last executing test programs: 2m54.016281149s ago: executing program 1 (id=3336): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x24, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7fff}]}]}}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0xf, 0x0, [@multicast2, @private, @broadcast]}]}}}}}}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) 2m51.673780332s ago: executing program 1 (id=3339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, 0x0, 0x2010) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x90100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a010800000000000000000200000009"], 0x68}}, 0x0) 2m45.289872593s ago: executing program 1 (id=3348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x19a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'veth1_to_hsr\x00', {0x2, 0x0, @private}}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r0, 0x3fe, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 2m41.119641816s ago: executing program 1 (id=3354): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x7, 0x4}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000011c0)=""/4096, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 2m39.639010496s ago: executing program 1 (id=3357): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m38.459394782s ago: executing program 1 (id=3359): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) sync() syz_usb_connect(0x1d00, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0xd4}}, 0x20050800) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}], 0x1, 0x8008801) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x400) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, &(0x7f0000000040)) 2m24.584124268s ago: executing program 3 (id=3375): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x8000011, r4, 0x0) ftruncate(r2, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) 2m23.001164616s ago: executing program 32 (id=3359): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) sync() syz_usb_connect(0x1d00, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0xd4}}, 0x20050800) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}], 0x1, 0x8008801) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x400) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, &(0x7f0000000040)) 2m20.005490225s ago: executing program 3 (id=3381): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 2m18.709285746s ago: executing program 3 (id=3383): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) 2m16.697034696s ago: executing program 3 (id=3386): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x1, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x0, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x5, 0x1, 0x5, 0x4, 0x3, 0x4, 0xa, 0x8, 0x3, 0x8, 0xffffff80, 0x2, 0xffff, 0x6, 0x1ff, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x3, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x6, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x4, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0x1, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x3, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x8, 0x10005, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1907, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000bd8000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r5) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2m15.476451199s ago: executing program 3 (id=3387): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}}, 0x0) 2m14.231650553s ago: executing program 3 (id=3389): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) sync() syz_usb_connect(0x1d00, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0xd4}}, 0x20050800) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}], 0x1, 0x8008801) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x400) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, &(0x7f0000000040)) 1m59.028692119s ago: executing program 33 (id=3389): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) sync() syz_usb_connect(0x1d00, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0xd4}}, 0x20050800) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}], 0x1, 0x8008801) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x400) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, &(0x7f0000000040)) 24.087882971s ago: executing program 0 (id=3540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x19a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'veth1_to_hsr\x00', {0x2, 0x0, @private}}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r0, 0x3fe, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 18.898734129s ago: executing program 6 (id=3547): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x24, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7fff}]}]}}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0xf, 0x0, [@multicast2, @private, @broadcast]}]}}}}}}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffa}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf9e}], 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) 17.282340594s ago: executing program 0 (id=3548): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20180) ioctl$EVIOCGABS20(r2, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r3, 0x78f) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x28000) mprotect(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x19, 0x0, &(0x7f0000000000)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x7, &(0x7f0000000180)=[{0x29, 0x7f, 0x4, 0x6}, {0x2, 0x7, 0x7f, 0x3ff}, {0xfff7, 0x6, 0x9, 0x2}, {0x8000, 0x80, 0xc, 0x8}, {0xd6b1, 0x4, 0x9, 0x3}, {0x0, 0x4, 0xb, 0x7}, {0x2, 0x5, 0x9, 0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) 17.209606106s ago: executing program 6 (id=3549): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000580)=0x1) syz_usbip_server_init(0x2) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 16.16406191s ago: executing program 2 (id=3550): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xdf}}, 0x10) 14.557196485s ago: executing program 6 (id=3555): socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) socket(0xa, 0x3, 0x3e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4f, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000caf000/0x4000)=nil, 0x4000, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) 14.531213416s ago: executing program 0 (id=3556): socket$netlink(0x10, 0x3, 0x0) r0 = memfd_secret(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000180)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="7e596ac658e7bf415e6e9329b0ae2c8233a125386bd6989d6568fa7e12847839b7767d64d0ad76ccd73ca7e3e51262393be06d974671c3b70eee712224e85c4f61cb8b90b732742c2e23ba1fd155b5a75ebebb75a7b6e39b5683aa1417ae85", @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC], 0x1, 0x617a, &(0x7f0000000580)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) open(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14927e, 0x20) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 13.278531778s ago: executing program 4 (id=3557): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac907", 0x4}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 12.352548496s ago: executing program 4 (id=3558): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x3, 0x4a243) close(r2) 11.682478251s ago: executing program 6 (id=3559): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="159c4ca6d5f2db29c58d190c7d"], 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) syz_usb_disconnect(r5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r6, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 11.587802818s ago: executing program 0 (id=3560): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r2, 0x0, 0x4048010) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x2, 0x58, &(0x7f0000000240)=""/88}, &(0x7f0000000380)="e31ffffff200", 0x0, 0x0, 0x0, 0x1, 0x0}) 10.779841768s ago: executing program 2 (id=3561): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad3, 0x0, 0xfffffffc, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0xfeffffff, r3, 0x3, {0x3b4, 0x9}, 0x6}, 0x1) 10.731287912s ago: executing program 5 (id=3562): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489b733dcaa932034d61433a5ba43d2103eb3231503dc2980dea6e2", 0x0, 0xfffffffffffffffc, 0x0, 0xff, 0x0, 0xf48, 0x3, 0x0, [0x7, 0x800000]}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x9, @broadcast}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) 10.176698401s ago: executing program 5 (id=3563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$evdev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002080)='rseq_ip_fixup\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 9.757182367s ago: executing program 4 (id=3564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5}) 8.950185923s ago: executing program 5 (id=3565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000002c0)={0x48}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x80, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x42, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="5bb4366dc25fd3a6d958"]}]}}]}]}]}}]}, 0x80}}, 0x20040054) 8.949295258s ago: executing program 2 (id=3566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[0x0, &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8004) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.903154335s ago: executing program 4 (id=3567): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x0, 0x1d}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000580)=0x1) 5.272255923s ago: executing program 6 (id=3568): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) 4.948445902s ago: executing program 0 (id=3569): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000480), 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) 4.763063425s ago: executing program 2 (id=3570): r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0x134d3b0ef085c40c, 0x0, 0x0) socket(0x10, 0x80002, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040d0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x40000) syz_emit_ethernet(0xf8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[], 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 3.636002531s ago: executing program 4 (id=3571): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xdf}}, 0x10) 3.521930443s ago: executing program 5 (id=3572): mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=@setlink={0x40, 0x13, 0x5, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x408, 0xc000}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) syz_open_procfs(0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.833770835s ago: executing program 2 (id=3573): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489b733dcaa932034d61433a5ba43d2103eb3231503dc2980dea6e2", 0x0, 0xfffffffffffffffc, 0x0, 0xff, 0x0, 0xf48, 0x3, 0x0, [0x7, 0x800000]}) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) 1.905615372s ago: executing program 2 (id=3574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0xc0285628, &(0x7f0000000100)=0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='wchan\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) sched_setattr(0x0, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x8a5a582764e2923, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = dup2(r4, r4) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000030c0)=ANY=[@ANYBLOB="280000001200017fffffff8100000000100000000c0035000000000000000000080031"], 0x28}], 0x1}, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) 1.857102155s ago: executing program 6 (id=3575): r0 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000e000}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x5f, 0x7ffc0002}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x7, 0x18, 0x0, 0x0, @binary="01ac0f"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x13}, 0x2f0f11abc3169694, 0x0, 0x10, 0x0, [{@broadcast}]}}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000000) socket$inet(0x2, 0x1, 0x100) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/185, 0xb9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x188}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.343480827s ago: executing program 5 (id=3576): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}]}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2805}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 520.015256ms ago: executing program 4 (id=3577): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x7, 0x4}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000011c0)=""/4096, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 125.487845ms ago: executing program 5 (id=3578): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=3579): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1634.007954][ T30] audit: type=1326 audit(1757648859.823:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1634.030843][ T30] audit: type=1326 audit(1757648859.823:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1634.054515][ T30] audit: type=1326 audit(1757648859.823:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1634.079652][ T30] audit: type=1326 audit(1757648859.823:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1634.207002][ T30] audit: type=1326 audit(1757648859.823:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1634.444637][ T30] audit: type=1326 audit(1757648859.823:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18823 comm="syz.0.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1635.894932][ T5932] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1636.077708][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1636.094674][ T5932] usb 5-1: not running at top speed; connect to a high speed hub [ 1636.154588][ T5932] usb 5-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.196082][ T5932] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1636.356507][ T5932] usb 5-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1636.370918][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.403278][ T5932] usb 5-1: Product: syz [ 1636.448790][ T5932] usb 5-1: Manufacturer: syz [ 1636.453561][ T5932] usb 5-1: SerialNumber: syz [ 1636.826481][ T5932] usb 5-1: USB disconnect, device number 13 [ 1638.440359][T18878] loop4: detected capacity change from 0 to 256 [ 1638.504591][T18878] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1638.534436][T16870] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1641.914741][ T981] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1642.117137][ T981] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.163040][ T981] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1642.326973][ T981] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1642.416242][ T981] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1642.466267][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.710300][ T981] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1642.710943][ T981] usb 2-1: invalid MIDI out EP 0 [ 1642.832772][T17861] udevd[17861]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1643.013365][ T981] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1643.070114][ T981] usb 2-1: USB disconnect, device number 64 [ 1644.442769][T18914] loop3: detected capacity change from 0 to 512 [ 1644.561053][T18914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.744633][ T955] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1645.533008][ T955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1645.557666][ T955] usb 2-1: not running at top speed; connect to a high speed hub [ 1645.601741][ T955] usb 2-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.643655][ T955] usb 2-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1645.688428][ T955] usb 2-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1645.699490][ T955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.753098][ T955] usb 2-1: Product: syz [ 1645.806872][ T955] usb 2-1: Manufacturer: syz [ 1645.811552][ T955] usb 2-1: SerialNumber: syz [ 1645.913066][T18141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.477752][T18927] loop3: detected capacity change from 0 to 512 [ 1646.733976][T18927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1646.915456][T18301] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 1647.526678][T18301] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1647.544531][T18301] usb 5-1: config 0 has no interface number 0 [ 1647.596299][T18301] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1647.674612][T18301] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1647.821339][T18301] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1648.088893][T18301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.127073][T18141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.170089][T18301] usb 5-1: config 0 descriptor?? [ 1648.206536][T18930] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1648.240903][T18301] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1648.513965][T18929] netlink: 'syz.4.3154': attribute type 8 has an invalid length. [ 1650.808662][ T955] usb 2-1: USB disconnect, device number 65 [ 1653.015288][ T981] usb 5-1: USB disconnect, device number 14 [ 1655.484660][T17862] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1655.492689][T14473] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1656.031278][T14473] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1656.143432][T17862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1656.203724][T14473] usb 3-1: not running at top speed; connect to a high speed hub [ 1656.214244][T17862] usb 1-1: not running at top speed; connect to a high speed hub [ 1656.257190][T17862] usb 1-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.274481][T14473] usb 3-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.548093][T17862] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1656.574019][T14473] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1656.658031][T17862] usb 1-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1656.684488][T17862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.715873][T14473] usb 3-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1656.775982][T17862] usb 1-1: Product: syz [ 1656.780262][T14473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.827384][T17862] usb 1-1: Manufacturer: syz [ 1656.852377][T14473] usb 3-1: Product: syz [ 1656.861448][T17862] usb 1-1: SerialNumber: syz [ 1656.894745][T14473] usb 3-1: Manufacturer: syz [ 1656.934410][T14473] usb 3-1: SerialNumber: syz [ 1658.809364][T14473] usb 3-1: USB disconnect, device number 17 [ 1659.155688][T17862] usb 1-1: USB disconnect, device number 5 [ 1661.014720][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 1661.285888][T19008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1663.354536][T14473] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1663.778619][T14473] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1663.851053][T14473] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1663.861067][T14473] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1663.884505][T14473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.948240][T19030] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1663.959559][T14473] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1664.342065][T19030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.352647][T19030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.567840][T19030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.614499][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1664.614524][ T30] audit: type=1326 audit(1757648892.683:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1664.686335][T19030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.792786][ T30] audit: type=1326 audit(1757648892.693:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e6078d510 code=0x7ffc0000 [ 1664.853457][ T30] audit: type=1326 audit(1757648892.693:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e6078e7ab code=0x7ffc0000 [ 1664.998624][ T30] audit: type=1326 audit(1757648892.693:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e6078e7ab code=0x7ffc0000 [ 1665.259318][ T30] audit: type=1326 audit(1757648892.823:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1665.320077][ T30] audit: type=1326 audit(1757648892.823:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1665.478178][ T30] audit: type=1326 audit(1757648892.823:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1665.637482][ T30] audit: type=1326 audit(1757648892.823:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1665.745031][ T30] audit: type=1326 audit(1757648892.823:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1665.871141][ T30] audit: type=1326 audit(1757648892.823:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19025 comm="syz.3.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1667.171384][ T981] usb 4-1: USB disconnect, device number 9 [ 1667.314804][T18301] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1667.512830][T18301] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1667.548112][T18301] usb 5-1: not running at top speed; connect to a high speed hub [ 1667.577288][T18301] usb 5-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.644382][T18301] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1667.734125][T18301] usb 5-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1667.784402][T18301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.815921][T18301] usb 5-1: Product: syz [ 1667.820136][T18301] usb 5-1: Manufacturer: syz [ 1667.853748][T18301] usb 5-1: SerialNumber: syz [ 1670.214227][T18518] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1670.707714][T18518] usb 3-1: Using ep0 maxpacket: 32 [ 1670.813184][T18518] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1670.926206][T18518] usb 3-1: can't read configurations, error -61 [ 1671.076026][T18518] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1671.255615][T18518] usb 3-1: Using ep0 maxpacket: 32 [ 1671.287433][T18518] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1671.295633][T18518] usb 3-1: can't read configurations, error -61 [ 1671.334837][T18518] usb usb3-port1: attempt power cycle [ 1671.386853][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1671.405171][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1671.414138][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1671.424247][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1671.486228][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1671.784462][T18518] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1671.970959][T18518] usb 3-1: Using ep0 maxpacket: 32 [ 1672.135573][T18518] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1672.184086][T18518] usb 3-1: can't read configurations, error -61 [ 1672.505074][T18518] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1673.374702][ T981] usb 5-1: USB disconnect, device number 15 [ 1673.594598][T16870] Bluetooth: hci2: command tx timeout [ 1674.299988][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.311883][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.591889][T18518] usb 3-1: device descriptor read/8, error -71 [ 1674.607593][T19104] netlink: 'syz.4.3188': attribute type 3 has an invalid length. [ 1674.617522][T19104] netlink: 'syz.4.3188': attribute type 3 has an invalid length. [ 1674.804290][T18518] usb usb3-port1: unable to enumerate USB device [ 1674.962010][T19106] loop2: detected capacity change from 0 to 7 [ 1675.054791][T17747] Dev loop2: unable to read RDB block 7 [ 1675.067972][T17747] loop2: unable to read partition table [ 1675.104747][T17747] loop2: partition table beyond EOD, truncated [ 1675.125589][T19106] Dev loop2: unable to read RDB block 7 [ 1675.185274][T19106] loop2: unable to read partition table [ 1675.191433][T19106] loop2: partition table beyond EOD, truncated [ 1675.258400][T19106] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1675.654816][T16870] Bluetooth: hci2: command tx timeout [ 1675.924574][ T981] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1676.220671][ T981] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1676.346463][ T981] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1676.381835][T19085] chnl_net:caif_netlink_parms(): no params data found [ 1676.384627][ T981] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1676.413521][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.454655][T19118] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1676.501457][ T981] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1676.704587][T19118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.884782][T19118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.169281][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1677.169299][ T30] audit: type=1326 audit(1757648905.283:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1677.224494][T19118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.255345][ T30] audit: type=1326 audit(1757648905.293:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91ead8d510 code=0x7ffc0000 [ 1677.278555][T19118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.417028][T19085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.424226][T19085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.440036][T19085] bridge_slave_0: entered allmulticast mode [ 1677.607554][ T30] audit: type=1326 audit(1757648905.293:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8e7ab code=0x7ffc0000 [ 1677.635389][T19085] bridge_slave_0: entered promiscuous mode [ 1677.837839][T16870] Bluetooth: hci2: command tx timeout [ 1677.877765][T19085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.309065][ T30] audit: type=1326 audit(1757648905.293:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8e7ab code=0x7ffc0000 [ 1678.417434][T19085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.426403][T19085] bridge_slave_1: entered allmulticast mode [ 1678.486761][T19085] bridge_slave_1: entered promiscuous mode [ 1678.519403][ T30] audit: type=1326 audit(1757648905.413:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1678.637433][ T30] audit: type=1326 audit(1757648905.413:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1678.868151][ T30] audit: type=1326 audit(1757648905.413:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1678.873318][T19085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.994511][ T30] audit: type=1326 audit(1757648905.413:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1679.088054][T19085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.157001][ T30] audit: type=1326 audit(1757648905.413:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1679.274686][ T30] audit: type=1326 audit(1757648905.423:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1679.507090][T19085] team0: Port device team_slave_0 added [ 1679.546284][T19085] team0: Port device team_slave_1 added [ 1679.584582][T18518] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1679.696743][T18301] usb 3-1: USB disconnect, device number 22 [ 1679.824451][T18518] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1679.894765][T16870] Bluetooth: hci2: command tx timeout [ 1680.069993][T18518] usb 5-1: not running at top speed; connect to a high speed hub [ 1680.192715][T19154] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 1680.212103][T16870] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1680.242627][T19155] loop2: detected capacity change from 0 to 256 [ 1680.768171][T18518] usb 5-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.784474][T18518] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1680.837454][T19155] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1680.904980][T18518] usb 5-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1681.056563][T18518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.094802][T18518] usb 5-1: Product: syz [ 1681.142909][T18518] usb 5-1: Manufacturer: syz [ 1681.177275][T19085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.184292][T19085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.224785][T18518] usb 5-1: SerialNumber: syz [ 1681.274698][T19085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.328152][T19085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.410814][T19085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.476083][T19085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.668909][T14473] usb 5-1: USB disconnect, device number 16 [ 1681.910769][T19085] hsr_slave_0: entered promiscuous mode [ 1681.926332][T19085] hsr_slave_1: entered promiscuous mode [ 1681.967392][T19085] debugfs: 'hsr0' already exists in 'hsr' [ 1681.973368][T19085] Cannot create hsr debugfs directory [ 1683.174686][T18301] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1683.377530][T18301] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1683.386584][T18301] usb 5-1: config 0 has no interface number 0 [ 1683.392739][T18301] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1683.449702][T18301] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1683.483127][T18301] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1683.531769][T18301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.565584][T18301] usb 5-1: config 0 descriptor?? [ 1683.619635][T19177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1683.691109][T18301] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1684.023458][T19177] netlink: 'syz.4.3204': attribute type 8 has an invalid length. [ 1685.435735][T19085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.485084][T19085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.848117][T19085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.164535][ T5932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1687.430370][T19085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.820703][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1687.842838][T18301] usb 5-1: USB disconnect, device number 17 [ 1687.950039][ T5932] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1688.041455][ T5932] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1688.156603][ T5932] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1688.244565][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.319861][T19085] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1688.337721][T19199] loop4: detected capacity change from 0 to 512 [ 1688.371326][T19196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1688.387579][T19085] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1688.412630][ T5932] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1688.446927][T19199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1688.457404][T19085] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1688.522640][T19085] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1688.608324][T19196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.620675][T19196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.543515][T19196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.553991][T19196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.563403][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1689.563436][ T30] audit: type=1326 audit(1757648917.653:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19191 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1689.693505][ T30] audit: type=1326 audit(1757648917.653:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19191 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1689.750578][T19085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.803658][T19085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.898794][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.905995][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.992925][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.000126][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.046004][T17863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.070729][T19215] loop3: detected capacity change from 0 to 512 [ 1690.183956][T19215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1690.830031][T19085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1691.279525][T18141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.495010][T17862] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1692.010066][T17862] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1692.104569][T17862] usb 3-1: not running at top speed; connect to a high speed hub [ 1692.204435][T14473] usb 1-1: USB disconnect, device number 6 [ 1692.226855][T17862] usb 3-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.262488][T17862] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1692.313286][T17862] usb 3-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1692.324452][T17862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.332532][T17862] usb 3-1: Product: syz [ 1692.339191][T17862] usb 3-1: Manufacturer: syz [ 1692.343924][T17862] usb 3-1: SerialNumber: syz [ 1692.880175][T19085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.921756][ T955] usb 3-1: USB disconnect, device number 23 [ 1693.163981][T19085] veth0_vlan: entered promiscuous mode [ 1693.345743][T19085] veth1_vlan: entered promiscuous mode [ 1693.427643][T19085] veth0_macvtap: entered promiscuous mode [ 1693.496891][T19085] veth1_macvtap: entered promiscuous mode [ 1693.693731][T19085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.829908][T19085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1694.084627][T18746] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.756841][T18746] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.197919][T15806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.276558][T15806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.498721][ T6481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.514509][ T6481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.559828][T18746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.608340][T18746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.263479][T19269] netlink: 'syz.0.3219': attribute type 3 has an invalid length. [ 1698.288493][T19269] netlink: 'syz.0.3219': attribute type 3 has an invalid length. [ 1700.215128][ T955] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1700.609284][ T955] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1700.622638][ T955] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1700.712688][ T955] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1700.774772][ T955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.035959][T19287] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1701.122915][ T955] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1701.302181][T19287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.358647][T19287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.778021][ T30] audit: type=1326 audit(1757648929.883:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1701.909211][T19287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.028048][T19287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.077407][ T30] audit: type=1326 audit(1757648930.033:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e6078d510 code=0x7ffc0000 [ 1703.204693][ T30] audit: type=1326 audit(1757648930.033:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e6078e7ab code=0x7ffc0000 [ 1703.332579][ T30] audit: type=1326 audit(1757648930.033:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e6078e7ab code=0x7ffc0000 [ 1703.447274][ T30] audit: type=1326 audit(1757648930.163:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1703.513058][ T30] audit: type=1326 audit(1757648930.173:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1703.588125][ T30] audit: type=1326 audit(1757648930.173:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1703.864617][ T30] audit: type=1326 audit(1757648930.173:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1703.909510][ T30] audit: type=1326 audit(1757648930.173:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1703.996991][ T30] audit: type=1326 audit(1757648930.173:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.3.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1704.499917][T18301] usb 4-1: USB disconnect, device number 10 [ 1704.634419][ T981] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1705.152517][ T981] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.196013][ T981] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1705.208558][ T981] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1705.232158][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.308456][ T981] usb 2-1: USB disconnect, device number 66 [ 1708.394693][T18301] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1708.654382][T18301] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1708.665617][T18301] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1708.692310][T18301] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1708.740883][T18301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.754472][ T981] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1708.835192][T19336] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1708.848041][T18301] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1709.014466][ T981] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.062509][T19336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.076303][T19336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.126452][ T981] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1709.165006][ T981] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1709.887109][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.937189][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1709.937207][ T30] audit: type=1326 audit(1757648938.043:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11918eba9 code=0x7ffc0000 [ 1710.180728][T19336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.254999][ T30] audit: type=1326 audit(1757648938.043:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11918eba9 code=0x7ffc0000 [ 1710.305660][T19336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.473832][ T30] audit: type=1326 audit(1757648938.163:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff11918d510 code=0x7ffc0000 [ 1710.555129][ T30] audit: type=1326 audit(1757648938.173:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff11918e7ab code=0x7ffc0000 [ 1710.639548][ T30] audit: type=1326 audit(1757648938.173:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff11918e7ab code=0x7ffc0000 [ 1710.807637][T19354] trusted_key: syz.4.3240 sent an empty control message without MSG_MORE. [ 1710.821313][ T30] audit: type=1326 audit(1757648938.433:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11918eba9 code=0x7ffc0000 [ 1710.876613][ T30] audit: type=1326 audit(1757648938.453:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11918eba9 code=0x7ffc0000 [ 1710.909521][T14473] usb 2-1: USB disconnect, device number 67 [ 1711.112396][ T30] audit: type=1326 audit(1757648938.643:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff11918eba9 code=0x7ffc0000 [ 1711.401719][ T30] audit: type=1326 audit(1757648938.643:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11918eba9 code=0x7ffc0000 [ 1711.774596][ T30] audit: type=1326 audit(1757648938.643:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19333 comm="syz.1.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11918eba9 code=0x7ffc0000 [ 1712.035492][T18302] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1712.087535][T19368] netlink: 'syz.0.3243': attribute type 3 has an invalid length. [ 1712.105630][T19368] netlink: 'syz.0.3243': attribute type 3 has an invalid length. [ 1712.775971][T18302] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1712.935583][T18302] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1713.026835][T18302] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1713.115687][T18302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.170196][ T981] usb 4-1: USB disconnect, device number 11 [ 1713.233053][T19365] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1713.285843][T18302] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1713.507943][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.520084][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.766530][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.778701][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.351651][T19392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1715.779578][T19396] bridge_slave_0: left allmulticast mode [ 1715.853357][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1715.853376][ T30] audit: type=1326 audit(1757648943.973:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1715.893678][T19396] bridge_slave_0: left promiscuous mode [ 1715.900339][T19396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.177520][T19396] bridge_slave_1: left allmulticast mode [ 1716.183273][T19396] bridge_slave_1: left promiscuous mode [ 1716.447983][ T30] audit: type=1326 audit(1757648943.973:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1716.531231][T19396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.030975][T19396] bond0: (slave bond_slave_0): Releasing backup interface [ 1717.044416][ T30] audit: type=1326 audit(1757648943.973:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1717.190531][T19405] netlink: 'syz.2.3251': attribute type 1 has an invalid length. [ 1717.484543][ T30] audit: type=1326 audit(1757648945.193:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1717.570374][T19396] bond0: (slave bond_slave_1): Releasing backup interface [ 1717.608350][ T5932] usb 5-1: USB disconnect, device number 18 [ 1717.639329][ T30] audit: type=1326 audit(1757648945.193:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1717.769921][ T30] audit: type=1326 audit(1757648945.193:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1717.860849][T19396] team0: Port device team_slave_0 removed [ 1717.889544][ T30] audit: type=1326 audit(1757648945.193:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1718.006325][ T30] audit: type=1326 audit(1757648945.193:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1718.200806][ T30] audit: type=1326 audit(1757648945.193:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1718.227558][ T30] audit: type=1326 audit(1757648945.193:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1718.269293][T19396] team0: Port device team_slave_1 removed [ 1718.289137][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1718.299168][T19396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.311522][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1718.324874][T19396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1718.430904][T19396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1719.207257][T19417] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1719.774758][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1719.937446][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1720.074911][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1721.189098][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1721.189120][ T30] audit: type=1326 audit(1757648949.193:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1721.306684][ T30] audit: type=1326 audit(1757648949.203:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1721.794824][ T30] audit: type=1326 audit(1757648949.203:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1721.908797][ T30] audit: type=1326 audit(1757648949.203:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1722.393081][ T30] audit: type=1326 audit(1757648949.203:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1722.554438][ T30] audit: type=1326 audit(1757648949.203:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1722.630427][ T30] audit: type=1326 audit(1757648949.203:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1722.728820][ T30] audit: type=1326 audit(1757648949.203:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1722.801992][ T30] audit: type=1326 audit(1757648949.203:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1722.868767][ T30] audit: type=1326 audit(1757648949.203:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19426 comm="syz.3.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6078eba9 code=0x7ffc0000 [ 1725.778483][T19475] Bluetooth: MGMT ver 1.23 [ 1732.501705][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1732.501727][ T30] audit: type=1326 audit(1757648960.543:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1732.556279][ T30] audit: type=1326 audit(1757648960.543:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1732.616696][ T30] audit: type=1326 audit(1757648960.573:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1732.666538][ T30] audit: type=1326 audit(1757648960.573:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1732.788601][ T30] audit: type=1326 audit(1757648960.573:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1732.840679][ T30] audit: type=1326 audit(1757648960.573:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91ead8d510 code=0x7ffc0000 [ 1732.904967][ T30] audit: type=1326 audit(1757648960.573:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1733.008487][ T30] audit: type=1326 audit(1757648960.573:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91ead8d510 code=0x7ffc0000 [ 1733.063899][ T30] audit: type=1326 audit(1757648960.573:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1733.135159][ T30] audit: type=1326 audit(1757648960.583:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19509 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1733.835176][T19520] loop2: detected capacity change from 0 to 256 [ 1733.925070][T19520] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1733.935879][T19520] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1733.990831][T19520] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1734.009117][T19520] exFAT-fs (loop2): failed to load alloc-bitmap [ 1734.016423][T19520] exFAT-fs (loop2): failed to recognize exfat type [ 1735.747731][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.755609][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.445013][T19544] fuse: Unknown parameter 'user_i00000000000000000000' [ 1742.535096][T18301] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1742.945274][T16870] Bluetooth: hci1: command 0x0406 tx timeout [ 1743.001571][T18301] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1743.017198][T18301] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1743.034577][T18301] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1743.043675][T18301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.085224][T19563] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1743.186044][T18301] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1743.449276][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.652571][T19575] netlink: 'syz.1.3287': attribute type 1 has an invalid length. [ 1743.693168][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.100615][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1744.100637][ T30] audit: type=1326 audit(1757648972.213:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1744.135223][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.151474][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.267713][T19579] veth3: entered promiscuous mode [ 1744.578175][T14473] usb 3-1: USB disconnect, device number 24 [ 1744.578328][ T30] audit: type=1326 audit(1757648972.213:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1744.632670][ T30] audit: type=1326 audit(1757648972.213:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91ead8d510 code=0x7ffc0000 [ 1744.706597][ T30] audit: type=1326 audit(1757648972.223:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8e7ab code=0x7ffc0000 [ 1744.852176][ T30] audit: type=1326 audit(1757648972.223:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8e7ab code=0x7ffc0000 [ 1744.932430][ T30] audit: type=1326 audit(1757648972.293:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1744.965479][ T30] audit: type=1326 audit(1757648972.293:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1745.434208][ T30] audit: type=1326 audit(1757648972.293:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1745.525689][ T30] audit: type=1326 audit(1757648972.293:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1745.596867][ T30] audit: type=1326 audit(1757648972.293:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1746.105663][T14473] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1746.545941][T14473] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.648084][T14473] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1746.743788][T14473] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1746.885403][T14473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.206438][T18302] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1747.377671][T18302] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1747.392124][T18302] usb 2-1: config 0 has no interface number 0 [ 1747.421240][T18302] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1747.490704][T18302] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1747.555781][T18302] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1747.641069][T18302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.745708][T18302] usb 2-1: config 0 descriptor?? [ 1747.774866][T19610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1747.801708][T18302] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1748.010990][T18301] usb 2-1: USB disconnect, device number 68 [ 1748.422790][T19608] loop2: detected capacity change from 0 to 40427 [ 1748.495895][T19610] netlink: 'syz.1.3293': attribute type 8 has an invalid length. [ 1748.548760][T19608] F2FS-fs (loop2): invalid crc value [ 1748.997045][T19608] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1749.105544][T19608] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1750.646775][T18518] usb 4-1: USB disconnect, device number 12 [ 1750.857318][T19628] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 1750.871290][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1750.871313][ T30] audit: type=1326 audit(1757648978.973:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.225067][ T30] audit: type=1326 audit(1757648978.973:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.400707][ T30] audit: type=1326 audit(1757648978.973:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.455097][ T30] audit: type=1326 audit(1757648978.973:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.477722][ T30] audit: type=1326 audit(1757648978.973:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.500367][ T30] audit: type=1326 audit(1757648978.973:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.527329][ T30] audit: type=1326 audit(1757648978.973:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.553143][ T30] audit: type=1326 audit(1757648978.973:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.719515][ T30] audit: type=1326 audit(1757648978.973:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1751.852218][ T30] audit: type=1326 audit(1757648978.973:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19623 comm="syz.0.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1753.734977][T14473] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1753.787983][T19651] tipc: Started in network mode [ 1753.857686][T19651] tipc: Node identity 2689d40f8247, cluster identity 4711 [ 1753.875514][T19651] tipc: Enabled bearer , priority 0 [ 1753.904901][T19652] syzkaller0: entered promiscuous mode [ 1754.018813][T14473] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1754.038635][T19652] syzkaller0: entered allmulticast mode [ 1754.051114][T14473] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1754.115221][T14473] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1754.134594][T14473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.212131][T19652] tipc: Resetting bearer [ 1754.237547][T19649] tipc: Resetting bearer [ 1754.265592][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1754.291300][T19648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1754.304271][T14473] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1754.332665][T19649] tipc: Disabling bearer [ 1754.526392][T19648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.538443][T19648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.156210][T19662] loop4: detected capacity change from 0 to 512 [ 1755.216481][T19662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1755.902961][T12496] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1756.087296][T17863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1756.357389][T12496] usb 1-1: config 0 has no interfaces? [ 1756.385959][T12496] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1756.410160][T12496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.502357][T12496] usb 1-1: Product: syz [ 1756.594913][T12496] usb 1-1: Manufacturer: syz [ 1756.599732][T12496] usb 1-1: SerialNumber: syz [ 1756.625474][T12496] usb 1-1: config 0 descriptor?? [ 1757.534439][T12496] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1757.815942][T12496] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1758.250288][T12496] usb 5-1: not running at top speed; connect to a high speed hub [ 1758.616108][T12496] usb 5-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.693735][T12496] usb 5-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1758.738687][T12496] usb 5-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1758.747929][T12496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.756520][T12496] usb 5-1: Product: syz [ 1758.760825][T12496] usb 5-1: Manufacturer: syz [ 1758.765953][T12496] usb 5-1: SerialNumber: syz [ 1760.001864][T18302] usb 1-1: USB disconnect, device number 7 [ 1760.089589][T18518] usb 2-1: USB disconnect, device number 69 [ 1760.641141][T19701] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1760.647821][T19701] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1760.704544][T19701] vhci_hcd vhci_hcd.0: Device attached [ 1761.024430][T18518] vhci_hcd: vhci_device speed not set [ 1761.085071][T18518] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 1761.343850][T19703] vhci_hcd: connection reset by peer [ 1761.427059][ T79] vhci_hcd: stop threads [ 1761.431416][ T79] vhci_hcd: release socket [ 1761.801525][ T79] vhci_hcd: disconnect device [ 1763.406884][T12496] usb 5-1: USB disconnect, device number 19 [ 1764.214599][T19715] trusted_key: encrypted_key: insufficient parameters specified [ 1765.441132][T19719] loop4: detected capacity change from 0 to 256 [ 1766.252240][T19719] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1766.263012][T19719] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1766.345044][T18518] vhci_hcd: vhci_device speed not set [ 1767.287312][T19719] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1767.303544][T19719] exFAT-fs (loop4): failed to load alloc-bitmap [ 1767.309894][T19719] exFAT-fs (loop4): failed to recognize exfat type [ 1769.997041][T12496] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1770.084947][T19745] nbd3: detected capacity change from 0 to 63 [ 1770.200809][ T5871] block nbd3: Receive control failed (result -104) [ 1770.288687][T12496] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1770.301315][T12496] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1770.311825][T12496] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1770.322285][T12496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.336750][T19743] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1770.348001][T12496] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1770.634547][T19743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.665300][T19743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.880352][T19752] loop3: detected capacity change from 0 to 512 [ 1771.160388][T19752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1771.946376][T18141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1774.111831][T19767] loop3: detected capacity change from 0 to 256 [ 1774.914961][T19767] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1774.925707][T19767] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1774.974151][T19767] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1774.992888][T19767] exFAT-fs (loop3): failed to load alloc-bitmap [ 1774.999381][T19767] exFAT-fs (loop3): failed to recognize exfat type [ 1777.141605][T18518] usb 2-1: USB disconnect, device number 70 [ 1779.435574][T19799] loop0: detected capacity change from 0 to 512 [ 1779.670677][T19799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1780.744457][T19720] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1781.005325][T19720] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1781.089262][T19720] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1781.113069][T19720] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1781.152117][T19720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.192288][T19805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1781.217407][T19720] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1781.496346][T19805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.507351][T19805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.987731][T19805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.996801][T19805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.004896][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1782.004916][ T30] audit: type=1326 audit(1757649010.113:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1782.180092][T18518] usb 3-1: USB disconnect, device number 25 [ 1782.213614][ T30] audit: type=1326 audit(1757649010.113:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1782.664455][T19815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1782.974678][ T30] audit: type=1326 audit(1757649010.113:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91ead8d510 code=0x7ffc0000 [ 1783.148066][ T30] audit: type=1326 audit(1757649010.113:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8e7ab code=0x7ffc0000 [ 1783.544443][ T30] audit: type=1326 audit(1757649010.113:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8e7ab code=0x7ffc0000 [ 1783.613666][ T30] audit: type=1326 audit(1757649010.203:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1783.636501][ T30] audit: type=1326 audit(1757649010.203:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1783.664506][ T30] audit: type=1326 audit(1757649010.203:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1783.689216][ T30] audit: type=1326 audit(1757649010.203:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1783.712344][ T30] audit: type=1326 audit(1757649010.203:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1783.804200][T18353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1784.610945][T18518] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1785.808307][T18518] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1785.873513][T18518] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1786.069387][T18518] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1786.084831][T18518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.124615][T19825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1786.147309][T18518] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1786.390682][T19825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.413405][T19825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.464593][T18518] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 1788.618050][T18518] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1788.630322][T18518] usb 4-1: config 0 has no interface number 0 [ 1788.714349][T18518] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1788.875335][T18518] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1788.961245][T18302] usb 1-1: USB disconnect, device number 8 [ 1789.117512][T18518] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1789.184707][T18518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.326502][T18518] usb 4-1: config 0 descriptor?? [ 1789.382292][T19862] fuse: Bad value for 'fd' [ 1789.435580][T19849] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1789.533107][T18518] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1789.763109][T18518] usb 4-1: USB disconnect, device number 13 [ 1789.769206][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1790.218277][T19849] netlink: 'syz.3.3347': attribute type 8 has an invalid length. [ 1791.412661][T19874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1791.542115][T19875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1791.591846][T19874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1797.181576][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.188292][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.861905][T19928] fuse: Bad value for 'fd' [ 1799.704420][ T5867] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1800.407995][ T97] block nbd3: Possible stuck request ffff888025cc0000: control (read@0,1024B). Runtime 30 seconds [ 1800.420154][ T97] block nbd3: Possible stuck request ffff888025cc01c0: control (read@1024,1024B). Runtime 30 seconds [ 1800.431235][ T97] block nbd3: Possible stuck request ffff888025cc0380: control (read@2048,1024B). Runtime 30 seconds [ 1800.442357][ T97] block nbd3: Possible stuck request ffff888025cc0540: control (read@3072,1024B). Runtime 30 seconds [ 1800.530911][ T5867] usb 1-1: config 0 has no interfaces? [ 1800.540951][ T5867] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1800.550227][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.558308][ T5867] usb 1-1: Product: syz [ 1800.562625][ T5867] usb 1-1: Manufacturer: syz [ 1800.567379][ T5867] usb 1-1: SerialNumber: syz [ 1800.619738][ T5867] usb 1-1: config 0 descriptor?? [ 1802.224769][T19720] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1802.424518][T19720] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1802.464558][T19720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.505464][T19720] usb 3-1: config 0 descriptor?? [ 1803.154515][ T5947] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 1803.640446][ T5947] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1803.652705][ T5947] usb 5-1: config 0 has no interface number 0 [ 1803.654940][T19720] ath6kl: Failed to submit usb control message: -110 [ 1803.661342][ T5947] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1803.699611][ T5947] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1803.729583][ T5947] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1803.760201][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.774873][T18302] usb 1-1: USB disconnect, device number 9 [ 1803.885758][ T5947] usb 5-1: config 0 descriptor?? [ 1803.929629][T19953] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1803.954111][T19720] ath6kl: unable to send the bmi data to the device: -110 [ 1803.973303][ T5947] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1803.974847][T19720] ath6kl: Unable to send get target info: -110 [ 1804.229785][ T5867] usb 5-1: USB disconnect, device number 20 [ 1804.236139][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1804.253888][T19720] ath6kl: Failed to init ath6kl core: -110 [ 1804.287502][T19720] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1804.305275][T19960] fuse: Bad value for 'group_id' [ 1804.310949][T19960] fuse: Bad value for 'group_id' [ 1804.452861][T19953] netlink: 'syz.4.3368': attribute type 8 has an invalid length. [ 1804.831916][ T5947] usb 3-1: USB disconnect, device number 26 [ 1805.193249][T19966] fuse: Unknown parameter '0x0000000000000009' [ 1808.897246][T19992] fuse: Bad value for 'fd' [ 1810.229737][T16870] Bluetooth: hci2: command 0x0406 tx timeout [ 1811.730673][T16870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1811.748725][T16870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1811.767340][T16870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1811.787488][T16870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1811.817314][T16870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1813.907557][ T5871] Bluetooth: hci4: command tx timeout [ 1815.767979][T20002] chnl_net:caif_netlink_parms(): no params data found [ 1815.975944][ T5871] Bluetooth: hci4: command tx timeout [ 1818.058669][ T5871] Bluetooth: hci4: command tx timeout [ 1818.582007][T20055] loop0: detected capacity change from 0 to 512 [ 1818.590697][T20053] netlink: 'syz.3.3387': attribute type 3 has an invalid length. [ 1818.601059][T20053] netlink: 'syz.3.3387': attribute type 3 has an invalid length. [ 1818.614836][T20002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.625736][T20002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.685049][T20002] bridge_slave_0: entered allmulticast mode [ 1818.693054][T20002] bridge_slave_0: entered promiscuous mode [ 1818.707134][T20002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.724794][T20002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.732146][T20002] bridge_slave_1: entered allmulticast mode [ 1818.757162][T20055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1818.776245][T20002] bridge_slave_1: entered promiscuous mode [ 1819.090425][T20002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.138821][T20002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.164995][T18353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1819.733973][T20002] team0: Port device team_slave_0 added [ 1819.943885][T20002] team0: Port device team_slave_1 added [ 1820.157364][T20002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1820.165631][T20002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.195672][T20002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1820.231288][T20002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1820.241209][T20002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.277402][T20002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.454598][ T5871] Bluetooth: hci4: command tx timeout [ 1821.552153][T20002] hsr_slave_0: entered promiscuous mode [ 1821.560792][T20002] hsr_slave_1: entered promiscuous mode [ 1821.591592][T20002] debugfs: 'hsr0' already exists in 'hsr' [ 1821.607212][T20002] Cannot create hsr debugfs directory [ 1822.626783][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1822.626806][ T30] audit: type=1326 audit(1757649050.693:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1822.713135][ T30] audit: type=1326 audit(1757649050.693:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1822.834373][ T30] audit: type=1326 audit(1757649050.693:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1823.018908][ T30] audit: type=1326 audit(1757649050.693:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1823.057708][ T30] audit: type=1326 audit(1757649050.693:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1823.081756][ T30] audit: type=1326 audit(1757649050.693:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1823.703425][T20002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1823.759560][T20002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1823.768416][ T30] audit: type=1326 audit(1757649050.693:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1823.808551][T20002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1823.852185][T20002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1823.861343][ T30] audit: type=1326 audit(1757649050.693:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1823.954863][ T30] audit: type=1326 audit(1757649050.693:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1824.065364][ T30] audit: type=1326 audit(1757649050.693:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.2.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1824.650393][T20002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.727229][T20002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.834621][ T5867] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1824.869092][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.876330][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1825.106279][ T5867] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1826.315345][ T5867] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1826.389944][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.392904][ T5867] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1826.397406][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1826.580515][T20109] trusted_key: encrypted_key: insufficient parameters specified [ 1826.972378][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.357463][T20002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.516824][ T5867] usb 1-1: can't set config #27, error -71 [ 1828.556454][ T5867] usb 1-1: USB disconnect, device number 10 [ 1829.405270][T20002] veth0_vlan: entered promiscuous mode [ 1829.493260][T20002] veth1_vlan: entered promiscuous mode [ 1829.938865][T20002] veth0_macvtap: entered promiscuous mode [ 1830.069508][T20002] veth1_macvtap: entered promiscuous mode [ 1830.183289][T20002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.278007][T20002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1830.336714][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.394695][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.444959][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.453770][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.470994][ T97] block nbd3: Possible stuck request ffff888025cc0000: control (read@0,1024B). Runtime 60 seconds [ 1830.485790][ T97] block nbd3: Possible stuck request ffff888025cc01c0: control (read@1024,1024B). Runtime 60 seconds [ 1830.496774][ T97] block nbd3: Possible stuck request ffff888025cc0380: control (read@2048,1024B). Runtime 60 seconds [ 1830.508915][ T97] block nbd3: Possible stuck request ffff888025cc0540: control (read@3072,1024B). Runtime 60 seconds [ 1831.275380][ T6481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.325849][ T6481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.445569][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.584610][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.685108][T20148] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1832.055774][T20152] nbd0: detected capacity change from 0 to 63 [ 1832.386683][T20157] block nbd0: NBD_DISCONNECT [ 1832.642742][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1832.642766][ T30] audit: type=1326 audit(1757649060.753:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1832.705410][ T30] audit: type=1326 audit(1757649060.753:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1832.746435][T20157] block nbd0: Disconnected due to user request. [ 1832.849343][ T30] audit: type=1326 audit(1757649060.963:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1832.854392][T20157] block nbd0: shutting down sockets [ 1833.064032][ T30] audit: type=1326 audit(1757649061.183:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1833.089877][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.099254][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1833.108254][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.117434][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1833.125295][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.134411][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1833.142220][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.151296][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1833.159281][T18781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.179107][T18781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1833.188804][T18781] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.526094][ T30] audit: type=1326 audit(1757649061.183:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20153 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1833.634319][T18781] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1833.673056][T18781] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.723266][T18781] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1833.794514][T18781] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.864358][T18781] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1833.872463][T18781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1833.951047][T18781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1833.999728][T18781] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1834.034460][T18781] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1834.174531][T18781] ldm_validate_partition_table(): Disk read failed. [ 1834.200126][T18781] Dev nbd0: unable to read RDB block 0 [ 1834.288492][T18781] nbd0: unable to read partition table [ 1834.354564][T12496] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1834.411551][T18781] ldm_validate_partition_table(): Disk read failed. [ 1834.498051][T18781] Dev nbd0: unable to read RDB block 0 [ 1834.584968][T12496] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1834.587395][T18781] nbd0: unable to read partition table [ 1834.614430][T12496] usb 1-1: not running at top speed; connect to a high speed hub [ 1834.689384][T20177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1834.927430][T12496] usb 1-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.670391][T18302] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1835.754635][T12496] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1835.906964][T12496] usb 1-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1835.918509][T12496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.932680][T12496] usb 1-1: Product: syz [ 1835.980909][T18302] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1835.999261][T12496] usb 1-1: Manufacturer: syz [ 1836.035496][T12496] usb 1-1: SerialNumber: syz [ 1836.069793][T18302] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1836.572503][T18302] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1836.624420][T18302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.678638][T20179] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1836.693522][T18302] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1836.909015][T20179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.037803][T20179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.305998][T20179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.329946][T20179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.349265][ T30] audit: type=1326 audit(1757649065.413:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1837.548072][ T30] audit: type=1326 audit(1757649065.413:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd21b38d510 code=0x7ffc0000 [ 1837.717227][ T30] audit: type=1326 audit(1757649065.423:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd21b38e7ab code=0x7ffc0000 [ 1837.879651][ T30] audit: type=1326 audit(1757649065.423:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd21b38e7ab code=0x7ffc0000 [ 1838.467042][ T30] audit: type=1326 audit(1757649065.553:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1838.734410][ T30] audit: type=1326 audit(1757649065.573:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1838.842804][ T30] audit: type=1326 audit(1757649065.573:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1838.867126][ T30] audit: type=1326 audit(1757649065.583:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1838.892913][ T30] audit: type=1326 audit(1757649065.583:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1838.924561][ T30] audit: type=1326 audit(1757649065.583:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1838.943080][T18518] usb 6-1: USB disconnect, device number 2 [ 1838.947670][ T30] audit: type=1326 audit(1757649065.583:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1838.977144][ T30] audit: type=1326 audit(1757649065.583:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.5.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21b38eba9 code=0x7ffc0000 [ 1839.148640][T16870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1839.188908][T16870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1839.218523][T16870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1839.270259][T16870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1839.298080][T16870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1840.395549][T12496] usb 1-1: USB disconnect, device number 11 [ 1841.437457][T16870] Bluetooth: hci6: command tx timeout [ 1841.874431][T20199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1843.532533][T16870] Bluetooth: hci6: command tx timeout [ 1843.632847][T20191] chnl_net:caif_netlink_parms(): no params data found [ 1843.784512][T18518] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1844.046546][T18518] usb 3-1: config 0 has no interfaces? [ 1844.054692][T18518] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1844.074669][T18518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.082707][T18518] usb 3-1: Product: syz [ 1844.117039][T18518] usb 3-1: Manufacturer: syz [ 1844.129849][T18518] usb 3-1: SerialNumber: syz [ 1844.175050][T18518] usb 3-1: config 0 descriptor?? [ 1844.588344][T20191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.600467][T20191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.638009][T20191] bridge_slave_0: entered allmulticast mode [ 1844.729697][T20191] bridge_slave_0: entered promiscuous mode [ 1844.861610][T20191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.879052][T20191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.894560][T20191] bridge_slave_1: entered allmulticast mode [ 1844.926106][T20191] bridge_slave_1: entered promiscuous mode [ 1845.574382][T16870] Bluetooth: hci6: command tx timeout [ 1846.788298][T20191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.817511][T20191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1847.012468][T20191] team0: Port device team_slave_0 added [ 1847.046141][T20191] team0: Port device team_slave_1 added [ 1847.190421][T20191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.350600][T20191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1847.816337][T16870] Bluetooth: hci6: command tx timeout [ 1847.964440][T20191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1848.368725][T20191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1848.377769][T20191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1848.584534][T20191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1848.718127][ T5947] usb 3-1: USB disconnect, device number 27 [ 1848.998851][T20191] hsr_slave_0: entered promiscuous mode [ 1849.060201][T20191] hsr_slave_1: entered promiscuous mode [ 1849.095688][T20191] debugfs: 'hsr0' already exists in 'hsr' [ 1849.101692][T20191] Cannot create hsr debugfs directory [ 1852.963302][T20191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1852.990202][T20191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1853.033278][T20191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1853.067522][T20191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1853.764986][T20191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.896080][T20191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1853.922486][T18787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.929733][T18787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.080484][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.087897][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.244510][ T5947] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1855.610390][ T5947] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1855.676206][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.807144][ T5947] usb 6-1: config 0 descriptor?? [ 1856.346582][T20304] trusted_key: encrypted_key: insufficient parameters specified [ 1856.940914][T20191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.044483][ T5947] ath6kl: Failed to submit usb control message: -110 [ 1857.055969][ T5947] ath6kl: unable to send the bmi data to the device: -110 [ 1857.098689][ T5947] ath6kl: Unable to send get target info: -110 [ 1857.130730][ T5947] ath6kl: Failed to init ath6kl core: -110 [ 1857.141818][ T5947] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1857.397760][ T5867] usb 6-1: USB disconnect, device number 3 [ 1858.094826][ T5947] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 1858.335115][ T5947] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1858.343361][ T5947] usb 6-1: config 0 has no interface number 0 [ 1858.411017][ T5947] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1858.522787][ T5947] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1858.641263][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.649515][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.945067][ T5947] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1859.063285][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.084890][ T5867] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1859.189957][ T5947] usb 6-1: config 0 descriptor?? [ 1859.295296][T20325] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1859.381044][ T5947] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1859.648387][ T5867] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1859.694740][T20191] veth0_vlan: entered promiscuous mode [ 1859.700468][ T5867] usb 1-1: not running at top speed; connect to a high speed hub [ 1859.789083][ T5867] usb 1-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.800215][T20191] veth1_vlan: entered promiscuous mode [ 1859.832864][ T5867] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 1 [ 1860.085662][ T5867] usb 1-1: New USB device found, idVendor=04eb, idProduct=e004, bcdDevice=e3.da [ 1860.155187][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.163367][ T5867] usb 1-1: Product: syz [ 1860.198548][T20191] veth0_macvtap: entered promiscuous mode [ 1860.221689][T12496] usb 6-1: USB disconnect, device number 4 [ 1860.221715][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1860.243113][ T5867] usb 1-1: Manufacturer: syz [ 1860.284009][ T5867] usb 1-1: SerialNumber: syz [ 1860.310619][T20191] veth1_macvtap: entered promiscuous mode [ 1860.496251][T20325] netlink: 'syz.5.3438': attribute type 8 has an invalid length. [ 1860.722745][T20191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1860.723633][ T97] block nbd3: Possible stuck request ffff888025cc0000: control (read@0,1024B). Runtime 90 seconds [ 1860.743126][ T97] block nbd3: Possible stuck request ffff888025cc01c0: control (read@1024,1024B). Runtime 90 seconds [ 1860.754833][ T97] block nbd3: Possible stuck request ffff888025cc0380: control (read@2048,1024B). Runtime 90 seconds [ 1860.767380][ T97] block nbd3: Possible stuck request ffff888025cc0540: control (read@3072,1024B). Runtime 90 seconds [ 1861.005917][T20191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1861.040708][ T6481] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.062409][ T6481] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.242644][ T6481] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.359118][ T6481] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.081128][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.139684][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.420051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.518299][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1863.367444][ T5867] usb 1-1: USB disconnect, device number 12 [ 1865.945858][T20373] loop5: detected capacity change from 0 to 1024 [ 1866.855094][ T5947] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1867.038395][ T5947] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1867.100601][ T5947] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1867.141511][ T5947] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1867.169972][T20387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3450'. [ 1867.274626][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.407432][T20379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1867.440893][T20381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1867.479105][ T5947] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1867.536734][T20387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3450'. [ 1867.584600][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3450'. [ 1867.875610][T20381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1867.884982][T20381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.428353][T20399] fuse: Unknown parameter 'fd0x0000000000000004' [ 1868.677988][T20381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.688062][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1868.688083][ T30] audit: type=1326 audit(1757649096.793:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1868.692095][T20381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.789960][ T30] audit: type=1326 audit(1757649096.793:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91ead8d510 code=0x7ffc0000 [ 1868.832600][ T30] audit: type=1326 audit(1757649096.793:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8e7ab code=0x7ffc0000 [ 1869.175544][ T30] audit: type=1326 audit(1757649096.793:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ead8e7ab code=0x7ffc0000 [ 1869.270485][ T30] audit: type=1326 audit(1757649097.053:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1869.454445][ T30] audit: type=1326 audit(1757649097.053:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1869.610995][ T30] audit: type=1326 audit(1757649097.053:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1869.871289][ T30] audit: type=1326 audit(1757649097.053:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1870.016617][ T30] audit: type=1326 audit(1757649097.063:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1870.146853][ T30] audit: type=1326 audit(1757649097.063:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.2.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f91ead8eba9 code=0x7ffc0000 [ 1870.871591][T20407] loop0: detected capacity change from 0 to 256 [ 1870.948618][T20407] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1870.959463][T20407] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1871.007428][T20407] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1871.023045][T20407] exFAT-fs (loop0): failed to load alloc-bitmap [ 1871.031352][T20407] exFAT-fs (loop0): failed to recognize exfat type [ 1873.457118][T18302] usb 3-1: USB disconnect, device number 28 [ 1875.528644][ T981] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1878.747833][T20444] trusted_key: encrypted_key: insufficient parameters specified [ 1879.467445][ T981] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1879.475340][ T981] usb 3-1: can't read configurations, error -71 [ 1880.442425][T20459] fuse: Unknown parameter 'fd0x0000000000000004' [ 1880.914645][ T5947] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1881.084457][T18302] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1881.474572][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1881.474593][ T30] audit: type=1326 audit(1757649109.533:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1881.540537][ T5947] usb 7-1: config 0 has no interfaces? [ 1881.557412][ T5947] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1881.575852][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.594800][T18302] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1881.617405][T18302] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1881.627560][ T5947] usb 7-1: Product: syz [ 1881.648872][ T5947] usb 7-1: Manufacturer: syz [ 1881.699628][T18302] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1881.714429][ T30] audit: type=1326 audit(1757649109.533:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1881.764323][ T5947] usb 7-1: SerialNumber: syz [ 1881.854681][T18302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.865946][ T5947] usb 7-1: config 0 descriptor?? [ 1881.923529][ T30] audit: type=1326 audit(1757649109.533:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1881.964842][T20463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1882.038203][ T30] audit: type=1326 audit(1757649109.533:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1882.244094][ T30] audit: type=1326 audit(1757649109.533:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1882.272708][T18302] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1882.413563][ T30] audit: type=1326 audit(1757649109.533:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1882.504335][ T30] audit: type=1326 audit(1757649109.533:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1882.592958][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.629722][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.652241][ T30] audit: type=1326 audit(1757649109.533:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1882.721260][ T30] audit: type=1326 audit(1757649109.533:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1882.750285][ T30] audit: type=1326 audit(1757649109.533:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20445 comm="syz.0.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff398b8eba9 code=0x7ffc0000 [ 1882.940744][T20463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.018885][T20463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.216974][ T5947] usb 6-1: USB disconnect, device number 5 [ 1884.286397][T20473] loop2: detected capacity change from 0 to 512 [ 1884.409187][T20473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1885.603074][ T5867] usb 7-1: USB disconnect, device number 2 [ 1885.737504][T20493] loop6: detected capacity change from 0 to 512 [ 1885.758821][T20493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1887.439167][T16867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.032192][T20191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1891.262541][ T97] block nbd3: Possible stuck request ffff888025cc0000: control (read@0,1024B). Runtime 120 seconds [ 1891.262683][ T97] block nbd3: Possible stuck request ffff888025cc01c0: control (read@1024,1024B). Runtime 120 seconds [ 1891.262762][ T97] block nbd3: Possible stuck request ffff888025cc0380: control (read@2048,1024B). Runtime 120 seconds [ 1891.262839][ T97] block nbd3: Possible stuck request ffff888025cc0540: control (read@3072,1024B). Runtime 120 seconds [ 1893.350440][T20536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1894.895707][T20547] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1894.902367][T20547] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1894.974959][T20547] vhci_hcd vhci_hcd.0: Device attached [ 1895.178377][ T5867] vhci_hcd: vhci_device speed not set [ 1895.248468][ T5867] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1896.064284][T20549] vhci_hcd: connection reset by peer [ 1896.184083][T18787] vhci_hcd: stop threads [ 1896.194369][T18787] vhci_hcd: release socket [ 1896.209384][T18787] vhci_hcd: disconnect device [ 1900.764554][ T5867] vhci_hcd: vhci_device speed not set [ 1901.672239][T20595] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1901.679026][T20595] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1901.924197][T20595] vhci_hcd vhci_hcd.0: Device attached [ 1902.183577][T20599] vhci_hcd: connection closed [ 1902.184870][ T4017] vhci_hcd: stop threads [ 1902.215529][ T4017] vhci_hcd: release socket [ 1902.312395][ T4017] vhci_hcd: disconnect device [ 1902.354712][T18301] vhci_hcd: vhci_device speed not set [ 1902.694539][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1902.694559][ T30] audit: type=1326 audit(1757649130.763:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1902.845539][ T30] audit: type=1326 audit(1757649130.763:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1902.869352][ T30] audit: type=1326 audit(1757649130.763:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1902.896648][ T30] audit: type=1326 audit(1757649130.763:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1902.920256][ T30] audit: type=1326 audit(1757649130.763:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1902.945797][ T30] audit: type=1326 audit(1757649130.763:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1902.974513][ T30] audit: type=1326 audit(1757649130.763:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1903.151096][ T30] audit: type=1326 audit(1757649130.763:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1903.444415][ T30] audit: type=1326 audit(1757649130.763:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1903.649198][ T30] audit: type=1326 audit(1757649130.763:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.4.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa2ab98eba9 code=0x7ffc0000 [ 1905.221639][T19720] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1905.294656][ T5867] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 1905.428839][T19720] usb 6-1: Using ep0 maxpacket: 8 [ 1905.453290][T19720] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1905.468513][T19720] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1905.497695][T19720] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1905.615164][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1905.837557][ T5867] usb 1-1: config 0 has no interface number 0 [ 1905.864435][T19720] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1905.878460][ T5867] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1905.891127][T19720] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1905.905956][ T5867] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1905.934506][T19720] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1905.965903][ T5867] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1905.981785][T19720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.991228][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.053633][T20626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1906.263544][ T5867] usb 1-1: config 0 descriptor?? [ 1906.291117][T20617] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1906.319322][ T5867] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1906.402877][T19720] usb 6-1: usb_control_msg returned -32 [ 1906.545994][T19720] usbtmc 6-1:16.0: can't read capabilities [ 1906.593270][ T5867] usb 1-1: USB disconnect, device number 13 [ 1906.599865][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1907.198273][T20617] netlink: 'syz.0.3501': attribute type 8 has an invalid length. [ 1907.839345][T18301] usb 6-1: USB disconnect, device number 6 [ 1910.540873][ T955] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1910.821229][ T955] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1910.884702][ T955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.930666][ T955] usb 7-1: config 0 descriptor?? [ 1911.987248][ T955] ath6kl: Failed to submit usb control message: -110 [ 1912.034969][ T955] ath6kl: unable to send the bmi data to the device: -110 [ 1912.119436][ T955] ath6kl: Unable to send get target info: -110 [ 1912.222629][ T955] ath6kl: Failed to init ath6kl core: -110 [ 1912.250320][ T955] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1913.098524][T19720] usb 7-1: USB disconnect, device number 3 [ 1913.465014][T20669] loop6: detected capacity change from 0 to 512 [ 1913.674800][T20669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1915.336162][T20191] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1916.466224][T20688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1920.109836][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.119552][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.808876][T20717] bridge_slave_1: left allmulticast mode [ 1920.814964][T20717] bridge_slave_1: left promiscuous mode [ 1920.822355][T20717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.365262][T18311] block nbd3: Possible stuck request ffff888025cc0000: control (read@0,1024B). Runtime 150 seconds [ 1921.376247][T18311] block nbd3: Possible stuck request ffff888025cc01c0: control (read@1024,1024B). Runtime 150 seconds [ 1921.387777][T18311] block nbd3: Possible stuck request ffff888025cc0380: control (read@2048,1024B). Runtime 150 seconds [ 1921.399250][T18311] block nbd3: Possible stuck request ffff888025cc0540: control (read@3072,1024B). Runtime 150 seconds [ 1921.629608][T20717] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1922.748275][T20730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1928.004692][ T981] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1928.349209][ T981] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1928.360832][ T981] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1928.413654][ T981] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1928.438921][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.661454][T20772] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1928.685905][ T981] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1929.196541][T20784] fuse: Bad value for 'group_id' [ 1929.202076][T20784] fuse: Bad value for 'group_id' [ 1929.366777][ T981] usb 3-1: USB disconnect, device number 31 [ 1934.126314][T20811] loop5: detected capacity change from 0 to 32768 [ 1934.296924][T20811] find_entry called with index = 0 [ 1936.414406][T20832] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1936.421027][T20832] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1936.474048][T20832] vhci_hcd vhci_hcd.0: Device attached [ 1936.644743][T19720] vhci_hcd: vhci_device speed not set [ 1936.726511][T19720] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1936.853085][T20835] vhci_hcd: connection reset by peer [ 1936.878355][ T9264] vhci_hcd: stop threads [ 1936.882682][ T9264] vhci_hcd: release socket [ 1936.896257][ T9264] vhci_hcd: disconnect device [ 1937.509133][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 1937.886680][T20843] veth3: entered promiscuous mode [ 1939.318166][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1939.318188][ T30] audit: type=1326 audit(1757649167.443:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1939.367505][ T30] audit: type=1326 audit(1757649167.473:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1939.390574][ T30] audit: type=1326 audit(1757649167.473:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1940.164604][ T30] audit: type=1326 audit(1757649167.483:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1940.524422][ T30] audit: type=1326 audit(1757649167.483:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1940.560712][T20861] loop0: detected capacity change from 0 to 32768 [ 1940.568206][ T30] audit: type=1326 audit(1757649167.483:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1940.616453][ T30] audit: type=1326 audit(1757649167.483:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1940.747832][ T30] audit: type=1326 audit(1757649168.363:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1940.798726][T20861] find_entry called with index = 0 [ 1941.074355][ T30] audit: type=1326 audit(1757649168.363:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20849 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1941.210028][ T955] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1941.403984][ T955] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1941.441521][ T955] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1941.494580][ T955] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1941.526674][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.563629][T20869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1941.636281][ T955] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1941.889155][T19720] vhci_hcd: vhci_device speed not set [ 1941.968961][T18302] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1942.195975][ T981] usb 5-1: USB disconnect, device number 21 [ 1942.400159][T18302] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1942.411553][T18302] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1942.425681][T18302] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1942.513706][T18302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.542003][T20873] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1942.561789][T18302] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1942.907734][T20873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.005220][ T981] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1945.007211][T20873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1945.131332][ T981] usb 1-1: config 0 has no interfaces? [ 1945.171786][ T981] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1945.181478][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.202980][ T981] usb 1-1: Product: syz [ 1945.454346][ T981] usb 1-1: Manufacturer: syz [ 1945.459327][ T981] usb 1-1: SerialNumber: syz [ 1945.713223][ T981] usb 1-1: config 0 descriptor?? [ 1947.671571][T19720] usb 7-1: USB disconnect, device number 4 [ 1947.966025][ T981] usb 1-1: can't set config #0, error -71 [ 1948.035601][ T981] usb 1-1: USB disconnect, device number 14 [ 1949.679278][T20925] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1951.471069][ T30] audit: type=1326 audit(1757649179.543:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1951.504117][T18311] block nbd3: Possible stuck request ffff888025cc0000: control (read@0,1024B). Runtime 180 seconds [ 1951.541598][T18311] block nbd3: Possible stuck request ffff888025cc01c0: control (read@1024,1024B). Runtime 180 seconds [ 1951.559390][T18311] block nbd3: Possible stuck request ffff888025cc0380: control (read@2048,1024B). Runtime 180 seconds [ 1951.571622][T18311] block nbd3: Possible stuck request ffff888025cc0540: control (read@3072,1024B). Runtime 180 seconds [ 1951.618853][ T30] audit: type=1326 audit(1757649179.543:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1951.786893][ T30] audit: type=1326 audit(1757649179.543:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1951.832027][ T30] audit: type=1326 audit(1757649179.543:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1951.946049][ T30] audit: type=1326 audit(1757649179.553:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1952.000177][ T30] audit: type=1326 audit(1757649179.553:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1952.025202][ T30] audit: type=1326 audit(1757649179.553:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1952.048567][ T30] audit: type=1326 audit(1757649179.553:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1952.072513][ T30] audit: type=1326 audit(1757649179.553:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1952.342907][ T30] audit: type=1326 audit(1757649179.553:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20934 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73eb8eba9 code=0x7ffc0000 [ 1953.335089][ T31] INFO: task syz.1.3359:19909 blocked for more than 143 seconds. [ 1953.343541][ T31] Not tainted syzkaller #0 [ 1953.389257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1953.439117][ T31] task:syz.1.3359 state:D stack:25864 pid:19909 tgid:19906 ppid:19085 task_flags:0x400040 flags:0x00004006 [ 1953.498133][ T31] Call Trace: [ 1953.530218][ T31] [ 1953.543944][ T31] __schedule+0x1798/0x4cc0 [ 1953.581791][ T31] ? __pfx___schedule+0x10/0x10 [ 1953.606034][ T31] ? schedule+0x91/0x360 [ 1953.622624][ T31] schedule+0x165/0x360 [ 1953.652018][ T31] schedule_preempt_disabled+0x13/0x30 [ 1953.683117][ T31] __mutex_lock+0x7e6/0x1350 [ 1953.923488][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1954.016993][ T31] ? sync_bdevs+0x1ac/0x340 [ 1954.029487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1954.044581][ T31] ? iput+0x5d5/0xc40 [ 1954.053995][ T31] sync_bdevs+0x1ac/0x340 [ 1954.067893][ T31] ksys_sync+0xb9/0x150 [ 1954.096292][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1954.143619][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1954.181528][ T31] __ia32_sys_sync+0xe/0x20 [ 1954.222258][ T31] do_syscall_64+0xfa/0xfa0 [ 1954.244472][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1954.261161][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.300485][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1954.340356][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.370519][ T31] RIP: 0033:0x7ff11918eba9 [ 1954.411327][ T31] RSP: 002b:00007ff11a083038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1954.456952][ T31] RAX: ffffffffffffffda RBX: 00007ff1193d6180 RCX: 00007ff11918eba9 [ 1954.491301][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1954.524458][ T31] RBP: 00007ff1193d6180 R08: 0000000000000000 R09: 0000000000000000 [ 1954.567165][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1954.674392][ T31] R13: 00007ff1193d6218 R14: 00007ff1193d6180 R15: 00007fffde187e28 [ 1954.682687][ T31] [ 1954.693229][ T31] [ 1954.693229][ T31] Showing all locks held in the system: [ 1954.702856][ T31] 1 lock held by khungtaskd/31: [ 1954.738153][ T31] #0: ffffffff8e33c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1954.767818][ T31] 2 locks held by getty/5626: [ 1954.785644][ T31] #0: ffff88814d01b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1954.832867][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1954.875446][ T31] 2 locks held by kworker/u8:11/9264: [ 1954.911216][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1954.938356][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1954.959404][ T31] 1 lock held by udevd/17747: [ 1954.971494][ T31] #0: ffff8880257e3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1955.003949][ T31] 2 locks held by kworker/u8:3/18746: [ 1955.019353][ T31] 1 lock held by syz.1.3359/19909: [ 1955.033425][ T31] #0: ffff8880257e3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 1955.056670][ T31] 1 lock held by syz.3.3389/20061: [ 1955.072233][ T31] #0: ffff8880257e3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 1955.098461][ T31] [ 1955.116136][ T31] ============================================= [ 1955.116136][ T31] [ 1955.138159][ T31] NMI backtrace for cpu 1 [ 1955.138200][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1955.138226][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1955.138239][ T31] Call Trace: [ 1955.138247][ T31] [ 1955.138258][ T31] dump_stack_lvl+0x189/0x250 [ 1955.138298][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1955.138326][ T31] ? __pfx__printk+0x10/0x10 [ 1955.138377][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1955.138413][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1955.138448][ T31] ? __pfx__printk+0x10/0x10 [ 1955.138498][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1955.138535][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1955.138571][ T31] watchdog+0xf60/0xfa0 [ 1955.138616][ T31] ? watchdog+0x1e2/0xfa0 [ 1955.138651][ T31] kthread+0x711/0x8a0 [ 1955.138679][ T31] ? __pfx_watchdog+0x10/0x10 [ 1955.138706][ T31] ? __pfx_kthread+0x10/0x10 [ 1955.138732][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1955.138763][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1955.138794][ T31] ? __pfx_kthread+0x10/0x10 [ 1955.138820][ T31] ret_from_fork+0x47c/0x820 [ 1955.138855][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1955.138895][ T31] ? __switch_to_asm+0x39/0x70 [ 1955.138923][ T31] ? __switch_to_asm+0x33/0x70 [ 1955.138951][ T31] ? __pfx_kthread+0x10/0x10 [ 1955.138976][ T31] ret_from_fork_asm+0x1a/0x30 [ 1955.139024][ T31] [ 1955.139031][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1955.292919][ C0] NMI backtrace for cpu 0 [ 1955.292940][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1955.292961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1955.292973][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1955.293008][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 d8 25 00 f3 0f 1e fa fb f4 48 e7 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1955.293024][ C0] RSP: 0018:ffffffff8e007d80 EFLAGS: 000002c6 [ 1955.293042][ C0] RAX: 1caab04636ad5900 RBX: ffffffff81968448 RCX: 1caab04636ad5900 [ 1955.293056][ C0] RDX: 0000000000000001 RSI: ffffffff8dbbb53e RDI: ffffffff8c036200 [ 1955.293069][ C0] RBP: ffffffff8e007ea8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 1955.293083][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fc3ce30 [ 1955.293096][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c12a38 [ 1955.293109][ C0] FS: 0000000000000000(0000) GS:ffff8881259f0000(0000) knlGS:0000000000000000 [ 1955.293123][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1955.293135][ C0] CR2: 00002000002aa030 CR3: 000000007743e000 CR4: 00000000003526f0 [ 1955.293152][ C0] Call Trace: [ 1955.293161][ C0] [ 1955.293168][ C0] default_idle+0x13/0x20 [ 1955.293189][ C0] default_idle_call+0x74/0xb0 [ 1955.293211][ C0] do_idle+0x1e8/0x510 [ 1955.293239][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1955.293259][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1955.293288][ C0] ? __pfx_do_idle+0x10/0x10 [ 1955.293320][ C0] ? do_idle+0x5/0x510 [ 1955.293346][ C0] cpu_startup_entry+0x44/0x60 [ 1955.293372][ C0] rest_init+0x2de/0x300 [ 1955.293395][ C0] start_kernel+0x3a9/0x410 [ 1955.293433][ C0] x86_64_start_reservations+0x24/0x30 [ 1955.293457][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1955.293479][ C0] common_startup_64+0x13e/0x147 [ 1955.293509][ C0] [ 1955.639166][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1955.646548][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1955.655825][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1955.666170][ T31] Call Trace: [ 1955.669774][ T31] [ 1955.673254][ T31] dump_stack_lvl+0x99/0x250 [ 1955.678874][ T31] ? __asan_memcpy+0x40/0x70 [ 1955.683836][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1955.689273][ T31] ? __pfx__printk+0x10/0x10 [ 1955.694285][ T31] vpanic+0x237/0x6d0 [ 1955.698416][ T31] ? __pfx_vpanic+0x10/0x10 [ 1955.702955][ T31] panic+0xb9/0xc0 [ 1955.706732][ T31] ? __pfx_panic+0x10/0x10 [ 1955.711212][ T31] ? __pfx_panic+0x10/0x10 [ 1955.715695][ T31] watchdog+0xf9f/0xfa0 [ 1955.720259][ T31] ? watchdog+0x1e2/0xfa0 [ 1955.725055][ T31] kthread+0x711/0x8a0 [ 1955.729473][ T31] ? __pfx_watchdog+0x10/0x10 [ 1955.734786][ T31] ? __pfx_kthread+0x10/0x10 [ 1955.739718][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1955.745805][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1955.751335][ T31] ? __pfx_kthread+0x10/0x10 [ 1955.756265][ T31] ret_from_fork+0x47c/0x820 [ 1955.761614][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1955.767167][ T31] ? __switch_to_asm+0x39/0x70 [ 1955.772420][ T31] ? __switch_to_asm+0x33/0x70 [ 1955.778288][ T31] ? __pfx_kthread+0x10/0x10 [ 1955.783265][ T31] ret_from_fork_asm+0x1a/0x30 [ 1955.788262][ T31] [ 1955.792144][ T31] Kernel Offset: disabled [ 1955.796762][ T31] Rebooting in 86400 seconds..