tests (+alt) [ 737.078065][T15114] vivid-000: OSD Text Mode: [ 737.103859][T15120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2667'. [ 737.133965][T15114] All [ 737.145558][T15114] vivid-000: Show Border: false [ 737.164809][T15114] vivid-000: Show Square: false [ 737.181398][T15114] vivid-000: Sensor Flipped Horizontally: false [ 737.199252][T15114] vivid-000: Sensor Flipped Vertically: false [ 737.214760][T15114] vivid-000: Insert SAV Code in Image: false [ 737.249469][T15114] vivid-000: Insert EAV Code in Image: false [ 737.271394][T15114] vivid-000: Insert Video Guard Band: false [ 737.309446][T15114] vivid-000: Reduced Framerate: false [ 737.340775][T15114] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 737.386530][T15114] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 737.408361][T15114] vivid-000: Enable Capture Cropping: true [ 737.429621][T15114] vivid-000: Enable Capture Composing: true [ 737.440208][T15114] vivid-000: Enable Capture Scaler: true [ 737.448985][T15114] vivid-000: Timestamp Source: End of Frame [ 737.466220][T15114] vivid-000: Colorspace: sRGB [ 737.481902][T15114] vivid-000: Transfer Function: Default [ 737.494834][T15114] vivid-000: Y'CbCr Encoding: Default [ 737.514672][T15114] vivid-000: HSV Encoding: Hue 0-179 [ 737.530792][T15114] vivid-000: Quantization: Default [ 737.541664][T15114] vivid-000: Apply Alpha To Red Only: false [ 737.558594][T15114] vivid-000: Standard Aspect Ratio: 4x3 [ 737.579662][T15114] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 737.599129][T15114] vivid-000: DV Timings: 640x480p59 inactive [ 737.615955][T15114] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 737.633190][T15114] vivid-000: Maximum EDID Blocks: 2 [ 737.643759][T15114] vivid-000: Limited RGB Range (16-235): false [ 737.661757][T15114] vivid-000: Rx RGB Quantization Range: Automatic [ 737.668984][T15114] vivid-000: Power Present: 0x00000001 [ 737.687328][T15114] tpg source WxH: 1600x1200 (Y'CbCr) [ 737.697261][T15114] tpg field: 1 [ 737.709030][T15114] tpg crop: (0,0)/1600x1200 [ 737.719928][T15114] tpg compose: (0,0)/1600x1200 [ 737.726964][T15114] tpg colorspace: 8 [ 737.742715][T15114] tpg transfer function: 0/2 [ 737.750486][T15114] tpg Y'CbCr encoding: 0/1 [ 737.758575][T15114] tpg quantization: 0/2 [ 737.769151][T15114] tpg RGB range: 0/2 [ 737.783103][T15114] vivid-000: ================== END STATUS ================== [ 739.066867][T13922] usb 4-1: USB disconnect, device number 69 [ 739.124011][T13929] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 739.307170][T13929] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 739.325545][T13929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.352457][T13929] usb 5-1: Product: syz [ 739.369108][T13929] usb 5-1: Manufacturer: syz [ 739.384998][T13929] usb 5-1: SerialNumber: syz [ 739.460187][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 739.470919][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 739.480250][ T50] Bluetooth: hci3: hardware error 0x00 [ 739.762294][T15146] syzkaller0: entered promiscuous mode [ 739.776731][T15146] syzkaller0: entered allmulticast mode [ 739.831791][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2678'. [ 739.869303][T15150] vivid-000: ================= START STATUS ================= [ 739.908772][T15150] vivid-000: Test Pattern: 75% Colorbar [ 739.915416][T15150] vivid-000: Fill Percentage of Frame: 100 [ 739.929792][T15150] vivid-000: Horizontal Movement: [ 739.929943][T13928] IPVS: starting estimator thread 0... [ 739.961988][T15150] Move Right Fast [ 739.976175][T15150] vivid-000: Vertical Movement: Move Down Slow [ 740.021512][T15150] vivid-000: OSD Text Mode: All [ 740.039973][T15152] IPVS: using max 31 ests per chain, 74400 per kthread [ 740.052851][T15150] vivid-000: Show Border: false [ 740.062084][T15150] vivid-000: Show Square: false [ 740.079337][T15150] vivid-000: Sensor Flipped Horizontally: false [ 740.099347][T15150] vivid-000: Sensor Flipped Vertically: false [ 740.124858][T15150] vivid-000: Insert SAV Code in Image: false [ 740.152128][T15150] vivid-000: Insert EAV Code in Image: false [ 740.184358][T15150] vivid-000: Insert Video Guard Band: false [ 740.207540][T15150] vivid-000: Reduced Framerate: false [ 740.229098][T15150] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 740.241252][T15150] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 740.276115][T15150] vivid-000: Enable Capture Cropping: true [ 740.285449][T15150] vivid-000: Enable Capture Composing: true [ 740.305189][T15150] vivid-000: Enable Capture Scaler: true [ 740.326441][T15150] vivid-000: Timestamp Source: End of Frame [ 740.342556][T15150] vivid-000: Colorspace: sRGB [ 740.359562][T15150] vivid-000: Transfer Function: Default [ 740.376666][T15150] vivid-000: Y'CbCr Encoding: Default [ 740.394199][T15150] vivid-000: HSV Encoding: Hue 0-179 [ 740.413184][T15150] vivid-000: Quantization: Default [ 740.437498][T15150] vivid-000: Apply Alpha To Red Only: false [ 740.458480][T13929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 740.471421][T15150] vivid-000: Standard Aspect Ratio: 4x3 [ 740.477083][T15150] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 740.485062][T13929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 740.501011][T15150] vivid-000: DV Timings: 640x480p59 inactive [ 740.507879][T13929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 740.525126][T15150] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 740.555552][T15150] vivid-000: Maximum EDID Blocks: 2 [ 740.567714][T13929] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 740.570442][T13933] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 740.586842][T15150] vivid-000: Limited RGB Range (16-235): false [ 740.599325][T15150] vivid-000: Rx RGB Quantization Range: Automatic [ 740.613395][T13929] usb 5-1: USB disconnect, device number 62 [ 740.623516][T15150] vivid-000: Power Present: 0x00000001 [ 740.645416][T15150] tpg source WxH: 1600x1200 (Y'CbCr) [ 740.665092][T15150] tpg field: 1 [ 740.671843][T15150] tpg crop: (0,0)/1600x1200 [ 740.676656][T15150] tpg compose: (0,0)/1600x1200 [ 740.682350][T15150] tpg colorspace: 8 [ 740.686250][T15150] tpg transfer function: 0/2 [ 740.713115][T15150] tpg Y'CbCr encoding: 0/1 [ 740.722816][T15150] tpg quantization: 0/2 [ 740.729138][T15150] tpg RGB range: 0/2 [ 740.737455][T15150] vivid-000: ================== END STATUS ================== [ 740.782227][T13933] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.823789][T13933] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 740.935164][T13933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.999146][T13933] usb 8-1: config 0 descriptor?? [ 741.020595][T13933] pwc: Askey VC010 type 2 USB webcam detected. [ 741.031707][T15164] syzkaller0: entered promiscuous mode [ 741.066508][T15164] syzkaller0: entered allmulticast mode [ 741.232888][T13933] pwc: send_video_command error -71 [ 741.248929][T13933] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 741.266393][T13933] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 741.310935][T13933] usb 8-1: USB disconnect, device number 6 [ 741.539938][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 741.610372][T13929] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 741.782612][T13929] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.801463][T13933] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 741.801897][T13929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 741.841567][T13929] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.854258][T13929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.878648][T13929] usb 5-1: Product: syz [ 741.895356][T13929] usb 5-1: Manufacturer: syz [ 741.910572][T13929] usb 5-1: SerialNumber: syz [ 741.934864][T13929] usb 5-1: 0:2 : does not exist [ 741.943306][T13929] usb 5-1: unit 9 not found! [ 741.974978][T13933] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.999685][T13933] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 742.019511][T13933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.048010][T13933] usb 8-1: config 0 descriptor?? [ 742.071299][T13933] pwc: Askey VC010 type 2 USB webcam detected. [ 742.178280][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.220030][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.381736][T13929] usb 5-1: USB disconnect, device number 63 [ 742.467343][T13933] pwc: recv_control_msg error -32 req 02 val 2b00 [ 742.488003][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 742.499194][T13933] pwc: recv_control_msg error -32 req 02 val 2700 [ 742.515062][T13933] pwc: recv_control_msg error -32 req 02 val 2c00 [ 742.524367][T15189] vivid-000: ================= START STATUS ================= [ 742.533649][T13933] pwc: recv_control_msg error -32 req 04 val 1000 [ 742.545999][T15189] vivid-000: Test Pattern: 75% Colorbar [ 742.550942][T13933] pwc: recv_control_msg error -32 req 04 val 1300 [ 742.563273][T15189] vivid-000: Fill Percentage of Frame: 100 [ 742.570830][T13933] pwc: recv_control_msg error -32 req 04 val 1400 [ 742.574196][T15189] vivid-000: Horizontal Movement: Move Right Fast [ 742.585154][T15189] vivid-000: Vertical Movement: Move Down Slow [ 742.585463][T13933] pwc: recv_control_msg error -32 req 02 val 2000 [ 742.592172][T15189] vivid-000: OSD Text Mode: All [ 742.606285][T15189] vivid-000: Show Border: false [ 742.612526][T13933] pwc: recv_control_msg error -32 req 02 val 2100 [ 742.621581][T13933] pwc: recv_control_msg error -32 req 04 val 1500 [ 742.628914][T15189] vivid-000: Show Square: false [ 742.635940][T13933] pwc: recv_control_msg error -32 req 02 val 2500 [ 742.639695][T15189] vivid-000: Sensor Flipped Horizontally: false [ 742.653868][T13933] pwc: recv_control_msg error -32 req 02 val 2400 [ 742.666172][T13933] pwc: recv_control_msg error -32 req 02 val 2600 [ 742.672752][T15189] vivid-000: Sensor Flipped Vertically: false [ 742.680690][T15189] vivid-000: Insert SAV Code in Image: false [ 742.687251][T13933] pwc: recv_control_msg error -32 req 02 val 2900 [ 742.695150][T15189] vivid-000: Insert EAV Code in Image: false [ 742.711639][T15189] vivid-000: Insert Video Guard Band: false [ 742.719311][T15189] vivid-000: Reduced Framerate: false [ 742.726472][T15189] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 742.737138][T15189] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 742.747779][T15189] vivid-000: Enable Capture Cropping: true [ 742.758943][T15189] vivid-000: Enable Capture Composing: true [ 742.769243][T15189] vivid-000: Enable Capture Scaler: true [ 742.777510][T15189] vivid-000: Timestamp Source: End of Frame [ 742.785444][T15189] vivid-000: Colorspace: sRGB [ 742.793482][T15189] vivid-000: Transfer Function: Default [ 742.799337][T15189] vivid-000: Y'CbCr Encoding: Default [ 742.805625][T15189] vivid-000: HSV Encoding: Hue 0-179 [ 742.814345][T15189] vivid-000: Quantization: Default [ 742.819747][T15189] vivid-000: Apply Alpha To Red Only: false [ 742.826850][T15189] vivid-000: Standard Aspect Ratio: 4x3 [ 742.833062][T15189] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 742.842872][T15189] vivid-000: DV Timings: 640x480p59 inactive [ 742.849173][T15189] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 742.857290][T15189] vivid-000: Maximum EDID Blocks: 2 [ 742.863773][T15189] vivid-000: Limited RGB Range (16-235): false [ 742.872011][T15189] vivid-000: Rx RGB Quantization Range: Automatic [ 742.878658][T15189] vivid-000: Power Present: 0x00000001 [ 742.887377][T15189] tpg source WxH: 1600x1200 (Y'CbCr) [ 742.894742][T15189] tpg field: 1 [ 742.898339][T15189] tpg crop: (0,0)/1600x1200 [ 742.907397][T13933] pwc: recv_control_msg error -71 req 04 val 1100 [ 742.919304][T15189] tpg compose: (0,0)/1600x1200 [ 742.927886][T15189] tpg colorspace: 8 [ 742.932229][T13933] pwc: recv_control_msg error -71 req 04 val 1200 [ 742.939503][T15189] tpg transfer function: 0/2 [ 742.951836][T15189] tpg Y'CbCr encoding: 0/1 [ 742.958315][T15189] tpg quantization: 0/2 [ 742.964778][T13933] pwc: Registered as video103. [ 742.976642][T15189] tpg RGB range: 0/2 [ 742.985870][T13933] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input59 [ 743.000381][T15189] vivid-000: ================== END STATUS ================== [ 743.031975][T13933] usb 8-1: USB disconnect, device number 7 [ 743.481588][T15207] tipc: Resetting bearer [ 743.618505][T15207] simple: basic_1 [ 743.662280][T15206] tipc: Resetting bearer [ 744.380267][T13922] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 744.590106][T13922] usb 4-1: Using ep0 maxpacket: 32 [ 744.685052][T13922] usb 4-1: config 123 interface 0 has no altsetting 0 [ 744.712083][T13922] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 744.780371][T13922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.857224][T13922] usb 4-1: Product: syz [ 744.957521][T13922] usb 4-1: Manufacturer: syz [ 744.996255][T13922] usb 4-1: SerialNumber: syz [ 745.011761][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2706'. [ 745.078292][T15234] vivid-000: ================= START STATUS ================= [ 745.115742][ T8600] tipc: Resetting bearer [ 745.128870][T15234] vivid-000: Test Pattern: 75% Colorbar [ 745.144742][T15236] netlink: 'syz.6.2706': attribute type 1 has an invalid length. [ 745.187533][T15234] vivid-000: Fill Percentage of Frame: 100 [ 745.187586][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2706'. [ 745.240673][T15234] vivid-000: Horizontal Movement: Move Right Fast [ 745.264001][T15234] vivid-000: Vertical Movement: Move Down Slow [ 745.303421][T15234] vivid-000: OSD Text Mode: All [ 745.334752][T15234] vivid-000: Show Border: false [ 745.355236][T15234] vivid-000: Show Square: false [ 745.396559][T15234] vivid-000: Sensor Flipped Horizontally: false [ 745.429747][T15234] vivid-000: Sensor Flipped Vertically: false [ 745.468085][T15234] vivid-000: Insert SAV Code in Image: false [ 745.490013][T15234] vivid-000: Insert EAV Code in Image: false [ 745.577320][T15234] vivid-000: Insert Video Guard Band: false [ 745.647902][T15234] vivid-000: Reduced Framerate: false [ 745.647932][T15234] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 745.647954][T15234] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 745.647975][T15234] vivid-000: Enable Capture Cropping: true [ 745.647995][T15234] vivid-000: Enable Capture Composing: true [ 745.648034][T15234] vivid-000: Enable Capture Scaler: true [ 745.648054][T15234] vivid-000: Timestamp Source: End of Frame [ 745.648073][T15234] vivid-000: Colorspace: sRGB [ 745.648091][T15234] vivid-000: Transfer Function: Default [ 745.648110][T15234] vivid-000: Y'CbCr Encoding: Default [ 745.648129][T15234] vivid-000: HSV Encoding: Hue 0-179 [ 745.648167][T15234] vivid-000: Quantization: Default [ 745.648187][T15234] vivid-000: Apply Alpha To Red Only: false [ 745.648206][T15234] vivid-000: Standard Aspect Ratio: 4x3 [ 745.648226][T15234] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 745.648251][T15234] vivid-000: DV Timings: 640x480p59 inactive [ 745.648275][T15234] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 745.648314][T15234] vivid-000: Maximum EDID Blocks: 2 [ 745.648334][T15234] vivid-000: Limited RGB Range (16-235): false [ 745.648365][T15234] vivid-000: Rx RGB Quantization Range: Automatic [ 745.648385][T15234] vivid-000: Power Present: 0x00000001 [ 745.648406][T15234] tpg source WxH: 1600x1200 (Y'CbCr) [ 745.648419][T15234] tpg field: 1 [ 745.648446][T15234] tpg crop: (0,0)/1600x1200 [ 745.648458][T15234] tpg compose: (0,0)/1600x1200 [ 745.648493][T15234] tpg colorspace: 8 [ 745.648504][T15234] tpg transfer function: 0/2 [ 745.648519][T15234] tpg Y'CbCr encoding: 0/1 [ 745.655632][T15234] tpg quantization: 0/2 [ 745.655661][T15234] tpg RGB range: 0/2 [ 745.655672][T15234] vivid-000: ================== END STATUS ================== [ 746.240154][ T5752] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 746.413305][ T5752] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 746.416834][ T5752] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.416900][ T5752] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.416922][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.419427][ T5752] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.419485][ T5752] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.419539][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.422782][ T5752] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.422847][ T5752] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.422868][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.424203][ T5752] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.424240][ T5752] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.424260][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.426520][ T5752] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.426557][ T5752] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.426578][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.428772][ T5752] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.428814][ T5752] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.428834][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.429998][ T5752] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.430034][ T5752] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.430058][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.439709][ T5752] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.439749][ T5752] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.441719][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.449457][ T5752] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 746.449482][ T5752] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 746.449499][ T5752] usb 2-1: Product: syz [ 746.449511][ T5752] usb 2-1: Manufacturer: syz [ 746.449523][ T5752] usb 2-1: SerialNumber: syz [ 746.458217][ T5752] usb 2-1: config 0 descriptor?? [ 746.515464][ T5752] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 746.902162][ T5752] usb 2-1: USB disconnect, device number 66 [ 746.923947][ T5752] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 747.003569][T15258] syzkaller0: entered promiscuous mode [ 747.003590][T15258] syzkaller0: entered allmulticast mode [ 747.006720][T15251] tipc: Started in network mode [ 747.006758][T15251] tipc: Node identity 3ade926cb7d6, cluster identity 4711 [ 747.010462][T15251] tipc: Enabled bearer , priority 0 [ 747.010882][T15261] syzkaller0: entered promiscuous mode [ 747.010907][T15261] syzkaller0: entered allmulticast mode [ 747.088646][T15251] tipc: Resetting bearer [ 747.128481][T15250] tipc: Resetting bearer [ 747.167770][T15250] tipc: Disabling bearer [ 747.392984][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.393049][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.689113][T15268] tipc: Enabling of bearer rejected, already enabled [ 747.719156][T15268] tipc: Resetting bearer [ 747.845616][T13922] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 747.887175][T13922] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 747.916252][T13922] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 747.929192][T13922] usb 4-1: media controller created [ 747.947531][T15273] tipc: Enabling of bearer rejected, already enabled [ 747.977874][T13922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 748.070799][T13922] set interface failed [ 748.086381][T13922] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 748.101877][T15275] tipc: Enabling of bearer rejected, already enabled [ 748.144881][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2717'. [ 748.154056][T13922] error writing reg: 0xff, val: 0x00 [ 748.174903][T15278] vivid-000: ================= START STATUS ================= [ 748.190211][ T5752] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 748.199487][T15278] vivid-000: Test Pattern: 75% Colorbar [ 748.230065][T15278] vivid-000: Fill Percentage of Frame: 100 [ 748.236516][T15280] netlink: 'syz.4.2717': attribute type 1 has an invalid length. [ 748.242853][T13922] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 748.261509][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 748.284893][T15278] vivid-000: Horizontal Movement: Move Right Fast [ 748.291729][T13922] usb 4-1: USB disconnect, device number 70 [ 748.303103][T15278] vivid-000: Vertical Movement: Move Down Slow [ 748.349702][T15278] vivid-000: OSD Text Mode: All [ 748.382486][ T5752] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 748.395499][T15278] vivid-000: Show Border: false [ 748.404606][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 748.412492][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.427007][T15278] vivid-000: Show Square: false [ 748.439108][T15278] vivid-000: Sensor Flipped Horizontally: false [ 748.447489][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.461574][T15278] vivid-000: Sensor Flipped Vertically: false [ 748.467734][ T5752] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 748.503751][T15278] vivid-000: Insert SAV Code in Image: false [ 748.515639][ T5752] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 748.537355][T15278] vivid-000: Insert EAV Code in Image: false [ 748.546249][ T5752] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 748.576574][T15278] vivid-000: Insert Video Guard Band: false [ 748.585628][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2718'. [ 748.588376][ T5752] usb 7-1: Manufacturer: syz [ 748.603822][T15278] vivid-000: Reduced Framerate: false [ 748.627082][T15278] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 748.635137][ T5752] usb 7-1: config 0 descriptor?? [ 748.661402][T15278] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 748.705328][T15278] vivid-000: Enable Capture Cropping: true [ 748.801365][T15278] vivid-000: Enable Capture Composing: true [ 748.817896][T15278] vivid-000: Enable Capture Scaler: true [ 748.845676][T15278] vivid-000: Timestamp Source: End of Frame [ 748.883938][T15278] vivid-000: Colorspace: sRGB [ 748.906448][T15278] vivid-000: Transfer Function: Default [ 749.011040][T13928] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 749.112911][T15278] vivid-000: Y'CbCr Encoding: Default [ 749.144212][ T5752] hid_parser_main: 7 callbacks suppressed [ 749.144239][ T5752] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 749.157291][T15278] vivid-000: HSV Encoding: Hue 0-179 [ 749.177337][T15278] vivid-000: Quantization: Default [ 749.184569][T15278] vivid-000: Apply Alpha To Red Only: false [ 749.188908][T13928] usb 2-1: Using ep0 maxpacket: 32 [ 749.214093][T15278] vivid-000: Standard Aspect Ratio: 4x3 [ 749.218682][T13928] usb 2-1: config 6 has an invalid interface number: 132 but max is 0 [ 749.235365][ T5752] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 749.255408][T15278] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 749.289409][T15278] vivid-000: DV Timings: 640x480p59 inactive [ 749.309052][T15278] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 749.312726][T13928] usb 2-1: config 6 has no interface number 0 [ 749.352822][T15278] vivid-000: Maximum EDID Blocks: 2 [ 749.371759][T13928] usb 2-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 749.373319][T15278] vivid-000: Limited RGB Range (16-235): [ 749.428493][T13928] usb 2-1: config 6 interface 132 altsetting 6 endpoint 0x4 has invalid maxpacket 1040, setting to 64 [ 749.439141][T15278] false [ 749.489343][T15278] vivid-000: Rx RGB Quantization Range: Automatic [ 749.516382][T15278] vivid-000: Power Present: 0x00000001 [ 749.533923][T15278] tpg source WxH: 1600x1200 (Y'CbCr) [ 749.556323][T15278] tpg field: 1 [ 749.560992][T13928] usb 2-1: config 6 interface 132 has no altsetting 0 [ 749.589747][T15278] tpg crop: (0,0)/1600x1200 [ 749.594322][T13928] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 749.594355][T13928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.594378][T13928] usb 2-1: Product: syz [ 749.594395][T13928] usb 2-1: Manufacturer: syz [ 749.594412][T13928] usb 2-1: SerialNumber: syz [ 749.630311][T15278] tpg compose: (0,0)/1600x1200 [ 749.669761][T15285] tipc: Resetting bearer [ 749.691142][T15278] tpg colorspace: 8 [ 749.730292][T15278] tpg transfer function: 0/2 [ 749.750441][T15278] tpg Y'CbCr encoding: 0/1 [ 749.776066][T15278] tpg quantization: 0/2 [ 749.799011][T15278] tpg RGB range: 0/2 [ 749.814942][T15278] vivid-000: ================== END STATUS ================== [ 749.890135][T13928] usbtest 2-1:6.132: couldn't get endpoints, -22 [ 749.929780][T13928] usbtest 2-1:6.132: probe with driver usbtest failed with error -22 [ 749.975918][T13928] usb 2-1: USB disconnect, device number 67 [ 750.313476][T15307] netlink: 'syz.4.2720': attribute type 10 has an invalid length. [ 750.503758][T15311] tipc: Enabling of bearer rejected, already enabled [ 750.909934][T13928] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 751.070723][T13928] usb 4-1: Using ep0 maxpacket: 32 [ 751.103566][T13928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.124851][T13928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.137566][T13928] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 751.173691][T13928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.201365][T13928] usb 4-1: config 0 descriptor?? [ 751.253997][T13928] hub 4-1:0.0: USB hub found [ 751.324911][ T5752] usb 7-1: USB disconnect, device number 29 [ 751.547634][T15343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.619700][T15343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.649451][T15347] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 751.666358][T15343] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5641] was attempted by "  \x09 $ m@ \x09$  \x09  \x09!  \x22 \x09 @  (        [ 751.676718][T15343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.853979][T15347] netlink: 'syz.6.2728': attribute type 29 has an invalid length. [ 751.886884][T15343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.954181][T15339] syz.6.2728 (15339): drop_caches: 2 [ 752.214678][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2732'. [ 752.455438][T13928] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 752.526006][T13928] usbhid 4-1:0.0: can't add hid device: -71 [ 752.538099][T13928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 752.583617][T13928] usb 4-1: USB disconnect, device number 71 [ 752.623796][ T5752] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 752.857941][ T5752] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.874361][T15379] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 752.893806][ T5752] usb 7-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 752.914578][ T5752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.945213][ T5752] usb 7-1: Product: syz [ 752.957803][ T5752] usb 7-1: Manufacturer: syz [ 752.973144][ T5752] usb 7-1: SerialNumber: syz [ 753.001356][ T5752] usb 7-1: config 0 descriptor?? [ 753.036978][ T5752] cytherm 7-1:0.0: Cypress thermometer device now attached [ 753.404806][T13922] usb 7-1: USB disconnect, device number 30 [ 753.413364][T13922] cytherm 7-1:0.0: Cypress thermometer now disconnected [ 753.497672][T15395] netlink: zone id is out of range [ 753.527487][T15395] netlink: zone id is out of range [ 753.538467][T15395] netlink: zone id is out of range [ 753.544801][T15395] netlink: zone id is out of range [ 753.551262][ T5752] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 753.559410][T15395] netlink: zone id is out of range [ 753.571591][T15395] netlink: zone id is out of range [ 753.588995][T15395] netlink: zone id is out of range [ 753.598216][T15395] netlink: zone id is out of range [ 753.612533][T15395] netlink: zone id is out of range [ 753.723977][ T5752] usb 2-1: Using ep0 maxpacket: 8 [ 753.734061][ T5752] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 753.743861][ T5752] usb 2-1: config 179 has no interface number 0 [ 753.755837][ T5752] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 753.776093][ T5752] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 753.794928][ T5752] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 753.815421][ T5752] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 753.829999][T13933] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 753.846405][ T5752] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 753.866748][ T5752] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 753.870885][T13928] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 753.899462][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.923793][T15389] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 754.025924][T13933] usb 8-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 754.039437][T13933] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.057393][T13928] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 754.064823][T13933] usb 8-1: Product: syz [ 754.078880][T13933] usb 8-1: Manufacturer: syz [ 754.080370][T13928] usb 5-1: config 0 has no interface number 0 [ 754.106410][T13933] usb 8-1: SerialNumber: syz [ 754.117877][T13928] usb 5-1: config 0 interface 1 altsetting 149 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 754.194630][T13928] usb 5-1: config 0 interface 1 has no altsetting 0 [ 754.227608][T13928] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 754.241000][T15389] netlink: 'syz.1.2738': attribute type 11 has an invalid length. [ 754.286311][T13928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.306551][T13928] usb 5-1: config 0 descriptor?? [ 754.318506][T13928] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 754.469641][T13933] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 754.501644][T13933] usb 8-1: MIDIStreaming interface descriptor not found [ 754.581571][ T5752] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 754.594412][T13922] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input60 [ 754.637177][T13928] usb 2-1: USB disconnect, device number 68 [ 754.637460][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 754.651504][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 754.790105][ T5752] usb 7-1: Using ep0 maxpacket: 8 [ 754.816004][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 754.881072][ T5752] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 754.893859][T13933] usb 8-1: USB disconnect, device number 8 [ 754.937407][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.982495][T14196] usb 5-1: USB disconnect, device number 64 [ 755.017387][ T5752] usb 7-1: config 0 descriptor?? [ 755.089059][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 755.255539][ T5752] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 755.711983][T13933] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 755.893906][T13933] usb 8-1: Using ep0 maxpacket: 32 [ 755.905198][T13933] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.918281][T13933] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.930331][T13933] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 755.939605][T13933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.964244][T13933] usb 8-1: config 0 descriptor?? [ 755.982345][T13933] hub 8-1:0.0: USB hub found [ 756.317227][T15455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.421620][T13928] usb 7-1: USB disconnect, device number 31 [ 756.428612][T15455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.497118][T15455] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[14097] was attempted by "  \x09 $ m@ \x09$  \x09  \x09!  \x22 \x09 @  (        [ 756.535813][T15455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.647845][T15456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2752'. [ 756.782287][T15455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.861998][T15454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2752'. [ 756.950562][T15462] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2753'. [ 757.068506][T15462] kvm: kvm [15461]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 757.127034][ T50] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 757.219727][T15467] tipc: Resetting bearer [ 757.384588][T15467] syzkaller0: left promiscuous mode [ 757.414611][T15467] syzkaller0: left allmulticast mode [ 757.484288][T15466] tipc: Resetting bearer [ 757.714532][T13933] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 757.794852][T13933] usbhid 8-1:0.0: can't add hid device: -71 [ 757.814178][T13933] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 757.897561][T13933] usb 8-1: USB disconnect, device number 9 [ 758.032338][T15483] loop5: detected capacity change from 0 to 2640 [ 758.066653][T15483] buffer_io_error: 6 callbacks suppressed [ 758.066675][T15483] Buffer I/O error on dev loop5, logical block 0, async page read [ 758.134234][T15487] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 758.143660][T15487] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 758.152413][T15487] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 758.162157][T15487] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 758.171369][T15487] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 758.180329][T15487] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 758.262110][T15487] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 758.286855][ T5943] tipc: Resetting bearer [ 758.346601][T15487] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 758.395694][T15487] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 758.800757][T13928] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 758.980608][T13928] usb 2-1: Using ep0 maxpacket: 16 [ 759.000187][T13928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 759.035978][T13928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 759.111625][T13928] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 759.151588][T13928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.218593][T13928] usb 2-1: Product: syz [ 759.244065][T13928] usb 2-1: Manufacturer: syz [ 759.282772][T13928] usb 2-1: SerialNumber: syz [ 759.354166][T13928] usb 2-1: config 0 descriptor?? [ 759.398394][T13928] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 759.441992][T13928] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 760.177093][T13928] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 760.227104][T13928] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 760.602318][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 760.602338][ T30] audit: type=1326 audit(1783283442.642:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 760.757523][ T30] audit: type=1326 audit(1783283442.672:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 760.790475][ T30] audit: type=1326 audit(1783283442.672:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 760.866320][T13928] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 760.894077][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 760.923618][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 760.927387][ T30] audit: type=1326 audit(1783283442.672:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 761.000672][ T30] audit: type=1326 audit(1783283442.682:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 761.025900][ T30] audit: type=1326 audit(1783283442.742:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 761.051673][ T30] audit: type=1326 audit(1783283442.742:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 761.078427][ T30] audit: type=1326 audit(1783283442.742:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 761.078452][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 761.126408][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 761.142731][ T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 761.157543][ T50] Bluetooth: hci4: Injecting HCI hardware error event [ 761.176202][ T5636] Bluetooth: hci4: hardware error 0x00 [ 761.199112][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 761.306681][ T30] audit: type=1326 audit(1783283442.742:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 761.479671][ T30] audit: type=1326 audit(1783283442.752:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.3.2762" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x7ffc0000 [ 762.058931][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 762.085646][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 762.111494][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 762.124921][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 762.165607][T13928] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 762.253306][T13928] usb 2-1: USB disconnect, device number 69 [ 763.350062][T13929] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 763.379957][ T5636] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 763.441872][T15536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2769'. [ 763.453071][T13928] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 763.550107][T13929] usb 2-1: Using ep0 maxpacket: 16 [ 763.592943][T15538] tipc: Enabled bearer , priority 0 [ 763.622201][T13929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.650553][T15538] syzkaller0: entered promiscuous mode [ 763.661308][T13928] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 763.676836][T13929] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 763.693433][T13928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.720635][T15538] syzkaller0: entered allmulticast mode [ 763.721624][T13928] usb 5-1: Product: syz [ 763.735474][T13929] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 763.770394][T15540] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 763.789077][T13928] usb 5-1: Manufacturer: syz [ 763.794648][T13929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.806200][T13928] usb 5-1: SerialNumber: syz [ 763.904763][T13928] usb 5-1: config 0 descriptor?? [ 763.913489][T13929] usb 2-1: config 0 descriptor?? [ 763.963034][T15543] tipc: Resetting bearer [ 763.970761][T13928] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 763.991272][T13929] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 764.021304][T15537] tipc: Resetting bearer [ 764.125822][T15537] tipc: Disabling bearer [ 764.386811][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.510502][T13928] gspca_sunplus: reg_r err -110 [ 764.515665][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.071165][T13922] usb 2-1: USB disconnect, device number 70 [ 767.315773][T13933] usb 5-1: USB disconnect, device number 65 [ 767.451008][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'. [ 767.473200][T15582] loop9: detected capacity change from 0 to 2640 [ 767.491316][T15582] buffer_io_error: 321 callbacks suppressed [ 767.491332][T15582] Buffer I/O error on dev loop9, logical block 0, async page read [ 767.508359][ T5639] Buffer I/O error on dev loop9, logical block 0, async page read [ 767.537720][T15586] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 767.617092][T15588] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 767.675279][T15588] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 767.706380][T15588] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 767.723816][T15590] tipc: Resetting bearer [ 767.733990][T15588] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 767.754515][T15588] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 767.768929][T15588] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 767.789611][T15588] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 767.801790][T15590] syzkaller0: entered promiscuous mode [ 767.809078][T15590] syzkaller0: entered allmulticast mode [ 767.820393][T15589] tipc: Resetting bearer [ 768.183315][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2785'. [ 768.217455][T15603] vivid-000: ================= START STATUS ================= [ 768.241316][T15603] vivid-000: Test Pattern: 75% Colorbar [ 768.254204][T15603] vivid-000: Fill Percentage of Frame: 100 [ 768.273561][T15603] vivid-000: Horizontal Movement: Move Right Fast [ 768.284729][T15610] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 768.288645][T15603] vivid-000: Vertical Movement: Move Down Slow [ 768.302155][T15603] vivid-000: OSD Text Mode: All [ 768.307234][T15603] vivid-000: Show Border: false [ 768.313634][T15603] vivid-000: Show Square: false [ 768.318692][T15603] vivid-000: Sensor Flipped Horizontally: false [ 768.320521][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'. [ 768.326870][T15603] vivid-000: Sensor Flipped Vertically: false [ 768.344258][T15603] vivid-000: Insert SAV Code in Image: false [ 768.350710][T15603] vivid-000: Insert EAV Code in Image: false [ 768.357410][T15603] vivid-000: Insert Video Guard Band: false [ 768.363725][T15603] vivid-000: Reduced Framerate: false [ 768.371376][T15604] syzkaller0: entered promiscuous mode [ 768.377097][T15604] syzkaller0: entered allmulticast mode [ 768.385327][T15603] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 768.396115][T15603] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 768.407170][T15604] net_ratelimit: 1 callbacks suppressed [ 768.407188][T15604] 0: reclassify loop, rule prio 0, protocol 800 [ 768.421521][T15603] vivid-000: Enable Capture Cropping: true [ 768.441253][T15603] vivid-000: Enable Capture Composing: true [ 768.457154][T15603] vivid-000: Enable Capture Scaler: true [ 768.464158][T15603] vivid-000: Timestamp Source: End of Frame [ 768.471363][T15603] vivid-000: Colorspace: sRGB [ 768.476217][T15603] vivid-000: Transfer Function: Default [ 768.482794][T15603] vivid-000: Y'CbCr Encoding: Default [ 768.492569][T15603] vivid-000: HSV Encoding: Hue 0-179 [ 768.498760][T15603] vivid-000: Quantization: Default [ 768.528260][T15603] vivid-000: Apply Alpha To Red Only: false [ 768.550951][T15603] vivid-000: Standard Aspect Ratio: 4x3 [ 768.557151][T15603] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 768.567270][T15603] vivid-000: DV Timings: 640x480p59 inactive [ 768.578535][T15603] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 768.586136][T15603] vivid-000: Maximum EDID Blocks: 2 [ 768.592302][T15603] vivid-000: Limited RGB Range (16-235): false [ 768.624227][T15603] vivid-000: Rx RGB Quantization Range: Automatic [ 768.637575][T15603] vivid-000: Power Present: 0x00000001 [ 768.644555][T15603] tpg source WxH: 1600x1200 (Y'CbCr) [ 768.650680][T15603] tpg field: 1 [ 768.654170][T15603] tpg crop: (0,0)/1600x1200 [ 768.658711][T15603] tpg compose: (0,0)/1600x1200 [ 768.664483][T15603] tpg colorspace: 8 [ 768.668362][T15603] tpg transfer function: 0/2 [ 768.678253][T15603] tpg Y'CbCr encoding: 0/1 [ 768.683123][T15615] syzkaller0: entered promiscuous mode [ 768.688602][T15603] tpg quantization: 0/2 [ 768.693496][T15615] syzkaller0: entered allmulticast mode [ 768.699437][T15603] tpg RGB range: 0/2 [ 768.703805][T15603] vivid-000: ================== END STATUS ================== [ 768.728360][T15615] tipc: Enabled bearer , priority 0 [ 768.760748][T15615] tipc: Resetting bearer [ 768.806604][T15614] tipc: Resetting bearer [ 768.885373][T15614] tipc: Disabling bearer [ 768.911536][ T5943] tipc: Resetting bearer [ 768.918679][T15620] tipc: Enabled bearer , priority 0 [ 768.953597][T15619] syzkaller0: entered promiscuous mode [ 768.986049][T15619] syzkaller0: entered allmulticast mode [ 769.019329][T15620] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 769.156491][T15619] tipc: Resetting bearer [ 769.181977][T15618] tipc: Resetting bearer [ 769.268682][T15618] tipc: Disabling bearer [ 769.810403][T15634] kvm: kvm [15633]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6 [ 769.858954][T15634] kvm: kvm [15633]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 769.945289][T15634] kvm: kvm [15633]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8 [ 778.482508][T15639] tipc: Resetting bearer [ 778.489354][T15639] tipc: Resetting bearer [ 778.496726][T15667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2802'. [ 778.520082][T15667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2802'. [ 778.541099][T15667] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2802'. [ 779.540183][T13928] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 779.554351][ T12] tipc: Resetting bearer [ 779.726453][T13928] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 779.755649][T13928] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 779.784139][T13928] usb 8-1: Product: syz [ 779.794295][T13928] usb 8-1: Manufacturer: syz [ 779.814987][T13928] usb 8-1: SerialNumber: syz [ 779.866374][T13928] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 780.183148][T15729] xt_hashlimit: size too large, truncated to 1048576 [ 780.252122][T15716] x9: renamed from bridge_slave_0 (while UP) [ 781.001854][T13928] vp7045: USB control message 'out' went wrong. [ 781.038361][T13928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 781.117314][T13928] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 781.184851][T13928] usb 8-1: USB disconnect, device number 10 [ 782.027394][T15737] input: syz1 as /devices/virtual/input/input61 [ 782.059983][T13926] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 782.232113][T13926] usb 5-1: config 0 has no interfaces? [ 782.262983][T13926] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 782.282488][T13926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.306867][T13926] usb 5-1: Product: syz [ 782.319700][T13926] usb 5-1: Manufacturer: syz [ 782.324898][T13926] usb 5-1: SerialNumber: syz [ 782.336281][T13926] usb 5-1: config 0 descriptor?? [ 782.643117][T13928] usb 5-1: USB disconnect, device number 66 [ 783.538956][T15761] tipc: Enabling of bearer rejected, already enabled [ 785.110802][T13928] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 785.315542][T15777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.322885][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 785.340441][T15777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.354519][T15777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.394986][T15777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.602160][T13928] usb 7-1: unable to get BOS descriptor or descriptor too short [ 785.615400][T13928] usb 7-1: no configurations [ 785.620407][T13928] usb 7-1: can't read configurations, error -22 [ 786.040771][T15783] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 786.054717][T15783] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 786.402052][T15793] tipc: Enabled bearer , priority 0 [ 786.437739][T15793] syzkaller0: entered promiscuous mode [ 786.448445][T15793] syzkaller0: entered allmulticast mode [ 786.483066][T15793] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 786.512035][T14196] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 786.634377][T15799] tipc: Resetting bearer [ 786.665858][T15793] tipc: Resetting bearer [ 786.681173][T15798] tipc: Resetting bearer [ 786.704974][T15791] tipc: Resetting bearer [ 786.711336][T14196] usb 2-1: Using ep0 maxpacket: 8 [ 786.768105][T14196] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 786.791404][T14196] usb 2-1: config 0 has no interface number 1 [ 786.802789][T15791] tipc: Disabling bearer [ 786.807406][T14196] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 786.850448][T14196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 786.886180][T14196] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 786.974084][T14196] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 787.012294][T14196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.035461][T14196] usb 2-1: Product: syz [ 787.048656][T14196] usb 2-1: Manufacturer: syz [ 787.074758][T14196] usb 2-1: SerialNumber: syz [ 787.112361][T14196] usb 2-1: config 0 descriptor?? [ 787.148065][T14196] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 787.503905][ T2367] pvrusb2: Failed to submit write-control URB status=-90 [ 787.531407][T14196] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 787.574095][ T2367] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 787.593600][T14196] usb 2-1: USB disconnect, device number 71 [ 787.635386][ T2367] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 787.776485][ T8697] tipc: Resetting bearer [ 788.015275][T15816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2842'. [ 788.344527][T15822] tipc: Enabling of bearer rejected, already enabled [ 788.388261][T15822] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 788.427533][T15822] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 788.518322][T13933] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 788.694131][T13933] usb 8-1: Using ep0 maxpacket: 16 [ 788.713121][T13933] usb 8-1: config 0 has no interfaces? [ 788.735991][T13933] usb 8-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 788.794943][T13933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.863621][T13933] usb 8-1: config 0 descriptor?? [ 789.119197][T13922] usb 8-1: USB disconnect, device number 11 Stopping sshd: [ 790.357349][T15872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2857'. stopped /usr/sbin/sshd (pid 5376) OK Stopping crond: stopped /usr/sbin/crond (pid 5364) OK Stopping dhcpcd... [ 791.297705][T15908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2863'. stopped /sbin/dhcpcd (pid 5285) [ 791.701489][T14200] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 791.798562][T15917] tipc: Enabling of bearer rejected, already enabled [ 791.905100][T15917] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 791.940008][T14200] usb 4-1: Using ep0 maxpacket: 8 [ 791.979425][T14200] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 792.001318][T14200] usb 4-1: config 179 has no interface number 0 [ 792.050875][T14200] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 792.108338][T14200] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 792.184301][T14200] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 Stopping network: [ 792.266883][T14200] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 792.312173][T14200] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 792.343282][T15930] tipc: Enabling of bearer rejected, already enabled [ 792.431724][T14200] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 792.497673][T14200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.543571][T15902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 792.662239][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'. [ 793.100565][T14200] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input62 [ 793.181663][T13929] usb 4-1: USB disconnect, device number 72 [ 793.187676][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 793.187716][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 794.225483][T15964] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2874'. [ 794.359197][T15957] vlan2: entered allmulticast mode [ 794.374046][T15957] bond0: entered allmulticast mode [ 794.388370][T15957] bond_slave_0: entered allmulticast mode [ 794.411146][T15957] bond_slave_1: entered allmulticast mode [ 794.432375][T15957] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 794.567480][T15964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.630855][T15964] bond_slave_0: left allmulticast mode [ 794.677410][T15964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.742019][T15964] bond_slave_1: left allmulticast mode [ 794.822654][T15964] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 794.903264][T15964] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 794.949130][T15964] bond0 (unregistering): Released all slaves OK Stopping iptables: [ 795.191621][T13929] usb 8-1: new full-speed USB device number 12 using dummy_hcd OK [ 795.384507][T15982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy Stopping system message bus: [ 795.417397][T15982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.451188][T15982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.485175][T15982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.614534][T15993] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 795.614534][T15993] The task syz.4.2881 (15993) triggered the difference, watch for misbehavior. [ 796.089646][T13929] usb 8-1: unable to get BOS descriptor or descriptor too short [ 796.107766][T13929] usb 8-1: no configurations [ 796.120457][T13929] usb 8-1: can't read configurations, error -22 [ 796.133057][T15992] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 796.149520][T15992] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 796.177300][T15992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 796.233804][T15992] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 796.369144][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 796.369163][ T30] audit: type=1800 audit(1783283478.402:2315): pid=16009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2883" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 done [ 796.948778][T16022] trusted_key: encrypted_key: insufficient parameters specified [ 797.900424][T13926] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 798.071249][T13926] usb 4-1: Using ep0 maxpacket: 8 [ 798.101214][T13926] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 798.129962][T13926] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 798.172260][T13926] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 798.219943][T13926] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 798.257517][T13926] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.282091][T13928] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 798.305176][T13926] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 798.346171][T13926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.422522][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2890'. [ 798.470250][T13928] usb 8-1: Using ep0 maxpacket: 8 [ 798.515964][T13928] usb 8-1: unable to get BOS descriptor or descriptor too short [ 798.529822][T16045] vivid-000: ================= START STATUS ================= [ 798.545912][T13928] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 798.562879][T16045] vivid-000: Test Pattern: 75% Colorbar [ 798.579310][T16045] vivid-000: Fill Percentage of Frame: 100 [ 798.599690][T13928] usb 8-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 798.617687][T13926] usb 4-1: GET_CAPABILITIES returned 0 [ 798.625092][T16049] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 798.633308][T13928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.651609][T16045] vivid-000: Horizontal Movement: Move Right Fast [ 798.658367][T13928] usb 8-1: Product: syz [ 798.662648][T13926] usbtmc 4-1:16.0: can't read capabilities [ 798.690684][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 798.715634][T13928] usb 8-1: Manufacturer: syz [ 798.737559][T13928] usb 8-1: SerialNumber: syz [ 798.749201][T16045] vivid-000: Vertical Movement: Move Down Slow [ 798.794481][T16045] vivid-000: OSD Text Mode: All [ 798.815024][T16045] vivid-000: Show Border: false [ 798.824021][T16045] vivid-000: Show Square: false [ 798.835354][T16045] vivid-000: Sensor Flipped Horizontally: false [ 798.849399][T16045] vivid-000: Sensor Flipped Vertically: false [ 798.871489][T16045] vivid-000: Insert SAV Code in Image: false [ 798.893496][T16045] vivid-000: Insert EAV Code in Image: false [ 798.900892][T16041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.917955][T16045] vivid-000: Insert Video Guard Band: false [ 798.933482][T16041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.943568][T16045] vivid-000: Reduced Framerate: false [ 798.960150][T16045] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 798.994090][T16045] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 799.004182][T16041] loop6: detected capacity change from 0 to 524288000 [ 799.031515][T16045] vivid-000: Enable Capture Cropping: true [ 799.058190][T16045] vivid-000: Enable Capture Composing: true [ 799.091397][T16045] vivid-000: Enable Capture Scaler: true [ 799.123754][T16045] vivid-000: Timestamp Source: End of Frame [ 799.140097][T16052] Invalid logical block size (255) [ 799.156239][T16045] vivid-000: Colorspace: sRGB [ 799.174175][T13926] usb 4-1: USB disconnect, device number 73 [ 799.185923][T16045] vivid-000: Transfer Function: Default [ 799.232612][T16045] vivid-000: Y'CbCr Encoding: Default [ 799.272518][T13928] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 799.283716][T16045] vivid-000: HSV Encoding: Hue 0-179 [ 799.314080][T16045] vivid-000: Quantization: Default [ 799.320097][T16045] vivid-000: Apply Alpha To Red Only: false [ 799.329224][T16045] vivid-000: Standard Aspect Ratio: 4x3 [ 799.345782][T16045] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 799.366995][T16045] vivid-000: DV Timings: 640x480p59 inactive [ 799.389040][T16045] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 799.411336][T16045] vivid-000: Maximum EDID Blocks: 2 [ 799.426387][T16045] vivid-000: Limited RGB Range (16-235): false [ 799.443110][T16045] vivid-000: Rx RGB Quantization Range: Automatic Stopping klogd: [ 799.467046][T16045] vivid-000: Power Present: 0x00000001 [ 799.493022][T16045] tpg source WxH: 1600x1200 (Y'CbCr) [ 799.516584][T16045] tpg field: 1 [ 799.534963][T16045] tpg crop: (0,0)/1600x1200 [ 799.548926][T13928] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 799.564802][T16045] tpg compose: (0,0)/1600x1200 [ 799.584463][T16045] tpg colorspace: 8 [ 799.599255][T13928] usb 8-1: USB disconnect, device number 14 [ 799.600560][T16045] tpg transfer function: 0/2 [ 799.635677][T16045] tpg Y'CbCr encoding: 0/1 [ 799.652573][T16045] tpg quantization: 0/2 [ 799.661238][T16045] tpg RGB range: 0/2 [ 799.675594][T16045] vivid-000: ================== END STATUS ================== OK Stopping acpid: [ 800.168344][ T30] audit: type=1326 audit(1783283482.202:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.3.2892" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ca5b9de59 code=0x0 [ 800.240462][T16068] tipc: Enabling of bearer rejected, already enabled [ 800.323977][T16076] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2894'. [ 800.354420][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2893'. [ 800.366929][T16076] openvswitch: netlink: Message has 512 unknown bytes. OK [ 801.593803][T16099] lo: left promiscuous mode [ 801.616588][T16099] tunl0: left promiscuous mode Stopping syslogd: [ 801.640103][T16099] gre0: left promiscuous mode [ 801.685699][T16099] gretap0: left promiscuous mode [ 801.758015][T16099] erspan0: left promiscuous mode [ 801.794290][T16099] ip_vti0: left promiscuous mode [ 801.853034][T16099] ip6_vti0: left promiscuous mode [ 801.897717][T16099] sit0: left promiscuous mode stopped /sbin/syslogd (pid 4973) [ 801.921939][T16099] ip6tnl0: left promiscuous mode OK [ 801.946726][T16099] ip6gre0: left promiscuous mode [ 801.973388][T16099] ip6gretap0: left promiscuous mode [ 802.008270][T16099] bridge0: left promiscuous mode [ 802.034708][T16099] vcan0: left promiscuous mode [ 802.054329][T16099] bond0: left promiscuous mode [ 802.077943][T16099] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 802.090303][T16099] team0: left promiscuous mode [ 802.112138][T16099] nlmon0: left promiscuous mode [ 802.127672][T16099] batadv0: left promiscuous mode [ 802.143742][T16099] veth0: left promiscuous mode [ 802.156118][T16099] veth1: left promiscuous mode [ 802.170379][T16099] wg0: left promiscuous mode [ 802.199087][T16099] wg1: left promiscuous mode [ 802.216039][T16099] wg2: left promiscuous mode [ 802.239053][T16099] veth0_to_bridge: left promiscuous mode [ 802.261481][T16099] veth1_to_bridge: left promiscuous mode [ 802.284703][T16099] veth0_to_bond: left promiscuous mode [ 802.305345][T16099] bond_slave_0: left promiscuous mode [ 802.327139][T16099] veth1_to_bond: left promiscuous mode [ 802.346223][T16099] bond_slave_1: left promiscuous mode [ 802.368843][T16099] veth0_to_team: left promiscuous mode [ 802.385110][T16099] team_slave_0: left promiscuous mode [ 802.399836][T16099] veth1_to_team: left promiscuous mode [ 802.420176][T16099] team_slave_1: left promiscuous mode [ 802.442369][T16099] veth0_to_batadv: left promiscuous mode [ 802.468817][T16099] batadv_slave_0: left promiscuous mode [ 802.500444][T16099] veth1_to_batadv: left promiscuous mode [ 802.518750][T16099] batadv_slave_1: left promiscuous mode [ 802.545963][T16099] xfrm0: left promiscuous mode [ 802.559008][T16099] veth1_to_hsr: left promiscuous mode [ 802.577899][T16099] hsr_slave_1: left promiscuous mode [ 802.608582][T16099] veth1_virt_wifi: left promiscuous mode [ 802.629912][T16099] veth0_virt_wifi: left promiscuous mode [ 802.650435][T16099] virt_wifi0: left promiscuous mode [ 802.668076][T16099] : left promiscuous mode [ 802.689117][T16099] vlan1: left promiscuous mode [ 802.700225][T16099] macvlan0: left promiscuous mode [ 802.713848][T16099] macvlan1: left promiscuous mode [ 802.741996][T16099] ipvlan0: left promiscuous mode [ 802.762023][T16099] ipvlan1: left promiscuous mode [ 802.781005][T16099] geneve0: left promiscuous mode [ 802.794983][T16099] geneve1: left promiscuous mode [ 802.812542][T16099] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 802.839548][T16099] netdevsim netdevsim4 netdevsim2: left promiscuous mode umount: can't remount debugfs read-only [ 802.858363][T16099] netdevsim netdevsim4 netdevsim3: left promiscuous mode umount: tmpfs busy - remounted read-only [ 802.888822][T16099] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 802.918658][T16099] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 802.938637][T16099] tipc: Resetting bearer [ 802.987213][T16099] syzkaller0: left promiscuous mode [ 803.009983][T16099] bond1: left promiscuous mode [ 803.030245][T16099] bond3: left promiscuous mode [ 803.047635][T16099] bridge1: left promiscuous mode [ 803.067528][T16099] bond5: left promiscuous mode [ 803.113100][T16099] bridge2: left promiscuous mode [ 803.145597][T16100] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 803.183029][T16100] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 803.360243][T13926] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 803.479203][T16122] syzkaller0: entered promiscuous mode [ 803.511701][T16122] syzkaller0: entered allmulticast mode [ 803.524112][T13926] usb 4-1: Using ep0 maxpacket: 32 [ 803.538828][T13926] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 803.566599][T13926] usb 4-1: config 0 has no interface number 0 [ 803.582193][T13926] usb 4-1: config 0 interface 184 has no altsetting 0 umount: sysfs busy - remounted read-only [ 803.617402][T13926] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee umount: devtmpfs busy - remounted read-only [ 803.664888][T13926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 umount: can't remount /dev/root [ 803.696129][T13926] usb 4-1: Product: syz read-only [ 803.736816][T13926] usb 4-1: Manufacturer: syz The system is going down NOW! [ 803.781184][ T4991] udevd[4991]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 803.809716][T13926] usb 4-1: SerialNumber: syz [ 803.920939][T13926] usb 4-1: config 0 descriptor?? Connection to 10.128.1.55 closed by remote host. [ 803.978990][T13926] usb 4-1: can't set config #0, error -71 [ 804.029946][T13926] usb 4-1: USB disconnect, device number 74 Sent SIGKILL to all processes Requesting system poweroff [ 806.180998][T16134] smc: removing smcd device lo [ 806.188363][ T2367] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 806.228857][ T2367] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 806.240059][ T2367] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 806.250336][ T2367] pvrusb2: Failure uploading firmware1 [ 806.255977][ T2367] pvrusb2: Device initialization was not successful. [ 806.264486][ T2367] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 806.273965][ T2367] pvrusb2: Failed to submit write-control URB status=-19 [ 806.284211][T14196] pvrusb2: Device being rendered inoperable [ 806.290520][ T2367] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 806.290583][ T2367] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 806.292539][ T2367] ------------[ cut here ]------------ [ 806.317601][ T2367] ret [ 806.317634][ T2367] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x755/0xa40, CPU#1: pvrusb2-context/2367 [ 806.333281][ T2367] Modules linked in: [ 806.337710][ T2367] CPU: 1 UID: 0 PID: 2367 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 806.349140][ T2367] Tainted: [L]=SOFTLOCKUP [ 806.353530][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 806.363721][ T2367] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 806.370077][ T2367] Code: 9a fb e9 48 fc ff ff e8 69 55 9a fb c6 05 7b d6 14 0a 01 48 c7 c7 e0 27 76 8c e8 76 a2 fb fa e9 70 fc ff ff e8 4c 55 9a fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 e0 28 76 8c 4c 89 e2 e8 16 1b 00 fb e9 [ 806.389809][ T2367] RSP: 0018:ffffc900071ef680 EFLAGS: 00010293 [ 806.395930][ T2367] RAX: ffffffff862c1cf4 RBX: dffffc0000000000 RCX: ffff88802c091f00 [ 806.404003][ T2367] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 806.412051][ T2367] RBP: 0000000000000001 R08: ffffffff90576ff7 R09: 1ffffffff20aedfe [ 806.420142][ T2367] R10: dffffc0000000000 R11: fffffbfff20aedff R12: ffffffff8cd0fcc0 [ 806.428120][ T2367] R13: 0000000000001770 R14: ffff8880286280b0 R15: 00000000fffffff5 [ 806.436153][ T2367] FS: 0000000000000000(0000) GS:ffff888125059000(0000) knlGS:0000000000000000 [ 806.445121][ T2367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.451815][ T2367] CR2: 000020000025c030 CR3: 0000000032fd2000 CR4: 00000000003526f0 [ 806.459909][ T2367] Call Trace: [ 806.463221][ T2367] [ 806.466180][ T2367] ? kfree+0x1c5/0x640 [ 806.470335][ T2367] _request_firmware+0x1049/0x1780 [ 806.475493][ T2367] ? __pfx__request_firmware+0x10/0x10 [ 806.481000][ T2367] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 806.486621][ T2367] request_firmware+0x36/0x50 [ 806.491386][ T2367] pvr2_locate_firmware+0xb3/0x500 [ 806.496606][ T2367] pvr2_upload_firmware1+0x1bd/0x940 [ 806.502052][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 806.508071][ T2367] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 806.513979][ T2367] pvr2_hdw_initialize+0x425/0x3c60 [ 806.519224][ T2367] ? finish_task_switch+0x417/0xc60 [ 806.524667][ T2367] ? __mutex_trylock_common+0x15f/0x270 [ 806.530322][ T2367] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 806.535981][ T2367] ? rcu_is_watching+0x15/0xb0 [ 806.540823][ T2367] ? trace_contention_end+0x3d/0x140 [ 806.546127][ T2367] ? pvr2_context_thread_func+0x279/0xc10 [ 806.551980][ T2367] ? __mutex_unlock_slowpath+0x731/0x900 [ 806.557634][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 806.563692][ T2367] ? schedule+0x90/0x2b0 [ 806.567959][ T2367] ? schedule+0x16e/0x2b0 [ 806.572333][ T2367] pvr2_context_thread_func+0x504/0xc10 [ 806.577933][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 806.584112][ T2367] ? __pfx_autoremove_wake_function+0x10/0x10 [ 806.590251][ T2367] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 806.596089][ T2367] ? __kthread_parkme+0x71/0x1f0 [ 806.601097][ T2367] ? __kthread_parkme+0x196/0x1f0 [ 806.606140][ T2367] kthread+0x388/0x470 [ 806.610308][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 806.616425][ T2367] ? __pfx_kthread+0x10/0x10 [ 806.621113][ T2367] ret_from_fork+0x514/0xb70 [ 806.625747][ T2367] ? __pfx_ret_from_fork+0x10/0x10 [ 806.630954][ T2367] ? __switch_to+0xc89/0x1420 [ 806.635682][ T2367] ? __pfx_kthread+0x10/0x10 [ 806.640337][ T2367] ret_from_fork_asm+0x1a/0x30 [ 806.645120][ T2367] [ 806.648151][ T2367] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 806.655452][ T2367] CPU: 1 UID: 0 PID: 2367 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 806.666737][ T2367] Tainted: [L]=SOFTLOCKUP [ 806.671060][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 806.681115][ T2367] Call Trace: [ 806.684422][ T2367] [ 806.687371][ T2367] vpanic+0x56c/0xa60 [ 806.691383][ T2367] ? __pfx__printk+0x10/0x10 [ 806.695984][ T2367] ? __pfx_vpanic+0x10/0x10 [ 806.700506][ T2367] ? is_bpf_text_address+0x292/0x2b0 [ 806.705829][ T2367] ? is_bpf_text_address+0x26/0x2b0 [ 806.711053][ T2367] panic+0xc5/0xd0 [ 806.714788][ T2367] ? __pfx_panic+0x10/0x10 [ 806.719219][ T2367] ? ret_from_fork_asm+0x1a/0x30 [ 806.724171][ T2367] __warn+0x315/0x4c0 [ 806.728157][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 806.733855][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 806.739506][ T2367] __report_bug+0x331/0x530 [ 806.744096][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 806.749753][ T2367] ? __pfx___report_bug+0x10/0x10 [ 806.754871][ T2367] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 806.760289][ T2367] ? __up_read+0x29c/0x930 [ 806.764847][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 806.770535][ T2367] report_bug+0x16a/0x220 [ 806.774878][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 806.780527][ T2367] ? firmware_fallback_sysfs+0x757/0xa40 [ 806.786177][ T2367] handle_bug+0x9c/0x200 [ 806.790435][ T2367] exc_invalid_op+0x1a/0x50 [ 806.794953][ T2367] asm_exc_invalid_op+0x1a/0x20 [ 806.799820][ T2367] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 806.806103][ T2367] Code: 9a fb e9 48 fc ff ff e8 69 55 9a fb c6 05 7b d6 14 0a 01 48 c7 c7 e0 27 76 8c e8 76 a2 fb fa e9 70 fc ff ff e8 4c 55 9a fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 e0 28 76 8c 4c 89 e2 e8 16 1b 00 fb e9 [ 806.825745][ T2367] RSP: 0018:ffffc900071ef680 EFLAGS: 00010293 [ 806.831827][ T2367] RAX: ffffffff862c1cf4 RBX: dffffc0000000000 RCX: ffff88802c091f00 [ 806.839816][ T2367] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 806.847803][ T2367] RBP: 0000000000000001 R08: ffffffff90576ff7 R09: 1ffffffff20aedfe [ 806.855796][ T2367] R10: dffffc0000000000 R11: fffffbfff20aedff R12: ffffffff8cd0fcc0 [ 806.863810][ T2367] R13: 0000000000001770 R14: ffff8880286280b0 R15: 00000000fffffff5 [ 806.871828][ T2367] ? firmware_fallback_sysfs+0x754/0xa40 [ 806.877508][ T2367] ? kfree+0x1c5/0x640 [ 806.881593][ T2367] _request_firmware+0x1049/0x1780 [ 806.886729][ T2367] ? __pfx__request_firmware+0x10/0x10 [ 806.892204][ T2367] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 806.897755][ T2367] request_firmware+0x36/0x50 [ 806.902449][ T2367] pvr2_locate_firmware+0xb3/0x500 [ 806.907616][ T2367] pvr2_upload_firmware1+0x1bd/0x940 [ 806.912947][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 806.918980][ T2367] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 806.924813][ T2367] pvr2_hdw_initialize+0x425/0x3c60 [ 806.930038][ T2367] ? finish_task_switch+0x417/0xc60 [ 806.935243][ T2367] ? __mutex_trylock_common+0x15f/0x270 [ 806.940791][ T2367] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 806.946438][ T2367] ? rcu_is_watching+0x15/0xb0 [ 806.951215][ T2367] ? trace_contention_end+0x3d/0x140 [ 806.956522][ T2367] ? pvr2_context_thread_func+0x279/0xc10 [ 806.962262][ T2367] ? __mutex_unlock_slowpath+0x731/0x900 [ 806.967915][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 806.973913][ T2367] ? schedule+0x90/0x2b0 [ 806.978173][ T2367] ? schedule+0x16e/0x2b0 [ 806.982517][ T2367] pvr2_context_thread_func+0x504/0xc10 [ 806.988079][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 806.994160][ T2367] ? __pfx_autoremove_wake_function+0x10/0x10 [ 807.000245][ T2367] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 807.006087][ T2367] ? __kthread_parkme+0x71/0x1f0 [ 807.011043][ T2367] ? __kthread_parkme+0x196/0x1f0 [ 807.016088][ T2367] kthread+0x388/0x470 [ 807.020170][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 807.026252][ T2367] ? __pfx_kthread+0x10/0x10 [ 807.030856][ T2367] ret_from_fork+0x514/0xb70 [ 807.035459][ T2367] ? __pfx_ret_from_fork+0x10/0x10 [ 807.040580][ T2367] ? __switch_to+0xc89/0x1420 [ 807.045262][ T2367] ? __pfx_kthread+0x10/0x10 [ 807.052472][ T2367] ret_from_fork_asm+0x1a/0x30 [ 807.057316][ T2367] [ 807.060975][ T2367] Kernel Offset: disabled [ 807.065326][ T2367] Rebooting in 86400 seconds..