last executing test programs: 2m42.136021753s ago: executing program 2 (id=1298): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x541042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) openat$cgroup_type(r7, &(0x7f0000000180), 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e3000000000000000000000000800070000000000"], 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0xfefdffff, 0x0, 0x0, r4, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, r4, 0x0, 0x0, 0xffffeffffffffffe}]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) 2m38.914018409s ago: executing program 2 (id=1307): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xf38723816e28ed5a, 0x0) r1 = dup(r0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x100000001, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) capset(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) unshare(0x66000080) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) r6 = syz_open_pts(r0, 0x80) dup3(r6, r0, 0x80000) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff", 0x6, 0x0, 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r7, 0x8008af83, &(0x7f0000000180)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x1000, 0x7ffe, 0x3, 0x400c, 0x5, "73309be7b7525f00", 0x70000001, 0x203}) read(r0, &(0x7f00000002c0)=""/228, 0xe4) 2m36.586188818s ago: executing program 2 (id=1322): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f0700000000001fff58000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 2m34.158028453s ago: executing program 2 (id=1330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) 2m33.683006776s ago: executing program 2 (id=1332): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) socket$inet6(0xa, 0x80002, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x3, 0x4e20, 0x4, 0xa, 0xa0, 0x0, 0x6, r4, r5}, {0x7ff, 0x1, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffff1, 0x7, 0x1491}, {0x2, 0x7, 0x120000, 0xffffffffffffffff}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d3}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x0, 0x0, 0x19, 0x401, 0x8, 0x8}}, 0xe8) syz_open_procfs(0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) 2m33.446200104s ago: executing program 2 (id=1335): ioprio_set$pid(0x2, 0x0, 0x0) (async) sync() r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f00000001c0)=""/183, 0xb7, &(0x7f0000000080)={&(0x7f0000000000)={'sha256-arm64\x00'}}) 2m18.368023959s ago: executing program 32 (id=1335): ioprio_set$pid(0x2, 0x0, 0x0) (async) sync() r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f00000001c0)=""/183, 0xb7, &(0x7f0000000080)={&(0x7f0000000000)={'sha256-arm64\x00'}}) 13.509531114s ago: executing program 3 (id=1757): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) 12.610816423s ago: executing program 1 (id=1759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000001bc0), 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x880) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 12.525228137s ago: executing program 3 (id=1760): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) socket$inet6(0xa, 0x80002, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x3, 0x4e20, 0x4, 0xa, 0xa0, 0x0, 0x6, r4, r5}, {0x7ff, 0x1, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffff1, 0x7, 0x1491}, {0x2, 0x7, 0x120000, 0xffffffffffffffff}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d3}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x0, 0x0, 0x19, 0x401, 0x8, 0x8}}, 0xe8) syz_open_procfs(0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) 10.666643048s ago: executing program 0 (id=1763): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$FUSE_LK(r2, &(0x7f0000004100)={0x2d, 0xffffffffffffffda, 0x0, {{0x1e38, 0x5, 0x2}}}, 0x28) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200002, 0x2, 0x0, 0x1, 0x4}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x2efff, 0x0}, &(0x7f00000014c0)="bc8ec1653455", 0x0, 0x0, 0x10, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xeb5cf41713316147}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0d00000000000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b0000000000"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 10.658024265s ago: executing program 1 (id=1764): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, 0x0, 0x0, 0x8e90385f0ccb53ea}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8004, 0x0, 0x0, 0xfffffffffffffe9d, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) timer_settime(0x0, 0x0, 0x0, 0x0) 10.271152819s ago: executing program 0 (id=1765): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000068c400090300000000000000000a000300325a4d37e50e5ebc08000100010000"], 0x24}}, 0x20000040) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x2, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.170118401s ago: executing program 3 (id=1766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) timer_create(0x4, &(0x7f00000003c0)={0x0, 0x10021, 0x2, @thr={&(0x7f00000006c0)="bbd16fa901b58289436ebed78f42047ea01ba08732d2606cda19c2277f34395f5d040021cd04a403c461e267f97b0be7fe035c883d686d0017158ac89aff192ceaeabdda924068bbf1f15ccd638b6cde4ccb26c1444a6e945f4890b28615c64b72310b56d911cdc1459b4f587cf61401d08a4c62082422f808065f1739a551cf6bfe4183d6d27523cfb5b3e55bc34755501ae90dadad32d8c714f5fbd54b8178d7e3e90e581d1ef4c741e95253b6b85ed8138d3175ea21326e8fb01e6873381f67ee1912e666", &(0x7f00000009c0)="42327de7fabb132f49c52b6d22438a0a2369e6898f513285acdfb69e21fdc494a1a847809f422ecb18faafe04d825e664c2a7a3cf9b4f9360924a457bec91342f6b413034f915116eb890713a009f516b72749beaf198945f473987132192540cd4e59dd9dd63f69c449a7dc250c9f1765aa5fda7d5c7be968b5430a55dce8fd8c1e003dc5b55ec9ad826d7d090229768d316d0d32555d290b69c8bc876cea010017114028aab895ecddbc79f26a6e74b5e3fbb35e6d24c9f25ae0f61cfd607b03af9e43000000000000"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x10023, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f00000013c0)=[{0x9e52, 0x0, 0x0, 0x0}, {0x85, 0x8000, 0x0, 0x0}, {0x8, 0x3a00, 0x0, 0x0}], 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b40)="531347c8476178dff5da2d9858d6", 0x0, 0x2596, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9e}, 0x50) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) syz_usb_control_io$lan78xx(r3, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x0, 0x4, 0x46, {0x46, 0x24, "84a8a21c92677fb9dfe8a1217897a084aa7518376c16420a4124f7d0e5a3194e6b8c9871a8b7c9ef0416de5ac44d15619ad51474627d4dae51d103685e56a2c236641d0f"}}, &(0x7f0000000180)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "6d3bcbc95a2136d2b3e079cee8d3ebe3fcfa907680394d04283facdc7e7a9a0fc4e6bc5fdd6dda9e9b11fd884d8fe1bae7aa2fb91b2eec6c7b5f492a9d888c3fde68846b64759265c00c7ff474d917972bd3a1f1ccc37d7e8c0477daa15fb54beb76d8e3d151867f48da5906b93d6cc44bb4bc2f734cf8d82e4c5d2a1759e78a50b025ccd3c393d9c1665eb618e16429a7fd4ffa2a93bf17a50276b9512b540c30f81fff9fef537f1cd85b1a52695c5acd392dea621433ae3ae0441cc44ee1dbfde4a3beb979a17253ccc8c6f2179b978481b8852cf013238ec3d428493bb4729e40"}}}, &(0x7f00000002c0)={0x34, &(0x7f00000008c0)=ANY=[@ANYBLOB="201743000000734cbe7bfc2cb2e9da6074e899b6b05ca6b5f2631f3f6b58aa9d04af4b62480f2bde49dea9620ae1a7bec48468685956cd79d3fd4a97abcff7f502accc7a20a7f1f181e41718be6d9cdc03c9a09f39b35ad2dcf2f8ea3a31e2b358ded6fde351e45fdbebc4ef6356dae432f985a411424aece731ff19aa62233545b3da9466a19739c50707452ecf41377f39a0f09653aeb95e8da93e7b37e80c1b4045513607a707a9d2f43f05b5ca03252bef3cbba54a5f0517320d2c4fbb594dbf24736e765672b93f83f0c7da25e107e5a9901b178c65ee6d78d615630fece0edb3da2ab3e3119085e1aace5b112e7f40"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x8000}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "97b4504ca6f411d66466f4ca26b4b048869b1234aca6f32414f264543b27eefa97e4cd08e5d1ab58a4b0c7745a681d"}}) 9.703256406s ago: executing program 0 (id=1767): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000540)={0x0, 0x0, 0x38, 0x1}) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000540)={0x0, 0x0, 0x38, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x6c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mbind(&(0x7f000052d000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x840, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x3) r4 = openat(r3, &(0x7f0000000080)='.\x00', 0x0, 0x44) fchown(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0xc6, 0xc, 0x7f, 0x40, 0x4da, 0x250c, 0x279f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x2, 0x7, 0x8, 0x6, "", [{{0x9, 0x4, 0x6b, 0x7, 0x0, 0x9a, 0x69, 0xbf, 0xf}}, {{0x9, 0x4, 0xfa, 0x8, 0x0, 0x5d, 0x12, 0x74, 0x8}}, {{0x9, 0x4, 0xb2, 0x4, 0x0, 0xff, 0xff, 0xff, 0x7}}]}}]}}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000023c0)={{0x12, 0x1, 0x310, 0xc6, 0xc, 0x7f, 0x40, 0x4da, 0x250c, 0x279f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x2, 0x7, 0x8, 0x6, "", [{{0x9, 0x4, 0x6b, 0x7, 0x0, 0x9a, 0x69, 0xbf, 0xf}}, {{0x9, 0x4, 0xfa, 0x8, 0x0, 0x5d, 0x12, 0x74, 0x8}}, {{0x9, 0x4, 0xb2, 0x4, 0x0, 0xff, 0xff, 0xff, 0x7}}]}}]}}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)="f7", 0x1, 0x4000808, &(0x7f0000004ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) listen(r8, 0xda90) accept4(r8, 0x0, 0x0, 0x0) (async) accept4(r8, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) 9.268513619s ago: executing program 0 (id=1768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYBLOB="b131c665570363ab5840a4cfe27b268a1da554fb585a0a1a3cb8dd57eb8ffd5374e661058b62b49ce08aa92ee05fe40b875a88c08111ad7375e314752ad444612901bd81cf4d886eccced3eb992a7bc085d527089ad0cdc9f55ca50c4ef6bc08227178d0d628bef92bc44ada05761b58d762cd22fba76a1bcf4514d5fa9d2fb26cfb285efd66e53bf87cbabc0a9b41784fdeff3c725848fc07b361213cb0"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x5}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x200, 0xc80) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000200)={0x14, 0x2}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f00000031c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r6, &(0x7f00000002c0)={0x130, 0x0, r7, {0x4000000000007, 0x8, 0x0, '\x00', {0x1, 0x200, 0x4, 0x412, 0xffffffffffffffff, 0x0, 0x2000, '\x00', 0x3, 0x8000, 0x7, 0x7, {0x1, 0x12b}, {0x3d82, 0x5}, {0xc, 0x9, 0xf8000000}, {0xfffffffffffffefa, 0xdb23}, 0x3ff, 0x5, 0xffe00000, 0x8000}}}, 0x130) r8 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r4, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) connect$unix(r8, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 8.754020602s ago: executing program 1 (id=1769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000680)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x80000001, 0x8]}, {0x80000000, 0x0, 0x0, [0xc1b, 0x8004]}, 0x0, [0xfffffffd, 0x8]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x800, 0x1, 0x3ffffffd, 0x40020, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syslog(0x4, &(0x7f0000000440)=""/257, 0x101) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000180)={@private1}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES8=r0, @ANYRES64=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) dup(0xffffffffffffffff) 8.206119692s ago: executing program 4 (id=1770): socket$inet_tcp(0x2, 0x1, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) syz_socket_connect_nvme_tcp() r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)=ANY=[@ANYBLOB='noswap(\x00']) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203cfffe00004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) socket$nl_route(0x10, 0x3, 0x0) 7.865619779s ago: executing program 0 (id=1771): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000680)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x80000001, 0x8]}, {0x80000000, 0x0, 0x0, [0xc1b, 0x8004]}, 0x0, [0xfffffffd, 0x8]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x800, 0x1, 0x3ffffffd, 0x40020, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syslog(0x4, &(0x7f0000000440)=""/257, 0x101) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000180)={@private1}, 0x14) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) dup(0xffffffffffffffff) 7.778026093s ago: executing program 1 (id=1772): syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) r1 = socket$unix(0x1, 0x4, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="58eea581e737ad33bdc5dfed561e5dabdf37d42bb9be78385298a80abff0597bf6eccbd1f51df65c790e9bc29291d796db6ef0b000bc952be311aa0ab92fb6a3a61eb7115c04867143c4e9776bb7a2860b07bbd5c2ce470eee7ba716df0db4030093411277f6706663ff14819d538e9f1b6d141addafe93dbc8039c211aaed864d9340ea6a4076dadd07144a3d17f34d60c8f3c582d772dc8fe73f71bd219cf3e2b98e4e3913cc50990cfaa5ee434c37b75cfc96d228be2b4ae1e35f353d09"]) close(r1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="5ce0ffff0f0013070000000000000000000000000001000400004e2100020000000021000000000000000000000000000000007fe9220b47697355baafd58de523fc9c0b72f6a01e8597734d71b6380b3eb97a69657522952a4d77e488a4c2276007c74a473d2965f397fb9bc49fff379e75d988d048eb78e948c630feb97b837b58f2c5ca5e9b11da94e9d5b6d4c4406e8d1fc0676262", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="030000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) chdir(&(0x7f0000000100)='./file0\x00') r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) recvfrom(r5, &(0x7f0000000000)=""/36, 0x24, 0x10023, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.68606179s ago: executing program 0 (id=1773): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x9, 0x800010, 0x0, 0x2, 0x6, 0x8, 0xb31a}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x80000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xffffff91}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x9, 0xfd}, 'port0\x00', 0x10, 0x11069, 0x3, 0x8000, 0x55814893, 0x20080, 0x7fffffff, 0x0, 0x3, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@id, &(0x7f0000000200)=0x10, 0x8f2eaf272c613c3b) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc7) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bind$tipc(r5, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) 6.482137372s ago: executing program 5 (id=1774): socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000040)={0xc, 0x0, 0xffffffffffffffff, 0x10001, 0xaf}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x18, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.388387255s ago: executing program 5 (id=1775): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$FUSE_LK(r2, &(0x7f0000004100)={0x2d, 0xffffffffffffffda, 0x0, {{0x1e38, 0x5, 0x2}}}, 0x28) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200002, 0x2, 0x0, 0x1, 0x4}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x2efff, 0x0}, &(0x7f00000014c0)="bc8ec1653455", 0x0, 0x0, 0x10, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xeb5cf41713316147}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0d00000000000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b0000000000"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 6.203009813s ago: executing program 5 (id=1776): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) socket$inet6(0xa, 0x80002, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x3, 0x4e20, 0x4, 0xa, 0xa0, 0x0, 0x6, r4, r5}, {0x7ff, 0x1, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffff1, 0x7, 0x1491}, {0x2, 0x7, 0x120000, 0xffffffffffffffff}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d3}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x0, 0x0, 0x19, 0x401, 0x8, 0x8}}, 0xe8) syz_open_procfs(0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) 6.111401177s ago: executing program 4 (id=1777): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x360, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef, 0x1f00}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3e, 0x0, 0x0, 0x4}) 4.9979913s ago: executing program 5 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x208c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x205884, 0x4) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_pidfd_open(r1, 0x0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f0000002e40)=""/72, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="f78d9ca38fff48f3be52163448412ba8bbc8fa8de4a2ed970110", 0x1a}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14dec26b769dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000900)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6852f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0070db8fbeebd185b888f0c5c32aca7e25808417156d55e342b6b726b070465925e655fa8d010c5c53a878f3bf1d71769b0ec09967867cd39ccbce398371985ae", 0xc8}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) wait4(r1, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64, @ANYBLOB="150327bd7000fdeddf25040000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) 4.897111565s ago: executing program 3 (id=1779): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003052abd70000c00000000ffffff", @ANYBLOB="3a000000a0010200140012800b0001006d61637365630000040002800800", @ANYRES32=r1], 0x3c}}, 0x800) 4.836019794s ago: executing program 1 (id=1780): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x578410eb) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000080)=@hopopts={0x21}, 0x8) dup(r6) ftruncate(0xffffffffffffffff, 0x200004) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x10040, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000800)=@vmx={0x10a, 0x0, 0x2080, {0x26000, 0x80d0000, {0x1}, 0x1, 0x6}, {"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", "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"}}) 4.82608823s ago: executing program 4 (id=1781): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010104, @in=@local, 0x0, 0x5, 0x4e21, 0x0, 0xa}, {0xb7af, 0x1, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffc, 0x800000000000000}, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0x2, 0xe0, 0x80}, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0), 0x0) recvmmsg$unix(r5, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x320, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r8 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x100087}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000000), 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000002700)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000400)) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) ioctl$KVM_GET_XSAVE2(r9, 0x9000aecf, &(0x7f0000ffd000/0x2000)=nil) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) 4.702095917s ago: executing program 3 (id=1782): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000680)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x80000001, 0x8]}, {0x80000000, 0x0, 0x0, [0xc1b, 0x8004]}, 0x0, [0xfffffffd, 0x8]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x800, 0x1, 0x3ffffffd, 0x40020, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syslog(0x4, &(0x7f0000000440)=""/257, 0x101) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000180)={@private1}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES8=r0, @ANYRES64=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) dup(0xffffffffffffffff) 3.043108375s ago: executing program 4 (id=1783): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80b80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}], 0x1}, 0x44000) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x0, 0x230d}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r7 = dup(r6) write$binfmt_elf32(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe0320000103"], 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) read$ptp(r10, &(0x7f0000000180)=""/90, 0x5a) r11 = socket(0x1e, 0x4, 0x0) capset(&(0x7f00000002c0)={0x20080522, r3}, &(0x7f0000000300)={0x8, 0xffff048a, 0x400, 0x9eaa, 0xf9, 0x4}) connect$tipc(r11, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r11, &(0x7f0000004400), 0x400000000000203, 0x0) 2.847482586s ago: executing program 3 (id=1784): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r3, &(0x7f0000000040)='\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="e76901e257bb217dfb405e9f01bcf4941a004acb3f5e8331f730490dbc20be882f64df8e71e9705547cdee8c36d32607324c2103fb68b9584fc33500000000000000"], 0x1c}}, 0x2000040) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) 2.025694965s ago: executing program 1 (id=1785): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @meta={0x44564956, 0x35b09d18, 0x2093, 0x8761, 0x4d534547}}) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x3, 0x4002) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') lseek(r3, 0x1, 0x1) 1.857637622s ago: executing program 4 (id=1786): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$FUSE_LK(r2, &(0x7f0000004100)={0x2d, 0xffffffffffffffda, 0x0, {{0x1e38, 0x5, 0x2}}}, 0x28) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200002, 0x2, 0x0, 0x1, 0x4}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x2efff, 0x0}, &(0x7f00000014c0)="bc8ec1653455", 0x0, 0x0, 0x10, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xeb5cf41713316147}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 1.735024928s ago: executing program 5 (id=1787): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x66ab01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x7, 0xc9}}}, 0x6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008880) 83.943896ms ago: executing program 5 (id=1788): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) socket$inet6(0xa, 0x80002, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x3, 0x4e20, 0x4, 0xa, 0xa0, 0x0, 0x6, r4, r5}, {0x7ff, 0x1, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffff1, 0x7, 0x1491}, {0x2, 0x7, 0x120000, 0xffffffffffffffff}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d3}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x0, 0x0, 0x19, 0x401, 0x8, 0x8}}, 0xe8) syz_open_procfs(0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) 0s ago: executing program 4 (id=1789): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r6, 0x62c21a4ade68aba1, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547e2db800fffff000000002", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x20, 0x13, [{0x9}, {0x12}, {0x4}, {0x30}, {0x36}, {0x6c, 0x1}, {0x2}, {0xc}, {0x36}, {0x4}, {0x16, 0x1}, {0x8}, {0x4}, {0x9}, {0xb}, {0x60}, {0xc, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x48}, {0x5}, {0x1}, {0x16, 0x1}, {0x1b}, {0x3}, {0x6, 0x1}, {0x6d}, {0x60}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x2000800) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x18, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x48040) kernel console output (not intermixed with test programs): 0000000000004 [ 499.467365][T10681] RBP: 00007f3f4e4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 499.467377][T10681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.467389][T10681] R13: 00007f3f4d816038 R14: 00007f3f4d815fa0 R15: 00007ffd3c2d0c88 [ 499.467418][T10681] [ 499.703927][ T1216] usb 4-1: USB disconnect, device number 38 [ 499.987322][T10687] netlink: 'syz.1.1230': attribute type 10 has an invalid length. [ 500.022816][T10687] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.030229][T10687] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.038035][T10688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=785 sclass=netlink_route_socket pid=10688 comm=syz.1.1230 [ 500.145969][T10687] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.153101][T10687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.160498][T10687] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.167616][T10687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.183723][T10687] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 500.201142][ T7667] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 500.362240][ T7667] usb 3-1: Using ep0 maxpacket: 16 [ 500.384334][ T7667] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 500.407592][ T7667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.432420][ T7667] usb 3-1: Product: syz [ 500.441555][ T7667] usb 3-1: Manufacturer: syz [ 500.457508][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1233'. [ 500.478632][ T7667] usb 3-1: SerialNumber: syz [ 500.494868][ T7667] usb 3-1: config 0 descriptor?? [ 500.620904][ T29] audit: type=1400 audit(1778008937.178:727): avc: denied { map } for pid=10692 comm="syz.3.1233" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 500.676893][ T6718] Bluetooth: hci5: Frame reassembly failed (-84) [ 500.914820][ T7667] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 500.938644][ T7667] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 500.948813][ T7667] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 500.958301][ T7667] usb 3-1: media controller created [ 500.977851][ T7667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.271706][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.301286][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.538703][ T7667] zl10353_read_register: readreg error (reg=127, ret==0) [ 501.564561][ T7667] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 501.587363][ T7667] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 502.480261][ T6768] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.495358][ T6768] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.505715][ T6768] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.515337][ T6768] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.721145][ T5625] Bluetooth: hci5: command 0x1003 tx timeout [ 502.722468][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 502.805834][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1241'. [ 503.053296][ T7667] usb 3-1: USB disconnect, device number 43 [ 503.258842][ T7667] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 503.762507][T10699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.131294][ T7667] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 504.195200][ T29] audit: type=1400 audit(1778008940.758:728): avc: denied { bind } for pid=10745 comm="syz.1.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 504.452938][ T7667] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 504.470641][ T7667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 504.491564][ T7667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 504.511447][ T7667] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.541172][ T7667] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.550332][ T7667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.680978][T10749] wg1 speed is unknown, defaulting to 1000 [ 504.688307][T10749] wg1 speed is unknown, defaulting to 1000 [ 504.753930][T10749] wg1 speed is unknown, defaulting to 1000 [ 504.800785][T10749] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 504.816072][T10749] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 504.833445][T10749] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 505.175682][T10749] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 505.190366][ T7667] usb 3-1: config 0 descriptor?? [ 505.240576][T10749] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 505.432088][T10749] wg1 speed is unknown, defaulting to 1000 [ 505.577742][T10749] wg1 speed is unknown, defaulting to 1000 [ 505.594677][T10749] wg1 speed is unknown, defaulting to 1000 [ 506.008475][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.023487][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.039563][T10749] wg1 speed is unknown, defaulting to 1000 [ 506.063293][T10749] wg1 speed is unknown, defaulting to 1000 [ 506.075485][ T7667] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 507.765530][T10787] bond2 (unregistering): Released all slaves [ 507.871970][ T29] audit: type=1400 audit(1778008944.418:729): avc: denied { bind } for pid=10788 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 507.960244][ T29] audit: type=1400 audit(1778008944.418:730): avc: denied { listen } for pid=10788 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 508.003535][T10781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10781 comm=syz.4.1256 [ 508.411047][ T5844] usb 3-1: USB disconnect, device number 44 [ 509.451704][T10821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.941097][ T5844] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 510.103178][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.118401][ T5844] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 510.137045][ T5844] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 510.185000][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.216303][ T5844] usb 1-1: config 0 descriptor?? [ 510.431883][ T5844] Bluetooth: Can't get state to change to load ram patch err [ 510.461740][ T5844] Bluetooth: Loading patch file failed [ 510.473644][ T5844] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 510.506827][ T5844] usb 1-1: USB disconnect, device number 38 [ 510.969636][ T29] audit: type=1400 audit(1778008947.528:731): avc: denied { mounton } for pid=10842 comm="syz.4.1273" path="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 511.173101][ T29] audit: type=1400 audit(1778008947.678:732): avc: denied { create } for pid=10840 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 511.280382][ T29] audit: type=1400 audit(1778008947.678:733): avc: denied { write } for pid=10840 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 512.503158][ T5844] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 512.671176][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 512.671289][ T7667] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 512.694348][ T5844] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 512.724036][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.736238][T10876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10876 comm=syz.4.1283 [ 512.750821][ T5844] usb 1-1: Product: syz [ 512.750823][T10876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=10876 comm=syz.4.1283 [ 512.750848][T10876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=10876 comm=syz.4.1283 [ 512.784899][T10876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=10876 comm=syz.4.1283 [ 512.787702][ T5844] usb 1-1: Manufacturer: syz [ 512.798142][T10876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=10876 comm=syz.4.1283 [ 512.817987][T10876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=10876 comm=syz.4.1283 [ 512.851474][ T5844] usb 1-1: SerialNumber: syz [ 512.861259][ T7667] usb 3-1: Using ep0 maxpacket: 16 [ 512.867467][ T5844] usb 1-1: config 0 descriptor?? [ 512.873038][ T7667] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 512.892971][ T7667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.922767][ T7667] usb 3-1: Product: syz [ 512.931243][ T7667] usb 3-1: Manufacturer: syz [ 512.941214][ T7667] usb 3-1: SerialNumber: syz [ 512.975238][ T7667] usb 3-1: config 0 descriptor?? [ 513.321592][ T5844] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 513.484068][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.507940][ T5844] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 513.539121][ T5844] usb 1-1: media controller created [ 513.585430][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.709294][ T7667] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 513.728520][ T5844] zl10353_read_register: readreg error (reg=127, ret==0) [ 513.753098][ T5844] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 513.780962][ T7667] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.781707][ T5844] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 514.118242][ T5844] usb 1-1: USB disconnect, device number 39 [ 514.140554][ T7667] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 514.178084][ T7667] usb 3-1: media controller created [ 514.255048][ T7667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.451569][T10887] netlink: 'syz.4.1287': attribute type 39 has an invalid length. [ 514.555101][ T7667] zl10353_read_register: readreg error (reg=127, ret==0) [ 514.564792][ T5844] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 514.567073][ T7667] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 514.616851][ T7667] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 514.644917][ T7667] usb 3-1: USB disconnect, device number 45 [ 514.779439][T10891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.811669][ T7667] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 514.936243][T10896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1289'. [ 514.964488][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 514.996781][T10896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1289'. [ 517.590478][T10925] xt_connbytes: Forcing CT accounting to be enabled [ 517.858169][T10918] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 518.049569][T10918] bond3: entered promiscuous mode [ 518.074481][T10918] bond3: entered allmulticast mode [ 518.105415][T10918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.233409][ T5844] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 518.443027][ T5844] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 518.458712][ T5844] usb 5-1: config 1 has no interface number 0 [ 518.472229][ T5844] usb 5-1: config 1 interface 82 has no altsetting 0 [ 518.490791][ T5844] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 518.509590][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.527337][ T5844] usb 5-1: Product: syz [ 518.560350][ T5844] usb 5-1: Manufacturer: syz [ 518.577717][ T5844] usb 5-1: SerialNumber: syz [ 518.702886][T10942] nbd: must specify an index to disconnect [ 518.722681][T10942] openvswitch: netlink: IP tunnel TTL not specified. [ 518.866561][T10929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.930270][T10929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.036277][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1297'. [ 519.089782][ T5844] hub 5-1:1.82: bad descriptor, ignoring hub [ 519.096708][ T5844] hub 5-1:1.82: probe with driver hub failed with error -5 [ 519.107091][ T5844] sierra 5-1:1.82: Sierra USB modem converter detected [ 519.119269][ T5844] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 519.231170][ T5844] usb 5-1: USB disconnect, device number 27 [ 519.244685][ T5844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 519.256835][ T5844] sierra 5-1:1.82: device disconnected [ 519.351542][ T5720] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 519.429797][T10950] wg1 speed is unknown, defaulting to 1000 [ 519.531085][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 519.561509][ T5720] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 519.571093][ T5720] usb 1-1: config 0 has no interface number 0 [ 519.613382][ T5720] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 519.624791][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.640271][ T5720] usb 1-1: Product: syz [ 519.651791][ T5720] usb 1-1: Manufacturer: syz [ 519.667349][ T5720] usb 1-1: SerialNumber: syz [ 519.671538][ T7667] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 519.672214][ T5720] usb 1-1: config 0 descriptor?? [ 519.822651][ T7667] usb 3-1: config 0 has no interfaces? [ 519.840678][ T7667] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 519.872597][ T7667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.902071][ T7667] usb 3-1: Product: syz [ 519.910030][ T7667] usb 3-1: Manufacturer: syz [ 519.926300][ T7667] usb 3-1: SerialNumber: syz [ 520.038448][ T7667] usb 3-1: config 0 descriptor?? [ 520.079105][ T5720] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 520.134397][ T5720] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 520.182179][ T5720] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 520.215322][ T5720] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 520.240989][ T5720] usb 1-1: USB disconnect, device number 40 [ 520.372165][T10950] netdevsim netdevsim2 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 520.404426][T10950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.412671][ T25] block nbd1: Possible stuck request ffff8880281f7000: control (read@0,1024B). Runtime 180 seconds [ 520.423871][ T25] block nbd1: Possible stuck request ffff8880281f71c0: control (read@1024,1024B). Runtime 180 seconds [ 520.435044][ T25] block nbd1: Possible stuck request ffff8880281f7380: control (read@2048,1024B). Runtime 180 seconds [ 520.461362][ T7667] usb 3-1: USB disconnect, device number 46 [ 520.560189][ T25] block nbd1: Possible stuck request ffff8880281f7540: control (read@3072,1024B). Runtime 180 seconds [ 520.716962][T10990] NILFS (nullb0): couldn't find nilfs on the device [ 521.171304][T10991] tmpfs: Unknown parameter 'grpquota_b' [ 521.486999][T10993] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 521.788937][T11001] CUSE: unknown device info "€" [ 521.794819][T11001] CUSE: unknown device info "" [ 521.801048][T11001] CUSE: unknown device info "" [ 521.806152][T11001] CUSE: unknown device info "" [ 521.811407][T11001] CUSE: unknown device info "+" [ 521.817428][T11001] CUSE: unknown device info "‚" [ 521.822564][T11001] CUSE: unknown device info "" [ 521.827951][T11001] CUSE: zero length info key specified [ 521.964357][T10993] bond4: entered promiscuous mode [ 521.977813][T10993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 522.028159][ T29] audit: type=1326 audit(1778008958.588:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.075614][ T29] audit: type=1326 audit(1778008958.588:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.106803][ T29] audit: type=1326 audit(1778008958.588:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.133799][ T29] audit: type=1326 audit(1778008958.588:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.165351][ T29] audit: type=1326 audit(1778008958.588:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.195887][ T29] audit: type=1326 audit(1778008958.588:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.237578][ T29] audit: type=1326 audit(1778008958.588:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.264608][ T29] audit: type=1326 audit(1778008958.618:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.354501][ T29] audit: type=1326 audit(1778008958.618:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 522.563404][ T29] audit: type=1326 audit(1778008958.618:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.4.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860a39cdd9 code=0x7ffc0000 [ 523.127274][ T7667] page_pool_release_retry() stalled pool shutdown: id 38, 1 inflight 60 sec [ 526.481318][ T5844] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 526.756822][ T5844] usb 2-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid wMaxPacketSize 0 [ 526.782599][T11088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1340'. [ 526.795411][ T5844] usb 2-1: config 2 interface 0 has no altsetting 0 [ 526.816682][ T5844] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 526.829696][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.839142][ T5844] usb 2-1: Product: syz [ 526.853895][ T5844] usb 2-1: Manufacturer: syz [ 526.985696][ T5844] usb 2-1: SerialNumber: syz [ 527.051664][ T7667] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 527.275353][ T7667] usb 1-1: Using ep0 maxpacket: 16 [ 527.413246][ T7667] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 527.425251][ T7667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 527.425842][ T5720] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 527.438562][ T7667] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.456233][ T7667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.464328][ T7667] usb 1-1: Product: syz [ 527.468706][ T7667] usb 1-1: Manufacturer: syz [ 527.473435][ T7667] usb 1-1: SerialNumber: syz [ 527.478103][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 527.478139][ T29] audit: type=1400 audit(1778008964.038:757): avc: denied { write } for pid=11096 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.525730][ T7667] usb 1-1: config 0 descriptor?? [ 527.585499][ T7667] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 527.595084][ T7667] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 527.671198][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 527.678283][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.692310][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.706205][ T5270] netdevsim netdevsim2 dev66: default qdisc (pfifo_fast) fail, fallback to noqueue [ 527.707459][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 527.716911][ T5270] 8021q: adding VLAN 0 to HW filter on device dev66 [ 527.725388][ T5720] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 527.741952][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.756147][ T5720] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 527.765598][ T5720] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 527.773718][ T5720] usb 4-1: Manufacturer: syz [ 527.785028][ T5720] usb 4-1: config 0 descriptor?? [ 528.189110][ T7667] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 528.203243][ T7667] em28xx 1-1:0.0: Config register raw data: 0x64 [ 528.216938][ T7667] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 528.223238][ T7667] em28xx 1-1:0.0: No AC97 audio processor [ 528.897989][ T5844] ims_pcu 2-1:2.0: Incorrect number of endpoints on data interface (1) [ 528.925476][ T5844] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 528.969436][ T5844] usb 2-1: USB disconnect, device number 50 [ 529.148117][ T7667] usb 1-1: USB disconnect, device number 41 [ 529.238978][T11114] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 529.288823][T11114] bond5: entered promiscuous mode [ 529.295623][T11114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.323516][T11114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.330546][T11114] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 529.341599][T11114] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 529.355716][T11114] bond5: (slave vcan1): making interface the new active one [ 529.368191][T11114] vcan1: entered promiscuous mode [ 529.377116][T11114] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 530.041165][ T5720] rc_core: IR keymap rc-hauppauge not found [ 530.079359][ T5720] Registered IR keymap rc-empty [ 530.257313][T11133] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 530.265274][T11133] UDF-fs: Scanning with blocksize 512 failed [ 530.291066][T11133] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 530.298678][T11133] UDF-fs: Scanning with blocksize 1024 failed [ 530.373977][T11133] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 530.383215][T11133] UDF-fs: Scanning with blocksize 2048 failed [ 530.441554][T11133] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 530.450553][T11133] UDF-fs: Scanning with blocksize 4096 failed [ 530.975337][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 530.997752][T11131] netlink: 'syz.0.1350': attribute type 2 has an invalid length. [ 531.005859][T11131] netlink: 'syz.0.1350': attribute type 2 has an invalid length. [ 531.013796][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.047977][ T5720] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 531.076542][ T5720] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input40 [ 531.150505][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.191317][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.222240][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.261153][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.324004][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.351156][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.381216][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.460268][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.491837][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.531446][ T5720] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.570066][ T5720] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 531.589921][ T5720] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 531.630180][ T5720] usb 4-1: USB disconnect, device number 39 [ 531.825316][T11151] syzkaller0: entered allmulticast mode [ 532.242434][T11157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.721889][T11173] netlink: 210312 bytes leftover after parsing attributes in process `syz.3.1360'. [ 534.261350][T11180] FAULT_INJECTION: forcing a failure. [ 534.261350][T11180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.297141][T11180] CPU: 1 UID: 0 PID: 11180 Comm: syz.0.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.297175][T11180] Tainted: [L]=SOFTLOCKUP [ 534.297181][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.297193][T11180] Call Trace: [ 534.297199][T11180] [ 534.297207][T11180] dump_stack_lvl+0x100/0x190 [ 534.297236][T11180] should_fail_ex.cold+0x5/0xa [ 534.297265][T11180] _copy_from_user+0x2e/0xd0 [ 534.297295][T11180] video_usercopy+0xe74/0x1700 [ 534.297323][T11180] ? __pfx___video_do_ioctl+0x10/0x10 [ 534.297356][T11180] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 534.297385][T11180] ? __pfx_video_usercopy+0x10/0x10 [ 534.297430][T11180] v4l2_ioctl+0x1bd/0x250 [ 534.297457][T11180] ? __pfx_v4l2_ioctl+0x10/0x10 [ 534.297486][T11180] __x64_sys_ioctl+0x18e/0x210 [ 534.297509][T11180] do_syscall_64+0x10b/0xf80 [ 534.297531][T11180] ? clear_bhb_loop+0x40/0x90 [ 534.297558][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.297578][T11180] RIP: 0033:0x7f394b59cdd9 [ 534.297596][T11180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.297612][T11180] RSP: 002b:00007f394c538028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.297630][T11180] RAX: ffffffffffffffda RBX: 00007f394b815fa0 RCX: 00007f394b59cdd9 [ 534.297644][T11180] RDX: 0000200000000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 534.297655][T11180] RBP: 00007f394c538090 R08: 0000000000000000 R09: 0000000000000000 [ 534.297667][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.297679][T11180] R13: 00007f394b816038 R14: 00007f394b815fa0 R15: 00007ffc2e48ceb8 [ 534.297706][T11180] [ 534.751375][ T1216] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 535.258893][ T29] audit: type=1400 audit(1778008971.528:758): avc: denied { connect } for pid=11181 comm="syz.3.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 535.279195][ T5720] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 535.371105][ T1216] usb 5-1: Using ep0 maxpacket: 8 [ 535.377778][ T1216] usb 5-1: config 1 has an invalid interface number: 216 but max is 0 [ 535.386291][ T1216] usb 5-1: config 1 has no interface number 0 [ 535.392550][ T1216] usb 5-1: config 1 interface 216 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 535.403681][ T1216] usb 5-1: config 1 interface 216 has no altsetting 0 [ 535.412979][ T1216] usb 5-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=3f.44 [ 535.422635][ T1216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.439056][ T1216] usb 5-1: Product: syz [ 535.447749][ T1216] usb 5-1: Manufacturer: syz [ 535.458589][ T1216] usb 5-1: SerialNumber: syz [ 535.513597][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.528840][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.539830][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 535.550819][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.564621][ T5720] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.573725][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.585514][ T5720] usb 2-1: config 0 descriptor?? [ 535.642532][T11201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1370'. [ 535.657810][T11201] 8021q: VLANs not supported on ip_vti0 [ 535.684072][ T1216] kvaser_usb 5-1:1.216: error -ENODEV: Cannot get usb endpoint(s) [ 535.695577][ T1216] usb 5-1: USB disconnect, device number 28 [ 535.701437][ T5844] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 535.873102][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.884670][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.899450][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 535.909332][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.922484][ T5844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.931586][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.942015][ T5844] usb 4-1: config 0 descriptor?? [ 536.011222][ T5720] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 536.209127][T11191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.220778][T11191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.259276][ T29] audit: type=1400 audit(1778008972.818:759): avc: denied { bind } for pid=11204 comm="syz.4.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 536.372736][ T5844] plantronics 0003:047F:FFFF.001F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 536.720091][T11217] netlink: 'syz.0.1374': attribute type 2 has an invalid length. [ 536.728301][T11217] netlink: 'syz.0.1374': attribute type 2 has an invalid length. [ 536.825643][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.211405][T11220] tmpfs: Unknown parameter 'grpquota_block_har' [ 537.214128][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.197604][ T29] audit: type=1400 audit(1778008974.758:760): avc: denied { read } for pid=11231 comm="syz.4.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 538.221295][ T5720] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 538.372312][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.384943][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 538.396659][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.406788][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.420158][ T5720] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.429425][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.442836][ T5720] usb 1-1: config 0 descriptor?? [ 538.682620][ T5844] usb 2-1: USB disconnect, device number 51 [ 539.274809][ T5720] hid_parser_main: 16 callbacks suppressed [ 539.274830][ T5720] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 539.288855][ T5720] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 539.297425][ T5720] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 539.307790][ T5720] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 539.324471][ T5720] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 539.335427][ T9] usb 4-1: USB disconnect, device number 40 [ 539.388058][ T5720] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 539.725263][ T29] audit: type=1400 audit(1778008976.278:761): avc: denied { mounton } for pid=11256 comm="syz.3.1386" path="/proc/967/task" dev="proc" ino=34267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 539.893466][T11261] NILFS (nullb0): couldn't find nilfs on the device [ 540.285095][ T7667] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 540.430048][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.508781][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.518733][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.526978][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.536925][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 540.556387][ T7667] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 541.087073][ T7667] usb 2-1: config 0 has no interface number 0 [ 541.100786][ T7667] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 541.125701][ T7667] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.152424][ T7667] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 541.168106][ T7667] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 541.220722][T11272] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1389'. [ 541.234457][T11272] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 541.269864][ T7667] usb 2-1: Product: syz [ 541.277549][ T7667] usb 2-1: SerialNumber: syz [ 541.302035][ T7667] usb 2-1: config 0 descriptor?? [ 541.312349][ T7667] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 541.338702][T11277] netlink: 'syz.3.1390': attribute type 1 has an invalid length. [ 541.377471][T11277] bond2: entered promiscuous mode [ 541.383050][T11277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.515161][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.546802][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.560663][T11265] wg1 speed is unknown, defaulting to 1000 [ 541.600234][ T5844] usb 2-1: USB disconnect, device number 52 [ 541.655024][T11294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11294 comm=syz.1.1393 [ 541.691361][T11294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=11294 comm=syz.1.1393 [ 541.708633][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 541.730614][T11294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=11294 comm=syz.1.1393 [ 541.746740][T11294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=11294 comm=syz.1.1393 [ 541.777093][T11294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=11294 comm=syz.1.1393 [ 541.814687][T11294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11294 comm=syz.1.1393 [ 541.832726][ T5609] usb 1-1: USB disconnect, device number 42 [ 541.877623][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.897998][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.909420][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.920436][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.955426][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.965084][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.984677][ T9] usb 5-1: config 0 descriptor?? [ 542.116536][T11265] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.129846][T11265] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.142157][T11265] bridge_slave_0: entered allmulticast mode [ 542.150112][T11265] bridge_slave_0: entered promiscuous mode [ 542.160546][T11265] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.171907][T11265] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.179356][T11265] bridge_slave_1: entered allmulticast mode [ 542.188005][T11265] bridge_slave_1: entered promiscuous mode [ 542.244840][T11265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.260629][T11265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.345953][T11265] team0: Port device team_slave_0 added [ 542.370655][T11265] team0: Port device team_slave_1 added [ 542.419169][ T9] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 542.439228][T11265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.446513][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.482729][T11265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.495352][T11265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.503282][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.529637][T11265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.565595][ T5625] Bluetooth: hci5: command tx timeout [ 542.607128][T11265] hsr_slave_0: entered promiscuous mode [ 542.613850][T11265] hsr_slave_1: entered promiscuous mode [ 542.620343][T11265] debugfs: 'hsr0' already exists in 'hsr' [ 542.625922][T11284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.628630][T11265] Cannot create hsr debugfs directory [ 542.644965][T11284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.951711][T11265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.962399][T11265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.977037][T11265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 543.017914][T11265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.919853][T11265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 544.501752][ T7667] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 544.641538][ T5625] Bluetooth: hci5: command tx timeout [ 544.764789][T11265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.803440][T11265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 544.836377][T11265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.010403][T11265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.037658][T11265] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.056227][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.063436][ T6709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.097086][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.104290][ T6710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.242270][ T29] audit: type=1400 audit(1778008981.808:762): avc: denied { listen } for pid=11344 comm="syz.1.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.301649][ T29] audit: type=1400 audit(1778008981.838:763): avc: denied { setopt } for pid=11344 comm="syz.1.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.366838][ T29] audit: type=1400 audit(1778008981.848:764): avc: denied { accept } for pid=11344 comm="syz.1.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.593311][ T1216] usb 5-1: USB disconnect, device number 29 [ 546.737843][ T5625] Bluetooth: hci5: command tx timeout [ 546.979854][T11265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.723297][ T1216] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 548.810935][ T5625] Bluetooth: hci5: command tx timeout [ 549.037118][ T29] audit: type=1400 audit(1778008985.568:765): avc: denied { setopt } for pid=11406 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 549.068010][ T1216] usb 5-1: device descriptor read/64, error -71 [ 549.210148][T11265] veth0_vlan: entered promiscuous mode [ 549.227420][T11265] veth1_vlan: entered promiscuous mode [ 549.255466][T11265] veth0_macvtap: entered promiscuous mode [ 549.265951][T11265] veth1_macvtap: entered promiscuous mode [ 549.336551][T11265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.374102][T11265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.388217][ T6705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.396061][T11407] 9p: Bad value for 'wfdno' [ 549.409875][ T6705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.427348][ T1216] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 549.439708][ T6705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.465412][ T6705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.805387][ T1216] usb 5-1: device descriptor read/64, error -71 [ 550.004323][ T1216] usb usb5-port1: attempt power cycle [ 550.122993][ T5720] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 550.293112][ T5720] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 550.312324][ T5720] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 550.327415][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.342045][ T5720] usb 1-1: config 0 has no interface number 0 [ 550.345425][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.352796][ T5720] usb 1-1: New USB device found, idVendor=045b, idProduct=024d, bcdDevice=27.16 [ 550.368530][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.368849][ T1216] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 550.386185][ T5720] usb 1-1: Product: syz [ 550.399814][ T5720] usb 1-1: Manufacturer: syz [ 550.409750][ T5720] usb 1-1: SerialNumber: syz [ 550.413227][ T1216] usb 5-1: device descriptor read/8, error -71 [ 550.437880][ T5720] usb 1-1: config 0 descriptor?? [ 550.464976][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.481312][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.488756][ T25] block nbd1: Possible stuck request ffff8880281f7000: control (read@0,1024B). Runtime 210 seconds [ 550.501977][ T25] block nbd1: Possible stuck request ffff8880281f71c0: control (read@1024,1024B). Runtime 210 seconds [ 550.513148][ T25] block nbd1: Possible stuck request ffff8880281f7380: control (read@2048,1024B). Runtime 210 seconds [ 550.543985][ T29] audit: type=1400 audit(1778008987.108:766): avc: denied { mounton } for pid=11265 comm="syz-executor" path="/root/syzkaller.bZnt9Y/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 550.592302][ T29] audit: type=1400 audit(1778008987.138:767): avc: denied { mounton } for pid=11265 comm="syz-executor" path="/root/syzkaller.bZnt9Y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 550.622207][ T29] audit: type=1400 audit(1778008987.138:768): avc: denied { mounton } for pid=11265 comm="syz-executor" path="/root/syzkaller.bZnt9Y/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 550.649846][ T25] block nbd1: Possible stuck request ffff8880281f7540: control (read@3072,1024B). Runtime 210 seconds [ 550.659494][ T5720] cdc_acm 1-1:0.106: Control and data interfaces are not separated! [ 550.688362][ T29] audit: type=1400 audit(1778008987.248:769): avc: denied { mounton } for pid=11265 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 550.816810][ T5720] cdc_acm 1-1:0.106: This needs exactly 3 endpoints [ 550.823969][ T5720] cdc_acm 1-1:0.106: probe with driver cdc_acm failed with error -22 [ 550.849495][ T5720] usb 1-1: USB disconnect, device number 43 [ 551.212082][T11443] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 551.219750][T11443] UDF-fs: Scanning with blocksize 512 failed [ 551.237291][T11443] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 551.245284][T11443] UDF-fs: Scanning with blocksize 1024 failed [ 551.262778][T11443] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 551.270454][T11443] UDF-fs: Scanning with blocksize 2048 failed [ 551.280784][T11443] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 551.288565][T11443] UDF-fs: Scanning with blocksize 4096 failed [ 551.511617][T11443] netlink: 'syz.5.1387': attribute type 2 has an invalid length. [ 551.519762][T11443] netlink: 'syz.5.1387': attribute type 2 has an invalid length. [ 551.928963][T11445] CUSE: unknown device info "€" [ 551.933871][T11445] CUSE: unknown device info "" [ 551.938709][T11445] CUSE: unknown device info "" [ 551.943630][T11445] CUSE: unknown device info "" [ 551.948453][T11445] CUSE: unknown device info "+" [ 551.953377][T11445] CUSE: unknown device info "‚" [ 551.958195][T11445] CUSE: unknown device info "" [ 551.963040][T11445] CUSE: zero length info key specified [ 553.227119][ T29] audit: type=1400 audit(1778008989.788:770): avc: denied { write } for pid=11460 comm="syz.3.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 553.365243][ T29] audit: type=1400 audit(1778008989.818:771): avc: denied { read } for pid=11460 comm="syz.3.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 554.271151][ T7672] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 554.278884][ T1216] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 554.571145][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 554.581204][ T7672] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.603382][ T1216] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 554.616250][ T7672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 554.633241][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.654785][ T7672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 554.666324][ T1216] usb 2-1: Product: syz [ 554.676035][ T1216] usb 2-1: Manufacturer: syz [ 554.687720][ T1216] usb 2-1: SerialNumber: syz [ 554.694120][ T7672] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 554.721810][ T1216] usb 2-1: config 0 descriptor?? [ 554.731117][ T7672] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.745613][ T7672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.757470][ T7672] usb 5-1: config 0 descriptor?? [ 555.281956][ T1216] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 555.292170][ T7672] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 555.304778][ T7672] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 555.305604][ T1216] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 555.322634][ T7672] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 555.330053][ T7672] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 555.343083][ T7672] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 555.351079][ T1216] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 555.363886][ T1216] usb 2-1: media controller created [ 555.380169][ T7672] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 555.468918][ T1216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.050804][ T29] audit: type=1400 audit(1778008992.608:772): avc: denied { bind } for pid=11500 comm="syz.3.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 556.186094][T11502] siw: device registration error -23 [ 556.188673][ T1216] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 556.330324][ T1216] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 556.529906][T11504] siw: device registration error -23 [ 556.796001][ T5720] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 556.903716][ T7672] usb 2-1: USB disconnect, device number 53 [ 556.938358][ T7672] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 557.526681][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.539272][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.561189][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 557.572228][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.585365][ T5720] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.611123][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.621780][ T5720] usb 1-1: config 0 descriptor?? [ 558.433529][ T5843] usb 5-1: USB disconnect, device number 34 [ 558.456326][ T5720] plantronics 0003:047F:FFFF.0023: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 558.472043][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.885064][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.952006][T11524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1447'. [ 559.282974][T11527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.398950][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1450'. [ 561.785043][T11426] usb 1-1: USB disconnect, device number 44 [ 562.111216][ T1216] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 562.426997][ T1216] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.732336][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.922249][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 562.934915][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.951597][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 562.981828][ T1216] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 563.037013][ T1216] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.078453][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.105031][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 563.118641][ T1216] usb 4-1: config 0 descriptor?? [ 563.186074][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 563.569666][ T1216] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 563.598922][ T1216] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 563.648779][ T1216] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 563.788552][ T1216] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 563.804817][T11581] FAULT_INJECTION: forcing a failure. [ 563.804817][T11581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.822403][ T1216] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 563.846052][ T1216] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 563.981260][ T7667] IPVS: starting estimator thread 0... [ 563.995129][T11576] syzkaller0: entered allmulticast mode [ 563.997558][T11581] CPU: 1 UID: 0 PID: 11581 Comm: syz.1.1463 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.997595][T11581] Tainted: [L]=SOFTLOCKUP [ 563.997602][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.997614][T11581] Call Trace: [ 563.997621][T11581] [ 563.997628][T11581] dump_stack_lvl+0x100/0x190 [ 563.997657][T11581] should_fail_ex.cold+0x5/0xa [ 563.997685][T11581] _copy_to_user+0x32/0xd0 [ 563.997715][T11581] video_usercopy+0xed1/0x1700 [ 563.997744][T11581] ? __pfx___video_do_ioctl+0x10/0x10 [ 563.997770][T11581] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 563.997800][T11581] ? __pfx_video_usercopy+0x10/0x10 [ 563.997842][T11581] v4l2_ioctl+0x1bd/0x250 [ 563.997868][T11581] ? __pfx_v4l2_ioctl+0x10/0x10 [ 563.997896][T11581] __x64_sys_ioctl+0x18e/0x210 [ 563.997923][T11581] do_syscall_64+0x10b/0xf80 [ 563.997946][T11581] ? clear_bhb_loop+0x40/0x90 [ 563.997970][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.997991][T11581] RIP: 0033:0x7f3f4d59cdd9 [ 563.998007][T11581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.998026][T11581] RSP: 002b:00007f3f4e4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.998045][T11581] RAX: ffffffffffffffda RBX: 00007f3f4d815fa0 RCX: 00007f3f4d59cdd9 [ 563.998058][T11581] RDX: 0000200000000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 563.998071][T11581] RBP: 00007f3f4e4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 563.998082][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.998093][T11581] R13: 00007f3f4d816038 R14: 00007f3f4d815fa0 R15: 00007ffd3c2d0c88 [ 563.998120][T11581] [ 564.271526][T11585] IPVS: using max 65 ests per chain, 156000 per kthread [ 565.255929][ T5843] usb 4-1: USB disconnect, device number 41 [ 565.261956][T11426] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 565.506274][T11426] usb 1-1: Using ep0 maxpacket: 16 [ 566.278274][T11426] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 566.368402][T11426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.386166][T11426] usb 1-1: Product: syz [ 566.393043][T11426] usb 1-1: Manufacturer: syz [ 566.400387][T11426] usb 1-1: SerialNumber: syz [ 566.420135][T11426] usb 1-1: config 0 descriptor?? [ 566.514245][ T5843] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 566.681584][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 566.701414][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 566.720195][ T5843] usb 2-1: config 9 has an invalid interface number: 160 but max is 0 [ 566.730374][ T5843] usb 2-1: config 9 has no interface number 0 [ 566.737375][ T5843] usb 2-1: config 9 interface 160 has no altsetting 0 [ 566.767125][ T5843] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=39.33 [ 566.791972][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 566.803603][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.834750][ T5843] usb 2-1: Product: syz [ 566.848487][ T5843] usb 2-1: Manufacturer: syz [ 566.863731][T11426] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 566.878281][ T5843] usb 2-1: SerialNumber: syz [ 566.945491][T11426] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.970386][T11426] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 566.981098][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 567.000120][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 567.010643][T11426] usb 1-1: media controller created [ 567.025445][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.042134][T11426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.050885][ T9] usb 6-1: Product: syz [ 567.056574][ T9] usb 6-1: Manufacturer: syz [ 567.062506][ T9] usb 6-1: SerialNumber: syz [ 567.077404][ T9] usb 6-1: config 0 descriptor?? [ 567.104427][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.118565][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.135295][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.148809][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.176055][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.236745][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.237008][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.287955][ T29] audit: type=1400 audit(1778009003.848:773): avc: denied { lock } for pid=11625 comm="syz.3.1475" path="socket:[35436]" dev="sockfs" ino=35436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 567.352634][T11624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.371263][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.385855][T11624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.423058][ T5843] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 567.442909][T11426] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 567.455010][T11426] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 567.519075][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 567.530873][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 567.548289][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 567.575507][ T9] usb 6-1: media controller created [ 567.613981][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.683719][ T5843] snd-usb-audio 2-1:9.160: probe with driver snd-usb-audio failed with error -2 [ 567.716367][ T5843] usb 2-1: USB disconnect, device number 54 [ 567.874029][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.160/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.241897][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 568.253794][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 568.279703][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 568.473385][ T7672] usb 1-1: USB disconnect, device number 45 [ 569.533487][T11644] binder: 11643:11644 ioctl 4018620d 0 returned -22 [ 569.614546][ T7672] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 569.632541][ T1216] usb 6-1: USB disconnect, device number 2 [ 569.726051][ T1216] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 571.743972][ T29] audit: type=1400 audit(1778009008.308:774): avc: denied { read write } for pid=11662 comm="syz.1.1485" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 571.773129][ T29] audit: type=1400 audit(1778009008.308:775): avc: denied { open } for pid=11662 comm="syz.1.1485" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 571.837038][T11665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11665 comm=syz.3.1487 [ 571.910420][T11665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=11665 comm=syz.3.1487 [ 571.954257][T11665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=11665 comm=syz.3.1487 [ 571.982507][T11665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11665 comm=syz.3.1487 [ 572.074063][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 572.534483][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.558948][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 572.575872][T11677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1491'. [ 572.615503][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 572.645792][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 572.669683][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.989070][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.014846][ T9] usb 5-1: config 0 descriptor?? [ 573.159633][T11687] binder: 11686:11687 ioctl 4018620d 0 returned -22 [ 573.332013][T11426] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 573.504141][T11426] usb 2-1: Using ep0 maxpacket: 16 [ 573.619401][T11426] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 573.729445][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.757234][T11426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.898566][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.914548][T11426] usb 2-1: Product: syz [ 573.993619][T11426] usb 2-1: Manufacturer: syz [ 574.130306][T11426] usb 2-1: SerialNumber: syz [ 574.960817][ T9] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 575.014726][T11426] usb 2-1: config 0 descriptor?? [ 576.251181][ T7672] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 576.341726][T11426] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 576.351433][T11426] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 576.363466][T11426] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 576.394850][T11426] usb 2-1: media controller created [ 576.603781][T11426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 576.888245][T11426] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 576.905550][T11426] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 577.295983][ T1216] usb 5-1: USB disconnect, device number 35 [ 577.703478][ T7672] usb 2-1: USB disconnect, device number 55 [ 577.839343][ T7672] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 578.014880][T11727] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1502'. [ 578.051574][T11727] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 578.142373][T11732] siw: device registration error -23 [ 578.686640][ T1216] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 578.907626][T11739] binder: BINDER_SET_CONTEXT_MGR already set [ 578.936283][T11739] binder: 11738:11739 ioctl 4018620d 200000004a80 returned -16 [ 578.994873][ T1216] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 579.008590][T11741] wg1 speed is unknown, defaulting to 1000 [ 579.014574][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 579.040000][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 579.062875][ T1216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 579.084592][ T1216] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.100359][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.117450][ T1216] usb 2-1: config 0 descriptor?? [ 579.215635][T11751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.291177][ T7672] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 579.451838][ T7672] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 579.475338][ T7672] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 579.484858][ T7672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.493440][ T7672] usb 1-1: Product: syz [ 579.497905][ T7672] usb 1-1: Manufacturer: syz [ 579.502988][ T7672] usb 1-1: SerialNumber: syz [ 579.547947][ T1216] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 579.559275][ T1216] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 579.567291][ T1216] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 579.575345][ T1216] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 579.585875][ T1216] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 579.606385][ T1216] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 580.021774][T11758] Cannot find del_set index 2 as target [ 580.568263][ T25] block nbd1: Possible stuck request ffff8880281f7000: control (read@0,1024B). Runtime 240 seconds [ 580.580305][ T25] block nbd1: Possible stuck request ffff8880281f71c0: control (read@1024,1024B). Runtime 240 seconds [ 580.591447][ T25] block nbd1: Possible stuck request ffff8880281f7380: control (read@2048,1024B). Runtime 240 seconds [ 580.672066][ T25] block nbd1: Possible stuck request ffff8880281f7540: control (read@3072,1024B). Runtime 240 seconds [ 581.484688][T11772] xt_NFQUEUE: number of total queues is 0 [ 581.848170][ T7672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 581.871931][ T7672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 581.885150][ T7672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 581.937190][ T7672] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 581.999408][ T7672] usb 1-1: USB disconnect, device number 46 [ 582.252533][ T7667] usb 2-1: USB disconnect, device number 56 [ 582.520748][T11785] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1519'. [ 582.539210][T11785] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 582.581938][ T7672] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 582.952100][ T7672] usb 4-1: Using ep0 maxpacket: 16 [ 583.477706][ T7672] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 583.686468][ T7672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.763796][ T7672] usb 4-1: Product: syz [ 583.793429][ T7672] usb 4-1: Manufacturer: syz [ 583.830171][ T7672] usb 4-1: SerialNumber: syz [ 584.146643][ T7672] usb 4-1: config 0 descriptor?? [ 584.695465][ T7672] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 584.704011][T11806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=11806 comm=syz.5.1526 [ 584.762480][ T7672] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 585.306361][ T7672] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 585.327228][ T7672] usb 4-1: media controller created [ 585.492858][ T7672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.842275][ T7672] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 585.852362][ T7672] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 585.977586][T11822] capability: warning: `syz.0.1529' uses 32-bit capabilities (legacy support in use) [ 586.013849][T11808] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1527'. [ 586.096063][ T7672] usb 4-1: USB disconnect, device number 42 [ 586.129870][ T7672] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 586.221497][T11426] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 586.311756][ T5844] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 586.373223][T11426] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.383073][T11426] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 586.392437][T11426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.403641][T11426] usb 6-1: config 0 descriptor?? [ 586.462129][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 586.473237][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.501527][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.521095][ T5844] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 586.541092][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.563954][ T5844] usb 1-1: config 0 descriptor?? [ 586.583319][ T5844] hub 1-1:0.0: USB hub found [ 587.913472][ T5844] hub 1-1:0.0: 26 ports detected [ 587.927330][ T5844] hub 1-1:0.0: insufficient power available to use all downstream ports [ 588.411229][ T7672] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 588.551121][ T5844] usb 1-1: USB disconnect, device number 47 [ 589.102752][ T7672] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 589.127163][ T7672] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.138573][ T5609] usb 6-1: USB disconnect, device number 3 [ 589.148717][ T7672] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 589.183787][ T7672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.212066][ T7672] usb 4-1: config 0 descriptor?? [ 589.588754][T11853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=11853 comm=syz.4.1540 [ 589.708823][T11857] netlink: 'syz.4.1541': attribute type 1 has an invalid length. [ 589.748234][T11857] bond2: entered promiscuous mode [ 589.754633][T11857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.768340][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 589.787731][T11857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.795268][T11857] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 589.808018][T11857] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 589.825692][T11857] bond2: (slave vcan1): making interface the new active one [ 589.842887][T11857] vcan1: entered promiscuous mode [ 589.852016][T11857] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 590.439757][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 590.451104][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 590.533076][ T1216] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 590.554182][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 590.600253][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 590.603160][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 590.715265][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 590.733786][ T1216] usb 1-1: Using ep0 maxpacket: 32 [ 590.752409][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.752484][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.752719][ T1216] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 590.752794][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.785759][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 590.835115][ T1216] usb 1-1: config 0 descriptor?? [ 591.011311][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 591.025223][ T7672] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 591.055340][ T7672] hid-multitouch 0003:0EEF:72C4.0027: hidraw0: USB HID v0.08 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 591.083464][ T7672] usb 4-1: USB disconnect, device number 43 [ 591.559919][ T1216] koneplus 0003:1E7D:2D51.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 591.696359][ T1216] koneplus 0003:1E7D:2D51.0028: couldn't init struct koneplus_device [ 591.711115][ T1216] koneplus 0003:1E7D:2D51.0028: couldn't install mouse [ 591.734310][ T1216] koneplus 0003:1E7D:2D51.0028: probe with driver koneplus failed with error -71 [ 591.759112][ T1216] usb 1-1: USB disconnect, device number 48 [ 592.277271][T11875] can0: slcan on ttyS3. [ 592.306096][T11868] fido_id[11868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 593.061900][T11872] can0 (unregistered): slcan off ttyS3. [ 593.266473][T11885] fido_id[11885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 593.423271][T11897] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1550'. [ 593.437601][T11899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=11899 comm=syz.1.1551 [ 593.455260][T11897] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1550'. [ 593.722639][ T5844] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 594.812270][T11912] FAULT_INJECTION: forcing a failure. [ 594.812270][T11912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.846144][T11912] CPU: 0 UID: 0 PID: 11912 Comm: syz.1.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.846186][T11912] Tainted: [L]=SOFTLOCKUP [ 594.846193][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.846205][T11912] Call Trace: [ 594.846212][T11912] [ 594.846220][T11912] dump_stack_lvl+0x100/0x190 [ 594.846251][T11912] should_fail_ex.cold+0x5/0xa [ 594.846280][T11912] _copy_from_user+0x2e/0xd0 [ 594.846312][T11912] copy_msghdr_from_user+0x9f/0x4f0 [ 594.846341][T11912] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 594.846381][T11912] ___sys_sendmsg+0x106/0x1e0 [ 594.846410][T11912] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.846471][T11912] __sys_sendmsg+0x170/0x220 [ 594.846505][T11912] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.846550][T11912] ? rcu_is_watching+0x12/0xc0 [ 594.846583][T11912] do_syscall_64+0x10b/0xf80 [ 594.846608][T11912] ? clear_bhb_loop+0x40/0x90 [ 594.846633][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.846654][T11912] RIP: 0033:0x7f3f4d59cdd9 [ 594.846672][T11912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.846692][T11912] RSP: 002b:00007f3f4e4bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.846712][T11912] RAX: ffffffffffffffda RBX: 00007f3f4d815fa0 RCX: 00007f3f4d59cdd9 [ 594.846726][T11912] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 594.846738][T11912] RBP: 00007f3f4e4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 594.846750][T11912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.846762][T11912] R13: 00007f3f4d816038 R14: 00007f3f4d815fa0 R15: 00007ffd3c2d0c88 [ 594.846791][T11912] [ 595.652031][ T5844] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 595.746424][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.754770][ T5844] usb 6-1: Product: syz [ 595.760288][ T5844] usb 6-1: Manufacturer: syz [ 595.769729][ T5844] usb 6-1: SerialNumber: syz [ 595.791637][ T5844] usb 6-1: config 0 descriptor?? [ 595.826779][ T29] audit: type=1400 audit(1778009032.388:776): avc: denied { write } for pid=11887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.926274][T11920] binder: 11917:11920 ioctl 4018620d 0 returned -22 [ 596.257542][T11926] NILFS (nullb0): couldn't find nilfs on the device [ 597.492356][ T5844] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 597.508031][ T5844] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 597.518675][ T5844] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 597.534131][ T5844] usb 6-1: USB disconnect, device number 4 [ 597.902606][ T29] audit: type=1400 audit(1778009034.308:777): avc: denied { write } for pid=11931 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.965318][ T29] audit: type=1400 audit(1778009034.528:778): avc: denied { mounton } for pid=11940 comm="syz.5.1561" path="/33/file1" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 600.511583][ T7672] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 600.785604][ T7672] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.821500][ T7672] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 600.894766][T11991] netlink: 'syz.0.1570': attribute type 21 has an invalid length. [ 600.903318][T11991] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1570'. [ 601.264184][ T7672] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 601.274029][ T7672] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 601.286979][ T7672] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.296439][ T7672] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.316017][ T29] audit: type=1400 audit(1778009037.878:779): avc: denied { write } for pid=11945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.446349][ T7672] usb 6-1: config 0 descriptor?? [ 601.568492][ T29] audit: type=1400 audit(1778009038.128:780): avc: denied { write } for pid=11993 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.803153][T11978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.845220][ T7672] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 602.867852][T11978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.933552][ T5844] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 603.057253][T12008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 603.066079][T12008] UDF-fs: Scanning with blocksize 512 failed [ 603.082466][T12008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 603.090130][T12008] UDF-fs: Scanning with blocksize 1024 failed [ 603.110447][T12008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 603.118222][T12008] UDF-fs: Scanning with blocksize 2048 failed [ 603.136311][T12008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 603.144911][T12008] UDF-fs: Scanning with blocksize 4096 failed [ 603.267855][ T5844] usb 5-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid wMaxPacketSize 0 [ 603.288055][T12008] netlink: 'syz.1.1573': attribute type 2 has an invalid length. [ 603.296817][T12008] netlink: 'syz.1.1573': attribute type 2 has an invalid length. [ 603.353128][ T5844] usb 5-1: config 2 interface 0 has no altsetting 0 [ 603.377226][ T5844] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 603.495138][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.780024][ T5844] usb 5-1: Product: syz [ 603.905061][ T5844] usb 5-1: Manufacturer: syz [ 604.060515][ T5844] usb 5-1: SerialNumber: syz [ 604.433235][T12018] tc_dump_action: action bad kind [ 605.450776][ T5844] ims_pcu 5-1:2.0: Incorrect number of endpoints on data interface (1) [ 605.474214][ T5844] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 605.522347][ T5844] usb 5-1: USB disconnect, device number 36 [ 605.532554][ T1216] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 606.102762][T12029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12029 comm=syz.4.1580 [ 606.867791][ T5609] usb 6-1: USB disconnect, device number 5 [ 608.770408][T12060] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 608.908555][T12060] bond3: entered promiscuous mode [ 608.922915][T12067] can: request_module (can-proto-4) failed. [ 608.957464][T12060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.005751][ T1216] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 610.051115][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 610.104001][ T1216] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 610.122639][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.144176][ T1216] usb 2-1: Product: syz [ 610.156000][ T1216] usb 2-1: Manufacturer: syz [ 610.167823][ T1216] usb 2-1: SerialNumber: syz [ 610.181966][ T1216] usb 2-1: config 0 descriptor?? [ 610.643044][ T25] block nbd1: Possible stuck request ffff8880281f7000: control (read@0,1024B). Runtime 270 seconds [ 610.654039][ T25] block nbd1: Possible stuck request ffff8880281f71c0: control (read@1024,1024B). Runtime 270 seconds [ 610.666823][ T25] block nbd1: Possible stuck request ffff8880281f7380: control (read@2048,1024B). Runtime 270 seconds [ 610.683145][ T1216] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 610.694184][ T25] block nbd1: Possible stuck request ffff8880281f7540: control (read@3072,1024B). Runtime 270 seconds [ 610.716623][ T1216] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 610.727511][ T1216] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 610.736923][ T1216] usb 2-1: media controller created [ 610.770506][ T1216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.322160][ T1216] zl10353_read_register: readreg error (reg=127, ret==0) [ 611.476948][ T1216] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 611.490609][ T1216] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 612.019490][T12106] NILFS (nullb0): couldn't find nilfs on the device [ 613.827175][T12120] siw: device registration error -23 [ 614.119583][ T5609] usb 2-1: USB disconnect, device number 57 [ 614.170985][ T5609] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 614.218462][T12125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12125 comm=syz.5.1603 [ 614.238753][T12125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=12125 comm=syz.5.1603 [ 614.257072][T12125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=12125 comm=syz.5.1603 [ 614.270078][T12125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=12125 comm=syz.5.1603 [ 614.285391][T12125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=12125 comm=syz.5.1603 [ 614.310767][T12125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12125 comm=syz.5.1603 [ 614.324283][T12125] FAULT_INJECTION: forcing a failure. [ 614.324283][T12125] name failslab, interval 1, probability 0, space 0, times 0 [ 614.338476][T12125] CPU: 1 UID: 0 PID: 12125 Comm: syz.5.1603 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.338505][T12125] Tainted: [L]=SOFTLOCKUP [ 614.338512][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.338522][T12125] Call Trace: [ 614.338528][T12125] [ 614.338536][T12125] dump_stack_lvl+0x100/0x190 [ 614.338570][T12125] should_fail_ex.cold+0x5/0xa [ 614.338599][T12125] should_failslab+0xc2/0x120 [ 614.338621][T12125] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 614.338653][T12125] ? __alloc_skb+0x140/0x710 [ 614.338680][T12125] ? __alloc_skb+0x5b7/0x710 [ 614.338713][T12125] __alloc_skb+0x140/0x710 [ 614.338741][T12125] ? __alloc_skb+0x5b7/0x710 [ 614.338770][T12125] ? __pfx___alloc_skb+0x10/0x10 [ 614.338808][T12125] netlink_ack+0x117/0xb80 [ 614.338833][T12125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 614.338866][T12125] netlink_rcv_skb+0x333/0x420 [ 614.338891][T12125] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 614.338922][T12125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.338966][T12125] netlink_unicast+0x585/0x850 [ 614.338996][T12125] ? __pfx_netlink_unicast+0x10/0x10 [ 614.339029][T12125] netlink_sendmsg+0x8b0/0xda0 [ 614.339060][T12125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.339083][T12125] ? pti_set_user_pgtbl+0x30/0x50 [ 614.339123][T12125] ____sys_sendmsg+0x9e1/0xb70 [ 614.339146][T12125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.339173][T12125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.339210][T12125] ___sys_sendmsg+0x190/0x1e0 [ 614.339237][T12125] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.339295][T12125] __sys_sendmsg+0x170/0x220 [ 614.339327][T12125] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.339370][T12125] ? rcu_is_watching+0x12/0xc0 [ 614.339406][T12125] do_syscall_64+0x10b/0xf80 [ 614.339430][T12125] ? clear_bhb_loop+0x40/0x90 [ 614.339456][T12125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.339477][T12125] RIP: 0033:0x7f6c0e39cdd9 [ 614.339493][T12125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.339512][T12125] RSP: 002b:00007f6c0f214028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.339531][T12125] RAX: ffffffffffffffda RBX: 00007f6c0e615fa0 RCX: 00007f6c0e39cdd9 [ 614.339550][T12125] RDX: 000000000000c044 RSI: 0000200000000b00 RDI: 0000000000000003 [ 614.339563][T12125] RBP: 00007f6c0f214090 R08: 0000000000000000 R09: 0000000000000000 [ 614.339575][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.339586][T12125] R13: 00007f6c0e616038 R14: 00007f6c0e615fa0 R15: 00007fff617ab258 [ 614.339615][T12125] [ 614.597657][T12127] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 614.605368][T12127] UDF-fs: Scanning with blocksize 512 failed [ 614.621612][T12127] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 614.629164][T12127] UDF-fs: Scanning with blocksize 1024 failed [ 614.639069][T12127] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 614.719263][T12127] UDF-fs: Scanning with blocksize 2048 failed [ 614.834606][T12130] siw: device registration error -23 [ 615.212947][T12127] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 615.244610][T12127] UDF-fs: Scanning with blocksize 4096 failed [ 615.401839][T12144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1609'. [ 615.422003][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1609'. [ 615.433416][T12144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1609'. [ 615.931130][ T29] audit: type=1400 audit(1778009052.148:781): avc: denied { create } for pid=12133 comm="syz.5.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 615.963459][T12126] netlink: 'syz.1.1604': attribute type 2 has an invalid length. [ 615.971237][T12126] netlink: 'syz.1.1604': attribute type 2 has an invalid length. [ 616.839638][T12172] siw: device registration error -23 [ 617.031058][T11426] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 617.046677][ T5844] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 617.137606][T12160] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.145198][T12160] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.244831][T11426] usb 2-1: config 0 has no interfaces? [ 617.254143][T11426] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 617.264570][T11426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.279815][T11426] usb 2-1: Product: syz [ 617.284641][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 617.295124][ T5844] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 617.304710][T11426] usb 2-1: Manufacturer: syz [ 617.309356][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.318955][T11426] usb 2-1: SerialNumber: syz [ 617.333555][ T5844] usb 4-1: Product: syz [ 617.343896][ T5844] usb 4-1: Manufacturer: syz [ 617.350739][T11426] usb 2-1: config 0 descriptor?? [ 617.356721][T12160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.368019][ T5844] usb 4-1: SerialNumber: syz [ 617.382598][ T5844] usb 4-1: config 0 descriptor?? [ 617.410957][T12160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.502220][ T57] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.513083][ T57] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.529119][T12164] wg1 speed is unknown, defaulting to 1000 [ 617.535515][ T57] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.546220][ T57] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.722745][T11426] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 617.901984][T11426] usb 5-1: Using ep0 maxpacket: 16 [ 618.210758][ T5844] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 618.375873][T11426] usb 5-1: config 8 has an invalid interface number: 20 but max is 0 [ 618.384070][T11426] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 618.397632][T11426] usb 5-1: config 8 has no interface number 0 [ 618.404145][T11426] usb 5-1: config 8 interface 20 altsetting 211 has an invalid descriptor for endpoint zero, skipping [ 618.416207][T11426] usb 5-1: config 8 interface 20 altsetting 211 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.431247][T11426] usb 5-1: config 8 interface 20 has no altsetting 0 [ 618.442633][T11426] usb 5-1: New USB device found, idVendor=0403, idProduct=daf9, bcdDevice= 1.72 [ 618.668298][T11426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 618.731106][T11426] usb 5-1: Product: syz [ 618.739262][T11426] usb 5-1: Manufacturer: syz [ 618.753624][T11426] usb 5-1: SerialNumber: syz [ 619.061165][T11426] ftdi_sio 5-1:8.20: FTDI USB Serial Device converter detected [ 619.070687][T11426] usb 5-1: Detected SIO [ 619.078760][T11426] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 619.092792][T11426] usb 5-1: USB disconnect, device number 37 [ 619.104854][T11426] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 619.116480][T11426] ftdi_sio 5-1:8.20: device disconnected [ 619.127757][ T5609] usb 2-1: USB disconnect, device number 58 [ 619.236524][T12210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12210 comm=syz.0.1626 [ 619.464024][T12213] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 619.473133][T12213] UDF-fs: Scanning with blocksize 512 failed [ 619.488155][T12213] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 619.495771][T12213] UDF-fs: Scanning with blocksize 1024 failed [ 619.511201][T12213] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 619.518706][T12213] UDF-fs: Scanning with blocksize 2048 failed [ 619.529120][T12213] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 619.544784][T12213] UDF-fs: Scanning with blocksize 4096 failed [ 619.584006][T12215] netlink: 'syz.0.1627': attribute type 2 has an invalid length. [ 619.592048][T12215] netlink: 'syz.0.1627': attribute type 2 has an invalid length. [ 620.119163][T12219] NILFS (nullb0): couldn't find nilfs on the device [ 620.751915][T12229] xt_connbytes: Forcing CT accounting to be enabled [ 620.776991][ T29] audit: type=1400 audit(1778009057.308:782): avc: denied { name_bind } for pid=12222 comm="syz.4.1629" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 621.188039][ T7667] usb 4-1: USB disconnect, device number 44 [ 621.890822][ T29] audit: type=1400 audit(1778009058.448:783): avc: denied { create } for pid=12244 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 621.913975][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1634'. [ 621.992863][ T29] audit: type=1400 audit(1778009058.478:784): avc: denied { write } for pid=12244 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 622.068162][T12250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12250 comm=syz.4.1634 [ 622.316258][T12256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12256 comm=syz.5.1637 [ 624.111028][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.118422][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.578188][T12286] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 626.016172][T12286] bond3: entered promiscuous mode [ 626.032111][T12286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.249186][T12292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.862404][T12292] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 626.901134][T12292] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 627.256328][T12292] bond3: (slave ip6gre1): making interface the new active one [ 627.346688][T12308] NILFS (nullb0): couldn't find nilfs on the device [ 627.440777][T12292] ip6gre1: entered promiscuous mode [ 627.683743][T12292] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 628.401719][ T7667] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 628.650559][ T7667] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 628.713367][ T7667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 628.778476][ T7667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 628.820588][ T7667] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.855000][ T7667] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.987784][ T7667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.019331][ T7667] usb 5-1: config 0 descriptor?? [ 629.522807][ T7667] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 629.760037][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.819611][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.637483][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 630.680650][T12326] wg1 speed is unknown, defaulting to 1000 [ 631.284091][ T7667] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 631.310309][ T5843] usb 6-1: config 0 has no interfaces? [ 631.345729][ T5843] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 631.527995][T12340] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1657'. [ 631.673280][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.687879][ T5843] usb 6-1: Product: syz [ 631.692713][ T5843] usb 6-1: Manufacturer: syz [ 631.697356][ T5843] usb 6-1: SerialNumber: syz [ 631.703655][ T5843] usb 6-1: config 0 descriptor?? [ 631.798493][ T7667] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.826538][ T7667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.846625][ T7667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 631.856921][ T7667] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 631.880442][ T7667] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.889913][ T7667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.907105][ T7667] usb 1-1: config 0 descriptor?? [ 631.942532][ T5609] usb 6-1: USB disconnect, device number 6 [ 632.480397][ T7667] hid_parser_main: 28 callbacks suppressed [ 632.506495][T11426] usb 5-1: USB disconnect, device number 38 [ 632.509982][ T7667] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 632.542939][ T7667] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 632.550808][ T7667] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 632.565749][ T7667] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 632.597487][ T7667] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 632.633497][ T7667] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 632.656564][T12348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12348 comm=syz.4.1661 [ 634.956796][T12368] NILFS (nullb0): couldn't find nilfs on the device [ 635.161165][T12371] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1658'. [ 635.454100][ T5843] usb 1-1: USB disconnect, device number 49 [ 636.534620][T12390] NILFS (nullb0): couldn't find nilfs on the device [ 637.597880][T12400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12400 comm=syz.4.1674 [ 637.636659][T12398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.861420][ T7667] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 638.025300][ T29] audit: type=1400 audit(1778009074.588:785): avc: denied { shutdown } for pid=12407 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 638.156466][ T7667] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 638.240530][ T7667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 638.305428][ T7667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 638.336698][ T7667] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.360262][ T7667] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.374746][ T7667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.389903][ T7667] usb 2-1: config 0 descriptor?? [ 638.751131][ T5609] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 638.991082][ T5609] usb 4-1: Using ep0 maxpacket: 16 [ 639.006006][ T7667] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 639.093856][ T5609] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 639.109155][ T7667] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 639.148875][ T7667] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 639.167075][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.188343][ T7667] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 639.195870][ T5609] usb 4-1: Product: syz [ 639.200447][ T5609] usb 4-1: Manufacturer: syz [ 639.205576][ T7667] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 639.213075][ T5609] usb 4-1: SerialNumber: syz [ 639.222537][ T5609] usb 4-1: config 0 descriptor?? [ 639.238909][ T7667] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 639.301435][T11426] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 639.338897][T12428] siw: device registration error -23 [ 639.734227][T11426] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.796371][T11426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.840094][T11426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 639.857819][T11426] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 639.874064][T11426] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.883541][T11426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.904452][T11426] usb 1-1: config 0 descriptor?? [ 639.937947][ T5609] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 639.949431][ T5609] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 639.960000][ T5609] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 639.968478][ T5609] usb 4-1: media controller created [ 639.981663][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.071132][ T7667] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 640.161122][ T5608] Bluetooth: hci5: command 0x0405 tx timeout [ 640.233363][ T7667] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 640.257086][ T7667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 640.274398][ T5609] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 640.282426][ T7667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 640.292227][ T5609] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 640.301203][ T7667] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 640.325710][ T7667] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.337407][ T7667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.368865][ T7667] usb 5-1: config 0 descriptor?? [ 640.371940][T11426] plantronics 0003:047F:FFFF.002D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 640.542216][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.554813][ T5609] usb 4-1: USB disconnect, device number 45 [ 640.558921][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.606015][ T5609] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 640.731427][ T25] block nbd1: Possible stuck request ffff8880281f7000: control (read@0,1024B). Runtime 300 seconds [ 640.742230][ T25] block nbd1: Possible stuck request ffff8880281f71c0: control (read@1024,1024B). Runtime 300 seconds [ 640.753259][ T25] block nbd1: Possible stuck request ffff8880281f7380: control (read@2048,1024B). Runtime 300 seconds [ 640.764646][ T25] block nbd1: Possible stuck request ffff8880281f7540: control (read@3072,1024B). Runtime 300 seconds [ 640.815490][ T7667] plantronics 0003:047F:FFFF.002E: hiddev2,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 641.370008][T12432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.400529][T12432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.488704][T12442] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1685'. [ 641.528113][ T1216] usb 2-1: USB disconnect, device number 59 [ 641.707189][T12449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12449 comm=syz.5.1688 [ 643.086623][ T7667] usb 1-1: USB disconnect, device number 50 [ 643.377442][ T29] audit: type=1400 audit(1778009079.928:786): avc: denied { set_context_mgr } for pid=12459 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 644.057906][T12467] siw: device registration error -23 [ 644.454757][T11426] usb 5-1: USB disconnect, device number 39 [ 644.546696][ T29] audit: type=1400 audit(1778009081.108:787): avc: denied { shutdown } for pid=12471 comm="syz.5.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 644.609671][ T1216] libceph: connect (1)[c::]:6789 error -101 [ 644.622838][ T1216] libceph: mon0 (1)[c::]:6789 connect error [ 644.675985][T12472] ceph: No mds server is up or the cluster is laggy [ 644.805836][T12488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12488 comm=syz.3.1700 [ 644.821347][ T7667] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 645.021223][T11426] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 645.643562][T12496] siw: device registration error -23 [ 645.881455][T11426] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 645.886239][ T7667] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 645.889739][T11426] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 645.910179][ T7667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 645.915870][T11426] usb 5-1: config 8 has no interface number 0 [ 645.977597][T11426] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 645.999491][T11426] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 646.010620][T11426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.035334][T11426] usb 5-1: Product: syz [ 646.039119][ T7667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 646.042899][T11426] usb 5-1: Manufacturer: syz [ 646.237376][ T7667] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.253061][ T7667] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.262781][ T7667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.264434][T11426] usb 5-1: SerialNumber: syz [ 646.286383][ T7667] usb 2-1: config 0 descriptor?? [ 646.817578][T11426] usb 5-1: USB disconnect, device number 40 [ 646.847016][ T7667] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 646.861315][ T7667] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 646.869157][ T7667] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 646.877059][ T7667] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 646.885872][ T7667] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 646.924032][ T7667] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 648.872710][ T7667] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 649.133456][T11426] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 649.343826][ T7667] usb 1-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid wMaxPacketSize 0 [ 649.383770][ T7667] usb 1-1: config 2 interface 0 has no altsetting 0 [ 649.406686][ T7667] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 649.416541][ T7667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.425420][ T7667] usb 1-1: Product: syz [ 649.429746][ T7667] usb 1-1: Manufacturer: syz [ 649.436475][ T29] audit: type=1400 audit(1778009085.998:788): avc: denied { create } for pid=12529 comm="syz.5.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 649.456090][ T7667] usb 1-1: SerialNumber: syz [ 649.490388][T12533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12533 comm=syz.4.1712 [ 650.244747][ T5843] usb 2-1: USB disconnect, device number 60 [ 651.098364][ T7667] ims_pcu 1-1:2.0: Incorrect number of endpoints on data interface (1) [ 651.108297][ T7667] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 651.126743][ T7667] usb 1-1: USB disconnect, device number 51 [ 652.966447][T12574] netlink: 210312 bytes leftover after parsing attributes in process `syz.0.1721'. [ 653.710108][T12587] bridge_slave_0: left allmulticast mode [ 653.800072][T12587] bridge_slave_0: left promiscuous mode [ 653.813467][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.891294][ T7667] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 654.096025][T12587] bridge_slave_1: left allmulticast mode [ 654.099575][ T7667] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 654.101892][T11426] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 654.117374][T12587] bridge_slave_1: left promiscuous mode [ 654.134159][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.327008][ T7667] usb 5-1: can't read configurations, error -61 [ 654.431485][T11426] usb 4-1: Using ep0 maxpacket: 16 [ 654.453776][T11426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.464162][T12587] bond0: (slave bond_slave_0): Releasing backup interface [ 654.476764][T11426] usb 4-1: config 0 has no interfaces? [ 654.493143][ T7667] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 654.495115][T11426] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 654.531459][T12587] bond0: (slave bond_slave_1): Releasing backup interface [ 654.553631][T11426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.588110][T11426] usb 4-1: Product: syz [ 654.606390][T11426] usb 4-1: Manufacturer: syz [ 654.612998][T11426] usb 4-1: SerialNumber: syz [ 654.619697][T12587] team0: Port device team_slave_0 removed [ 654.628476][T11426] usb 4-1: config 0 descriptor?? [ 655.154438][T12587] team0: Port device team_slave_1 removed [ 655.167966][T12587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.187647][T12587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.197350][ T7667] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 655.220047][ T7667] usb 5-1: can't read configurations, error -61 [ 655.255316][ T7667] usb usb5-port1: attempt power cycle [ 655.334135][ T1216] usb 4-1: USB disconnect, device number 46 [ 655.374203][T12587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 655.550895][T12589] bridge0: port 1(syz_tun) entered blocking state [ 655.565220][T12589] bridge0: port 1(syz_tun) entered disabled state [ 655.596446][T12589] syz_tun: entered allmulticast mode [ 655.631820][T12589] syz_tun: entered promiscuous mode [ 655.647070][T12598] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1729'. [ 655.821143][ T7667] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 655.863507][ T7667] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 655.881090][ T7667] usb 5-1: can't read configurations, error -61 [ 656.031594][ T7667] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 656.056337][T12610] NILFS (nullb0): couldn't find nilfs on the device [ 656.483586][ T7667] usb 5-1: device descriptor read/8, error -71 [ 656.645587][ T7667] usb usb5-port1: unable to enumerate USB device [ 656.694850][T12609] NILFS (nullb0): couldn't find nilfs on the device [ 658.733536][T12629] xt_connbytes: Forcing CT accounting to be enabled [ 660.278417][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1730'. [ 660.394315][T12653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12653 comm=syz.1.1730 [ 661.332815][T12670] NILFS (nullb0): couldn't find nilfs on the device [ 661.780631][ T29] audit: type=1400 audit(1778009098.338:789): avc: denied { read } for pid=12675 comm="syz.0.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 661.810372][ T7667] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 661.990279][ T7667] usb 2-1: unable to get BOS descriptor or descriptor too short [ 662.003814][ T7667] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 662.017819][ T7667] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 662.036624][ T7667] usb 2-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 662.048294][ T5609] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 662.096219][ T7667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.130196][ T7667] usb 2-1: Product: syz [ 662.148794][ T7667] usb 2-1: Manufacturer: syz [ 662.188317][ T7667] usb 2-1: SerialNumber: syz [ 662.262665][ T5609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 662.324942][ T5609] usb 1-1: config 86 has an invalid interface number: 76 but max is 0 [ 662.359076][ T5609] usb 1-1: config 86 has no interface number 0 [ 662.369760][ T5609] usb 1-1: config 86 interface 76 has no altsetting 0 [ 662.418480][ T5609] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=44.b5 [ 662.436900][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.463411][ T5609] usb 1-1: Product: syz [ 662.474529][ T5609] usb 1-1: Manufacturer: syz [ 662.487350][ T5609] usb 1-1: SerialNumber: syz [ 662.620848][T12671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1745'. [ 663.124643][T12676] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 663.163029][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1747'. [ 663.636128][T12695] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 663.688269][T12698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.998702][ T5609] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:86.76/input/input52 [ 664.088694][T12702] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 664.093933][ T7667] usb 2-1: Can't get UAC3 power state for id 10 [ 664.138742][T12702] UDF-fs: Scanning with blocksize 512 failed [ 664.161304][T12702] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 664.168958][T12702] UDF-fs: Scanning with blocksize 1024 failed [ 664.192871][T12702] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 664.200505][T12702] UDF-fs: Scanning with blocksize 2048 failed [ 664.212288][T12702] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 664.219816][T12702] UDF-fs: Scanning with blocksize 4096 failed [ 664.315404][T12702] netlink: 'syz.3.1754': attribute type 2 has an invalid length. [ 664.320101][ T7667] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 664.332414][T12702] netlink: 'syz.3.1754': attribute type 2 has an invalid length. [ 664.335879][ T4960] bcm5974 1-1:86.76: could not read from device [ 664.518140][ T7667] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 664.572361][ T4960] bcm5974 1-1:86.76: could not read from device [ 664.592257][ T7667] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 664.607429][ T5609] usb 1-1: USB disconnect, device number 52 [ 664.630063][ T7667] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 664.639412][ T4960] bcm5974 1-1:86.76: could not read from device [ 665.006224][T12714] NILFS (nullb0): couldn't find nilfs on the device [ 665.479195][T12716] Cannot find set identified by id 0 to match [ 667.672644][ T5609] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 667.777259][ T7667] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 667.781211][T12731] Cannot find del_set index 2 as target [ 667.810992][ T7667] usb 2-1: USB disconnect, device number 61 [ 667.919194][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.976380][ T5609] usb 5-1: Using ep0 maxpacket: 32 [ 667.998402][ T5609] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 668.026858][ T5609] usb 5-1: config 0 has no interface number 0 [ 668.046777][ T5609] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 668.097792][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.161635][ T5609] usb 5-1: Product: syz [ 668.194319][ T5609] usb 5-1: Manufacturer: syz [ 668.212780][ T5609] usb 5-1: SerialNumber: syz [ 668.270936][ T5609] usb 5-1: config 0 descriptor?? [ 668.297473][T12739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50280 sclass=netlink_route_socket pid=12739 comm=syz.0.1765 [ 668.402792][ T5609] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 668.425405][ T29] audit: type=1400 audit(1778009104.968:790): avc: denied { listen } for pid=12737 comm="syz.0.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 668.463462][ T7667] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 668.496057][ T5609] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 668.548115][ T5609] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 668.588059][T12746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.605403][T12746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.731147][ T7667] usb 4-1: Using ep0 maxpacket: 16 [ 668.760690][ T7667] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 668.770682][ T7667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.780824][ T7667] usb 4-1: Product: syz [ 668.786084][ T7667] usb 4-1: Manufacturer: syz [ 668.790828][ T7667] usb 4-1: SerialNumber: syz [ 668.809792][ T7667] usb 4-1: config 0 descriptor?? [ 668.851124][ T1216] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 668.925278][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 668.934600][ T5609] usb 5-1: USB disconnect, device number 45 [ 668.945799][ T5609] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 668.966483][ T5609] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 668.985745][ T5609] quatech2 5-1:0.51: device disconnected [ 669.080275][T12750] CUSE: unknown device info "€" [ 669.085536][T12750] CUSE: unknown device info "" [ 669.090461][T12750] CUSE: unknown device info "" [ 669.095491][T12750] CUSE: unknown device info "" [ 669.100467][T12750] CUSE: unknown device info "+" [ 669.106611][T12750] CUSE: unknown device info "‚" [ 669.111673][T12750] CUSE: unknown device info "" [ 669.116589][T12750] CUSE: zero length info key specified [ 669.332013][ T7667] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 670.333267][T12753] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1769'. [ 670.915324][ T25] block nbd1: Possible stuck request ffff8880281f7000: control (read@0,1024B). Runtime 330 seconds [ 670.926109][ T25] block nbd1: Possible stuck request ffff8880281f71c0: control (read@1024,1024B). Runtime 330 seconds [ 670.937332][ T25] block nbd1: Possible stuck request ffff8880281f7380: control (read@2048,1024B). Runtime 330 seconds [ 670.948724][ T25] block nbd1: Possible stuck request ffff8880281f7540: control (read@3072,1024B). Runtime 330 seconds [ 673.242748][ T1216] usb 4-1: USB disconnect, device number 47 [ 673.560139][ T5609] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 674.195428][T12799] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 674.196569][ T5609] usb 6-1: unable to get BOS descriptor or descriptor too short [ 674.210637][T12799] UDF-fs: Scanning with blocksize 512 failed [ 674.224400][T12799] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 674.232051][T12799] UDF-fs: Scanning with blocksize 1024 failed [ 674.243021][T12799] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 674.250601][T12799] UDF-fs: Scanning with blocksize 2048 failed [ 674.259979][T12799] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 674.273120][T12799] UDF-fs: Scanning with blocksize 4096 failed [ 674.322697][T12799] netlink: 'syz.1.1780': attribute type 2 has an invalid length. [ 674.330646][T12799] netlink: 'syz.1.1780': attribute type 2 has an invalid length. [ 674.907834][ T5609] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 674.918095][ T5609] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 675.083712][T12805] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1782'. [ 675.355565][ T5609] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 675.395899][ T5609] usb 6-1: config 129 has no interface number 0 [ 675.417008][ T5609] usb 6-1: config 129 has no interface number 1 [ 675.437249][ T5609] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 675.538454][ T5609] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 675.549636][ T5609] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 675.577122][ T5609] usb 6-1: config 129 interface 135 has no altsetting 0 [ 675.611530][ T5609] usb 6-1: config 129 interface 5 has no altsetting 0 [ 676.028618][ T5609] usb 6-1: string descriptor 0 read error: -22 [ 676.036245][ T5609] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 676.153567][ T5609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.210649][ T5609] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 676.229413][ T5609] usb 6-1: MIDIStreaming interface descriptor not found [ 676.673822][ T5609] usb 6-1: USB disconnect, device number 7 [ 679.121358][ T30] INFO: task syz.2.1335:11047 blocked for more than 143 seconds. [ 679.141820][ T30] Tainted: G L syzkaller #0 [ 679.174158][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.230536][ T30] task:syz.2.1335 state:D stack:28136 pid:11047 tgid:11046 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 679.415397][ T30] Call Trace: [ 679.426804][ T30] [ 679.435516][ T30] __schedule+0x10e9/0x6820 [ 679.450587][ T30] ? __pfx___schedule+0x10/0x10 [ 679.465770][ T30] ? find_held_lock+0x2b/0x80 [ 679.475343][ T30] ? schedule+0x2bf/0x390 [ 679.486643][ T30] schedule+0xdd/0x390 [ 679.497591][ T30] schedule_preempt_disabled+0x13/0x30 [ 679.511477][ T30] __mutex_lock+0xced/0x1b10 [ 679.523671][ T30] ? sync_bdevs+0x153/0x480 [ 679.534705][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 679.547679][ T30] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 679.561114][ T30] ? iput.part.0+0x1a0/0xf50 [ 679.571561][ T30] ? sync_bdevs+0x153/0x480 [ 679.580658][ T30] sync_bdevs+0x153/0x480 [ 679.591065][ T30] ksys_sync+0xb0/0xf0 [ 679.603071][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 679.615167][ T30] ? rcu_is_watching+0x12/0xc0 [ 679.624701][ T30] ? do_syscall_64+0x90/0xf80 [ 679.637641][ T30] __do_sys_sync+0xe/0x20 [ 679.649091][ T30] do_syscall_64+0x10b/0xf80 [ 679.659501][ T30] ? clear_bhb_loop+0x40/0x90 [ 679.673663][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.687708][ T30] RIP: 0033:0x7fa18d59cdd9 [ 679.701462][ T30] RSP: 002b:00007fa18e3c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 679.720029][ T30] RAX: ffffffffffffffda RBX: 00007fa18d815fa0 RCX: 00007fa18d59cdd9 [ 679.739640][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.758127][ T30] RBP: 00007fa18d815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 679.776244][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.797358][ T30] R13: 00007fa18d816038 R14: 00007fa18d815fa0 R15: 00007ffe290c40c8 [ 679.815688][ T30] [ 679.824778][ T30] [ 679.824778][ T30] Showing all locks held in the system: [ 679.845293][ T30] 1 lock held by khungtaskd/30: [ 679.856112][ T30] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 679.877712][ T30] 2 locks held by getty/5363: [ 679.887197][ T30] #0: ffff888038d560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 679.907062][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 679.917552][ T30] 1 lock held by udevd/5873: [ 679.922411][ T30] #0: ffff88802811e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 679.948233][ T30] 3 locks held by udevd/5889: [ 679.958740][ T30] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 679.969810][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2d69/0x6820 [ 679.978872][ T30] #2: ffff88807ac8bd50 (&ep->lock){....}-{3:3}, at: ep_poll_callback+0x80/0xbe0 [ 679.988466][ T30] 1 lock held by syz.2.1335/11047: [ 679.994263][ T30] #0: ffff88802811e350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 680.005072][ T30] 1 lock held by syz.1.1785/12814: [ 680.010242][ T30] 1 lock held by syz.3.1784/12833: [ 680.015837][ T30] #0: ffff88803074d8f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 680.026151][ T30] 2 locks held by syz.3.1784/12834: [ 680.031599][ T30] 2 locks held by dhcpcd/12835: [ 680.036575][ T30] #0: ffff888021ea8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 680.048704][ T30] #1: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 680.059677][ T30] [ 680.062483][ T30] ============================================= [ 680.062483][ T30] [ 680.071432][ T30] NMI backtrace for cpu 0 [ 680.071449][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 680.071478][ T30] Tainted: [L]=SOFTLOCKUP [ 680.071485][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.071497][ T30] Call Trace: [ 680.071504][ T30] [ 680.071512][ T30] dump_stack_lvl+0x100/0x190 [ 680.071542][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 680.071570][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 680.071598][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 680.071633][ T30] sys_info+0x141/0x190 [ 680.071659][ T30] watchdog+0xcb1/0x1030 [ 680.071697][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 680.071721][ T30] ? __pfx_watchdog+0x10/0x10 [ 680.071746][ T30] ? __kthread_parkme+0x18c/0x230 [ 680.071771][ T30] ? kthread+0x13a/0x450 [ 680.071795][ T30] ? __pfx_watchdog+0x10/0x10 [ 680.071816][ T30] kthread+0x370/0x450 [ 680.071840][ T30] ? __pfx_kthread+0x10/0x10 [ 680.071866][ T30] ret_from_fork+0x72b/0xd50 [ 680.071895][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 680.071923][ T30] ? __switch_to+0x800/0x1100 [ 680.071953][ T30] ? __pfx_kthread+0x10/0x10 [ 680.071979][ T30] ret_from_fork_asm+0x1a/0x30 [ 680.072026][ T30] [ 680.072034][ T30] Sending NMI from CPU 0 to CPUs 1: [ 680.208644][ C1] NMI backtrace for cpu 1 [ 680.208662][ C1] CPU: 1 UID: 0 PID: 12838 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 680.208687][ C1] Tainted: [L]=SOFTLOCKUP [ 680.208693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.208706][ C1] RIP: 0010:mas_wr_split+0x1545/0x3960 [ 680.208733][ C1] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 35 22 00 00 48 8b 04 24 48 8b 8c 24 c8 00 00 00 48 89 08 e9 91 f8 ff ff c6 ab 85 f6 4c 8d a3 a0 00 00 00 e9 08 f8 ff ff e8 b5 ab 85 f6 [ 680.208750][ C1] RSP: 0018:ffffc90003a46fc0 EFLAGS: 00000246 [ 680.208764][ C1] RAX: 0000000000000000 RBX: ffff888077fd9200 RCX: ffffffff8b82d80e [ 680.208776][ C1] RDX: 0000000000000003 RSI: 0000000000000004 RDI: ffff88806621ca00 [ 680.208787][ C1] RBP: ffffc90003a471d0 R08: 0000000000000005 R09: 0000000000000004 [ 680.208798][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 680.208808][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 680.208819][ C1] FS: 0000000000000000(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 680.208835][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.208846][ C1] CR2: 00007ff849abafe8 CR3: 000000007189b000 CR4: 00000000003526f0 [ 680.208858][ C1] Call Trace: [ 680.208863][ C1] [ 680.208884][ C1] ? __pfx_mas_wr_split+0x10/0x10 [ 680.208910][ C1] ? arch_stack_walk+0xa6/0xf0 [ 680.208942][ C1] ? stack_trace_save+0x8e/0xc0 [ 680.208972][ C1] ? lock_acquire+0x1b1/0x370 [ 680.208997][ C1] mas_wr_store_entry+0xd06/0x1e80 [ 680.209021][ C1] ? rcu_is_watching+0x12/0xc0 [ 680.209046][ C1] ? trace_ma_write+0x81/0x220 [ 680.209066][ C1] mas_store_prealloc+0x6df/0x1090 [ 680.209092][ C1] ? __pfx_mas_store_prealloc+0x10/0x10 [ 680.209119][ C1] ? __pfx___vma_start_write+0x10/0x10 [ 680.209142][ C1] ? vma_iter_store_overwrite+0x392/0x650 [ 680.209170][ C1] __mmap_region+0x181e/0x2da0 [ 680.209196][ C1] ? __pfx___mmap_region+0x10/0x10 [ 680.209233][ C1] ? mas_prev_slot+0x760/0x1d20 [ 680.209262][ C1] ? __pfx_mas_prev+0x10/0x10 [ 680.209290][ C1] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 680.209317][ C1] ? security_inode_getattr+0x116/0x280 [ 680.209362][ C1] mmap_region+0x35d/0x620 [ 680.209388][ C1] ? __pfx_mmap_region+0x10/0x10 [ 680.209413][ C1] ? thp_get_unmapped_area_vmflags+0x2cb/0x320 [ 680.209436][ C1] ? selinux_mmap_addr+0x2b/0x110 [ 680.209456][ C1] ? bpf_lsm_mmap_addr+0x9/0x30 [ 680.209472][ C1] ? security_mmap_addr+0x71/0x1e0 [ 680.209494][ C1] ? __get_unmapped_area+0x255/0x3e0 [ 680.209516][ C1] do_mmap+0xc63/0x12f0 [ 680.209537][ C1] ? __pfx_do_mmap+0x10/0x10 [ 680.209556][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 680.209582][ C1] vm_mmap_pgoff+0x29e/0x470 [ 680.209605][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 680.209624][ C1] ? __fget_files+0x215/0x3d0 [ 680.209648][ C1] ? __fget_files+0x21f/0x3d0 [ 680.209671][ C1] ksys_mmap_pgoff+0x3cb/0x610 [ 680.209692][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 680.209711][ C1] ? __pfx_ksys_read+0x10/0x10 [ 680.209732][ C1] __x64_sys_mmap+0x125/0x190 [ 680.209755][ C1] do_syscall_64+0x10b/0xf80 [ 680.209774][ C1] ? clear_bhb_loop+0x40/0x90 [ 680.209795][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.209812][ C1] RIP: 0033:0x7ff849d8c242 [ 680.209825][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 680.209842][ C1] RSP: 002b:00007ffc68bd0308 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 680.209857][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff849d8c242 [ 680.209869][ C1] RDX: 0000000000000001 RSI: 0000000000006050 RDI: 0000000000000000 [ 680.209883][ C1] RBP: 0000000000000802 R08: 0000000000000000 R09: 0000000000000000 [ 680.209894][ C1] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000 [ 680.209904][ C1] R13: 00007ff849d61050 R14: 00007ffc68bd0740 R15: 00000fff8d17a064 [ 680.209923][ C1] [ 680.614957][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 680.621803][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 680.632470][ T30] Tainted: [L]=SOFTLOCKUP [ 680.636768][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.646797][ T30] Call Trace: [ 680.650053][ T30] [ 680.652959][ T30] dump_stack_lvl+0x100/0x190 [ 680.657618][ T30] vpanic+0x552/0x970 [ 680.661578][ T30] ? __pfx_vpanic+0x10/0x10 [ 680.666059][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 680.672197][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 680.678336][ T30] panic+0xd1/0xe0 [ 680.682034][ T30] ? __pfx_panic+0x10/0x10 [ 680.686426][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 680.692558][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 680.698691][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 680.704822][ T30] ? watchdog.cold+0x1ec/0x234 [ 680.709590][ T30] ? watchdog+0xcc1/0x1030 [ 680.713994][ T30] watchdog.cold+0x1fd/0x234 [ 680.718569][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 680.724361][ T30] ? __pfx_watchdog+0x10/0x10 [ 680.729028][ T30] ? __kthread_parkme+0x18c/0x230 [ 680.734038][ T30] ? kthread+0x13a/0x450 [ 680.738264][ T30] ? __pfx_watchdog+0x10/0x10 [ 680.742924][ T30] kthread+0x370/0x450 [ 680.746977][ T30] ? __pfx_kthread+0x10/0x10 [ 680.751557][ T30] ret_from_fork+0x72b/0xd50 [ 680.756145][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 680.761243][ T30] ? __switch_to+0x800/0x1100 [ 680.765914][ T30] ? __pfx_kthread+0x10/0x10 [ 680.770491][ T30] ret_from_fork_asm+0x1a/0x30 [ 680.775260][ T30] [ 680.778754][ T30] Kernel Offset: disabled [ 680.783057][ T30] Rebooting in 86400 seconds..