last executing test programs: 12.659347892s ago: executing program 4 (id=2569): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x23, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041810) lseek(r3, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) 12.219007017s ago: executing program 2 (id=2570): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x23, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041810) lseek(r3, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) 11.753419418s ago: executing program 1 (id=2571): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x1d, 0x5, 0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r4 = open(0x0, 0x345842, 0x389b0d52417bb201) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r8, 0x3, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, r6, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1fa6e", 0x69, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, r2, 0x0, 0x0, 0x4, 0x0, 0x1, r4}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x57f8ad59d87e25cd, 0x4, r7, &(0x7f0000000100)="12", 0x1, 0x7fff}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r9, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 11.370579423s ago: executing program 0 (id=2574): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0xffffffff, @empty, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x5, @mcast2, 0x9}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) r5 = socket$kcm(0x2, 0x922000000001, 0x106) openat$vmci(0xffffff9c, &(0x7f0000000680), 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff07}, 0x20040044) r6 = socket(0xa, 0x5, 0x0) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r7, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r7, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 10.975214035s ago: executing program 4 (id=2575): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f0000000380)={0x0, 0x80000000, 0x8001}) unshare(0x2c020400) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) pwritev(r0, 0x0, 0x0, 0x5, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x2b, 0x4, 0x20000, 0xc5f, 0x281, 0x6, 0x3ff, 0x0, 0x0, 0x1, 0x1}}, 0x50) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000080)='\r2', 0x2, 0x300000000000000}]) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r6 = syz_clone(0x15400, &(0x7f0000000140)="45801031ad8d35670518e257738074342cf32af0ca9b4ad2c30181034bb17f58b5fd9be94655fca15c58c2474c721ec9fde8f421ddd2f79c", 0x38, &(0x7f00000001c0), 0x0, &(0x7f0000000240)="a62a85a535b5c0072574f86c1ebd87bfabbd1a8abbd90381c996b5112131db97467ec626c9a62d82b12a4eb355e775f8bcc992f96ffb569b78493732bbf881395badf040bc6591a23db377c4") sched_rr_get_interval(r6, &(0x7f00000002c0)) 10.545068871s ago: executing program 2 (id=2576): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r0, &(0x7f0000000540), 0x0, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x202a03) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc1205531, &(0x7f00000010c0)=""/4101) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) fcntl$getownex(r3, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r8, 0x7ffffffd, 0x1) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000003e00070127bd700000000000017c00000400fca20c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280725eb862cec9a4780800070000"], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x840) 10.389441051s ago: executing program 0 (id=2577): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r3, 0x200004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r6, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r6, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d1) 9.7654443s ago: executing program 1 (id=2578): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xf, 0xffffbe0000000001, 0xfa15, 0x202}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000706010300010000000000000000000005000100070000"], 0x1c}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x20010040) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x58, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x0, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x47, '\x00', 0x3}, {0xfc, 0x8, 0x1, '\x00', 0xa0}, {0xfe, 0x9, 0x7}, {0xa, 0x3, 0x5, '\x00', 0xfe}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x6}, {0xc, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0xc}, {0x7, 0x5, 0xd, '\x00', 0xa}, {0x2, 0x4b, 0x45, '\x00', 0xc2}, {0x8, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x7, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x0, '\x00', 0x2}, {0xfe, 0x4, 0x6, '\x00', 0x9}, {0xc2, 0x9, 0x7, '\x00', 0x4a}, {0x4, 0x7, 0x4, '\x00', 0x80}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x7f, 0x10, 0x80, '\x00', 0x10}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0xb, 0xa, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x59, 0x3, 0x4, '\x00', 0x7f}]}}) 9.723471389s ago: executing program 4 (id=2579): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r3, 0x200004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r6, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r6, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d1) 8.318377523s ago: executing program 1 (id=2581): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0295c200000000000000000000000114000400fc00000000000000000000000000000006000340000100000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009880)=ANY=[@ANYBLOB="a40000000001050500000500000000000a4000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010800074000000000100006800c000380060002004e220000"], 0xa4}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x7fc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1, r9, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) open(0x0, 0x109202, 0x113) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.317688134s ago: executing program 2 (id=2582): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="159c4ca6d5f2db29c58d19"], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x295) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00') writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x1) clock_gettime(0x0, &(0x7f0000000300)) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 8.198026806s ago: executing program 0 (id=2583): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003ad7000000bd7000fcffffff0d00", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200000d3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x2000c5fb, @value=0x3}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e", 0x70, 0xfffffffffffffffe) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x40000029) fcntl$notify(r4, 0x402, 0x1c) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) open(&(0x7f0000000140)='./bus\x00', 0x141bc2, 0x1c0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0xa, 0x1) 7.789646076s ago: executing program 3 (id=2584): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f0000000380)={0x0, 0x80000000, 0x8001}) unshare(0x2c020400) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) pwritev(r0, 0x0, 0x0, 0x5, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x2b, 0x4, 0x20000, 0xc5f, 0x281, 0x6, 0x3ff, 0x0, 0x0, 0x1, 0x1}}, 0x50) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000080)='\r2', 0x2, 0x300000000000000}]) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r5 = syz_clone(0x15400, &(0x7f0000000140)="45801031ad8d35670518e257738074342cf32af0ca9b4ad2c30181034bb17f58b5fd9be94655fca15c58c2474c721ec9fde8f421ddd2f79c", 0x38, &(0x7f00000001c0), 0x0, &(0x7f0000000240)="a62a85a535b5c0072574f86c1ebd87bfabbd1a8abbd90381c996b5112131db97467ec626c9a62d82b12a4eb355e775f8bcc992f96ffb569b78493732bbf881395badf040bc6591a23db377c4") sched_rr_get_interval(r5, &(0x7f00000002c0)) 7.716019199s ago: executing program 4 (id=2585): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) unshare(0x2040400) r6 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r6, 0x0, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.344093143s ago: executing program 3 (id=2586): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x23, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041810) lseek(r3, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) 6.041194905s ago: executing program 1 (id=2587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4014f50b, &(0x7f0000000380)={0x0, 0x80000000, 0x8001}) unshare(0x2c020400) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) pwritev(r2, 0x0, 0x0, 0x5, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) read$FUSE(r4, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0x0, r5, {0x7, 0x2b, 0x4, 0x20000, 0xc5f, 0x281, 0x6, 0x3ff, 0x0, 0x0, 0x1, 0x1}}, 0x50) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000080)='\r2', 0x2, 0x300000000000000}]) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r8 = syz_clone(0x15400, &(0x7f0000000140)="45801031ad8d35670518e257738074342cf32af0ca9b4ad2c30181034bb17f58b5fd9be94655fca15c58c2474c721ec9fde8f421ddd2f79c", 0x38, &(0x7f00000001c0), 0x0, &(0x7f0000000240)="a62a85a535b5c0072574f86c1ebd87bfabbd1a8abbd90381c996b5112131db97467ec626c9a62d82b12a4eb355e775f8bcc992f96ffb569b78493732bbf881395badf040bc6591a23db377c4") sched_rr_get_interval(r8, &(0x7f00000002c0)) 5.319168837s ago: executing program 0 (id=2588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x5761, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x45, 0x0, 0x7, 0xb}, {0x20, 0x0, 0x0, 0x7fff}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x2}, {0x6}]}) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="44a3da0010000104000000000000000e00000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c00028005001700000000000800040000020000"], 0x44}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, 0x0) 4.932294069s ago: executing program 4 (id=2589): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0x8, 0x1f, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x17}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 4.679675432s ago: executing program 3 (id=2590): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x54, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000ba2f050000000000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28040600) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') ioctl$SIOCSIFHWADDR(r8, 0x89f6, &(0x7f0000000040)={'vxcan1\x00', @remote}) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r11, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) 4.270017991s ago: executing program 2 (id=2591): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f0000000380)={0x0, 0x80000000, 0x8001}) unshare(0x2c020400) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) pwritev(r0, 0x0, 0x0, 0x5, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x2b, 0x4, 0x20000, 0xc5f, 0x281, 0x6, 0x3ff, 0x0, 0x0, 0x1, 0x1}}, 0x50) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000080)='\r2', 0x2, 0x300000000000000}]) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r6 = syz_clone(0x15400, &(0x7f0000000140)="45801031ad8d35670518e257738074342cf32af0ca9b4ad2c30181034bb17f58b5fd9be94655fca15c58c2474c721ec9fde8f421ddd2f79c", 0x38, &(0x7f00000001c0), 0x0, &(0x7f0000000240)="a62a85a535b5c0072574f86c1ebd87bfabbd1a8abbd90381c996b5112131db97467ec626c9a62d82b12a4eb355e775f8bcc992f96ffb569b78493732bbf881395badf040bc6591a23db377c4") sched_rr_get_interval(r6, &(0x7f00000002c0)) 4.141615742s ago: executing program 1 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 3.548693525s ago: executing program 2 (id=2593): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r3, 0x200004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r6, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r6, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d1) 2.947357782s ago: executing program 0 (id=2594): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) getsockname$unix(r1, &(0x7f0000000400)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x8400) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340)=0x0) ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f00000002c0)={'\x00', 0x4, 0x8000, 0x0, 0x9, 0x7ffffffffffffffd, r6}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@local, 0x10005}, 0xe5, 0x800000000400002, 0x6, 0x20000000}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x2003, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 2.93701614s ago: executing program 4 (id=2595): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = openat$vimc2(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x8000000, 0x1, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc2c45513, &(0x7f0000000040)={0xb, 0x3, 0x1, 0x5, '\x00', 0x6}) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) unshare(0x10060080) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r6 = syz_open_dev$loop(&(0x7f0000000280), 0x9, 0x8081) r7 = io_uring_setup(0x3b2c, &(0x7f0000000000)={0x0, 0x603b, 0x10, 0x1, 0x2a8}) r8 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) ppoll(&(0x7f0000000080)=[{r8, 0x2100}, {r7, 0xc}], 0x2, 0x0, 0x0, 0x0) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f00000002c0)) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 2.856720874s ago: executing program 3 (id=2596): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x1d, 0x5, 0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r4 = open(0x0, 0x345842, 0x389b0d52417bb201) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r8, 0x3, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, r6, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1fa6e", 0x69, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, r2, 0x0, 0x0, 0x4, 0x0, 0x1, r4}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x57f8ad59d87e25cd, 0x4, r7, &(0x7f0000000100)="12", 0x1, 0x7fff}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r9, 0x40045565, 0xee) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 1.54221734s ago: executing program 2 (id=2597): socket(0x39, 0x2, 0x3a) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) msgget$private(0x0, 0x3ac) setrlimit(0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, 0x0}}], 0x1, 0x40010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00#\f!\x00'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001040000000000000000beb126a300400000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00020000000000400000000000000000000800010002"], 0x20}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) 1.541393641s ago: executing program 3 (id=2598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003ad7000000bd7000fcffffff0d00", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200000d3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x2000c5fb, @value=0x3}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e", 0x70, 0xfffffffffffffffe) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x40000029) fcntl$notify(r4, 0x402, 0x1c) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) open(&(0x7f0000000140)='./bus\x00', 0x141bc2, 0x1c0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0xa, 0x1) 682.161968ms ago: executing program 1 (id=2599): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b40)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x2, r4}) r5 = add_key$user(&(0x7f00000006c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfd, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={r6, r5, r5}, &(0x7f0000000780)=""/86, 0x56, &(0x7f0000000400)={&(0x7f00000002c0)={'crc32c\x00'}}) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc) 309.051626ms ago: executing program 0 (id=2600): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x23, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041810) lseek(r3, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) 0s ago: executing program 3 (id=2601): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11}, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = syz_open_dev$sndctrl(0x0, 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r6 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r6, &(0x7f0000002200)=ANY=[], 0x5ce) dup(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0xffffffff, 0x6c7d, 0xcfa, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc72, 0x0, 0x3, 0x4, 0x5, 0xe, 0x0, 0x0, 0x0, 0x4, 0x7, 0x1, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x6, 0x3, 0x0, 0x8003, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0xa0000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0xef7, 0x0, 0x10800000, 0x3, 0xfffffffb, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x4, 0xffffffff], [0xffffffff, 0x7f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x3, 0xfff, 0x1ffffffe, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xf, 0x80000, 0x0, 0x0, 0x0, 0xbc, 0x6, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0x8], [0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x802, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x10000, 0x0, 0x0, 0x6507, 0x0, 0x0, 0x0, 0x8000001, 0x3, 0x0, 0xa, 0x0, 0x100000]}, 0x45c) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001"], 0xc0}}, 0x0) kernel console output (not intermixed with test programs): ode=0x7ffc0000 [ 971.417040][T14453] usb 2-1: USB disconnect, device number 93 [ 971.424498][ T8458] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 971.857418][ T8458] usb 3-1: device descriptor read/8, error -71 [ 972.144357][ T8458] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 972.395872][ T8458] usb 3-1: device not accepting address 83, error -71 [ 972.505048][ T8458] usb usb3-port1: unable to enumerate USB device [ 973.918436][T15726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 975.653434][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1964'. [ 975.663175][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1964'. [ 976.201366][T15764] netlink: 'syz.4.1966': attribute type 2 has an invalid length. [ 976.220878][T15764] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1966'. [ 976.934333][T10377] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 977.136760][T10377] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.146897][T10377] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 977.200159][T10377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 977.262833][T10377] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 977.301887][T10377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.679449][T10377] usb 3-1: config 0 descriptor?? [ 978.012392][T15787] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 978.099926][T15766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.111225][T15766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.188732][T15787] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 978.229701][T10377] microsoft 0003:045E:009D.0015: item fetching failed at offset 2/5 [ 978.240801][T10377] microsoft 0003:045E:009D.0015: parse failed [ 978.247984][T10377] microsoft 0003:045E:009D.0015: probe with driver microsoft failed with error -22 [ 978.254299][ T9889] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 978.659609][ T9889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 978.672044][T15784] could not allocate digest TFM handle sha3-512-generic [ 978.679652][ T9889] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 978.701996][T14453] usb 3-1: USB disconnect, device number 84 [ 978.709128][ T9889] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 978.721695][ T9889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.742021][T15790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 978.789417][ T9889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 979.213232][T15790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.223875][T15790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.295191][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 979.295206][ T30] audit: type=1326 audit(1769325465.443:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 979.410826][ T30] audit: type=1326 audit(1769325465.443:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 979.515682][ T30] audit: type=1326 audit(1769325465.443:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 979.545988][ T30] audit: type=1326 audit(1769325465.453:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 979.728634][ T30] audit: type=1326 audit(1769325465.453:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 979.913292][ T30] audit: type=1326 audit(1769325465.453:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 979.983629][ T30] audit: type=1326 audit(1769325465.453:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 980.058857][ T30] audit: type=1326 audit(1769325465.453:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 980.162154][ T30] audit: type=1326 audit(1769325465.453:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 980.637965][ T30] audit: type=1326 audit(1769325465.453:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15785 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 981.524366][T15813] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1976'. [ 981.557572][T15813] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.1976'. [ 981.684781][T15832] netlink: 'syz.4.1978': attribute type 4 has an invalid length. [ 982.075509][ T9889] usb 4-1: USB disconnect, device number 87 [ 982.701853][T15841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.710594][T15841] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.782183][T15841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 983.885219][T15858] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1983'. [ 986.354204][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 986.422270][T15885] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 990.095279][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 990.095292][ T30] audit: type=1326 audit(1769325476.263:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 990.493682][ T30] audit: type=1326 audit(1769325476.263:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 990.641394][ T30] audit: type=1326 audit(1769325476.263:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 990.825112][ T30] audit: type=1326 audit(1769325476.263:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 990.884542][ T30] audit: type=1326 audit(1769325476.263:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 990.999690][ T30] audit: type=1326 audit(1769325476.263:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 991.105095][ T30] audit: type=1326 audit(1769325476.263:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 991.190788][ T30] audit: type=1326 audit(1769325476.263:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 991.238611][ T30] audit: type=1326 audit(1769325476.263:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 991.261873][ T30] audit: type=1326 audit(1769325476.263:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 991.444245][T10377] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 991.478384][T15957] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2002'. [ 991.705843][T10377] usb 4-1: Using ep0 maxpacket: 32 [ 991.737093][T10377] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 991.749721][T10377] usb 4-1: config 0 has no interface number 0 [ 991.865044][T10377] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 991.928615][T10377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.948215][T10377] usb 4-1: Product: syz [ 991.994411][T10377] usb 4-1: Manufacturer: syz [ 992.077497][T10377] usb 4-1: SerialNumber: syz [ 992.089952][T10377] usb 4-1: config 0 descriptor?? [ 992.196936][T10377] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 992.424906][T10377] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 992.618562][T10377] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 992.626319][T10377] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 992.848536][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.855182][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.300556][ T9889] usb 4-1: USB disconnect, device number 88 [ 993.510406][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2006'. [ 995.634282][ T9889] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 995.874262][ T9889] usb 3-1: Using ep0 maxpacket: 16 [ 996.145930][ T9889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.158002][ T9889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 996.184697][ T9889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.194651][ T9889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 996.208363][ T9889] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.281881][ T9889] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 996.298535][ T9889] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 996.315978][ T9889] usb 3-1: Manufacturer: syz [ 996.332665][ T9889] usb 3-1: config 0 descriptor?? [ 997.033784][ T9889] rc_core: IR keymap rc-hauppauge not found [ 997.039698][ T9889] Registered IR keymap rc-empty [ 997.095686][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.134398][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.174984][ T9889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 997.231759][ T9889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input72 [ 997.279758][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.314478][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.339459][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.369411][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.409447][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.540787][T16031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 997.549128][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.624462][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.705706][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.724385][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.761935][ T9889] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 997.855753][ T9889] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 997.885349][ T9889] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 997.907875][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 997.918497][T16038] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2019'. [ 997.932063][T16038] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2019'. [ 998.985357][T10377] usb 3-1: USB disconnect, device number 85 [ 1001.044291][T14453] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1001.074654][T16079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2026'. [ 1001.085723][T16079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2026'. [ 1001.215916][T14453] usb 1-1: Using ep0 maxpacket: 16 [ 1001.233095][T14453] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.246215][T14453] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.256343][T14453] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1001.262976][T14453] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1001.286852][T14453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.312053][T14453] usb 1-1: config 0 descriptor?? [ 1001.751739][T14453] hid (null): unknown global tag 0xe [ 1001.757840][T14453] hid (null): bogus close delimiter [ 1001.800674][T14453] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 1001.856914][T14453] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 1001.881060][T14453] cougar 0003:060B:500A.0016: collection stack underflow [ 1001.893483][T14453] cougar 0003:060B:500A.0016: item 0 0 0 12 parsing failed [ 1001.910903][T14453] cougar 0003:060B:500A.0016: parse failed [ 1002.010983][T14453] cougar 0003:060B:500A.0016: probe with driver cougar failed with error -22 [ 1002.048586][T14453] hid-sensor-hub 0003:060B:500A.0016: unknown main item tag 0x0 [ 1002.104426][T14453] hid-sensor-hub 0003:060B:500A.0016: unknown main item tag 0x0 [ 1002.127153][T14453] hid-sensor-hub 0003:060B:500A.0016: collection stack underflow [ 1002.160003][T14453] hid-sensor-hub 0003:060B:500A.0016: item 0 0 0 12 parsing failed [ 1002.317710][T14453] hid-sensor-hub 0003:060B:500A.0016: parse failed [ 1002.331393][T14453] hid-sensor-hub 0003:060B:500A.0016: probe with driver hid-sensor-hub failed with error -22 [ 1002.383514][T14453] usb 1-1: USB disconnect, device number 65 [ 1003.235434][T16101] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2031'. [ 1004.945393][T16132] netlink: 'syz.0.2036': attribute type 2 has an invalid length. [ 1004.953389][T16132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2036'. [ 1006.586301][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 1006.605512][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 1006.678611][T16147] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 1007.854999][T16177] xt_hashlimit: overflow, try lower: 60585/0 [ 1007.894197][T14453] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1008.094256][T14453] usb 2-1: Using ep0 maxpacket: 32 [ 1008.166836][T14453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.198291][T14453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.471964][T14453] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1008.513688][T14453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.608444][T14453] usb 2-1: config 0 descriptor?? [ 1009.713860][T14453] glorious 0003:258A:0033.0017: item fetching failed at offset 0/3 [ 1009.725692][T14453] glorious 0003:258A:0033.0017: probe with driver glorious failed with error -22 [ 1010.907141][T16212] netlink: 'syz.3.2053': attribute type 4 has an invalid length. [ 1011.654506][T10377] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1011.762969][T14453] usb 2-1: USB disconnect, device number 94 [ 1011.828558][T10377] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.849855][T10377] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.975361][T10377] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1012.382529][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2057'. [ 1012.392101][T10377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1012.406409][T10377] usb 3-1: SerialNumber: syz [ 1012.430505][T10377] usb 3-1: 0:2 : does not exist [ 1013.399712][T16217] xt_bpf: check failed: parse error [ 1014.301202][T16240] bridge3: port 1(veth3) entered blocking state [ 1014.394644][T16240] bridge3: port 1(veth3) entered disabled state [ 1014.406487][T16240] veth3: entered allmulticast mode [ 1014.423435][T16240] veth3: entered promiscuous mode [ 1015.054750][T14453] usb 3-1: USB disconnect, device number 86 [ 1015.063176][T16241] bridge3: port 2(veth0_to_bond) entered blocking state [ 1015.076689][T16241] bridge3: port 2(veth0_to_bond) entered disabled state [ 1015.089766][T16241] veth0_to_bond: entered allmulticast mode [ 1015.197367][T16241] veth0_to_bond: entered promiscuous mode [ 1015.256276][T16245] bridge3: port 3(veth5) entered blocking state [ 1015.262656][T16245] bridge3: port 3(veth5) entered disabled state [ 1015.271005][T16245] veth5: entered allmulticast mode [ 1015.359313][T16245] veth5: entered promiscuous mode [ 1016.200323][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1016.224345][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2066'. [ 1017.307535][T16277] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1017.325893][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 1017.375071][T16277] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1017.494598][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 1017.849173][T16285] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 1018.578790][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 1018.618010][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 1020.115594][T14453] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1020.278460][T14453] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.289147][T14453] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1020.329361][T14453] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1020.368839][T14453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.425177][T14453] usb 1-1: config 0 descriptor?? [ 1020.447191][T14453] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1020.488542][T14453] dvb-usb: bulk message failed: -22 (3/0) [ 1020.514881][T14453] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1020.561561][T14453] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1020.580055][T14453] usb 1-1: media controller created [ 1020.598977][T14453] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1020.694384][T14453] dvb-usb: bulk message failed: -22 (6/0) [ 1020.729823][T14453] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1020.748853][T16339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.786907][T14453] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input73 [ 1020.805711][T14453] dvb-usb: schedule remote query interval to 150 msecs. [ 1020.812860][T16339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.821027][T14453] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1020.994864][T14453] dvb-usb: bulk message failed: -22 (1/0) [ 1021.060704][T14453] dvb-usb: error while querying for an remote control event. [ 1021.255708][T14453] dvb-usb: bulk message failed: -22 (1/0) [ 1021.261742][T14453] dvb-usb: error while querying for an remote control event. [ 1021.440005][T14453] dvb-usb: bulk message failed: -22 (1/0) [ 1021.449961][T14453] dvb-usb: error while querying for an remote control event. [ 1021.704623][T14453] dvb-usb: bulk message failed: -22 (1/0) [ 1021.711193][T14453] dvb-usb: error while querying for an remote control event. [ 1021.915741][T14453] dvb-usb: bulk message failed: -22 (1/0) [ 1021.921494][T14453] dvb-usb: error while querying for an remote control event. [ 1022.144338][T14453] dvb-usb: bulk message failed: -22 (1/0) [ 1022.259950][T14453] dvb-usb: error while querying for an remote control event. [ 1022.444426][T14453] dvb-usb: bulk message failed: -22 (1/0) [ 1022.483283][T14453] dvb-usb: error while querying for an remote control event. [ 1022.704043][ T9889] dvb-usb: bulk message failed: -22 (1/0) [ 1022.709836][ T9889] dvb-usb: error while querying for an remote control event. [ 1022.901649][ T9889] dvb-usb: bulk message failed: -22 (1/0) [ 1022.966088][T16362] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2081'. [ 1023.021788][ T9889] dvb-usb: error while querying for an remote control event. [ 1023.076685][T15587] usb 1-1: USB disconnect, device number 66 [ 1023.224281][T16362] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.2081'. [ 1023.289645][T15587] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1024.428000][T16391] netlink: 'syz.2.2090': attribute type 10 has an invalid length. [ 1027.703212][T16428] netlink: zone id is out of range [ 1027.710520][T16428] netlink: zone id is out of range [ 1027.717736][T16428] netlink: zone id is out of range [ 1027.723109][T16428] netlink: zone id is out of range [ 1027.729501][T16428] netlink: zone id is out of range [ 1027.735383][T16428] netlink: zone id is out of range [ 1027.740655][T16428] netlink: zone id is out of range [ 1027.746444][T16428] netlink: zone id is out of range [ 1027.754245][T16428] netlink: zone id is out of range [ 1027.760986][T16428] netlink: zone id is out of range [ 1028.491714][T16443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2098'. [ 1028.751555][T16443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2098'. [ 1030.210013][T16462] fuse: Unknown parameter 'fd0x0000000000000007' [ 1030.354460][ T9889] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1030.630770][ T9889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.646152][ T9889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1030.684345][ T9889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.725982][ T9889] usb 3-1: config 0 descriptor?? [ 1030.758491][ T9889] pwc: Askey VC010 type 2 USB webcam detected. [ 1031.097638][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'. [ 1031.874275][T12904] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1031.887986][T12904] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1031.927384][T12904] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1032.011021][T12904] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1034.219790][ T9889] pwc: recv_control_msg error -71 req 02 val 2700 [ 1034.271063][ T9889] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1034.300774][ T9889] pwc: recv_control_msg error -71 req 04 val 1000 [ 1034.338608][ T9889] pwc: recv_control_msg error -71 req 04 val 1300 [ 1034.348000][ T9889] pwc: recv_control_msg error -71 req 04 val 1400 [ 1034.355110][ T9889] pwc: recv_control_msg error -71 req 02 val 2000 [ 1034.524295][ T9889] pwc: recv_control_msg error -71 req 02 val 2100 [ 1034.594343][ T9889] pwc: recv_control_msg error -71 req 04 val 1500 [ 1034.616869][ T9889] pwc: recv_control_msg error -71 req 02 val 2500 [ 1034.636715][ T9889] pwc: recv_control_msg error -71 req 02 val 2400 [ 1034.672551][ T9889] pwc: recv_control_msg error -71 req 02 val 2600 [ 1034.692138][ T9889] pwc: recv_control_msg error -71 req 02 val 2900 [ 1034.782793][ T9889] pwc: recv_control_msg error -71 req 02 val 2800 [ 1034.844283][ T9889] pwc: recv_control_msg error -71 req 04 val 1100 [ 1034.885048][ T9889] pwc: recv_control_msg error -71 req 04 val 1200 [ 1034.902376][ T9889] pwc: Registered as video103. [ 1034.925585][ T9889] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input74 [ 1035.022291][ T9889] usb 3-1: USB disconnect, device number 87 [ 1035.745529][T16525] syzkaller0: entered promiscuous mode [ 1035.750996][T16525] syzkaller0: entered allmulticast mode [ 1039.724403][T14453] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1039.983497][T14453] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1040.003133][T14453] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1040.023114][T14453] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1040.043260][T14453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.121072][T16587] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1040.132712][T14453] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1040.336770][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.393182][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.443486][ T30] audit: type=1326 audit(1769325526.643:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1040.507549][ T30] audit: type=1326 audit(1769325526.643:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1040.850791][ T30] audit: type=1326 audit(1769325526.643:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1040.911073][ T30] audit: type=1326 audit(1769325526.643:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1041.163892][ T30] audit: type=1326 audit(1769325526.643:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1041.312691][ T30] audit: type=1326 audit(1769325526.643:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1041.408768][ T30] audit: type=1326 audit(1769325526.643:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1041.501888][ T30] audit: type=1326 audit(1769325526.643:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1041.561165][ T30] audit: type=1326 audit(1769325526.643:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1041.607391][ T30] audit: type=1326 audit(1769325526.643:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1042.225505][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 1042.365498][ T9889] usb 4-1: USB disconnect, device number 89 [ 1042.674353][T15587] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1043.144318][T15587] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.155269][T15587] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1043.277795][T15587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.303832][T15587] usb 3-1: config 0 descriptor?? [ 1043.372729][T15587] pwc: Askey VC010 type 2 USB webcam detected. [ 1043.584274][T14453] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1044.291505][T14453] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1044.464304][T14453] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1044.608347][T14453] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1044.617742][T14453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.698323][T16641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1044.742737][T14453] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1045.043099][T16641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.054716][T16641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.350426][T15587] pwc: recv_control_msg error -71 req 02 val 2700 [ 1046.364969][T15587] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1046.394382][T15587] pwc: recv_control_msg error -71 req 04 val 1000 [ 1046.402722][T15587] pwc: recv_control_msg error -71 req 04 val 1300 [ 1046.421548][T15587] pwc: recv_control_msg error -71 req 04 val 1400 [ 1046.445868][T15587] pwc: recv_control_msg error -71 req 02 val 2000 [ 1046.591381][T15587] pwc: recv_control_msg error -71 req 02 val 2100 [ 1046.698903][T15587] pwc: recv_control_msg error -71 req 04 val 1500 [ 1046.790310][T16670] overlayfs: missing 'lowerdir' [ 1046.889274][T15587] pwc: recv_control_msg error -71 req 02 val 2500 [ 1046.928415][T15587] pwc: recv_control_msg error -71 req 02 val 2400 [ 1047.077483][ T9] usb 5-1: USB disconnect, device number 73 [ 1047.243482][T15587] pwc: recv_control_msg error -71 req 02 val 2600 [ 1047.280056][T15587] pwc: recv_control_msg error -71 req 02 val 2900 [ 1047.356337][T15587] pwc: recv_control_msg error -71 req 02 val 2800 [ 1047.705058][T15587] pwc: recv_control_msg error -71 req 04 val 1100 [ 1047.721804][T15587] pwc: recv_control_msg error -71 req 04 val 1200 [ 1047.731294][T15587] pwc: Registered as video103. [ 1047.743126][T15587] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75 [ 1047.787582][T15587] usb 3-1: USB disconnect, device number 88 [ 1049.062008][T16697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2149'. [ 1049.351353][T16697] libceph: resolve '0..' (ret=-3): failed [ 1049.664281][ T9889] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1049.964862][ T9889] usb 4-1: Using ep0 maxpacket: 32 [ 1049.995902][ T9889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.058222][ T9889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.068634][ T9889] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1050.102052][ T9889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.129813][ T9889] usb 4-1: config 0 descriptor?? [ 1050.290023][T16714] netlink: 'syz.1.2152': attribute type 10 has an invalid length. [ 1050.565360][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2154'. [ 1050.574928][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2154'. [ 1050.655232][ T9889] glorious 0003:258A:0033.0018: item fetching failed at offset 0/3 [ 1050.669158][ T9889] glorious 0003:258A:0033.0018: probe with driver glorious failed with error -22 [ 1052.090188][T15587] usb 4-1: USB disconnect, device number 90 [ 1052.245339][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 1052.286301][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'. [ 1052.312693][T16727] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 1054.289126][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.296044][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.778723][T16783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2167'. [ 1055.788228][T16783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2167'. [ 1056.053817][T15587] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1056.253620][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1056.274330][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1056.301677][T15587] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.366546][T15587] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1056.388347][T15587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.443236][T15587] usb 1-1: config 0 descriptor?? [ 1056.478715][T15587] pwc: Askey VC010 type 2 USB webcam detected. [ 1057.094320][T14453] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1057.264847][T14453] usb 4-1: Using ep0 maxpacket: 8 [ 1057.311818][T14453] usb 4-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 1057.332901][T14453] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 1057.464694][T14453] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1057.548158][T14453] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1057.557701][T14453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.583688][T14453] usb 4-1: Product: syz [ 1057.597298][T14453] usb 4-1: Manufacturer: syz [ 1057.616102][T14453] usb 4-1: SerialNumber: syz [ 1057.720622][T14453] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1057.745622][T14453] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1057.781329][T14453] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1057.827801][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 1057.841260][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 1057.863323][T16799] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 1058.272322][ T9889] usb 4-1: USB disconnect, device number 91 [ 1058.895581][T15587] pwc: recv_control_msg error -71 req 02 val 2700 [ 1058.914823][T15587] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1058.964874][T15587] pwc: recv_control_msg error -71 req 04 val 1000 [ 1058.972006][T15587] pwc: recv_control_msg error -71 req 04 val 1300 [ 1059.023024][T15587] pwc: recv_control_msg error -71 req 04 val 1400 [ 1059.041943][T15587] pwc: recv_control_msg error -71 req 02 val 2000 [ 1059.060315][T15587] pwc: recv_control_msg error -71 req 02 val 2100 [ 1059.146831][T15587] pwc: recv_control_msg error -71 req 04 val 1500 [ 1059.165820][T15587] pwc: recv_control_msg error -71 req 02 val 2500 [ 1059.194811][T15587] pwc: recv_control_msg error -71 req 02 val 2400 [ 1059.221077][T15587] pwc: recv_control_msg error -71 req 02 val 2600 [ 1059.235012][T15587] pwc: recv_control_msg error -71 req 02 val 2900 [ 1059.244472][T15587] pwc: recv_control_msg error -71 req 02 val 2800 [ 1059.267832][T15587] pwc: recv_control_msg error -71 req 04 val 1100 [ 1059.284297][T15587] pwc: recv_control_msg error -71 req 04 val 1200 [ 1059.294781][T15587] pwc: Registered as video103. [ 1059.301517][T15587] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input76 [ 1059.318321][T15587] usb 1-1: USB disconnect, device number 67 [ 1061.660949][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2181'. [ 1061.671421][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2181'. [ 1061.938654][T16856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'. [ 1061.948917][T16856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'. [ 1062.232572][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'. [ 1062.250880][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 1062.443372][T16858] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 1062.984931][T16878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2186'. [ 1062.984965][T16878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2186'. [ 1063.934288][ T9889] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1064.320685][ T9889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1064.339055][ T9889] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1064.381840][ T9889] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1064.470265][ T9889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.563304][T16881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1064.648781][ T9889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1065.000816][T16881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.244654][T16881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.374334][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1065.374351][ T30] audit: type=1326 audit(1769325551.543:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1065.476013][ T30] audit: type=1326 audit(1769325551.683:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1065.476059][ T30] audit: type=1326 audit(1769325551.683:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1065.476082][ T30] audit: type=1326 audit(1769325551.683:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1065.476518][ T30] audit: type=1326 audit(1769325551.683:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1065.480271][ T30] audit: type=1326 audit(1769325551.683:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1065.481350][ T30] audit: type=1326 audit(1769325551.683:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1065.481598][ T30] audit: type=1326 audit(1769325551.683:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1065.483368][ T30] audit: type=1326 audit(1769325551.683:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1065.484605][ T30] audit: type=1326 audit(1769325551.693:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1067.744418][T10377] usb 4-1: USB disconnect, device number 92 [ 1067.814302][T15587] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1067.974289][T15587] usb 1-1: Using ep0 maxpacket: 32 [ 1067.990460][T15587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.010103][T15587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.221439][T15587] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1068.232573][T15587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.394319][T10377] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1068.565440][T15587] usb 1-1: config 0 descriptor?? [ 1068.595097][T16962] overlayfs: missing 'lowerdir' [ 1068.802142][T10377] usb 2-1: Using ep0 maxpacket: 16 [ 1068.896720][T10377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.067071][T10377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.098130][T10377] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1069.119146][T15587] glorious 0003:258A:0033.0019: item fetching failed at offset 0/3 [ 1069.496171][T10377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.504711][T15587] glorious 0003:258A:0033.0019: probe with driver glorious failed with error -22 [ 1069.517612][T10377] usb 2-1: config 0 descriptor?? [ 1070.134499][T10377] hid-multitouch 0003:1FD2:6007.001A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1070.369548][T16945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.382313][T16945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.287009][T15587] usb 1-1: USB disconnect, device number 68 [ 1071.504541][T10377] usb 2-1: USB disconnect, device number 95 [ 1071.942637][T16999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2202'. [ 1072.424822][ T9889] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1072.867482][ T9889] usb 1-1: Using ep0 maxpacket: 8 [ 1072.875421][ T9889] usb 1-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 1072.914119][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 1072.937181][ T9889] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1073.236201][T14453] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1073.277478][ T9889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1073.288861][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.314691][ T9889] usb 1-1: Product: syz [ 1073.343650][ T9889] usb 1-1: Manufacturer: syz [ 1073.359141][ T9889] usb 1-1: SerialNumber: syz [ 1073.405253][ T9889] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1073.422510][ T9889] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1073.429851][T14453] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1073.441675][T14453] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1073.454131][T14453] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1073.472445][ T9889] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1073.482532][T14453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.515148][T17009] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.560075][T14453] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1073.738120][T17009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.757853][T17009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.786843][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1073.800273][ T30] audit: type=1326 audit(1769325559.973:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1073.829940][ T9889] usb 1-1: USB disconnect, device number 69 [ 1073.859580][ T30] audit: type=1326 audit(1769325559.973:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1074.087700][ T30] audit: type=1326 audit(1769325559.973:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711572b code=0x7ffc0000 [ 1074.191794][ T30] audit: type=1326 audit(1769325559.983:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711572b code=0x7ffc0000 [ 1074.265909][ T30] audit: type=1326 audit(1769325559.983:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1074.347469][ T30] audit: type=1326 audit(1769325559.983:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1074.403398][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 1074.489357][ T30] audit: type=1326 audit(1769325559.983:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1074.827437][ T30] audit: type=1326 audit(1769325559.983:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1074.885186][T10377] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1075.106495][ T30] audit: type=1326 audit(1769325559.983:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1075.171804][T10377] usb 5-1: Using ep0 maxpacket: 8 [ 1075.243672][T10377] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.259491][ T30] audit: type=1326 audit(1769325559.983:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1075.291134][T10377] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1075.330847][T10377] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1075.366830][T10377] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1075.484340][T10377] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1075.503924][T10377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.582548][T10377] usbtmc 5-1:16.0: bulk endpoints not found [ 1075.738011][T14453] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1075.903849][ T9889] usb 3-1: USB disconnect, device number 89 [ 1075.993608][T14453] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1076.014628][T14453] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1076.234698][T14453] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1076.332737][T14453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.589857][T17035] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1076.619346][T14453] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1076.933278][T17053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.953513][T17053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.983550][T14453] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1077.194285][T14453] usb 3-1: Using ep0 maxpacket: 32 [ 1077.203324][T14453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.215201][T14453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.236779][T14453] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1077.262233][T14453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.288812][T14453] usb 3-1: config 0 descriptor?? [ 1077.325906][ T9889] usb 5-1: USB disconnect, device number 74 [ 1077.728535][T14453] glorious 0003:258A:0033.001B: item fetching failed at offset 0/3 [ 1077.737588][T14453] glorious 0003:258A:0033.001B: probe with driver glorious failed with error -22 [ 1078.431635][ T9] usb 4-1: USB disconnect, device number 93 [ 1079.092906][T17075] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[17075] [ 1079.438720][ T9] usb 3-1: USB disconnect, device number 90 [ 1079.595247][T17075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2213'. [ 1080.488606][T17094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2220'. [ 1080.514310][T17094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2220'. [ 1080.919467][T17104] net_ratelimit: 6 callbacks suppressed [ 1080.919484][T17104] netlink: zone id is out of range [ 1080.954528][T17104] netlink: zone id is out of range [ 1080.962047][T17104] netlink: zone id is out of range [ 1080.970779][T17104] netlink: zone id is out of range [ 1081.274559][T17104] netlink: zone id is out of range [ 1081.334770][T17104] netlink: zone id is out of range [ 1081.339903][T17104] netlink: zone id is out of range [ 1081.369785][T17104] netlink: zone id is out of range [ 1081.495016][T17104] netlink: zone id is out of range [ 1081.501415][T17106] batman_adv: batadv0: Interface deactivated: dummy0 [ 1081.542206][T17104] netlink: zone id is out of range [ 1082.193323][T17115] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2224'. [ 1082.210087][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1082.210102][ T30] audit: type=1326 audit(1769325568.293:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1082.333877][ T30] audit: type=1326 audit(1769325568.293:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1082.594326][ T9889] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1082.637954][ T30] audit: type=1326 audit(1769325568.293:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1082.661749][ T30] audit: type=1326 audit(1769325568.293:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1082.687520][ T30] audit: type=1326 audit(1769325568.293:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1082.715421][T17121] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1082.805372][ T9889] usb 2-1: Using ep0 maxpacket: 8 [ 1082.850716][ T30] audit: type=1326 audit(1769325568.293:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1082.903138][ T9889] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.944339][ T9889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1083.314434][ T30] audit: type=1326 audit(1769325568.293:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1083.337073][ T9889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1083.347448][ T9889] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1083.382954][ T30] audit: type=1326 audit(1769325568.293:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1083.405693][ T9889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1083.423489][ T9889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.538645][ T30] audit: type=1326 audit(1769325568.293:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1083.570393][ T9889] usbtmc 2-1:16.0: bulk endpoints not found [ 1083.574464][T10377] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1083.692287][ T30] audit: type=1326 audit(1769325568.293:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1083.979190][T10377] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1083.994265][T10377] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1084.028979][T10377] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1084.149064][T10377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.173408][T17127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1084.195666][T10377] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1084.454463][T17127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.469643][T17127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.484601][T17132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2228'. [ 1085.164944][T10377] usb 2-1: USB disconnect, device number 96 [ 1086.478015][ T9] usb 5-1: USB disconnect, device number 75 [ 1086.966350][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2239'. [ 1087.104376][ T9889] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1087.513029][T17158] random: crng reseeded on system resumption [ 1087.614979][T17156] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1087.621510][T17156] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1087.632586][ T9889] usb 5-1: Using ep0 maxpacket: 32 [ 1087.651154][T17156] vhci_hcd vhci_hcd.0: Device attached [ 1087.891495][ T9889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.904210][ T9889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.934072][ T9889] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1087.948705][ T9889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.001088][ T9889] usb 5-1: config 0 descriptor?? [ 1088.460489][T17158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1088.552126][T17157] vhci_hcd: connection closed [ 1088.557376][ T49] vhci_hcd vhci_hcd.3: stop threads [ 1088.644166][ T49] vhci_hcd vhci_hcd.3: release socket [ 1088.649666][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 1088.741358][ T9889] glorious 0003:258A:0033.001C: item fetching failed at offset 0/3 [ 1088.767255][ T9889] glorious 0003:258A:0033.001C: probe with driver glorious failed with error -22 [ 1091.014327][T10377] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1091.445548][T10377] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1091.464979][T10377] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1091.490148][T17204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2241'. [ 1091.515311][T17204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2241'. [ 1091.534859][T10377] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1091.568025][T10377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.613308][ T9889] usb 5-1: USB disconnect, device number 76 [ 1091.628564][T17195] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1091.675890][T10377] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1091.922694][T17195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.943447][T17195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.019458][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 1092.019498][ T30] audit: type=1326 audit(1769325578.163:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1092.199193][ T30] audit: type=1326 audit(1769325578.163:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 1092.249945][ T30] audit: type=1326 audit(1769325578.163:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 1092.354394][ T30] audit: type=1326 audit(1769325578.163:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1092.399264][ T30] audit: type=1326 audit(1769325578.163:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1092.650835][ T30] audit: type=1326 audit(1769325578.173:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1092.942965][ T30] audit: type=1326 audit(1769325578.173:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1093.058999][ T30] audit: type=1326 audit(1769325578.173:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1093.155704][ T30] audit: type=1326 audit(1769325578.173:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1093.366235][ T30] audit: type=1326 audit(1769325578.173:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17189 comm="syz.1.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1093.638450][ T9889] usb 2-1: USB disconnect, device number 97 [ 1095.440524][T17243] netlink: 'syz.2.2249': attribute type 10 has an invalid length. [ 1095.450043][T17243] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2249'. [ 1096.854645][T17263] net_ratelimit: 6 callbacks suppressed [ 1096.854661][T17263] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1098.320525][T17276] netlink: zone id is out of range [ 1098.327986][T17276] netlink: zone id is out of range [ 1098.334259][T17276] netlink: zone id is out of range [ 1098.340889][T17276] netlink: zone id is out of range [ 1098.347568][T17276] netlink: zone id is out of range [ 1098.354776][T17276] netlink: zone id is out of range [ 1098.361460][T17276] netlink: zone id is out of range [ 1098.416147][T17276] netlink: zone id is out of range [ 1098.421452][T17276] netlink: zone id is out of range [ 1098.435931][ T9889] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1099.094428][ T9889] usb 5-1: Using ep0 maxpacket: 8 [ 1099.114492][T10377] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1099.133261][ T9889] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.153464][ T9889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1099.221156][ T9889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1099.257887][ T9889] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1099.366762][T10377] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1099.388990][T10377] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1099.399174][ T9889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1099.399199][ T9889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.482864][T10377] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1099.513292][T10377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.590899][ T9889] usbtmc 5-1:16.0: bulk endpoints not found [ 1099.629612][T17284] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1099.640110][T10377] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1099.804624][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1099.804639][ T30] audit: type=1326 audit(1769325585.993:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1099.863078][T17284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.873269][T17284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.904717][ T30] audit: type=1326 audit(1769325585.993:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf717572b code=0x7ffc0000 [ 1100.224532][ T30] audit: type=1326 audit(1769325585.993:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf717572b code=0x7ffc0000 [ 1100.350656][ T30] audit: type=1326 audit(1769325585.993:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1100.494447][ T30] audit: type=1326 audit(1769325585.993:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1100.689213][ T30] audit: type=1326 audit(1769325585.993:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1100.841423][ T30] audit: type=1326 audit(1769325585.993:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1100.974489][ T30] audit: type=1326 audit(1769325585.993:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1101.024037][ T30] audit: type=1326 audit(1769325586.003:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1101.068774][ T30] audit: type=1326 audit(1769325586.003:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1101.402456][T15587] usb 2-1: USB disconnect, device number 98 [ 1101.512471][ T9889] usb 5-1: USB disconnect, device number 77 [ 1101.636807][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2261'. [ 1101.646176][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2261'. [ 1105.504369][T15587] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1105.664266][ T9889] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1105.868252][ T9889] usb 3-1: Using ep0 maxpacket: 8 [ 1105.877952][ T9889] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.877985][ T9889] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1105.877999][ T9889] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1105.878011][ T9889] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1105.878033][ T9889] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1105.878044][ T9889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.940666][ T9889] usbtmc 3-1:16.0: bulk endpoints not found [ 1105.944702][T15587] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1105.944729][T15587] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1105.944765][T15587] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1105.944783][T15587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.982994][T17347] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1106.148297][T15587] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1106.446914][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1106.446930][ T30] audit: type=1326 audit(1769325592.443:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1106.446970][ T30] audit: type=1326 audit(1769325592.443:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711572b code=0x7ffc0000 [ 1106.447006][ T30] audit: type=1326 audit(1769325592.443:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711572b code=0x7ffc0000 [ 1106.447041][ T30] audit: type=1326 audit(1769325592.443:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1106.447076][ T30] audit: type=1326 audit(1769325592.453:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1106.447110][ T30] audit: type=1326 audit(1769325592.453:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1106.447145][ T30] audit: type=1326 audit(1769325592.453:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1106.447180][ T30] audit: type=1326 audit(1769325592.453:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1106.447216][ T30] audit: type=1326 audit(1769325592.453:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1106.447250][ T30] audit: type=1326 audit(1769325592.453:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1106.750266][T17364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.750856][T17364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.140078][T15587] usb 1-1: USB disconnect, device number 70 [ 1108.213248][T17374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2277'. [ 1108.224839][T17374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2277'. [ 1109.157653][T14453] usb 3-1: USB disconnect, device number 91 [ 1112.313853][T10377] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1112.601567][T10377] usb 1-1: Using ep0 maxpacket: 8 [ 1112.703662][T10377] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.804259][T10377] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1112.816021][T10377] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1112.858173][T10377] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1112.903255][T10377] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1113.293612][T10377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.505554][T10377] usbtmc 1-1:16.0: bulk endpoints not found [ 1113.810338][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1113.810355][ T30] audit: type=1326 audit(1769325599.983:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1113.898948][ T30] audit: type=1326 audit(1769325599.983:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1114.074645][ T30] audit: type=1326 audit(1769325599.983:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1114.185519][ T30] audit: type=1326 audit(1769325599.983:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1114.314949][ T30] audit: type=1326 audit(1769325599.983:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1114.510108][ T30] audit: type=1326 audit(1769325599.983:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1114.534763][ T30] audit: type=1326 audit(1769325599.983:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1114.558490][ T30] audit: type=1326 audit(1769325599.983:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1114.581702][ T30] audit: type=1326 audit(1769325599.983:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1114.617676][ T30] audit: type=1326 audit(1769325599.983:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.0.2290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1114.801140][T17463] netlink: 'syz.4.2297': attribute type 11 has an invalid length. [ 1115.089418][T10377] usb 1-1: USB disconnect, device number 71 [ 1115.381751][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2300'. [ 1115.395434][T15587] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1115.587835][T15587] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1115.745265][ T9889] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1115.763341][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.764506][T15587] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1115.780266][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.927831][T15587] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1116.020605][T15587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.090004][ T9889] usb 3-1: Using ep0 maxpacket: 32 [ 1116.370265][ T9889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.384833][T17468] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1116.423343][ T9889] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1116.444596][ T9889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.447504][T15587] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1116.491197][ T9889] usb 3-1: config 0 descriptor?? [ 1116.862227][T17490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.872767][T17490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.984628][ T9889] magicmouse 0003:05AC:0265.001D: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 1117.311046][T17493] netlink: 'syz.2.2300': attribute type 2 has an invalid length. [ 1117.343435][T17493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2300'. [ 1118.566881][T14453] usb 3-1: USB disconnect, device number 92 [ 1118.950886][T15587] usb 5-1: USB disconnect, device number 78 [ 1120.674363][T14453] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1121.239132][T14453] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1121.278289][T14453] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1121.310580][T14453] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1121.356896][T14453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.405700][T17534] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1121.426075][T14453] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1122.076965][T17534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.091543][T17534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.931095][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1122.931112][ T30] audit: type=1326 audit(1769325608.443:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1123.020900][ T30] audit: type=1326 audit(1769325608.443:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1123.135513][ T30] audit: type=1326 audit(1769325608.443:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1123.191730][ T30] audit: type=1326 audit(1769325608.443:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1123.277804][ T30] audit: type=1326 audit(1769325608.443:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1123.427301][ T30] audit: type=1326 audit(1769325608.453:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1123.565129][ T30] audit: type=1326 audit(1769325608.453:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1123.902967][ T30] audit: type=1326 audit(1769325608.453:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1123.937969][ T30] audit: type=1326 audit(1769325608.453:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1123.974281][ T30] audit: type=1326 audit(1769325608.453:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17526 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1124.013646][T14453] usb 4-1: USB disconnect, device number 94 [ 1124.388667][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 1124.434445][T17572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2318'. [ 1124.737327][T17577] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1124.756728][T17577] netlink: 'syz.1.2319': attribute type 6 has an invalid length. [ 1124.874172][T14453] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1125.155767][T14453] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1125.192286][T14453] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1125.248102][T14453] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1125.326528][T14453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.386001][T17568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1125.396524][T14453] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1125.640159][T17568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.667994][T17568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.644668][T15587] usb 4-1: USB disconnect, device number 95 [ 1127.936719][T17602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1128.314368][T10377] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1128.375582][T14453] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1128.779472][T14453] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1128.801842][T10377] usb 4-1: Using ep0 maxpacket: 8 [ 1128.808550][T14453] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1128.809063][T10377] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1128.855521][T10377] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1128.864911][T10377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.872884][T10377] usb 4-1: Product: syz [ 1128.931967][T10377] usb 4-1: Manufacturer: syz [ 1128.990433][T10377] usb 4-1: SerialNumber: syz [ 1128.995709][T14453] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.995732][T14453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.021406][T17611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1129.056781][T14453] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1129.205235][T10377] usb 4-1: config 0 descriptor?? [ 1129.223576][T10377] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1129.305088][T10377] usb 4-1: setting power ON [ 1129.309971][T10377] dvb-usb: bulk message failed: -22 (2/0) [ 1129.366673][T10377] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1129.489712][T10377] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1129.526511][T10377] usb 4-1: media controller created [ 1129.590832][T17611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.607240][T17611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.615865][T10377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1129.635729][T10377] usb 4-1: selecting invalid altsetting 6 [ 1129.642340][T10377] usb 4-1: digital interface selection failed (-22) [ 1129.697940][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1129.699002][ T30] audit: type=1326 audit(1769325615.863:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1129.769130][T10377] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1129.778427][ T30] audit: type=1326 audit(1769325615.863:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711572b code=0x7ffc0000 [ 1129.801896][T10377] usb 4-1: setting power OFF [ 1129.808063][T10377] dvb-usb: bulk message failed: -22 (2/0) [ 1129.820724][T10377] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1129.835943][ T30] audit: type=1326 audit(1769325615.863:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711572b code=0x7ffc0000 [ 1129.861439][T10377] (NULL device *): no alternate interface [ 1129.868930][ T30] audit: type=1326 audit(1769325615.863:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1129.904565][ T30] audit: type=1326 audit(1769325615.873:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1129.935751][ T30] audit: type=1326 audit(1769325615.873:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1129.960169][T10377] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1130.048996][ T30] audit: type=1326 audit(1769325615.873:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1130.117080][ T30] audit: type=1326 audit(1769325615.873:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1130.150016][ T30] audit: type=1326 audit(1769325615.873:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1130.191518][ T30] audit: type=1326 audit(1769325615.873:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17603 comm="syz.2.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1130.908523][T14453] usb 4-1: USB disconnect, device number 96 [ 1131.489595][T17638] netlink: 'syz.3.2331': attribute type 5 has an invalid length. [ 1131.503517][T10377] usb 3-1: USB disconnect, device number 93 [ 1133.428232][T14453] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1133.699419][T14453] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1133.761061][T14453] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1133.774407][T14453] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1133.783540][T14453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.845530][T17656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1134.236610][T14453] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1134.837747][T17674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.891812][T17674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.960129][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1134.960144][ T30] audit: type=1326 audit(1769325621.143:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1135.075661][ T30] audit: type=1326 audit(1769325621.143:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1135.157109][ T30] audit: type=1326 audit(1769325621.143:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1135.328802][T17683] netlink: 'syz.1.2340': attribute type 4 has an invalid length. [ 1135.340779][T17683] netlink: 'syz.1.2340': attribute type 4 has an invalid length. [ 1135.390490][ T30] audit: type=1326 audit(1769325621.143:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1135.495606][ T30] audit: type=1326 audit(1769325621.143:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1135.583591][ T30] audit: type=1326 audit(1769325621.143:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1135.678737][ T30] audit: type=1326 audit(1769325621.143:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1135.813452][ T30] audit: type=1326 audit(1769325621.143:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1136.263774][ T30] audit: type=1326 audit(1769325621.143:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1136.412239][ T30] audit: type=1326 audit(1769325621.143:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1137.070627][T10377] usb 1-1: USB disconnect, device number 72 [ 1138.865145][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2347'. [ 1138.875110][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2347'. [ 1139.466658][T14453] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1140.204341][T14453] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.250430][T14453] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1140.301059][T14453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.354566][T14453] usb 5-1: config 0 descriptor?? [ 1140.389378][T14453] pwc: Askey VC010 type 2 USB webcam detected. [ 1142.107649][T17754] input: syz0 as /devices/virtual/input/input78 [ 1142.234795][T14453] pwc: recv_control_msg error -71 req 02 val 2700 [ 1142.251106][T14453] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1142.274761][T14453] pwc: recv_control_msg error -71 req 04 val 1000 [ 1142.302595][T14453] pwc: recv_control_msg error -71 req 04 val 1300 [ 1142.383047][T14453] pwc: recv_control_msg error -71 req 04 val 1400 [ 1142.402620][T14453] pwc: recv_control_msg error -71 req 02 val 2000 [ 1142.427603][T14453] pwc: recv_control_msg error -71 req 02 val 2100 [ 1142.459818][T14453] pwc: recv_control_msg error -71 req 04 val 1500 [ 1142.480231][T14453] pwc: recv_control_msg error -71 req 02 val 2500 [ 1142.510972][T14453] pwc: recv_control_msg error -71 req 02 val 2400 [ 1142.536491][T14453] pwc: recv_control_msg error -71 req 02 val 2600 [ 1142.573520][T14453] pwc: recv_control_msg error -71 req 02 val 2900 [ 1142.919998][T14453] pwc: recv_control_msg error -71 req 02 val 2800 [ 1142.951596][T14453] pwc: recv_control_msg error -71 req 04 val 1100 [ 1143.016843][T14453] pwc: recv_control_msg error -71 req 04 val 1200 [ 1143.055421][T14453] pwc: Registered as video103. [ 1143.181946][T14453] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input79 [ 1143.304621][T10377] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1143.421803][T14453] usb 5-1: USB disconnect, device number 79 [ 1143.490595][T10377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.504544][T10377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.515072][T10377] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1143.546029][T10377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.624535][T10377] usb 2-1: config 0 descriptor?? [ 1144.066395][T17764] bridge0: port 1(syz_tun) entered blocking state [ 1144.092793][T17764] bridge0: port 1(syz_tun) entered disabled state [ 1144.115966][T17764] syz_tun: entered allmulticast mode [ 1144.123111][T17764] syz_tun: entered promiscuous mode [ 1144.140176][T17781] input: syz0 as /devices/virtual/input/input80 [ 1144.171190][T10377] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1144.251595][T10377] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1144.378693][T10377] cp2112 0003:10C4:EA90.001E: Part Number: 0x82 Device Version: 0xFE [ 1144.726341][T10377] cp2112 0003:10C4:EA90.001E: error requesting SMBus config [ 1144.742321][T10377] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -5 [ 1145.550486][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'. [ 1145.572626][T17795] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2362'. [ 1146.401583][T10377] usb 2-1: USB disconnect, device number 99 [ 1148.053651][T17833] delete_channel: no stack [ 1148.524271][T10377] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1148.756748][T10377] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.788350][T10377] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1148.835059][T10377] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1148.887002][T10377] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.910054][T10377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.960811][T10377] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1148.987652][T10377] usb 2-1: invalid MIDI out EP 0 [ 1149.548159][T10377] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1149.793209][T17856] input: syz0 as /devices/virtual/input/input81 [ 1151.287426][T15587] usb 2-1: USB disconnect, device number 100 [ 1151.716937][T17876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2377'. [ 1151.726682][T17876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2377'. [ 1153.133126][T17892] sctp: [Deprecated]: syz.1.2381 (pid 17892) Use of int in maxseg socket option. [ 1153.133126][T17892] Use struct sctp_assoc_value instead [ 1157.105312][T17952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2393'. [ 1157.105350][T17952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2393'. [ 1158.056961][T17965] QAT: Device 64 not found [ 1158.062719][T17965] QAT: Invalid ioctl -1072667448 [ 1158.364289][ T5949] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1158.386076][T17972] program syz.3.2398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1158.664347][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 1158.855132][ T5949] usb 2-1: config 8 has an invalid interface number: 8 but max is 1 [ 1158.887611][ T5949] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.904858][ T5949] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 1159.321809][ T5949] usb 2-1: config 8 has no interface number 0 [ 1159.389955][ T5949] usb 2-1: config 8 interface 8 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1159.403226][ T5949] usb 2-1: config 8 interface 8 has no altsetting 0 [ 1159.420911][ T5949] usb 2-1: language id specifier not provided by device, defaulting to English [ 1159.439612][ T5949] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 1159.449156][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.457446][ T5949] usb 2-1: Manufacturer: ы [ 1159.464206][ T5949] usb 2-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 1159.752208][T17965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.784782][T17965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.842610][ T5949] sr9700 2-1:8.8: probe with driver sr9700 failed with error -22 [ 1159.876125][ T5949] usb 2-1: USB disconnect, device number 101 [ 1162.055050][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2408'. [ 1162.787882][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 1163.192674][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2412'. [ 1163.235035][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2412'. [ 1163.464420][T10377] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1163.687335][T10377] usb 2-1: Using ep0 maxpacket: 8 [ 1163.878505][T10377] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.891919][T10377] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1163.910856][T10377] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1163.932936][T10377] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1163.969436][T10377] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1163.987982][T10377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.036652][T10377] usbtmc 2-1:16.0: bulk endpoints not found [ 1164.263435][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1164.263451][ T30] audit: type=1326 audit(1769325650.443:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1164.358971][ T30] audit: type=1326 audit(1769325650.443:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1164.416614][ T30] audit: type=1326 audit(1769325650.453:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 1164.637607][ T30] audit: type=1326 audit(1769325650.453:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b572b code=0x7ffc0000 [ 1164.790271][ T30] audit: type=1326 audit(1769325650.453:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1164.894431][ T30] audit: type=1326 audit(1769325650.453:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1164.924736][ T30] audit: type=1326 audit(1769325650.453:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1164.949336][ T30] audit: type=1326 audit(1769325650.453:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1164.977621][ T30] audit: type=1326 audit(1769325650.453:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1165.000348][ T30] audit: type=1326 audit(1769325650.453:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18037 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1165.779470][T10377] usb 2-1: USB disconnect, device number 102 [ 1166.180237][T18085] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2422'. [ 1166.864300][T18088] netlink: 'syz.4.2421': attribute type 4 has an invalid length. [ 1166.873372][T18088] netlink: 'syz.4.2421': attribute type 4 has an invalid length. [ 1167.685759][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'. [ 1168.231006][T18112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2427'. [ 1168.404292][T18112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2427'. [ 1173.855033][T18185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2444'. [ 1173.872123][T18185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2444'. [ 1173.985104][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1173.985119][ T30] audit: type=1326 audit(1769325660.143:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1174.384531][ T30] audit: type=1326 audit(1769325660.143:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1174.615419][ T30] audit: type=1326 audit(1769325660.143:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1174.772001][ T30] audit: type=1326 audit(1769325660.143:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1174.804461][ T30] audit: type=1326 audit(1769325660.143:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1174.834305][ T30] audit: type=1326 audit(1769325660.143:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1174.856945][ T30] audit: type=1326 audit(1769325660.143:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1174.889356][ T30] audit: type=1326 audit(1769325660.143:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1175.074525][ T30] audit: type=1326 audit(1769325660.143:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1175.147855][ T30] audit: type=1326 audit(1769325660.143:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.4.2445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1177.104688][T18234] input: syz0 as /devices/virtual/input/input82 [ 1177.169827][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.176711][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.594277][ T5949] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1178.092381][T18245] sctp: [Deprecated]: syz.4.2457 (pid 18245) Use of int in maxseg socket option. [ 1178.092381][T18245] Use struct sctp_assoc_value instead [ 1178.174289][ T5949] usb 4-1: device descriptor read/64, error -71 [ 1178.484401][ T5949] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1178.704326][ T5949] usb 4-1: device descriptor read/64, error -71 [ 1178.823090][ T5949] usb usb4-port1: attempt power cycle [ 1179.304290][ T5949] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1179.474285][ T5949] usb 4-1: device descriptor read/8, error -71 [ 1179.724320][ T5949] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1179.747130][ T5949] usb 4-1: device descriptor read/8, error -71 [ 1179.878526][ T5949] usb usb4-port1: unable to enumerate USB device [ 1179.945437][T18265] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2461'. [ 1181.713620][T18305] delete_channel: no stack [ 1182.216125][ T5949] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1182.551539][ T5949] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.564271][ T5949] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1182.592799][ T5949] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1182.633231][ T5949] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1182.754297][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.066675][T18317] sctp: [Deprecated]: syz.0.2471 (pid 18317) Use of int in maxseg socket option. [ 1183.066675][T18317] Use struct sctp_assoc_value instead [ 1183.231050][ T5949] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1183.248608][ T5949] usb 4-1: invalid MIDI out EP 0 [ 1183.325326][ T9889] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1183.421568][ T5949] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1183.504162][ T9889] usb 2-1: Using ep0 maxpacket: 8 [ 1183.514938][ T9889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1183.525796][ T9889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1183.537241][ T9889] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1183.547826][ T9889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.631567][ T9889] usb 2-1: Product: syz [ 1183.641083][ T9889] usb 2-1: Manufacturer: syz [ 1183.655571][ T9889] usb 2-1: SerialNumber: syz [ 1183.672350][ T9889] usb 2-1: config 0 descriptor?? [ 1183.691177][ T9889] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1184.062807][ T9889] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 1184.154695][ T9889] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1184.166426][ T9889] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1184.382290][T18325] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1184.582971][T15587] usb 4-1: USB disconnect, device number 101 [ 1186.156942][T18188] usb 2-1: USB disconnect, device number 103 [ 1187.915303][T18381] syz.1.2496 (18381): drop_caches: 2 [ 1188.117856][T18385] netlink: 'syz.2.2486': attribute type 4 has an invalid length. [ 1188.142306][T18385] netlink: 'syz.2.2486': attribute type 4 has an invalid length. [ 1189.671944][T18402] netlink: 'syz.4.2489': attribute type 29 has an invalid length. [ 1189.680348][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1189.722335][T18402] netlink: 'syz.4.2489': attribute type 2 has an invalid length. [ 1189.774616][T18402] : entered promiscuous mode [ 1191.590992][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 1191.591006][ T30] audit: type=1326 audit(1769325677.733:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1191.772092][T18424] input: syz0 as /devices/virtual/input/input83 [ 1191.876270][ T30] audit: type=1326 audit(1769325677.733:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1191.941376][ T30] audit: type=1326 audit(1769325677.733:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1191.964587][ T30] audit: type=1326 audit(1769325677.733:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1191.990642][ T30] audit: type=1326 audit(1769325677.733:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1192.028611][ T30] audit: type=1326 audit(1769325677.733:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1192.355016][ T30] audit: type=1326 audit(1769325677.733:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1192.444038][ T30] audit: type=1326 audit(1769325677.733:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1192.648195][ T30] audit: type=1326 audit(1769325677.733:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1192.877862][ T30] audit: type=1326 audit(1769325677.733:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 1193.538834][T18446] syz.3.2501 (18446): drop_caches: 2 [ 1193.751512][T18449] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2502'. [ 1193.761140][T18449] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2502'. [ 1194.074666][T18450] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1194.585744][T18459] netlink: 'syz.0.2503': attribute type 4 has an invalid length. [ 1194.595555][T18459] netlink: 'syz.0.2503': attribute type 4 has an invalid length. [ 1194.845462][T18188] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1195.010831][T18188] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.021859][T18188] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1195.032492][T18188] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1195.066440][T18188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.612247][T18460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.844440][T18460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.031879][T18468] netlink: 'syz.2.2506': attribute type 4 has an invalid length. [ 1196.314044][T18188] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1196.867239][T18188] usb 1-1: config 0 has an invalid interface number: 252 but max is 0 [ 1196.875768][T18188] usb 1-1: config 0 has no interface number 0 [ 1196.881899][T18188] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=78.f8 [ 1196.904593][T18188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.951142][T18188] usb 1-1: config 0 descriptor?? [ 1197.340118][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1197.342839][ T30] audit: type=1326 audit(1769325683.543:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1197.400107][ T30] audit: type=1326 audit(1769325683.583:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1197.909079][ T30] audit: type=1326 audit(1769325683.583:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1198.014696][ T30] audit: type=1326 audit(1769325683.583:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1198.076582][ T30] audit: type=1326 audit(1769325683.583:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1198.099135][ T30] audit: type=1326 audit(1769325683.583:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1198.149624][ T9889] usb 5-1: USB disconnect, device number 80 [ 1198.184615][ T30] audit: type=1326 audit(1769325683.583:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1198.650421][ T30] audit: type=1326 audit(1769325683.583:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1198.707441][ T30] audit: type=1326 audit(1769325683.583:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1198.763172][ T30] audit: type=1326 audit(1769325683.583:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 1198.903898][ T9889] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1199.257701][ T9889] usb 4-1: Using ep0 maxpacket: 32 [ 1199.292811][ T9889] usb 4-1: config 32 has an invalid interface number: 76 but max is 0 [ 1199.302422][ T9889] usb 4-1: config 32 has no interface number 0 [ 1199.309173][ T9889] usb 4-1: config 32 interface 76 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 1199.321386][ T9889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.e3 [ 1199.349901][ T9889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.420713][T18188] usb 1-1: string descriptor 0 read error: -71 [ 1199.439601][ T9889] usbtest 4-1:32.76: Linux gadget zero [ 1199.452461][ T9889] usbtest 4-1:32.76: high-speed {control in/out int-out} tests (+alt) [ 1199.469117][T18188] radio-usb-si4713 1-1:0.252: Si4713 development board discovered: (10C4:8244) [ 1199.642616][T18188] radio-usb-si4713 1-1:0.252: probe with driver radio-usb-si4713 failed with error -71 [ 1199.658883][T18188] usbhid 1-1:0.252: couldn't find an input interrupt endpoint [ 1199.679918][T18188] usb 1-1: USB disconnect, device number 73 [ 1199.771624][T18518] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[18518] [ 1202.006039][T10377] usb 4-1: USB disconnect, device number 102 [ 1202.106892][T18530] input: syz0 as /devices/virtual/input/input85 [ 1202.260617][T18538] netlink: 'syz.3.2519': attribute type 4 has an invalid length. [ 1202.270272][T18538] netlink: 'syz.3.2519': attribute type 4 has an invalid length. [ 1203.484008][T18550] xt_bpf: check failed: parse error [ 1204.179554][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1204.189046][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1208.219287][T18610] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2535'. [ 1208.974957][T18621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1209.148067][T18633] veth1_to_bond: entered allmulticast mode [ 1209.187720][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1212.182769][T18630] veth1_to_bond: left allmulticast mode [ 1215.142508][T18706] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1215.515113][T18712] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2556'. [ 1215.544884][T18712] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2556'. [ 1215.866798][T18717] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1217.334564][ T9889] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1217.352204][T18738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 1217.519311][ T9889] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.536432][ T9889] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1217.551970][ T9889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1217.569715][ T9889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.273392][T18751] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2563'. [ 1218.282526][T18751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2563'. [ 1218.386860][T18734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.404509][T18734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.446516][T10377] usb 1-1: USB disconnect, device number 74 [ 1218.456320][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1218.456330][ T30] audit: type=1326 audit(1769325704.643:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1218.644303][ T30] audit: type=1326 audit(1769325704.643:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1218.749323][ T30] audit: type=1326 audit(1769325704.643:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1218.785140][T15587] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1218.842043][ T30] audit: type=1326 audit(1769325704.643:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1218.875034][ T30] audit: type=1326 audit(1769325704.643:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1219.271968][ T30] audit: type=1326 audit(1769325704.643:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1219.318133][ T30] audit: type=1326 audit(1769325704.643:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1219.367096][ T30] audit: type=1326 audit(1769325704.643:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1219.425071][ T30] audit: type=1326 audit(1769325704.643:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1219.485735][T15587] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.496893][ T30] audit: type=1326 audit(1769325704.643:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18729 comm="syz.0.2561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 1219.528147][T15587] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1219.575624][T15587] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1219.614787][T15587] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1219.642335][T15587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.735056][T18769] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2567'. [ 1219.803262][T15587] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1219.915710][T15587] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1220.002298][T18753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.048827][T18753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.296749][ T9889] usb 4-1: USB disconnect, device number 103 [ 1221.388195][T18788] input: syz0 as /devices/virtual/input/input89 [ 1222.618406][T18805] netlink: 'syz.2.2576': attribute type 29 has an invalid length. [ 1222.626873][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2576'. [ 1222.659255][T18805] netlink: 'syz.2.2576': attribute type 2 has an invalid length. [ 1222.704767][T18805] : entered promiscuous mode [ 1225.184381][T15587] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1225.669342][T18849] xt_bpf: check failed: parse error [ 1226.396071][T15587] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.416138][T15587] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1226.484433][T15587] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.502270][T15587] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1226.523649][T15587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.692906][T15587] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1227.039337][T18834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.048565][T18834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.112672][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1227.112687][ T30] audit: type=1326 audit(1769325713.263:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1227.155983][T15587] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1227.340257][ T30] audit: type=1326 audit(1769325713.263:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711572b code=0x7ffc0000 [ 1227.374492][ T30] audit: type=1326 audit(1769325713.263:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711572b code=0x7ffc0000 [ 1227.422211][ T30] audit: type=1326 audit(1769325713.263:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1227.470748][ T30] audit: type=1326 audit(1769325713.263:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1227.637597][ T30] audit: type=1326 audit(1769325713.263:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1227.729009][ T30] audit: type=1326 audit(1769325713.263:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1227.804347][ T30] audit: type=1326 audit(1769325713.263:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1227.834335][ T30] audit: type=1326 audit(1769325713.263:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1228.166086][ T30] audit: type=1326 audit(1769325713.263:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.2.2582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x7ffc0000 [ 1228.398084][T18870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2590'. [ 1228.618089][T15587] usb 3-1: USB disconnect, device number 94 [ 1229.478469][T18883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.555125][T18883] net_ratelimit: 7 callbacks suppressed [ 1229.555146][T18883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1230.361490][T18896] input: syz0 as /devices/virtual/input/input90 [ 1230.870577][T18900] netlink: 'syz.0.2594': attribute type 4 has an invalid length. [ 1232.555081][T18915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2597'. [ 1233.284349][ T8458] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1233.484294][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 1233.521188][ T31] Tainted: G L syzkaller #0 [ 1233.589316][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1233.609845][ T8458] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1233.623064][ T31] task:kworker/0:0 state:D stack:20744 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1233.672193][ T31] Workqueue: usb_hub_wq hub_event [ 1233.690774][ T8458] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1233.711998][ T31] Call Trace: [ 1233.720960][ T31] [ 1233.731436][ T31] __schedule+0x14ef/0x4fb0 [ 1233.743144][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 1233.750255][ T8458] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 1233.770625][ T31] ? __pfx___schedule+0x10/0x10 [ 1233.782245][ T31] ? schedule+0x90/0x360 [ 1233.791655][ T31] schedule+0x164/0x360 [ 1233.800172][ T31] schedule_preempt_disabled+0x13/0x30 [ 1233.810100][ T8458] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1233.828256][ T31] __mutex_lock+0x7fe/0x1300 [ 1233.842653][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1233.931132][ T31] ? hub_event+0x21a2/0x4f30 [ 1233.940016][ T8458] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1233.961121][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1233.966693][ T8458] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1233.983794][ T8458] usb 4-1: Product: syz [ 1233.984462][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1233.995210][ T8458] usb 4-1: Manufacturer: syz [ 1234.002034][ T8458] usb 4-1: SerialNumber: syz [ 1234.014494][ T8458] usb 4-1: config 0 descriptor?? [ 1234.045844][ T31] hub_event+0x21a2/0x4f30 [ 1234.062124][T18930] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1234.069555][ T31] ? __pfx_hub_event+0x10/0x10 [ 1234.127950][ T8458] usb 4-1: selecting invalid altsetting 0 [ 1234.151544][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1234.194254][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1234.203523][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1234.227311][ T31] process_scheduled_works+0xaec/0x17a0 [ 1234.246449][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1234.262671][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1234.279769][ T31] ? assign_work+0x3d3/0x440 [ 1234.296786][ T31] worker_thread+0x89f/0xd90 [ 1234.313277][ T31] kthread+0x726/0x8b0 [ 1234.323028][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1234.388861][T18930] usb 4-1: BOGUS urb xfer, pipe 0 != type 1 [ 1234.404198][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.410116][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1234.464751][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.470782][ T31] ret_from_fork+0x51b/0xa40 [ 1234.480841][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.492487][ T31] ? __switch_to+0xc82/0x1410 [ 1234.499105][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.504797][ T31] ret_from_fork_asm+0x1a/0x30 [ 1234.509692][ T31] [ 1234.519205][ T31] [ 1234.519205][ T31] Showing all locks held in the system: [ 1234.527939][ T31] 5 locks held by kworker/0:0/9: [ 1234.532931][ T31] #0: ffff88801da9d148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1234.544969][ T31] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1234.557481][ T31] #2: ffff888145ff5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1234.566953][ T31] #3: ffff888146308518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1234.577999][ T31] #4: ffff888145f35568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1234.588450][ T31] 1 lock held by khungtaskd/31: [ 1234.593360][ T31] #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1234.604095][ T31] 2 locks held by getty/5579: [ 1234.608931][ T31] #0: ffff88814d6e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1234.624159][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1234.635057][ T31] 5 locks held by kworker/0:5/5936: [ 1234.640351][ T31] #0: ffff88801da9d148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1234.656678][ T31] #1: ffffc90004b9fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1234.670399][ T31] #2: ffff888145f97198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1234.680788][ T31] #3: ffff888145fa2518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1234.691604][ T31] #4: ffff888145f35568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1234.703051][ T31] 2 locks held by kworker/u8:8/7106: [ 1234.710121][ T31] #0: ffff88801b3cf948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1234.722285][ T31] #1: ffffc90004a7fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1234.736674][ T31] [ 1234.739555][ T31] ============================================= [ 1234.739555][ T31] [ 1234.766206][ T31] NMI backtrace for cpu 0 [ 1234.766224][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.766245][ T31] Tainted: [L]=SOFTLOCKUP [ 1234.766252][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1234.766262][ T31] Call Trace: [ 1234.766269][ T31] [ 1234.766276][ T31] dump_stack_lvl+0xe8/0x150 [ 1234.766301][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1234.766320][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1234.766339][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1234.766360][ T31] sys_info+0x135/0x170 [ 1234.766375][ T31] watchdog+0xf90/0xfe0 [ 1234.766400][ T31] ? watchdog+0x209/0xfe0 [ 1234.766426][ T31] kthread+0x726/0x8b0 [ 1234.766449][ T31] ? __pfx_watchdog+0x10/0x10 [ 1234.766468][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.766490][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1234.766508][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.766528][ T31] ret_from_fork+0x51b/0xa40 [ 1234.766547][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.766563][ T31] ? __switch_to+0xc82/0x1410 [ 1234.766587][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.766608][ T31] ret_from_fork_asm+0x1a/0x30 [ 1234.766640][ T31] [ 1234.766646][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1234.895130][ C1] NMI backtrace for cpu 1 [ 1234.895147][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.895169][ C1] Tainted: [L]=SOFTLOCKUP [ 1234.895175][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1234.895185][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1234.895212][ C1] Code: 28 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b7 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1234.895227][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1234.895241][ C1] RAX: 0000000001f29c8f RBX: ffffffff8198427d RCX: 0000000080000001 [ 1234.895253][ C1] RDX: 0000000000000001 RSI: ffffffff8dacfb53 RDI: ffffffff8be73880 [ 1234.895265][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1234.895276][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fceef70 [ 1234.895288][ C1] R13: 1ffff11003a50b70 R14: 0000000000000001 R15: 0000000000000001 [ 1234.895305][ C1] FS: 0000000000000000(0000) GS:ffff888125a26000(0000) knlGS:0000000000000000 [ 1234.895318][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1234.895330][ C1] CR2: 00000000801f1018 CR3: 0000000077d32000 CR4: 00000000003526f0 [ 1234.895344][ C1] Call Trace: [ 1234.895350][ C1] [ 1234.895357][ C1] default_idle+0x9/0x20 [ 1234.895371][ C1] default_idle_call+0x72/0xb0 [ 1234.895387][ C1] do_idle+0x1bd/0x500 [ 1234.895403][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1234.895422][ C1] ? __pfx_do_idle+0x10/0x10 [ 1234.895446][ C1] cpu_startup_entry+0x43/0x60 [ 1234.895463][ C1] start_secondary+0x101/0x110 [ 1234.895478][ C1] common_startup_64+0x13e/0x147 [ 1234.895506][ C1] [ 1235.074306][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1235.081167][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.091845][ T31] Tainted: [L]=SOFTLOCKUP [ 1235.096162][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1235.106200][ T31] Call Trace: [ 1235.109467][ T31] [ 1235.112380][ T31] vpanic+0x1e0/0x670 [ 1235.116348][ T31] panic+0xc5/0xd0 [ 1235.120054][ T31] ? __pfx_panic+0x10/0x10 [ 1235.124451][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1235.129815][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1235.135972][ T31] watchdog+0xfda/0xfe0 [ 1235.140115][ T31] ? watchdog+0x209/0xfe0 [ 1235.144430][ T31] kthread+0x726/0x8b0 [ 1235.148501][ T31] ? __pfx_watchdog+0x10/0x10 [ 1235.153162][ T31] ? __pfx_kthread+0x10/0x10 [ 1235.157831][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1235.163030][ T31] ? __pfx_kthread+0x10/0x10 [ 1235.167615][ T31] ret_from_fork+0x51b/0xa40 [ 1235.172198][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1235.177293][ T31] ? __switch_to+0xc82/0x1410 [ 1235.181962][ T31] ? __pfx_kthread+0x10/0x10 [ 1235.186542][ T31] ret_from_fork_asm+0x1a/0x30 [ 1235.191304][ T31] [ 1235.194633][ T31] Kernel Offset: disabled [ 1235.198942][ T31] Rebooting in 86400 seconds..