last executing test programs: 1m26.424407457s ago: executing program 4 (id=1031): mq_getsetattr(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4, 0x5, 0x8}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x1) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) 1m22.008192487s ago: executing program 4 (id=1047): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8c2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_getscheduler(r2) r3 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r3, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="000e06"], 0x0}, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 1m15.600590426s ago: executing program 4 (id=1066): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0xc0844123, &(0x7f00000001c0)) close_range(r0, 0xffffffffffffffff, 0x2000000) 1m15.396612698s ago: executing program 4 (id=1069): r0 = socket(0x2a, 0x1, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000480), 0x800) ppoll(&(0x7f0000000500)=[{r1, 0x40c}, {0xffffffffffffffff, 0x80}, {r2, 0x220}, {r0, 0x90}], 0x4, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x1000]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x602, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5a38ac4b073be915d0eaa1a43e6f0cb523625603fdaacf65d7347c5f4aada7f5eb68058e618ec47ea118b590da0453fa33b8b5b0f5ad2e3ee9681a9ad1", @ANYRES16=r5, @ANYBLOB="000425bd7000fddbdf25050000000800090005000000f6713e4e8d699208000900c300000008"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x7, 0x204180) splice(r8, &(0x7f0000000400)=0x8000000000000000, r0, &(0x7f0000000440)=0x8, 0x800, 0x8) 1m14.454204496s ago: executing program 4 (id=1072): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) 1m13.404538776s ago: executing program 4 (id=1076): pipe2$watch_queue(0x0, 0x80) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@ieee802154, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000480)=""/237, 0xed}], 0x4}, 0x40002002) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x80082102, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) write$tun(r3, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) fchdir(r5) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 58.231937276s ago: executing program 32 (id=1076): pipe2$watch_queue(0x0, 0x80) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@ieee802154, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000480)=""/237, 0xed}], 0x4}, 0x40002002) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x80082102, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) write$tun(r3, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) fchdir(r5) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 16.559683865s ago: executing program 0 (id=1203): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000407d1eed2c40000102030109022d000101ff500909040002010301020409210500770122b10f09058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000008c0)="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", 0x8d7) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000886c020000"], 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) socket$netlink(0x10, 0x3, 0x14) 12.118709426s ago: executing program 5 (id=1216): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}, @TCA_U32_POLICE={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delqdisc={0x24, 0x25, 0x10, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe}, {0xfff3, 0x1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24054040}, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x18, r8, 0xb00, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xc014) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x439, 0x10000000, 0x800002, {0x0, 0x0, 0x0, r7, 0x69801}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bind$inet(r6, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x15}, @remote}}}], 0x20}}], 0x1, 0x4000800) 11.490934816s ago: executing program 0 (id=1219): r0 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) syz_io_uring_setup(0x30da, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = eventfd2(0xfffffffc, 0x0) io_setup(0x89b, &(0x7f0000000500)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000001dc0)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x0, 0x0, 0x4, 0x0, 0x3, r1}]) accept4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x11}], 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x890}, 0x0) 11.433152871s ago: executing program 5 (id=1220): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dy']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x7fffffe, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) r5 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create1(0x80000) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000140)={0xe000001b}) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) chdir(&(0x7f0000000000)='./file0\x00') write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) read$FUSE(r1, &(0x7f0000004a00)={0x2020}, 0x2020) 10.888648759s ago: executing program 0 (id=1221): mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x210818, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) syz_io_uring_setup(0xf05, &(0x7f0000000080)={0x0, 0xb49c, 0x1, 0x83, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) 9.369618499s ago: executing program 3 (id=1223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000f40)={r3, &(0x7f0000000300), 0x0}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) read$msr(r0, &(0x7f0000000300)=""/211, 0xd3) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 8.838930122s ago: executing program 2 (id=1225): r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000000004000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf0dd467b592f868ee30ad5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e4fd8f36e15fdd97870f2bdf4000000000000b0c2940dd8e263aa743f0400000000000000b100400600e1ffff8816326d7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b1cbf698fce63a4fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ff6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33600000bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed3fb58c81b76100aeaa4619668a2c4ef4e159d4594396864965422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693cf61c2ae0a9c27bd1a6f1e72550fbb1f1543a9bcd48de44e837db44e2be1c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7105e2378d42eb22e035a88305f8342834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0600968fce3c425729a77e3d089356654680e715f4ce5c1a39e4a63d8a67d6dbe1d3c26affdb25cbe15923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be411b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a753bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967a60efb51c206ea0cbab9bef181cc917fca894189514e85d6e1d9249f8caa701b4357ae5b9117225d1f5ca89a4bb7d49086ea61948926db5132f2e29bf45a1429c19ba1adc457e2963d1474d85aeb3cca158e3fd4b7a05250ceafd44f46af924916ce9ce9a8881aad996ddaaf3fbd52e636367e9f90ab1c773fa96e538e7f87a21206a804524e1dc9fea9772b009bc49a8d787a90e78badf58e37b3cf6f64861d416e859994e4deca6f39551e73c7e332de66be92ecb94e63ecbc07f8f799536be0da90fa824b3f4965caa19b5556907746aec5db9fea5e5e69de3bd13a70c1374683a0e63ff6f6f51136d16e04bbd8ba0c96e0b562f5425614d80de6ba5e901587bb5c1f83382aab6efcccef90fdbebcc4ffed3af40365583fb800cf5ec6496a2a47f2217c7160f88b192ddec89558140447ec86726db3bfe9d22390085b1638f9ebf3219b426dcb69ff80f5b5be82803555c8421c17c9d39f9c1de9e8e7dedf826b00fd8860046e36f790e8e6796db3b778ff4f0fc2b79a5ca96ff3907452ed76bc5e63218ea96866ae2b265ab11206301bfb909a7fd77653c73b6d46a242864f839e5646cc5ada07fba0d9cf6f840179c34de5e9aa58d5b1ca5327dc945267524b8c363b7f847491b5939cf608927c797af1300"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0002, 0xf0, 0xffffff87, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000280)="8c", 0x1}], 0x1) 8.836609888s ago: executing program 3 (id=1226): futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) 8.659560746s ago: executing program 5 (id=1227): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYBLOB="280200001900010028bd7000fbdbdf251d0109005000"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) 8.658376465s ago: executing program 3 (id=1228): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x15, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000f80)=' ', 0x1}], 0x1, 0x2, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 7.604337204s ago: executing program 1 (id=1229): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000407d1eed2c40000102030109022d000101ff500909040002010301020409210500770122b10f09058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000008c0)="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", 0x8d7) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000886c020000"], 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) socket$netlink(0x10, 0x3, 0x14) 7.568594303s ago: executing program 0 (id=1230): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8000008, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x5f889000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0xd9dd025e9cd3215b, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x56, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') close(r2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000300)={'dt2817\x00', [0x0, 0x5, 0x0, 0x3b, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x1, 0x1, 0x104, 0x3, 0xffff, 0x100006, 0x5, 0x7, 0x830, 0x7, 0x10000, 0x9, 0x1800, 0xe2df, 0xffffffff, 0x80000001, 0x7, 0x3, 0x4, 0x81, 0x460f, 0xd]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x4028805) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_open_dev$evdev(0x0, 0x2, 0x40040) unshare(0x62000280) 7.437060465s ago: executing program 3 (id=1231): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe", 0x1a}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="021504060200000025bd700000dcdf25861e8e5982fc13cd6edd703ad69b8a2e66e203b36a8f0c7b5305af7a48dd3766a61c6d5f37ac185b6af029f4bf9cc4f9b1c8a8a89cd4b41c0dd9e321902a3d40"], 0x10}}, 0x4001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f00000006c0)={0x0, [{0x3, 0x2a8, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc17"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) fchmod(0xffffffffffffffff, 0x134) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x7, 0x0, 0xb4, 0x7da4}, {0x3, 0x5, 0x0, 0x5}, {0xb0f, 0x5, 0xf8, 0x7}, {0x0, 0x4, 0x9, 0x9}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000101010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x5, @vbi={0x0, 0xfff, 0x9, 0x3432564e, [0x2e, 0x4], [0x4, 0x5], 0x1}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000240)=0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000005400e5002abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESDEC=r7, @ANYBLOB], 0x38}}, 0xc4c4) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000400)=""/117) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100ad3fd2f384662600000000406d049cc2000000000001090224000100000921fdff08012224000905810340000c03fb00"/61], 0x0) 7.256902697s ago: executing program 5 (id=1232): ioperm(0x1, 0x9, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = fsopen(&(0x7f00000004c0)='befs\x00', 0x0) syz_usb_connect(0x5, 0x48, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0xdd, 0xcc, 0x19, 0x40, 0x93a, 0x10e, 0x91f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x6, 0x4, 0x40, 0x1}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x200, 0x5, 0x6a, 0x4, 0x40, 0x36}, 0x1b, &(0x7f0000000ec0)={0x5, 0xf, 0x1b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x463f5590ef383142, 0x8, 0x6, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x0, 0xf000, 0x2}, @ptm_cap={0x3}]}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @void, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x800) close_range(r0, r2, 0x0) 6.501400513s ago: executing program 2 (id=1233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000100)={0x2, 0x2fe, 0x0, {0x0, 0x2ff, 0xe7, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200008d1600000000000004000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff85000000170000009500000000000000c756c17ebcdb3909bf8a07f73fb69c44b6004a8ab9a32e917534be5ead00721577af4c8e0fee05e2bc5f448fba609dd4ba89c9cabfc4c0a61593abd099c8ad062f18b28192a3da8233136290ce86a5c1ff0e3574993da1877abd4c0b70813541eaf607862b8451ec83b3da3469b99dfeaad985dfbd25692b480669ecd0139a2fe320888d7fc138eb9ba5ef106ba610"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000400000008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803d420f09ee2d22d3907"], 0x0) r5 = socket(0x8, 0x800, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="0167b2bc4930cbe9c83c8f02f601", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 6.034644583s ago: executing program 5 (id=1234): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2275, &(0x7f00000018c0)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) landlock_create_ruleset(&(0x7f0000000480)={0x400, 0x0, 0x2}, 0x18, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) writev(r3, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707", 0x4f) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000280)={{0x1, 0x0, 0x5, 0xb, 0x24d7}, [{0x5, 0x8, 0x0, 0x8}, {0xc786, 0xe4, 0x4, 0x4}, {0x81, 0x6, 0x1}, {0x2, 0x2, 0xd, 0x49}, {0x6d, 0x4, 0xa, 0x6}, {0x1, 0x4, 0x5, 0x8}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) 4.510711202s ago: executing program 1 (id=1235): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x20b6, &(0x7f0000000040)={0x0, 0x4648, 0x1f400, 0x8, 0xc2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x130, 0x24, 0xd83, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x6, 0x5e, 0x10000, 0x2, 0x1, 0x1000, 0x5}}, {0xe, 0x2, [0x1, 0x3, 0x0, 0xe5, 0x800]}}, {{0x1c, 0x1, {0x3d, 0x5, 0x7, 0x2, 0x2, 0x5, 0xffff, 0x4}}, {0xc, 0x2, [0x7, 0x8, 0x8, 0x7]}}, {{0x1c, 0x1, {0x4, 0x9, 0x401, 0x4, 0x2, 0xfffffff9, 0x5d, 0x9}}, {0x16, 0x2, [0x8cea, 0x0, 0x1000, 0x9, 0x3, 0xe, 0x1, 0x19, 0x3]}}, {{0x1c, 0x1, {0x8, 0x26, 0x2a5b, 0x2, 0x1, 0x4, 0x7ff, 0xa}}, {0x18, 0x2, [0x7, 0x2, 0xf, 0x36, 0x1d5, 0x101, 0x3, 0x1ff, 0x7, 0xd5]}}, {{0x1c, 0x1, {0x9, 0x1, 0x0, 0x409, 0x1, 0x2, 0x7, 0x1}}, {0x6, 0x2, [0x3035]}}, {{0x1c, 0x1, {0x7, 0x6, 0x3c, 0x2, 0x1, 0x5, 0x6, 0x4}}, {0xc, 0x2, [0x4, 0x0, 0xfff2, 0x3]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4.46236115s ago: executing program 0 (id=1236): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x2b, 0x80801, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) 3.419507355s ago: executing program 1 (id=1237): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000f40)={r3, &(0x7f0000000300), 0x0}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) read$msr(r0, &(0x7f0000000300)=""/211, 0xd3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0xc0002003}) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000480)={0x9c0000, 0x1c, 0x1, r9, 0x0, &(0x7f0000000440)={0x980914, 0x5e9, '\x00', @p_u8=&(0x7f0000000280)=0x62}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) 2.884146826s ago: executing program 2 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x9, 0x80000000000006) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/154, 0x9a, 0xe4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f0000000200)=0x80000001, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8, 0x5}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2.867998636s ago: executing program 5 (id=1239): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0xcd, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 2.639186608s ago: executing program 3 (id=1240): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_INFO(0x0, 0xe, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000740)={{r0}, "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"}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r5) ptrace(0x10, 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd, 0x1800}, {0x1, 0xffc0, 0x1000}], 0x2) read$FUSE(r6, &(0x7f00000027c0)={0x2020}, 0x5ae) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000786c6c2500000000002020207b1a00fe00000000bfa101000000010027010000f8ffffffb702000008000000b703000003000000850000004300000095"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x3c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff54, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000080)={0x1, 0x20, 0x2, 0xd, 0x40, 0xfffffcd8, 0x40, 0x54, 0x20, 0x2, 0x61, 0xffffffff, 0x0, 0x37, 0x0}) 565.751588ms ago: executing program 1 (id=1241): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x15, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000f80)=' ', 0x1}], 0x1, 0x2, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 456.71753ms ago: executing program 2 (id=1242): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 340.461075ms ago: executing program 3 (id=1243): r0 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x3, 0xfffff00c}, {0x6, 0x0, 0x0, 0x590}, {0x2, 0x2, 0x2, 0x10}, {0x81a4, 0x5f, 0x3, 0x2}]}, 0x10) syz_open_procfs$namespace(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) socket(0x1, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) 277.027584ms ago: executing program 2 (id=1244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0140fdfffffffdffffff1d000000080003b0c0c329ede700", @ANYRES32=r2, @ANYBLOB="44002f8008000100030000000c0002000203aaaaaaaaaaaa2c00038020000380080002000300000006000100010000000c0004000203aaaaaaaaaaaa0800010000000000"], 0x60}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0140fdfffffffdffffff1d000000080003b0c0c329ede700", @ANYRES32=r2, @ANYBLOB="44002f8008000100030000000c0002000203aaaaaaaaaaaa2c00038020000380080002000300000006000100010000000c0004000203aaaaaaaaaaaa0800010000000000"], 0x60}}, 0x0) (async) 172.833964ms ago: executing program 2 (id=1245): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000407d1eed2c40000102030109022d000101ff500909040002010301020409210500770122b10f09058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000008c0)="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", 0x8d7) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000886c020000"], 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) socket$netlink(0x10, 0x3, 0x14) 149.618086ms ago: executing program 1 (id=1246): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = socket$packet(0x11, 0x2, 0x300) r4 = semget$private(0x0, 0x4000000009, 0x0) semtimedop(r4, &(0x7f0000000000)=[{0x4, 0xffff}], 0x1, &(0x7f0000000040)) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000280)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x115) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r7, &(0x7f0000000680)=""/4067, 0xfe3) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000080)={0x0}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) 118.60294ms ago: executing program 0 (id=1247): r0 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x5}) write(r0, &(0x7f0000000480)="2700000014800707030e003dc0bf5b478142dac0d40fad9e00120f7e5500e4210a5f76009d2fb112ff00000000a1151f750800398874f4ba5db794fd5b29838496ee872a3c59be1c04d557c7e9d59ecd02da0926e42455b882bf816fabcac593160000000000", 0x66) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x3f, 0x0, 0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000fc0)=[{{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000005c0)="fdc6ee13922a3423f159", 0xa}, {&(0x7f0000000680)="3a7128fc2533ff304c5b6fe0ae3c10eaf5c1c77d8bac67e9d11055ae2e13358d44678ae43fa1c8d15f4a0cacc2ff743b6c5757ae9dfe42d563904b04da3350ef172697cb2659948841b5ee85be2640c6009146dda491d4231cfdbf176eea25cf663554f428df481679eba28af8dc7f0fb03cb38b8ef17d8a95", 0x79}, {&(0x7f0000000780)="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"/289, 0x121}, {&(0x7f0000001840)="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", 0x10a9}], 0x4, 0x0, 0x0, 0x44000000}}, {{&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002cc0), 0x0, 0x0, 0x0, 0x24040851}}, {{&(0x7f0000000700)=@abs={0x3, 0x0, 0x4e24}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000008c0)="39301c6314300ff5ce2fe235afb8b96fbccb17ddc2c31132a26d5ad77b37fadee532f183daafc3e51e4dfd7b26d9e60c03ca5425ad5f2313cb09aa7ceb272af07bbf0df1d6400c805793fcdc7eb242f59c9dc44e48fb89016e6659e818dcc358bab1c2bfb11f0109abe6238b04dcc33b739b9866987977cdda64d3d203848721785fbe0f5abb4838a2bff42cfdfd81535540384f38c10b18b5cff7aed22d18ecb79186f326ea35f2ee4c4c5ebb0175ae0fa25b06f7c3135360b5969cc92f5cc2c548ba2f25821c26a8152f2c6e97af9f216322cbe66f0ab24d3c0ab60b62c3db3a36e86936cb9a797ed14460b28456353eb8481605", 0xf5}, {&(0x7f00000009c0)="f3bba1f0a89dad28c6aa933706b8e8c3919df92c217f805440c800a36fb142a5eb903323f7930356443edde499c490660c096f88079ec0aab0566454247e0dfb32f441e4650063b4dc4a1d547a584a277e7ac60aeffbedb869c0a8681657ab2f3f0b36ea70359177b380cc2ca2f25974a8c36051af5b47d301c4b1161639ce73e2d3fc7f9679", 0x86}, {&(0x7f0000000a80)="463e99f7a2a013f0581931a2646855010d4338d5", 0x14}, {&(0x7f0000000ac0)="b926d5abf18169c4a941ea48e9a8e43fc2", 0x11}, {&(0x7f0000000b00)="319110072da943723ffb2ddc655ed88f40e6ac23bdac8486ddf04dcce9f7373a03be", 0x22}, {&(0x7f0000000b40)="cffeadb8e03daf638077558d1f1117f9789e974489d1f4be0efb5e83bec82637c5d90047b9876366787ef7f339fcf441e777a8f589d449611259fe6fa160fb847f99422ebab5b6eaa769be6fdacd8ad0e37ca7b8bb2ac4768dc0dc29bdf73d0f1d72bbfb185f1a2ec9ec5ba5cc7714cd34d1fd203c696ebebaca1d7aa75827ebd4c9fae8cfe181fe527d3fbb22f027e98623bd98", 0x94}, {&(0x7f0000000c00)="5f2141e5a22aa44d43ca5d8ff0b324fbe1029bdb89a9392d05f2478bc6da1eedc1e04e22597d850e34696becf91bb56c1d9ad50459cc54e3140efe1978e2ca76a4b503545d347705626e8f324372aa52a51b3a28fff5e9cab9f068f5914004d9c288e9dd6c032120be55131d0054be2831bdca3abf8ae0edcd52", 0x7a}, {&(0x7f0000000c80)="0019e06e57ac74520e72675732c8d75950a186c3b6bdce8b9bab7fb7beb9ffea7dab75b0b2d73af868e70c979ced6f6c08dd34fef8af222ecc6425433eafbec44be05ecc1ad4d8561e79efeef2ae6217c26e78018044cb3fed993174f887a8869692ddec72299fe0", 0x68}, {&(0x7f0000000d00)="cc154bd640cac25c295fab72ba28d01ed17e0ccfb2d193721ef77f9ebe3b7731f0ea2a936edbcb370b93453879a681e98c20aff753801a3105518aa3794a54ea8369466c09d3d551e203c5b422bc32625851bde645434233e6e3a5c5ff4785bea4bd77157124120a82daa0738aeeab2a852f9b31249ce65216066ce98346c8ea8e6a067f2e60b4e7acbf078057766d3667fdee0ac0a168af804aee6c9f27e0e1fb108bb5a28712d30644039ef6bbd31ca8417ab17f", 0xb5}], 0x9, &(0x7f0000000e80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000023549d6ac03b8967877d1a87b6ee788cc647146c92e2e7f79f42c5cb706ed670e39106fedbab10b29b48faf2ad2f6ff15f211e546767a87242930bac213f5c7ae31d37224ca5b626c44186632360e7f06e6e44c87a103bbd9e712cc3c0439e2e3ceff5e3be8be54998c8"], 0x48, 0x800}}], 0x3, 0xd0) r7 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x187002) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000240)={0x9e, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x21400d, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,ss=0x0000000000000000,\x00']) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) 0s ago: executing program 1 (id=1248): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x0, {0x80000000, 0x2d05, "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", 0x3, 0x6, 0x10, 0x1, 0xd1, 0x0, 0x9, 0x1}, r1}}, 0x128) r2 = inotify_init() r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4e2e81, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000900)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r8, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x50, r9, 0x20c, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '{['}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004045}, 0x41df51b3a1eec310) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={0x5, 0x2, 0xfff, 0x0, '\x00', 0x6}) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x800) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c848) syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x4532, 0x10100, 0xfffffffd, 0x24c}, &(0x7f0000000680), 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x44000080, &(0x7f00000004c0), &(0x7f0000000300), &(0x7f0000000380), {0x34}, &(0x7f00000006c0)=""/54, 0x36, &(0x7f0000000700)=""/142, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x82) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f0000002380)={0x2020}, 0x48) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ocket:[21375]" dev="sockfs" ino=21375 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.389802][ T8466] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 284.815050][ T991] usb read operation failed. (-71) [ 284.895914][ T991] usb write operation failed. (-71) [ 285.063910][ T991] usb write operation failed. (-71) [ 285.128184][ T991] usb write operation failed. (-71) [ 285.179128][ T991] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 286.078434][ T1218] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 286.477308][ T1218] usb 4-1: Using ep0 maxpacket: 16 [ 286.518405][ T1218] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.539303][ T1218] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.570916][ T1218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.718522][ T1218] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 286.820989][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.887095][ T1218] usb 4-1: config 0 descriptor?? [ 287.707155][ T30] audit: type=1400 audit(2000000142.120:854): avc: denied { bind } for pid=8500 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 287.738365][ T30] audit: type=1400 audit(2000000142.120:855): avc: denied { name_bind } for pid=8500 comm="syz.4.688" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 287.759491][ T30] audit: type=1400 audit(2000000142.120:856): avc: denied { node_bind } for pid=8500 comm="syz.4.688" saddr=2001::2 src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 287.896926][ T30] audit: type=1400 audit(2000000142.310:857): avc: denied { ioctl } for pid=8503 comm="syz.0.690" path="socket:[22595]" dev="sockfs" ino=22595 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 288.127760][ T8509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 289.079891][ T1218] usbhid 4-1:0.0: can't add hid device: -71 [ 289.420137][ T1218] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 289.432786][ T1218] usb 4-1: USB disconnect, device number 14 [ 289.490374][ T30] audit: type=1326 audit(2000000143.910:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8510 comm="syz.3.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52bb9ce59 code=0x0 [ 290.218350][ T8527] Bluetooth: MGMT ver 1.23 [ 290.321624][ T30] audit: type=1400 audit(2000000144.740:859): avc: denied { write } for pid=8533 comm="syz.0.698" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 290.590601][ T8535] block device autoloading is deprecated and will be removed. [ 291.848316][ T804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 292.058775][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 292.080850][ T804] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.111432][ T804] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.146136][ T804] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.163940][ T804] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 292.175773][ T5750] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 292.204495][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.235821][ T804] usb 1-1: config 0 descriptor?? [ 292.367504][ T5750] usb 5-1: config 127 has an invalid interface number: 84 but max is 0 [ 292.387965][ T5750] usb 5-1: config 127 has no interface number 0 [ 292.412437][ T5750] usb 5-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 292.440148][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.463116][ T5750] usb 5-1: Product: syz [ 292.505599][ T5750] usb 5-1: Manufacturer: syz [ 292.527924][ T5750] usb 5-1: SerialNumber: syz [ 293.284498][ T5750] gspca_main: spca501-2.14.0 probing 040a:0002 [ 293.307969][ T5750] gspca_spca501: reg write: error -71 [ 293.323167][ T5750] spca501 5-1:127.84: Reg write failed for 0x00,0xaa,0x00 [ 293.343013][ T5750] spca501 5-1:127.84: probe with driver spca501 failed with error -22 [ 293.369733][ T5750] usb 5-1: USB disconnect, device number 18 [ 293.992580][ T804] usbhid 1-1:0.0: can't add hid device: -71 [ 294.013649][ T804] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 294.073796][ T30] audit: type=1400 audit(2000000148.490:860): avc: denied { append } for pid=8587 comm="syz.0.711" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 294.108338][ T804] usb 1-1: USB disconnect, device number 8 [ 294.534064][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.714'. [ 294.758119][ T804] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 294.939082][ T804] usb 5-1: Using ep0 maxpacket: 16 [ 294.957799][ T804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.968647][ T804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.983073][ T804] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.994671][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.003742][ T804] usb 5-1: Product: syz [ 295.008300][ T804] usb 5-1: Manufacturer: syz [ 295.013042][ T804] usb 5-1: SerialNumber: syz [ 295.023127][ T804] usb 5-1: 0:2 : does not exist [ 295.031465][ T804] usb 5-1: unit 9 not found! [ 295.085863][ T30] audit: type=1400 audit(2000000149.500:861): avc: denied { create } for pid=8602 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.147946][ T30] audit: type=1400 audit(2000000149.500:862): avc: denied { setopt } for pid=8602 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.209394][ T30] audit: type=1400 audit(2000000149.500:863): avc: denied { read } for pid=8602 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.235147][ T5750] usb 5-1: USB disconnect, device number 19 [ 295.301928][ T30] audit: type=1400 audit(2000000149.670:864): avc: denied { write } for pid=8602 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.307705][ T30] audit: type=1400 audit(2000000150.720:865): avc: denied { read } for pid=8616 comm="syz.1.719" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 296.595783][ T30] audit: type=1400 audit(2000000150.720:866): avc: denied { open } for pid=8616 comm="syz.1.719" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 296.632161][ T8614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.797612][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 296.858866][ T5713] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 297.104024][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 297.116799][ T5713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.230640][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.250078][ T5713] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 297.259504][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.267642][ T5713] usb 5-1: Product: syz [ 297.271975][ T5713] usb 5-1: Manufacturer: syz [ 297.276610][ T5713] usb 5-1: SerialNumber: syz [ 297.288469][ T5713] usb 5-1: selecting invalid altsetting 1 [ 297.294899][ T5713] usb 5-1: unit 6 not found! [ 297.400013][ T8632] fuse: Unknown parameter './file0' [ 297.459992][ T5750] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 297.638201][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 297.648224][ T5750] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.660051][ T5750] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.670259][ T5750] usb 4-1: config 0 interface 0 has no altsetting 0 [ 297.677468][ T5750] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 297.687483][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.750601][ T5750] usb 4-1: config 0 descriptor?? [ 299.597604][ T5713] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 299.835998][ T8655] FAULT_INJECTION: forcing a failure. [ 299.835998][ T8655] name failslab, interval 1, probability 0, space 0, times 0 [ 299.851274][ T8655] CPU: 1 UID: 0 PID: 8655 Comm: syz.4.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.851304][ T8655] Tainted: [L]=SOFTLOCKUP [ 299.851310][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.851319][ T8655] Call Trace: [ 299.851324][ T8655] [ 299.851329][ T8655] dump_stack_lvl+0x100/0x190 [ 299.851353][ T8655] should_fail_ex.cold+0x5/0xa [ 299.851373][ T8655] ? tomoyo_realpath_from_path+0xb6/0x690 [ 299.851393][ T8655] should_failslab+0xc2/0x120 [ 299.851409][ T8655] __kmalloc_noprof+0xe0/0x850 [ 299.851429][ T8655] ? kfree+0x1dd/0x6c0 [ 299.851451][ T8655] tomoyo_realpath_from_path+0xb6/0x690 [ 299.851475][ T8655] tomoyo_mount_acl+0x1b6/0x8b0 [ 299.851492][ T8655] ? is_bpf_text_address+0x8a/0x1a0 [ 299.851511][ T8655] ? bpf_ksym_find+0x128/0x1c0 [ 299.851531][ T8655] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.851558][ T8655] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 299.851575][ T8655] ? kernel_text_address+0x8d/0x100 [ 299.851595][ T8655] ? unwind_get_return_address+0x59/0xa0 [ 299.851636][ T8655] ? tomoyo_domain+0xb2/0x150 [ 299.851656][ T8655] ? tomoyo_profile+0x47/0x60 [ 299.851678][ T8655] tomoyo_mount_permission+0x214/0x460 [ 299.851696][ T8655] ? tomoyo_mount_permission+0x1f6/0x460 [ 299.851716][ T8655] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 299.851746][ T8655] security_sb_mount+0xdd/0x270 [ 299.851764][ T8655] path_mount+0x158/0x23d0 [ 299.851789][ T8655] ? __pfx_path_mount+0x10/0x10 [ 299.851807][ T8655] ? lockdep_hardirqs_on+0x78/0x100 [ 299.851829][ T8655] ? putname+0xb1/0x110 [ 299.851846][ T8655] ? kmem_cache_free+0x127/0x6c0 [ 299.851871][ T8655] ? __x64_sys_mount+0x293/0x310 [ 299.851890][ T8655] __x64_sys_mount+0x293/0x310 [ 299.851911][ T8655] ? __pfx___x64_sys_mount+0x10/0x10 [ 299.851933][ T8655] ? rcu_is_watching+0x12/0xc0 [ 299.851957][ T8655] do_syscall_64+0x10b/0xf80 [ 299.851974][ T8655] ? clear_bhb_loop+0x40/0x90 [ 299.851992][ T8655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.852006][ T8655] RIP: 0033:0x7f5bf5b9ce59 [ 299.852018][ T8655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.852031][ T8655] RSP: 002b:00007f5bf3df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.852046][ T8655] RAX: ffffffffffffffda RBX: 00007f5bf5e15fa0 RCX: 00007f5bf5b9ce59 [ 299.852055][ T8655] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 299.852063][ T8655] RBP: 00007f5bf3df6090 R08: 0000200000000100 R09: 0000000000000000 [ 299.852071][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.852079][ T8655] R13: 00007f5bf5e16038 R14: 00007f5bf5e15fa0 R15: 00007ffddf84b5c8 [ 299.852098][ T8655] [ 299.852899][ T8655] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.901532][ T8654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.169212][ T5713] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 300.187256][ T5713] usb 5-1: USB disconnect, device number 20 [ 300.199535][ T5750] usbhid 4-1:0.0: can't add hid device: -71 [ 300.221966][ T5750] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 300.236447][ T8657] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 300.255456][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.403437][ T5750] usb 4-1: USB disconnect, device number 15 [ 300.528956][ T8654] bond1 (unregistering): Released all slaves [ 300.538914][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 300.549615][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 300.668092][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 300.818134][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 300.827631][ T10] usb 5-1: config 3 has an invalid interface number: 144 but max is 0 [ 300.836462][ T10] usb 5-1: config 3 has no interface number 0 [ 300.844029][ T10] usb 5-1: config 3 interface 144 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 300.856302][ T8669] netlink: 284 bytes leftover after parsing attributes in process `syz.0.733'. [ 300.865711][ T10] usb 5-1: config 3 interface 144 has no altsetting 0 [ 300.982891][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=c811, bcdDevice=41.dd [ 300.992199][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.000310][ T10] usb 5-1: Product: syz [ 301.004797][ T10] usb 5-1: Manufacturer: Ð [ 301.009396][ T10] usb 5-1: SerialNumber: syz [ 301.237975][ T10] ftdi_sio 5-1:3.144: FTDI USB Serial Device converter detected [ 301.252727][ T10] ftdi_sio ttyUSB0: unknown device type: 0x41dd [ 301.265829][ T10] usb 5-1: USB disconnect, device number 21 [ 301.295736][ T10] ftdi_sio 5-1:3.144: device disconnected [ 301.351738][ T8675] fuse: Unknown parameter './file0' [ 301.753914][ T8682] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 304.688280][ T8705] netlink: 48 bytes leftover after parsing attributes in process `syz.4.746'. [ 304.851039][ T8709] syzkaller0: entered promiscuous mode [ 304.856536][ T8709] syzkaller0: entered allmulticast mode [ 304.889273][ T8709] tipc: Enabled bearer , priority 0 [ 304.905280][ T8709] tipc: Resetting bearer [ 304.920301][ T8709] tipc: Disabling bearer [ 305.115666][ T8715] FAULT_INJECTION: forcing a failure. [ 305.115666][ T8715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.134670][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.0.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.134700][ T8715] Tainted: [L]=SOFTLOCKUP [ 305.134707][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.134717][ T8715] Call Trace: [ 305.134722][ T8715] [ 305.134730][ T8715] dump_stack_lvl+0x100/0x190 [ 305.134757][ T8715] should_fail_ex.cold+0x5/0xa [ 305.134779][ T8715] ? __might_fault+0x111/0x140 [ 305.134807][ T8715] _copy_to_iter+0x5a4/0x1720 [ 305.134843][ T8715] ? __pfx__copy_to_iter+0x10/0x10 [ 305.134869][ T8715] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 305.134897][ T8715] seq_read_iter+0x691/0x1270 [ 305.134917][ T8715] ? __pfx__kstrtoull+0x10/0x10 [ 305.134945][ T8715] seq_read+0x33b/0x4c0 [ 305.134967][ T8715] ? __pfx_seq_read+0x10/0x10 [ 305.134987][ T8715] ? iovec_from_user+0xda/0x140 [ 305.135016][ T8715] ? __import_iovec+0x1d2/0x640 [ 305.135040][ T8715] ? avc_policy_seqno+0x9/0x20 [ 305.135055][ T8715] ? selinux_file_permission+0x8f/0x6d0 [ 305.135084][ T8715] ? rw_verify_area+0xce/0x6d0 [ 305.135100][ T8715] ? __pfx_seq_read+0x10/0x10 [ 305.135119][ T8715] vfs_readv+0x5d8/0x8d0 [ 305.135143][ T8715] ? __pfx_vfs_readv+0x10/0x10 [ 305.135162][ T8715] ? find_held_lock+0x2b/0x80 [ 305.135194][ T8715] ? __fget_files+0x21f/0x3d0 [ 305.135223][ T8715] ? do_preadv+0x1ac/0x270 [ 305.135239][ T8715] do_preadv+0x1ac/0x270 [ 305.135264][ T8715] ? __pfx_do_preadv+0x10/0x10 [ 305.135284][ T8715] ? rcu_is_watching+0x12/0xc0 [ 305.135314][ T8715] do_syscall_64+0x10b/0xf80 [ 305.135337][ T8715] ? clear_bhb_loop+0x40/0x90 [ 305.135359][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.135377][ T8715] RIP: 0033:0x7fd5bd79ce59 [ 305.135393][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.135410][ T8715] RSP: 002b:00007fd5bb9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 305.135428][ T8715] RAX: ffffffffffffffda RBX: 00007fd5bda16090 RCX: 00007fd5bd79ce59 [ 305.135440][ T8715] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000004 [ 305.135450][ T8715] RBP: 00007fd5bb9f6090 R08: 00000000fffffffd R09: 0000000000000000 [ 305.135461][ T8715] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 305.135471][ T8715] R13: 00007fd5bda16128 R14: 00007fd5bda16090 R15: 00007ffec19b67d8 [ 305.135495][ T8715] [ 306.080705][ T8720] fuse: Unknown parameter './file0' [ 306.092562][ T8722] netlink: 'syz.4.753': attribute type 11 has an invalid length. [ 306.118737][ T8722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.753'. [ 306.250317][ T30] audit: type=1400 audit(2000000160.670:867): avc: denied { setopt } for pid=8724 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 307.243586][ T5832] Bluetooth: hci5: Frame reassembly failed (-84) [ 307.592986][ T8745] loop5: detected capacity change from 0 to 8 [ 307.660698][ T5856] blk_print_req_error: 138 callbacks suppressed [ 307.660715][ T5856] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.676212][ T5856] buffer_io_error: 138 callbacks suppressed [ 307.676228][ T5856] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.690079][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.699325][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.707229][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.716389][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.724325][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.733502][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.741431][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.750869][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.758932][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.768146][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.776084][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.785257][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.793177][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.802327][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.810205][ T8745] ldm_validate_partition_table(): Disk read failed. [ 307.816839][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.825966][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.833891][ T8745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 307.843019][ T8745] Buffer I/O error on dev loop5, logical block 0, async page read [ 307.851011][ T8745] Dev loop5: unable to read RDB block 0 [ 307.856716][ T8745] loop5: unable to read partition table [ 307.862455][ T8745] loop5: partition table beyond EOD, truncated [ 307.868641][ T8745] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 308.383283][ T8752] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.738274][ T804] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 308.899579][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 308.912600][ T804] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 308.923413][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.933152][ T804] usb 4-1: Product: syz [ 308.937389][ T804] usb 4-1: Manufacturer: syz [ 308.944268][ T804] usb 4-1: SerialNumber: syz [ 308.966387][ T804] usb 4-1: config 0 descriptor?? [ 309.310440][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 309.322919][ T5627] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 309.475423][ T5726] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 310.138254][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 310.147732][ T5726] usb 1-1: config 200 has an invalid interface number: 86 but max is 0 [ 310.160025][ T5726] usb 1-1: config 200 has no interface number 0 [ 310.166408][ T5726] usb 1-1: config 200 interface 86 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 310.186209][ T5726] usb 1-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.200824][ T5726] usb 1-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.213882][ T5726] usb 1-1: config 200 interface 86 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 310.224908][ T5726] usb 1-1: config 200 interface 86 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 310.237402][ T5726] usb 1-1: config 200 interface 86 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 310.249004][ T5726] usb 1-1: config 200 interface 86 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 310.284480][ T8770] bridge0: entered promiscuous mode [ 310.294957][ T5726] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a68, bcdDevice=ee.51 [ 310.319263][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.334656][ T5726] usb 1-1: Product: syz [ 310.340037][ T5726] usb 1-1: Manufacturer: syz [ 310.340137][ T8770] dummy0: entered promiscuous mode [ 310.352549][ T5726] usb 1-1: SerialNumber: syz [ 310.371601][ T8761] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 310.379439][ T8761] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 310.427966][ T8773] fuse: Unknown parameter './file0' [ 310.433550][ T8770] bridge0: port 3(hsr1) entered blocking state [ 310.452194][ T8770] bridge0: port 3(hsr1) entered disabled state [ 310.469544][ T8770] hsr1: entered allmulticast mode [ 310.487506][ T8770] bridge0: entered allmulticast mode [ 310.505144][ T8770] dummy0: entered allmulticast mode [ 310.525926][ T8770] hsr1: left allmulticast mode [ 310.539616][ T8770] bridge0: left allmulticast mode [ 310.562197][ T8770] dummy0: left allmulticast mode [ 310.628758][ T8770] bridge0: left promiscuous mode [ 310.645576][ T5726] usb 1-1: USB disconnect, device number 9 [ 310.654714][ T8770] dummy0: left promiscuous mode [ 311.545559][ T804] usb read operation failed. (-71) [ 311.551307][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.557648][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.576234][ T804] usb write operation failed. (-71) [ 311.595614][ T804] usb write operation failed. (-71) [ 311.611956][ T804] usb write operation failed. (-71) [ 311.657963][ T804] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 311.933843][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.775'. [ 312.007917][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.775'. [ 312.723605][ T8798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.768602][ T8796] netlink: 'syz.0.771': attribute type 2 has an invalid length. [ 312.896661][ T8796] netlink: 'syz.0.771': attribute type 2 has an invalid length. [ 314.168089][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 314.338985][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 314.349964][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.361709][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.372536][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.381777][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.404412][ T10] usb 5-1: config 0 descriptor?? [ 314.415120][ T10] hub 5-1:0.0: USB hub found [ 314.616726][ T10] hub 5-1:0.0: 26 ports detected [ 314.631208][ T10] hub 5-1:0.0: insufficient power available to use all downstream ports [ 314.780068][ T8816] fuse: Unknown parameter './file0' [ 314.822357][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.832824][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.844725][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.854502][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.018142][ T8820] random: crng reseeded on system resumption [ 315.816046][ T10] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 315.823414][ T10] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 315.842287][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 315.852084][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 317.080424][ T10] usb 5-1: USB disconnect, device number 22 [ 317.420021][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 317.593844][ T8852] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 317.604691][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 317.608079][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 317.629321][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.646105][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.656831][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 317.663959][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 317.675767][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.690680][ T24] usb 1-1: config 0 descriptor?? [ 317.724961][ T30] audit: type=1400 audit(2000000172.140:868): avc: denied { read } for pid=8853 comm="syz.4.794" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 317.779485][ T8854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.788340][ T8854] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 317.800048][ T8855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.807774][ T8855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 317.827795][ T8854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.828532][ T8855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.834088][ T8854] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 317.839904][ T8855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 317.857746][ T8854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.864147][ T8854] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 319.762751][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 319.776105][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 319.799841][ T24] usb 1-1: USB disconnect, device number 10 [ 319.808247][ T8867] fuse: Unknown parameter './file0' [ 320.188088][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 320.338177][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 320.345252][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.356325][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.366150][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.375367][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.384807][ T24] usb 1-1: config 0 descriptor?? [ 320.392401][ T24] hub 1-1:0.0: USB hub found [ 320.592629][ T24] hub 1-1:0.0: 26 ports detected [ 320.598340][ T24] hub 1-1:0.0: insufficient power available to use all downstream ports [ 320.805050][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.828985][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.000362][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.042521][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.328956][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.950095][ T24] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 321.978297][ T24] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 322.143783][ T24] usbhid 1-1:0.0: can't add hid device: -32 [ 322.164627][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 323.225025][ T5726] usb 1-1: USB disconnect, device number 11 [ 323.442810][ T8906] EXT4-fs: Conflicting test_dummy_encryption options [ 323.748115][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 323.909510][ T24] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 323.928133][ T24] usb 1-1: config 0 has no interface number 0 [ 323.945183][ T24] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.968780][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 323.999321][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.007761][ T24] usb 1-1: Product: syz [ 324.018116][ T24] usb 1-1: Manufacturer: syz [ 324.023672][ T24] usb 1-1: SerialNumber: syz [ 324.032455][ T24] usb 1-1: config 0 descriptor?? [ 324.259057][ T24] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 324.277175][ T24] keyspan 1-1:0.133: unsupported endpoint type 0 [ 324.298106][ T24] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 324.307463][ T24] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 324.317563][ T24] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 324.357989][ T24] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 324.382492][ T24] usb 1-1: USB disconnect, device number 12 [ 324.422901][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 324.443882][ T24] keyspan 1-1:0.133: device disconnected [ 324.670171][ T8918] fuse: Unknown parameter './file0' [ 325.622468][ T5832] Bluetooth: hci5: Frame reassembly failed (-84) [ 326.308104][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 326.325539][ T8941] Bluetooth: MGMT ver 1.23 [ 326.420310][ T8946] bridge1: entered promiscuous mode [ 326.433104][ T8946] bridge1: entered allmulticast mode [ 326.478075][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 326.485741][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.497868][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.510092][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.521227][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.602629][ T24] usb 5-1: config 0 descriptor?? [ 326.646745][ T24] hub 5-1:0.0: USB hub found [ 326.846421][ T24] hub 5-1:0.0: 26 ports detected [ 326.864988][ T24] hub 5-1:0.0: insufficient power available to use all downstream ports [ 326.877692][ T8956] fuse: Unknown parameter './file0' [ 326.909557][ T804] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 326.926445][ T991] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 326.943300][ T804] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 326.952480][ T991] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 326.988543][ T991] usb 2-1: USB disconnect, device number 17 [ 326.990410][ T5712] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 327.024919][ T804] usb 4-1: USB disconnect, device number 16 [ 327.054717][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.070925][ T5712] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 327.103719][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.124863][ T5712] usb 3-1: USB disconnect, device number 18 [ 327.167612][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.184221][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.791726][ T5627] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 327.898438][ T8961] binder: 8960:8961 ioctl 4018620d 0 returned -22 [ 327.948315][ T991] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 327.957095][ T24] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 327.964893][ T24] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 327.985362][ T24] usbhid 5-1:0.0: can't add hid device: -32 [ 327.991919][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 328.121546][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.143929][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 328.171164][ T991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 328.203493][ T991] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 328.226674][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.250974][ T991] usb 2-1: config 0 descriptor?? [ 328.265996][ T8933] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 328.458899][ T8967] binder: 8965:8967 ioctl c0306201 0 returned -14 [ 328.880760][ T991] usbhid 2-1:0.0: can't add hid device: -71 [ 328.897917][ T991] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 328.935663][ T991] usb 2-1: USB disconnect, device number 18 [ 328.965018][ T804] usb 5-1: USB disconnect, device number 23 [ 329.009583][ T5712] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 329.178163][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 329.196902][ T5712] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.218230][ T5712] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.251688][ T5712] usb 4-1: config 0 interface 0 has no altsetting 0 [ 329.288179][ T5712] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 329.348633][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.420386][ T5712] usb 4-1: config 0 descriptor?? [ 330.375520][ T9001] fuse: Unknown parameter './file0' [ 331.029113][ T9012] binder: 9011:9012 ioctl 4018620d 0 returned -22 [ 331.573809][ T5712] usbhid 4-1:0.0: can't add hid device: -71 [ 331.587985][ T5712] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 331.605421][ T5712] usb 4-1: USB disconnect, device number 17 [ 331.640471][ T804] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 331.802127][ T9020] netlink: 64 bytes leftover after parsing attributes in process `syz.3.848'. [ 331.820877][ T804] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.835033][ T804] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 331.858147][ T804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.877208][ T804] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.900465][ T804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 331.920301][ T804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 331.942951][ T804] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.972018][ T804] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.003252][ T804] usb 2-1: Product: syz [ 332.017547][ T804] usb 2-1: Manufacturer: syz [ 332.059415][ T9014] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 332.081374][ T804] cdc_wdm 2-1:1.0: skipping garbage [ 332.099746][ T804] cdc_wdm 2-1:1.0: skipping garbage [ 332.120629][ T804] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 332.140437][ T804] cdc_wdm 2-1:1.0: Unknown control protocol [ 332.432409][ T991] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 332.717293][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 332.886774][ T991] usb 3-1: config index 0 descriptor too short (expected 804, got 36) [ 332.939192][ T991] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 332.960750][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 332.967528][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 332.973821][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 332.980435][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 332.986802][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 332.993398][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 332.999659][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 333.006248][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 333.012496][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 333.019081][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 333.025323][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 333.031908][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 333.038370][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 333.044976][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 333.051277][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 333.057864][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 333.064195][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 333.070792][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 333.077063][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 333.083646][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 333.164432][ T991] usb 3-1: config 0 has no interface number 0 [ 333.188715][ T30] audit: type=1400 audit(2000000187.230:869): avc: denied { read write } for pid=9013 comm="syz.1.845" name="cdc-wdm0" dev="devtmpfs" ino=3062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 333.254891][ T991] usb 3-1: config 0 interface 181 altsetting 36 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.382562][ T991] usb 3-1: config 0 interface 181 altsetting 36 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.478062][ T30] audit: type=1400 audit(2000000187.250:870): avc: denied { open } for pid=9013 comm="syz.1.845" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 333.524522][ T991] usb 3-1: config 0 interface 181 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.707271][ T991] usb 3-1: config 0 interface 181 has no altsetting 0 [ 333.810077][ T991] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 333.923653][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.235230][ T991] usb 3-1: config 0 descriptor?? [ 334.379931][ T24] usb 2-1: USB disconnect, device number 19 [ 334.385890][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 334.600436][ T9050] fuse: Unknown parameter './file0' [ 334.730663][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.748116][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.768101][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.775228][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.798170][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.805278][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.815731][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.823677][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.831006][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.838107][ T991] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 334.851495][ T991] uclogic 0003:5543:0522.0003: hidraw0: USB HID vea.f1 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input181 [ 334.897875][ T9056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.919600][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.932020][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.801195][ T30] audit: type=1400 audit(2000000190.220:871): avc: denied { name_bind } for pid=9063 comm="syz.0.858" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 335.973227][ T9067] binder: 9063:9067 ioctl c0306201 0 returned -14 [ 336.104069][ T9037] tmpfs: Bad value for 'mpol' [ 336.125855][ T30] audit: type=1400 audit(2000000190.530:872): avc: denied { setopt } for pid=9036 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 336.210211][ T30] audit: type=1400 audit(2000000190.620:873): avc: denied { set_context_mgr } for pid=9071 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 336.256365][ T9072] binder: 9071:9072 ioctl 4018620d 0 returned -22 [ 336.375914][ T9076] binder: 9074:9076 ioctl c0306201 0 returned -14 [ 336.569636][ T1218] usb 3-1: USB disconnect, device number 19 [ 336.876033][ T30] audit: type=1400 audit(2000000191.290:874): avc: denied { bind } for pid=9088 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.017400][ T9094] loop5: detected capacity change from 0 to 8 [ 337.389551][ T9096] SET target dimension over the limit! [ 337.468988][ T5856] blk_print_req_error: 6 callbacks suppressed [ 337.469022][ T5856] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.485220][ T5856] buffer_io_error: 6 callbacks suppressed [ 337.485248][ T5856] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.499730][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.509139][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.517128][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.526312][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.534266][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.543404][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.551388][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.560666][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.568669][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.577789][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.585778][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.594923][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.603332][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.612499][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.620570][ T9094] ldm_validate_partition_table(): Disk read failed. [ 337.627262][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.636426][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.644400][ T9094] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 337.653536][ T9094] Buffer I/O error on dev loop5, logical block 0, async page read [ 337.661604][ T9094] Dev loop5: unable to read RDB block 0 [ 337.667556][ T9094] loop5: unable to read partition table [ 337.673356][ T9094] loop5: partition table beyond EOD, truncated [ 337.679536][ T9094] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 339.288228][ T9100] fuse: Unknown parameter './file0' [ 339.732504][ T9114] binder: 9112:9114 ioctl c0306201 0 returned -14 [ 341.220595][ T9124] netlink: 44 bytes leftover after parsing attributes in process `syz.1.876'. [ 342.600856][ T9138] loop5: detected capacity change from 0 to 8 [ 342.638289][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 342.728100][ T5856] blk_print_req_error: 6 callbacks suppressed [ 342.728197][ T5856] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.924850][ T5856] buffer_io_error: 6 callbacks suppressed [ 342.924861][ T5856] Buffer I/O error on dev loop5, logical block 0, async page read [ 342.938797][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.947934][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 342.955918][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.965120][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 342.973089][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.982406][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 342.990341][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.999463][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 343.007449][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.016741][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 343.024647][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.033879][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 343.041825][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.050995][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 343.058923][ T9138] ldm_validate_partition_table(): Disk read failed. [ 343.065534][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.074661][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 343.082539][ T9138] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 343.091669][ T9138] Buffer I/O error on dev loop5, logical block 0, async page read [ 343.099624][ T9138] Dev loop5: unable to read RDB block 0 [ 343.105336][ T9138] loop5: unable to read partition table [ 343.111078][ T9138] loop5: partition table beyond EOD, truncated [ 343.117238][ T9138] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 343.146891][ T30] audit: type=1400 audit(2000000197.560:875): avc: denied { execute } for pid=9139 comm="syz.4.881" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.251622][ T9144] binder: 9143:9144 ioctl c0306201 0 returned -14 [ 343.328378][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 343.343213][ T24] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 343.358552][ T24] usb 2-1: config 0 has no interface number 0 [ 343.366768][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.383703][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.399333][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 343.418467][ T24] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 343.438109][ T24] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 343.449045][ T24] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.488753][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 343.508569][ T24] usb 2-1: New USB device strings: Mfr=1, Product=14, SerialNumber=3 [ 343.537416][ T24] usb 2-1: Product: syz [ 343.570633][ T24] usb 2-1: Manufacturer: syz [ 343.601612][ T24] usb 2-1: SerialNumber: syz [ 343.765789][ T24] usb 2-1: config 0 descriptor?? [ 343.836426][ T24] iowarrior 2-1:0.186: no interrupt-out endpoint found [ 344.265753][ T30] audit: type=1400 audit(2000000198.680:876): avc: denied { mount } for pid=9156 comm="syz.3.886" name="/" dev="hugetlbfs" ino=25741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 344.519777][ T9163] binder: 9162:9163 ioctl c0306201 0 returned -14 [ 344.551206][ T9153] binder: 9152:9153 ioctl c0306201 0 returned -14 [ 344.558323][ T9161] fuse: Unknown parameter './file0' [ 344.645817][ T9167] Trying to write to read-only block-device nullb0 [ 344.850094][ T24] usb 2-1: USB disconnect, device number 20 [ 345.184835][ T9180] loop5: detected capacity change from 0 to 8 [ 345.265746][ T9180] ldm_validate_partition_table(): Disk read failed. [ 345.274255][ T9180] Dev loop5: unable to read RDB block 0 [ 345.281618][ T9180] loop5: unable to read partition table [ 345.288187][ T9180] loop5: partition table beyond EOD, truncated [ 345.294458][ T9180] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 345.527782][ T30] audit: type=1400 audit(2000000199.940:877): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 345.707031][ T9193] binder: 9192:9193 ioctl c0306201 0 returned -14 [ 345.992887][ T9200] binder: 9197:9200 ioctl c0306201 0 returned -14 [ 346.448380][ T9207] fuse: Unknown parameter './file0' [ 346.528446][ T9214] FAULT_INJECTION: forcing a failure. [ 346.528446][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 346.541357][ T9214] CPU: 1 UID: 0 PID: 9214 Comm: syz.4.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.541387][ T9214] Tainted: [L]=SOFTLOCKUP [ 346.541393][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.541403][ T9214] Call Trace: [ 346.541409][ T9214] [ 346.541417][ T9214] dump_stack_lvl+0x100/0x190 [ 346.541444][ T9214] should_fail_ex.cold+0x5/0xa [ 346.541470][ T9214] should_failslab+0xc2/0x120 [ 346.541490][ T9214] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 346.541516][ T9214] ? mas_preallocate+0x1105/0x14a0 [ 346.541550][ T9214] mas_preallocate+0x1105/0x14a0 [ 346.541583][ T9214] ? __pfx_mas_preallocate+0x10/0x10 [ 346.541618][ T9214] ? anon_vma_name+0x5a/0x250 [ 346.541645][ T9214] __split_vma+0x33d/0xd90 [ 346.541673][ T9214] ? __pfx___split_vma+0x10/0x10 [ 346.541704][ T9214] ? __pfx_mas_prev+0x10/0x10 [ 346.541736][ T9214] vms_gather_munmap_vmas+0x3a5/0x1720 [ 346.541763][ T9214] ? validate_mm+0x392/0x4e0 [ 346.541787][ T9214] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 346.541818][ T9214] ? __pfx_validate_mm+0x10/0x10 [ 346.541862][ T9214] do_vmi_align_munmap+0x287/0x5f0 [ 346.541891][ T9214] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 346.541917][ T9214] ? selinux_mmap_addr+0x2b/0x110 [ 346.541974][ T9214] do_vmi_munmap+0x1f8/0x3e0 [ 346.542004][ T9214] __vm_munmap+0x196/0x390 [ 346.542033][ T9214] ? __pfx___vm_munmap+0x10/0x10 [ 346.542076][ T9214] __x64_sys_munmap+0x59/0x80 [ 346.542097][ T9214] do_syscall_64+0x10b/0xf80 [ 346.542120][ T9214] ? clear_bhb_loop+0x40/0x90 [ 346.542142][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.542159][ T9214] RIP: 0033:0x7f5bf5b9cc87 [ 346.542175][ T9214] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.542191][ T9214] RSP: 002b:00007f5bf3df4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 346.542209][ T9214] RAX: ffffffffffffffda RBX: 00007f5bec000000 RCX: 00007f5bf5b9cc87 [ 346.542220][ T9214] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 00007f5bebc00000 [ 346.542229][ T9214] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 346.542240][ T9214] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 346.542250][ T9214] R13: 0000000000001000 R14: 00007f5bf0000000 R15: 0000000000400000 [ 346.542278][ T9214] [ 347.328130][ T1218] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 347.532481][ T9231] loop5: detected capacity change from 0 to 8 [ 347.626537][ T9231] ldm_validate_partition_table(): Disk read failed. [ 347.635118][ T9231] Dev loop5: unable to read RDB block 0 [ 347.642714][ T9231] loop5: unable to read partition table [ 347.649226][ T9231] loop5: partition table beyond EOD, truncated [ 347.655564][ T9231] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 347.673861][ T29] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 347.840049][ T1218] usb 3-1: Using ep0 maxpacket: 16 [ 347.844957][ T29] usb 2-1: device descriptor read/64, error -71 [ 347.867533][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.881063][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.891358][ T1218] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 347.913783][ T1218] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 347.923269][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.933640][ T1218] usb 3-1: config 0 descriptor?? [ 348.025366][ T9237] binder: 9235:9237 ioctl c0306201 0 returned -14 [ 348.098429][ T29] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 348.349568][ T29] usb 2-1: device descriptor read/64, error -71 [ 348.372387][ T1218] usbhid 3-1:0.0: can't add hid device: -71 [ 348.393510][ T1218] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.427269][ T1218] usb 3-1: USB disconnect, device number 20 [ 348.606451][ T29] usb usb2-port1: attempt power cycle [ 348.623706][ T9250] binder: 9249:9250 ioctl c0306201 0 returned -14 [ 348.952852][ T29] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 349.010525][ T29] usb 2-1: device descriptor read/8, error -71 [ 349.302485][ T29] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 349.373093][ T29] usb 2-1: device descriptor read/8, error -71 [ 350.094775][ T29] usb usb2-port1: unable to enumerate USB device [ 350.561506][ T9266] binder: 9264:9266 ioctl c0306201 0 returned -14 [ 350.910461][ T30] audit: type=1400 audit(2000000205.330:878): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 350.992679][ T9273] loop5: detected capacity change from 0 to 8 [ 351.067595][ T5856] blk_print_req_error: 38 callbacks suppressed [ 351.067629][ T5856] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.084573][ T5856] buffer_io_error: 38 callbacks suppressed [ 351.084601][ T5856] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.099027][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.108299][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.116948][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.126193][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.134823][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.144026][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.152561][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.161782][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.170438][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.179814][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.187807][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.196997][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.204950][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.214737][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.222709][ T9273] ldm_validate_partition_table(): Disk read failed. [ 351.229492][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.238646][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.246561][ T9273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 351.256059][ T9273] Buffer I/O error on dev loop5, logical block 0, async page read [ 351.264040][ T9273] Dev loop5: unable to read RDB block 0 [ 351.269810][ T9273] loop5: unable to read partition table [ 351.275533][ T9273] loop5: partition table beyond EOD, truncated [ 351.281708][ T9273] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 351.310118][ T9269] fuse: root generation should be zero [ 353.816506][ T9306] block nbd0: NBD_DISCONNECT [ 354.170691][ T30] audit: type=1400 audit(2000000208.590:879): avc: denied { getopt } for pid=9312 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 354.497235][ T30] audit: type=1400 audit(2000000208.730:880): avc: denied { getopt } for pid=9312 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 354.928092][ T1218] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 354.946507][ T30] audit: type=1400 audit(2000000209.360:881): avc: denied { attach_queue } for pid=9317 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 355.143969][ T1218] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.339065][ T1218] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 355.358034][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 355.391965][ T1218] usb 5-1: Product: syz [ 355.402557][ T1218] usb 5-1: Manufacturer: syz [ 355.419372][ T1218] usb 5-1: SerialNumber: syz [ 355.656098][ T1218] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 356.155403][ T9334] pimreg: entered allmulticast mode [ 356.164300][ T1218] usb 5-1: USB disconnect, device number 24 [ 356.168306][ T9334] pimreg: left allmulticast mode [ 356.174302][ T9340] random: crng reseeded on system resumption [ 356.185237][ T30] audit: type=1400 audit(2000000210.590:882): avc: denied { append } for pid=9337 comm="syz.2.944" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 356.244939][ T1218] usblp0: removed [ 356.436882][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.945'. [ 356.898479][ T1218] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 357.128276][ T1218] usb 2-1: Using ep0 maxpacket: 8 [ 357.147415][ T1218] usb 2-1: config 3 has an invalid interface number: 144 but max is 0 [ 357.162769][ T1218] usb 2-1: config 3 has no interface number 0 [ 357.169046][ T5712] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 357.197549][ T1218] usb 2-1: config 3 interface 144 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 357.247004][ T1218] usb 2-1: config 3 interface 144 has no altsetting 0 [ 357.281887][ T1218] usb 2-1: New USB device found, idVendor=0403, idProduct=c811, bcdDevice=41.dd [ 357.332696][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.354409][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.373438][ T5712] usb 5-1: not running at top speed; connect to a high speed hub [ 357.381703][ T1218] usb 2-1: Product: syz [ 357.394949][ T1218] usb 2-1: Manufacturer: Ð [ 357.407698][ T5712] usb 5-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 357.425064][ T1218] usb 2-1: SerialNumber: syz [ 357.433596][ T5712] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 357.464589][ T5712] usb 5-1: Product: syz [ 357.481773][ T5712] usb 5-1: Manufacturer: syz [ 357.507587][ T5712] usb 5-1: SerialNumber: syz [ 357.536080][ T5712] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.645661][ T5712] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 357.667501][ T1218] ftdi_sio 2-1:3.144: FTDI USB Serial Device converter detected [ 357.701105][ T1218] ftdi_sio ttyUSB0: unknown device type: 0x41dd [ 357.724542][ T7044] udevd[7044]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.745882][ T1218] usb 2-1: USB disconnect, device number 25 [ 357.756302][ T1218] ftdi_sio 2-1:3.144: device disconnected [ 358.168215][ T5712] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 358.331560][ T30] audit: type=1400 audit(2000000212.750:883): avc: denied { read append } for pid=9371 comm="syz.2.956" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 358.370939][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 358.780030][ T5712] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.784092][ T30] audit: type=1400 audit(2000000212.750:884): avc: denied { open } for pid=9371 comm="syz.2.956" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 358.792906][ T5712] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 358.792928][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.843953][ T5712] usb 1-1: config 0 descriptor?? [ 359.625221][ T9370] netlink: 56 bytes leftover after parsing attributes in process `syz.0.955'. [ 359.659747][ T5712] hid_parser_main: 28 callbacks suppressed [ 359.659774][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.676222][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.683639][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.691358][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.699192][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.742633][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.751215][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.758939][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.766300][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.773572][ T5712] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 359.801337][ T5712] logitech 0003:046D:C50C.0004: hidraw0: USB HID vff.fd Device [HID 046d:c50c] on usb-dummy_hcd.0-1/input0 [ 359.959911][ T5712] usb 5-1: USB disconnect, device number 25 [ 359.965035][ T991] usb 1-1: USB disconnect, device number 14 [ 361.193587][ T9405] fuse: Unknown parameter './file0' [ 362.173881][ T9388] trusted_key: encrypted_key: insufficient parameters specified [ 363.120447][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 363.494042][ T9450] fuse: Bad value for 'fd' [ 363.561823][ T9455] cgroup2: Unknown parameter 'euid' [ 363.858081][ T1218] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 363.891029][ T9462] fuse: Unknown parameter './file0' [ 364.038114][ T1218] usb 5-1: Using ep0 maxpacket: 16 [ 364.045872][ T1218] usb 5-1: config 200 has an invalid interface number: 86 but max is 0 [ 364.054509][ T1218] usb 5-1: config 200 has no interface number 0 [ 364.060835][ T1218] usb 5-1: config 200 interface 86 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 364.070965][ T1218] usb 5-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.082051][ T1218] usb 5-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.093113][ T1218] usb 5-1: config 200 interface 86 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 364.103539][ T1218] usb 5-1: config 200 interface 86 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 364.114778][ T1218] usb 5-1: config 200 interface 86 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 364.126064][ T1218] usb 5-1: config 200 interface 86 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 364.141953][ T1218] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a68, bcdDevice=ee.51 [ 364.151622][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.170747][ T1218] usb 5-1: Product: syz [ 364.186978][ T1218] usb 5-1: Manufacturer: syz [ 364.194914][ T1218] usb 5-1: SerialNumber: syz [ 364.205150][ T9454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 364.215509][ T9454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 364.452910][ T1218] usb 5-1: USB disconnect, device number 26 [ 364.458451][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 364.625757][ T9475] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 364.668147][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 364.680807][ T24] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 364.692637][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.720615][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 364.776850][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.810128][ T24] usb 2-1: Product: syz [ 364.814605][ T24] usb 2-1: Manufacturer: syz [ 364.821687][ T24] usb 2-1: SerialNumber: syz [ 364.908031][ T24] usb 2-1: config 0 descriptor?? [ 364.976304][ T24] asix 2-1:0.0: probe with driver asix failed with error -22 [ 365.258766][ T24] usb 2-1: USB disconnect, device number 26 [ 367.371697][ T9488] macvtap1: entered promiscuous mode [ 367.401737][ T9488] macvtap1: entered allmulticast mode [ 367.652114][ T30] audit: type=1400 audit(2000000222.070:885): avc: denied { setopt } for pid=9489 comm="syz.0.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.886671][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 368.426819][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 368.891794][ T30] audit: type=1800 audit(2000000223.310:886): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.993" name="/" dev="fuse" ino=4 res=0 errno=0 [ 369.748864][ T9527] fuse: Unknown parameter './file0' [ 370.092237][ T30] audit: type=1326 audit(2000000224.510:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.2.1000" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9808b9ce59 code=0x0 [ 370.158406][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 371.054848][ T30] audit: type=1400 audit(2000000225.470:888): avc: denied { mounton } for pid=9539 comm="syz.2.1002" path="/190/file0" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 371.181433][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 371.196464][ T10] usb 1-1: config 200 has an invalid interface number: 86 but max is 0 [ 371.214538][ T10] usb 1-1: config 200 has no interface number 0 [ 371.226106][ T10] usb 1-1: config 200 interface 86 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 371.236624][ T10] usb 1-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.246348][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 371.248181][ T10] usb 1-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.278612][ T10] usb 1-1: config 200 interface 86 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 371.303645][ T10] usb 1-1: config 200 interface 86 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 371.327207][ T10] usb 1-1: config 200 interface 86 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 371.349031][ T10] usb 1-1: config 200 interface 86 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 371.373085][ T10] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a68, bcdDevice=ee.51 [ 371.396253][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.405822][ T10] usb 1-1: Product: syz [ 371.410360][ T10] usb 1-1: Manufacturer: syz [ 371.415565][ T10] usb 1-1: SerialNumber: syz [ 371.430966][ T9531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 371.438903][ T9531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 371.687632][ T10] usb 1-1: USB disconnect, device number 15 [ 372.979209][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.986895][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.217515][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 374.687135][ T9591] fuse: Unknown parameter './file0' [ 375.437691][ T9596] binder: 9594:9596 ioctl c0306201 0 returned -14 [ 375.735277][ T9598] binder: 9597:9598 ioctl c0306201 200000000040 returned -14 [ 375.759101][ T9598] binder: 9597:9598 ioctl c0306201 200000000640 returned -22 [ 376.972226][ T30] audit: type=1400 audit(2000000231.390:889): avc: denied { ioctl } for pid=9609 comm="syz.1.1020" path="socket:[29298]" dev="sockfs" ino=29298 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 376.995444][ T9612] syzkaller0: entered promiscuous mode [ 377.003610][ T9612] syzkaller0: entered allmulticast mode [ 377.124253][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 377.298936][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 377.321862][ T24] usb 4-1: config 200 has an invalid interface number: 86 but max is 0 [ 377.352324][ T24] usb 4-1: config 200 has no interface number 0 [ 377.366049][ T24] usb 4-1: config 200 interface 86 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 377.389602][ T24] usb 4-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 377.418200][ T24] usb 4-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 377.442187][ T24] usb 4-1: config 200 interface 86 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 377.478045][ T24] usb 4-1: config 200 interface 86 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 377.518136][ T24] usb 4-1: config 200 interface 86 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 377.539662][ T24] usb 4-1: config 200 interface 86 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 377.595157][ T24] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a68, bcdDevice=ee.51 [ 377.617836][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.638113][ T24] usb 4-1: Product: syz [ 377.648039][ T24] usb 4-1: Manufacturer: syz [ 377.655583][ T24] usb 4-1: SerialNumber: syz [ 377.683181][ T9600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.728471][ T9600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.578174][ T24] usb 4-1: USB disconnect, device number 18 [ 380.557234][ T9643] fuse: Unknown parameter './file0' [ 380.793052][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 381.733623][ T9673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6625 sclass=netlink_route_socket pid=9673 comm=syz.3.1035 [ 381.790321][ T9674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6625 sclass=netlink_route_socket pid=9674 comm=syz.3.1035 [ 381.833308][ T9673] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 382.268377][ T5750] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 382.442945][ T5750] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 382.471232][ T5750] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.494818][ T9690] FAULT_INJECTION: forcing a failure. [ 382.494818][ T9690] name failslab, interval 1, probability 0, space 0, times 0 [ 382.509382][ T5750] usb 5-1: config 0 has no interfaces? [ 382.514908][ T5750] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 382.524435][ T9690] CPU: 1 UID: 0 PID: 9690 Comm: syz.3.1041 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.524466][ T9690] Tainted: [L]=SOFTLOCKUP [ 382.524472][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.524483][ T9690] Call Trace: [ 382.524489][ T9690] [ 382.524495][ T9690] dump_stack_lvl+0x100/0x190 [ 382.524522][ T9690] should_fail_ex.cold+0x5/0xa [ 382.524546][ T9690] ? tomoyo_encode2+0xfb/0x3c0 [ 382.524571][ T9690] should_failslab+0xc2/0x120 [ 382.524590][ T9690] __kmalloc_noprof+0xe0/0x850 [ 382.524616][ T9690] ? d_absolute_path+0x136/0x1b0 [ 382.524640][ T9690] tomoyo_encode2+0xfb/0x3c0 [ 382.524668][ T9690] tomoyo_encode+0x29/0x50 [ 382.524692][ T9690] tomoyo_realpath_from_path+0x18c/0x690 [ 382.524723][ T9690] tomoyo_mount_acl+0x1b6/0x8b0 [ 382.524751][ T9690] ? is_bpf_text_address+0x8a/0x1a0 [ 382.524776][ T9690] ? bpf_ksym_find+0x128/0x1c0 [ 382.524803][ T9690] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.524825][ T9690] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 382.524847][ T9690] ? kernel_text_address+0x8d/0x100 [ 382.524872][ T9690] ? unwind_get_return_address+0x59/0xa0 [ 382.524923][ T9690] ? tomoyo_domain+0xb2/0x150 [ 382.524950][ T9690] ? tomoyo_profile+0x47/0x60 [ 382.524979][ T9690] tomoyo_mount_permission+0x214/0x460 [ 382.525002][ T9690] ? tomoyo_mount_permission+0x1f6/0x460 [ 382.525026][ T9690] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 382.525062][ T9690] security_sb_mount+0xdd/0x270 [ 382.525085][ T9690] path_mount+0x158/0x23d0 [ 382.525114][ T9690] ? __pfx_path_mount+0x10/0x10 [ 382.525136][ T9690] ? lockdep_hardirqs_on+0x78/0x100 [ 382.525164][ T9690] ? putname+0xb1/0x110 [ 382.525187][ T9690] ? kmem_cache_free+0x127/0x6c0 [ 382.525221][ T9690] ? __x64_sys_mount+0x293/0x310 [ 382.525245][ T9690] __x64_sys_mount+0x293/0x310 [ 382.525272][ T9690] ? __pfx___x64_sys_mount+0x10/0x10 [ 382.525301][ T9690] ? rcu_is_watching+0x12/0xc0 [ 382.525331][ T9690] do_syscall_64+0x10b/0xf80 [ 382.525353][ T9690] ? clear_bhb_loop+0x40/0x90 [ 382.525375][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.525396][ T9690] RIP: 0033:0x7fd52bb9ce59 [ 382.525412][ T9690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.525429][ T9690] RSP: 002b:00007fd52c97c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 382.525446][ T9690] RAX: ffffffffffffffda RBX: 00007fd52be15fa0 RCX: 00007fd52bb9ce59 [ 382.525457][ T9690] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 382.525468][ T9690] RBP: 00007fd52c97c090 R08: 0000000000000000 R09: 0000000000000000 [ 382.525478][ T9690] R10: 000000000001c001 R11: 0000000000000246 R12: 0000000000000001 [ 382.525488][ T9690] R13: 00007fd52be16038 R14: 00007fd52be15fa0 R15: 00007ffeea4df118 [ 382.525512][ T9690] [ 382.525538][ T9690] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.811795][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.822475][ T5750] usb 5-1: config 0 descriptor?? [ 382.850360][ T1218] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 383.016667][ T1218] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 383.048766][ T1218] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 383.111550][ T1218] usb 2-1: config 220 has no interface number 2 [ 383.156299][ T1218] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 383.275208][ T1218] usb 2-1: config 220 interface 0 has no altsetting 0 [ 383.321791][ T1218] usb 2-1: config 220 interface 76 has no altsetting 0 [ 383.359711][ T1218] usb 2-1: config 220 interface 1 has no altsetting 0 [ 383.464361][ T1218] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 383.512891][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.584024][ T1218] usb 2-1: Product: syz [ 383.620233][ T1218] usb 2-1: Manufacturer: syz [ 383.647545][ T1218] usb 2-1: SerialNumber: syz [ 384.018916][ T1218] usb 2-1: selecting invalid altsetting 0 [ 384.025723][ T1218] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 384.050634][ T1218] uvcvideo 2-1:220.0: No valid video chain found. [ 384.347644][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 384.376101][ T1218] usb 2-1: selecting invalid altsetting 0 [ 384.383307][ T5712] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 384.401451][ T1218] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 384.540870][ T9717] binder: 9713:9717 ioctl c0306201 0 returned -14 [ 384.730327][ T1218] usb 2-1: USB disconnect, device number 27 [ 384.759196][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 384.769006][ T5712] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 384.778294][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.815020][ T5712] usb 1-1: Product: syz [ 384.823919][ T5712] usb 1-1: Manufacturer: syz [ 384.830951][ T5712] usb 1-1: SerialNumber: syz [ 384.844820][ T5712] usb 1-1: config 0 descriptor?? [ 384.860287][ T5726] usb 5-1: USB disconnect, device number 27 [ 386.080676][ T9736] xt_TCPMSS: Only works on TCP SYN packets [ 386.226432][ T1218] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 386.328264][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 386.488251][ T1218] usb 5-1: Using ep0 maxpacket: 16 [ 386.508138][ T10] usb 4-1: device descriptor read/64, error -71 [ 386.533264][ T1218] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.592053][ T1218] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 386.677572][ T1218] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 386.767869][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.801105][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 386.843842][ T1218] usb 5-1: Product: syz [ 386.884800][ T1218] usb 5-1: Manufacturer: syz [ 386.911087][ T1218] usb 5-1: SerialNumber: syz [ 387.002303][ T10] usb 4-1: device descriptor read/64, error -71 [ 387.055158][ T5712] usb read operation failed. (-71) [ 387.147539][ T5712] usb write operation failed. (-71) [ 387.234372][ T5712] usb write operation failed. (-71) [ 387.243526][ T10] usb usb4-port1: attempt power cycle [ 387.309411][ T5712] usb write operation failed. (-71) [ 387.360750][ T5712] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 387.452575][ T5712] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 387.625956][ T5712] usb 1-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 387.652128][ T1218] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 388.171011][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 388.379636][ T1218] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 388.419474][ T10] usb 4-1: device descriptor read/8, error -71 [ 388.678166][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 388.807908][ T10] usb 4-1: device descriptor read/8, error -71 [ 388.988165][ T10] usb usb4-port1: unable to enumerate USB device [ 389.636262][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 390.900273][ T9785] xt_recent: Unsupported userspace flags (000000de) [ 390.931792][ T30] audit: type=1400 audit(2000000245.350:890): avc: denied { listen } for pid=9784 comm="syz.1.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 390.977367][ T30] audit: type=1400 audit(2000000245.350:891): avc: denied { watch watch_reads } for pid=9784 comm="syz.1.1064" path="/229" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 391.336365][ T1218] usb 5-1: USB disconnect, device number 28 [ 392.393592][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 393.007751][ T9819] FAULT_INJECTION: forcing a failure. [ 393.007751][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 393.057407][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.0.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.057435][ T9819] Tainted: [L]=SOFTLOCKUP [ 393.057440][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.057449][ T9819] Call Trace: [ 393.057454][ T9819] [ 393.057462][ T9819] dump_stack_lvl+0x100/0x190 [ 393.057488][ T9819] should_fail_ex.cold+0x5/0xa [ 393.057512][ T9819] ? tomoyo_realpath_from_path+0xb6/0x690 [ 393.057536][ T9819] should_failslab+0xc2/0x120 [ 393.057554][ T9819] __kmalloc_noprof+0xe0/0x850 [ 393.057578][ T9819] ? kfree+0x1dd/0x6c0 [ 393.057604][ T9819] tomoyo_realpath_from_path+0xb6/0x690 [ 393.057639][ T9819] tomoyo_path_number_perm+0x23c/0x580 [ 393.057657][ T9819] ? tomoyo_path_number_perm+0x22e/0x580 [ 393.057679][ T9819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.057721][ T9819] ? find_held_lock+0x2b/0x80 [ 393.057738][ T9819] ? __fget_files+0x215/0x3d0 [ 393.057757][ T9819] ? hook_file_ioctl_common+0x149/0x410 [ 393.057782][ T9819] ? __fget_files+0x215/0x3d0 [ 393.057807][ T9819] ? __fget_files+0x21f/0x3d0 [ 393.057831][ T9819] security_file_ioctl+0xd3/0x230 [ 393.057855][ T9819] __x64_sys_ioctl+0xb7/0x210 [ 393.057875][ T9819] do_syscall_64+0x10b/0xf80 [ 393.057898][ T9819] ? clear_bhb_loop+0x40/0x90 [ 393.057920][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.057935][ T9819] RIP: 0033:0x7fd5bd79ce59 [ 393.057949][ T9819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.057963][ T9819] RSP: 002b:00007fd5be582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.057984][ T9819] RAX: ffffffffffffffda RBX: 00007fd5bda15fa0 RCX: 00007fd5bd79ce59 [ 393.057993][ T9819] RDX: 0000200000000040 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 393.058002][ T9819] RBP: 00007fd5be582090 R08: 0000000000000000 R09: 0000000000000000 [ 393.058012][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.058021][ T9819] R13: 00007fd5bda16038 R14: 00007fd5bda15fa0 R15: 00007ffec19b67d8 [ 393.058043][ T9819] [ 393.502619][ T9819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.893702][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 394.028072][ T1218] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 394.048087][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 394.057512][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 394.078278][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 394.119681][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.130754][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.156719][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 394.167767][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.188137][ T1218] usb 4-1: Using ep0 maxpacket: 16 [ 394.205920][ T1218] usb 4-1: config 200 has an invalid interface number: 86 but max is 0 [ 394.216014][ T1218] usb 4-1: config 200 has no interface number 0 [ 394.222609][ T1218] usb 4-1: config 200 interface 86 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 394.232990][ T1218] usb 4-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.244207][ T1218] usb 4-1: config 200 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.255421][ T1218] usb 4-1: config 200 interface 86 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 394.265898][ T1218] usb 4-1: config 200 interface 86 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 394.277187][ T1218] usb 4-1: config 200 interface 86 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 394.288501][ T1218] usb 4-1: config 200 interface 86 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 394.302578][ T1218] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a68, bcdDevice=ee.51 [ 394.312743][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.322719][ T1218] usb 4-1: Product: syz [ 394.328737][ T1218] usb 4-1: Manufacturer: syz [ 394.333453][ T1218] usb 4-1: SerialNumber: syz [ 394.344714][ T9829] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 394.353309][ T9829] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 394.401885][ T9] usb 5-1: usb_control_msg returned -32 [ 394.408125][ T9] usbtmc 5-1:16.0: can't read capabilities [ 399.890241][ T1218] usb 4-1: USB disconnect, device number 23 [ 406.610728][ T5750] usb 5-1: USB disconnect, device number 29 [ 406.621400][ T30] audit: type=1326 audit(2000000261.020:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 406.681854][ T30] audit: type=1326 audit(2000000261.020:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 406.947658][ T30] audit: type=1326 audit(2000000261.020:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 407.310261][ T30] audit: type=1326 audit(2000000261.020:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 407.504762][ T30] audit: type=1326 audit(2000000261.020:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 408.220542][ T9859] FAULT_INJECTION: forcing a failure. [ 408.220542][ T9859] name failslab, interval 1, probability 0, space 0, times 0 [ 408.233226][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.0.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.233255][ T9859] Tainted: [L]=SOFTLOCKUP [ 408.233261][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.233271][ T9859] Call Trace: [ 408.233277][ T9859] [ 408.233283][ T9859] dump_stack_lvl+0x100/0x190 [ 408.233311][ T9859] should_fail_ex.cold+0x5/0xa [ 408.233335][ T9859] should_failslab+0xc2/0x120 [ 408.233355][ T9859] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 408.233381][ T9859] ? security_file_alloc+0x34/0x2c0 [ 408.233405][ T9859] ? trace_kmem_cache_alloc+0xd5/0x100 [ 408.233428][ T9859] security_file_alloc+0x34/0x2c0 [ 408.233458][ T9859] init_file+0x95/0x480 [ 408.233484][ T9859] alloc_empty_file+0x79/0x1c0 [ 408.233509][ T9859] alloc_file_pseudo+0x13a/0x230 [ 408.233536][ T9859] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 408.233563][ T9859] ? hugetlbfs_get_inode+0x3f5/0x700 [ 408.233590][ T9859] ? __fget_files+0x215/0x3d0 [ 408.233615][ T9859] hugetlb_file_setup+0x2a8/0x5b0 [ 408.233635][ T9859] ksys_mmap_pgoff+0x242/0x610 [ 408.233658][ T9859] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 408.233677][ T9859] ? fput+0x79/0x100 [ 408.233699][ T9859] ? ksys_write+0x1ac/0x250 [ 408.233717][ T9859] ? __pfx_ksys_write+0x10/0x10 [ 408.233738][ T9859] __x64_sys_mmap+0x125/0x190 [ 408.233764][ T9859] do_syscall_64+0x10b/0xf80 [ 408.233787][ T9859] ? clear_bhb_loop+0x40/0x90 [ 408.233808][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.233826][ T9859] RIP: 0033:0x7fd5bd79ce59 [ 408.233841][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.233858][ T9859] RSP: 002b:00007fd5be582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 408.233879][ T9859] RAX: ffffffffffffffda RBX: 00007fd5bda15fa0 RCX: 00007fd5bd79ce59 [ 408.233890][ T9859] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 408.233901][ T9859] RBP: 00007fd5be582090 R08: ffffffffffffffff R09: 0000000000000000 [ 408.233912][ T9859] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 408.233922][ T9859] R13: 00007fd5bda16038 R14: 00007fd5bda15fa0 R15: 00007ffec19b67d8 [ 408.233946][ T9859] [ 408.706972][ T30] audit: type=1326 audit(2000000261.020:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 408.829574][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 408.881094][ T30] audit: type=1326 audit(2000000261.020:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 408.912492][ T30] audit: type=1326 audit(2000000261.020:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 409.043989][ T30] audit: type=1326 audit(2000000261.020:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 409.160203][ T30] audit: type=1326 audit(2000000261.020:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.4.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf5b9ce59 code=0x7fc00000 [ 410.401596][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.413549][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.421709][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.430844][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.443600][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 410.516158][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.535971][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.560729][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.570791][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.586145][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 410.976397][ T9825] syz_tun (unregistering): left allmulticast mode [ 411.076361][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 411.923378][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.932161][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.939379][ T9874] bridge_slave_0: entered allmulticast mode [ 411.958376][ T9874] bridge_slave_0: entered promiscuous mode [ 411.971665][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.984805][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.992060][ T9874] bridge_slave_1: entered allmulticast mode [ 411.999692][ T9874] bridge_slave_1: entered promiscuous mode [ 412.042902][ T9874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.061486][ T9874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.100602][ T9874] team0: Port device team_slave_0 added [ 412.108807][ T9874] team0: Port device team_slave_1 added [ 412.130297][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.137366][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.164092][ T9874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.174806][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 412.174817][ T30] audit: type=1400 audit(2000000266.580:963): avc: denied { ioctl } for pid=9913 comm="syz.3.1096" path="socket:[28643]" dev="sockfs" ino=28643 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.262538][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.279104][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.312963][ T9874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.778208][ T50] Bluetooth: hci5: command tx timeout [ 412.834461][ T9874] hsr_slave_0: entered promiscuous mode [ 412.840987][ T9874] hsr_slave_1: entered promiscuous mode [ 412.847205][ T9874] debugfs: 'hsr0' already exists in 'hsr' [ 412.853065][ T9874] Cannot create hsr debugfs directory [ 413.053501][ T9874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 413.063639][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.077420][ T9874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 413.087519][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.095821][ T9874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 413.117735][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.134279][ T9874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 413.145481][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.258940][ T9874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.301394][ T9874] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.427519][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.434713][ T7014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.471545][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 413.655198][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.662314][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.841422][ T50] Bluetooth: hci5: command tx timeout [ 416.136588][ T9958] binder: 9957:9958 ioctl c0306201 0 returned -14 [ 416.375204][ T9970] binder: 9966:9970 ioctl c0306201 0 returned -14 [ 416.898159][ T50] Bluetooth: hci5: command tx timeout [ 417.382716][ T9844] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 418.030338][ T9874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.179078][ T9844] usb 4-1: Using ep0 maxpacket: 8 [ 418.196644][ T9844] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 418.231245][ T9844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.265739][ T9844] usb 4-1: Product: syz [ 418.277205][ T9844] usb 4-1: Manufacturer: syz [ 418.288122][ T9844] usb 4-1: SerialNumber: syz [ 418.301549][ T9844] usb 4-1: config 0 descriptor?? [ 418.360066][T10002] block nbd0: server does not support multiple connections per device. [ 418.390861][T10002] block nbd0: shutting down sockets [ 418.921632][T10010] FAULT_INJECTION: forcing a failure. [ 418.921632][T10010] name failslab, interval 1, probability 0, space 0, times 0 [ 418.934980][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.1.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.935004][T10010] Tainted: [L]=SOFTLOCKUP [ 418.935007][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.935016][T10010] Call Trace: [ 418.935022][T10010] [ 418.935028][T10010] dump_stack_lvl+0x100/0x190 [ 418.935045][T10010] should_fail_ex.cold+0x5/0xa [ 418.935060][T10010] should_failslab+0xc2/0x120 [ 418.935072][T10010] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 418.935090][T10010] ? key_alloc+0x423/0x1310 [ 418.935104][T10010] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 418.935122][T10010] kmemdup_noprof+0x29/0x60 [ 418.935133][T10010] key_alloc+0x423/0x1310 [ 418.935152][T10010] ? __pfx_key_alloc+0x10/0x10 [ 418.935166][T10010] ? bpf_lsm_key_permission+0x9/0x10 [ 418.935180][T10010] request_key_and_link+0x744/0x1310 [ 418.935197][T10010] ? __pfx_request_key_and_link+0x10/0x10 [ 418.935210][T10010] ? __pfx___might_resched+0x10/0x10 [ 418.935226][T10010] ? find_held_lock+0x2b/0x80 [ 418.935238][T10010] ? __pfx_key_default_cmp+0x10/0x10 [ 418.935254][T10010] ? __pfx_keyring_search_iterator+0x10/0x10 [ 418.935271][T10010] ? _copy_from_user+0x59/0xd0 [ 418.935289][T10010] __do_sys_request_key+0x2a2/0x3c0 [ 418.935301][T10010] ? __pfx___do_sys_request_key+0x10/0x10 [ 418.935312][T10010] ? ksys_write+0x1ac/0x250 [ 418.935325][T10010] ? rcu_is_watching+0x12/0xc0 [ 418.935350][T10010] do_syscall_64+0x10b/0xf80 [ 418.935364][T10010] ? clear_bhb_loop+0x40/0x90 [ 418.935377][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.935387][T10010] RIP: 0033:0x7f1f7d59ce59 [ 418.935397][T10010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.935406][T10010] RSP: 002b:00007f1f7b7d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 418.935417][T10010] RAX: ffffffffffffffda RBX: 00007f1f7d816090 RCX: 00007f1f7d59ce59 [ 418.935424][T10010] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000440 [ 418.935430][T10010] RBP: 00007f1f7b7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 418.935435][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.935441][T10010] R13: 00007f1f7d816128 R14: 00007f1f7d816090 R15: 00007fffe2521458 [ 418.935455][T10010] [ 419.601865][ T50] Bluetooth: hci5: command tx timeout [ 419.787703][ T9874] veth0_vlan: entered promiscuous mode [ 419.799489][ T9874] veth1_vlan: entered promiscuous mode [ 420.395226][ T9874] veth0_macvtap: entered promiscuous mode [ 420.432543][ T9874] veth1_macvtap: entered promiscuous mode [ 420.482813][ T9874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.500762][ T9874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.517692][ T7014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.554440][ T7014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.620122][ T7014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.636154][ T7014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.735182][T10018] binder: 10016:10018 ioctl c0306201 0 returned -14 [ 421.084174][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.104157][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.255354][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.276446][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.307760][ T30] audit: type=1400 audit(2000000275.720:964): avc: denied { mounton } for pid=9874 comm="syz-executor" path="/root/syzkaller.8Z6u6r/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 421.398194][ T9844] usb read operation failed. (-71) [ 421.419166][ T9844] usb write operation failed. (-71) [ 421.437580][ T9844] usb write operation failed. (-71) [ 421.449199][ T30] audit: type=1400 audit(2000000275.800:965): avc: denied { mounton } for pid=9874 comm="syz-executor" path="/root/syzkaller.8Z6u6r/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 421.477588][ T9844] usb write operation failed. (-71) [ 421.483310][ T9844] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 421.518060][ T30] audit: type=1400 audit(2000000275.800:966): avc: denied { mounton } for pid=9874 comm="syz-executor" path="/root/syzkaller.8Z6u6r/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 421.609360][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 421.625716][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 421.679867][T10031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51728 sclass=netlink_route_socket pid=10031 comm=syz.0.1120 [ 422.164106][ T30] audit: type=1400 audit(2000000275.840:967): avc: denied { mounton } for pid=9874 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 422.312040][T10030] nbd0: detected capacity change from 0 to 63 [ 422.607885][ T50] block nbd0: Receive control failed (result -104) [ 423.380250][T10049] kAFS: No cell specified [ 423.483002][T10052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 425.170590][T10067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.220279][ T1218] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 425.408050][ T1218] usb 2-1: Using ep0 maxpacket: 32 [ 425.421657][ T1218] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 425.446654][ T1218] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 425.494268][ T1218] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.540915][ T1218] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 425.616602][ T1218] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 425.631234][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.639821][ T1218] usb 2-1: Product: syz [ 425.644034][ T1218] usb 2-1: Manufacturer: syz [ 425.649381][ T1218] usb 2-1: SerialNumber: syz [ 425.740397][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 425.943299][ T1218] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input45 [ 426.067060][T10077] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 426.158162][ T1218] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 426.176928][ T1218] (id 0x00) [ 426.301476][ T1218] rc_core: IR keymap rc-imon-pad not found [ 426.308196][ T1218] Registered IR keymap rc-empty [ 426.314239][ T1218] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 426.325713][ T1218] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 426.362340][ T1218] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 426.380065][ T1218] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input46 [ 426.397447][ T1218] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:28> initialized [ 426.631780][ T1218] usb 2-1: USB disconnect, device number 28 [ 426.646715][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 427.481858][T10094] binder: 10091:10094 ioctl c0205647 200000000480 returned -22 [ 428.076046][T10105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1137'. [ 428.387057][ T30] audit: type=1400 audit(2000000282.790:968): avc: denied { mount } for pid=10104 comm="syz.2.1137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 428.585510][ T30] audit: type=1400 audit(2000000283.000:969): avc: denied { append } for pid=10104 comm="syz.2.1137" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 428.614652][ T30] audit: type=1400 audit(2000000283.000:970): avc: denied { bind } for pid=10109 comm="syz.3.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 428.877216][T10116] kAFS: No cell specified [ 428.988262][T10117] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 432.159770][ T30] audit: type=1400 audit(2000000286.190:971): avc: denied { write } for pid=10118 comm="syz.3.1141" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 432.277214][ T30] audit: type=1400 audit(2000000286.190:972): avc: denied { ioctl } for pid=10118 comm="syz.3.1141" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 432.314014][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 433.021849][ T30] audit: type=1400 audit(2000000287.440:973): avc: denied { write } for pid=10130 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 433.046146][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1146'. [ 433.055227][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1146'. [ 433.137364][T10137] ipvlan2: entered allmulticast mode [ 433.151027][T10137] batadv0: entered allmulticast mode [ 433.174158][T10137] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 433.959265][T10149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.170262][ T5726] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 434.249469][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 434.420007][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.427306][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.451119][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 434.515887][T10164] binder: 10162:10164 ioctl c0306201 0 returned -14 [ 434.591053][ T5726] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 434.603042][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 434.611590][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.624767][ T5726] usb 2-1: Product: syz [ 434.689764][ T5726] usb 2-1: Manufacturer: syz [ 434.696914][ T9] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 434.713924][ T5726] usb 2-1: SerialNumber: syz [ 434.735100][ T5726] usb 2-1: config 0 descriptor?? [ 434.740271][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.764451][ T9] usb 6-1: Product: syz [ 434.774559][ T9] usb 6-1: Manufacturer: syz [ 434.784347][ T9] usb 6-1: SerialNumber: syz [ 434.811416][ T9] usb 6-1: config 0 descriptor?? [ 434.823891][ T9] usbtest 6-1:0.0: FX2 device [ 434.830636][ T9] usbtest 6-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 434.919809][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 436.971845][ T5726] usb read operation failed. (-71) [ 436.993172][ T5726] usb write operation failed. (-71) [ 437.016378][ T5726] usb write operation failed. (-71) [ 437.030632][ T5726] usb write operation failed. (-71) [ 437.041378][ T5726] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 437.590768][T10209] overlayfs: overlapping lowerdir path [ 437.601821][ T24] usb 6-1: USB disconnect, device number 2 [ 437.611093][T10206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.960199][T10216] binder: 10211:10216 ioctl c0306201 0 returned -14 [ 438.586742][ T30] audit: type=1400 audit(2000000293.000:974): avc: denied { read } for pid=10220 comm="syz.0.1171" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 438.928460][T10227] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1170'. [ 439.727497][ T30] audit: type=1400 audit(2000000293.000:975): avc: denied { open } for pid=10220 comm="syz.0.1171" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 439.752061][ T30] audit: type=1400 audit(2000000293.040:976): avc: denied { ioctl } for pid=10220 comm="syz.0.1171" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 440.669997][T10227] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 440.677078][T10227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 440.686097][T10227] vhci_hcd vhci_hcd.0: Device attached [ 440.767360][ T30] audit: type=1400 audit(2000000295.120:977): avc: denied { connect } for pid=10220 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.454232][T10229] vhci_hcd: connection closed [ 441.659393][ T5832] vhci_hcd vhci_hcd.5: stop threads [ 441.692139][ T5832] vhci_hcd vhci_hcd.5: release socket [ 441.705886][ T5832] vhci_hcd vhci_hcd.5: disconnect device [ 442.180590][T10242] use of bytesused == 0 is deprecated and will be removed in the future, [ 442.214182][T10242] use the actual size instead. [ 442.606751][ T30] audit: type=1400 audit(2000000297.020:978): avc: denied { accept } for pid=10235 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 442.701622][T10236] dvmrp8: entered allmulticast mode [ 442.820941][ T30] audit: type=1400 audit(2000000297.240:979): avc: denied { getopt } for pid=10235 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 442.870680][T10236] netem: incorrect ge model size [ 442.880436][T10236] netem: change failed [ 444.083570][T10259] binder: 10257:10259 ioctl c0306201 0 returned -14 [ 444.443813][T10265] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 444.500070][T10266] tunl0: Caught tx_queue_len zero misconfig [ 446.051533][T10277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.678723][T10302] binder: 10300:10302 ioctl c0306201 0 returned -14 [ 448.086351][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 448.097056][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 448.168138][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 448.177308][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 448.402810][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.434090][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.638335][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.075801][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.788199][ T9844] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 449.809332][ T5726] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 450.183695][ T5712] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 450.205469][ T9844] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 450.218710][ T5726] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 450.227587][T10323] could not allocate digest TFM handle crc32-pclmul [ 450.237375][ T9844] usb 4-1: USB disconnect, device number 24 [ 450.249366][ T5712] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 450.259133][ T5726] usb 2-1: USB disconnect, device number 29 [ 450.294481][ T5712] usb 1-1: USB disconnect, device number 16 [ 450.578303][ T9844] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 450.712856][T10336] xt_cgroup: invalid path, errno=-2 [ 450.840317][ T5712] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 451.162451][ T9844] usb 4-1: device descriptor read/64, error -71 [ 451.185380][T10344] binder: 10342:10344 ioctl c0205647 200000000480 returned -22 [ 451.854383][T10349] binder: 10347:10349 ioctl c0306201 0 returned -14 [ 452.098119][ T9844] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 452.289597][ T9844] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 452.347486][ T5856] block nbd0: Possible stuck request ffff888028583100: control (read@0,1024B). Runtime 30 seconds [ 452.364246][ T5856] block nbd0: Possible stuck request ffff8880285832c0: control (read@1024,1024B). Runtime 30 seconds [ 452.375990][ T5856] block nbd0: Possible stuck request ffff888028583480: control (read@2048,1024B). Runtime 30 seconds [ 452.388829][ T5856] block nbd0: Possible stuck request ffff888028583640: control (read@3072,1024B). Runtime 30 seconds [ 453.494707][ T9844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.506317][ T9844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.516146][ T9844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 453.640460][ T9844] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 453.649735][ T9844] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 453.657875][ T9844] usb 4-1: Manufacturer: syz [ 453.684404][ T9844] usb 4-1: config 0 descriptor?? [ 453.710358][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 453.730339][ T9844] usb 4-1: can't set config #0, error -32 [ 453.766051][ T9844] usb 4-1: USB disconnect, device number 26 [ 454.202314][T10377] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1212'. [ 454.369823][ T50] Bluetooth: Frame is too long (len 16, expected len 4) [ 454.884785][T10373] syzkaller0: entered promiscuous mode [ 454.908700][T10373] syzkaller0: entered allmulticast mode [ 455.076554][T10384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10384 comm=syz.5.1216 [ 455.198120][ T24] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 455.359637][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 455.393775][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 455.422290][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 455.437796][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 455.445161][ T5712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 455.487765][ T5712] usb 1-1: can't read configurations, error -71 [ 455.499105][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 455.541771][ T24] usb 3-1: string descriptor 0 read error: -22 [ 455.552198][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 455.562931][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.905464][ T24] usb 3-1: low speed audio streaming not supported [ 455.925689][ T24] usb 3-1: low speed audio streaming not supported [ 455.956636][T10394] afs: Unknown parameter 'dy' [ 455.963842][ T24] usb 3-1: unit 3 not found! [ 456.145028][T10395] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 457.584669][ T24] usb 3-1: USB disconnect, device number 21 [ 457.611151][T10400] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 458.498342][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 458.848762][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 458.863787][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 458.938716][T10420] PKCS7: Unknown OID: [4] 0.0 [ 458.945077][T10420] PKCS7: Only support pkcs7_signedData type [ 458.981462][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1227'. [ 459.092284][T10422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10422 comm=syz.5.1227 [ 459.289840][T10422] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1227'. [ 459.303373][ T24] usb 3-1: config 0 has no interface number 0 [ 459.327705][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.366580][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 459.378944][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.390081][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.403173][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 459.412927][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.439328][ T24] usb 3-1: config 0 descriptor?? [ 459.454683][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 459.544454][T10428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1231'. [ 459.554177][T10428] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1231'. [ 459.563178][T10428] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1231'. [ 459.598083][ T9844] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 459.668905][ T5712] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 459.689757][ T5726] usb 3-1: USB disconnect, device number 22 [ 459.689853][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 459.705434][ T5726] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 459.828050][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 459.898049][ T5750] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 459.902664][T10409] ldusb: No device or device unplugged -19 [ 459.917279][T10433] comedi comedi1: comedi_config --init_data is deprecated [ 459.971360][ T24] usb 4-1: device descriptor read/64, error -71 [ 460.051488][ T5750] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 460.061986][ T5750] usb 6-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 460.083288][ T5750] usb 6-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=91.f6 [ 460.097351][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.105845][ T5750] usb 6-1: Product: syz [ 460.110294][ T5750] usb 6-1: Manufacturer: syz [ 460.114917][ T5750] usb 6-1: SerialNumber: syz [ 460.208059][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 460.338545][ T24] usb 4-1: device descriptor read/64, error -71 [ 460.388450][ T5750] usb 6-1: USB disconnect, device number 3 [ 460.449403][ T24] usb usb4-port1: attempt power cycle [ 460.748106][ T6945] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 460.788030][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 460.808501][ T24] usb 4-1: device descriptor read/8, error -71 [ 460.901323][ T6945] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 460.918570][ T6945] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 460.932837][ T6945] usb 3-1: config 0 has no interface number 0 [ 460.940642][ T6945] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 240, changing to 11 [ 460.952166][ T6945] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 8404, setting to 1024 [ 460.965173][ T6945] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.983482][ T6945] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 460.993245][ T6945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.001307][ T6945] usb 3-1: Product: syz [ 461.006162][ T6945] usb 3-1: Manufacturer: syz [ 461.011746][ T6945] usb 3-1: SerialNumber: syz [ 461.048063][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 461.058086][ T6945] usb 3-1: config 0 descriptor?? [ 461.078913][ T24] usb 4-1: device descriptor read/8, error -71 [ 461.188219][ T24] usb usb4-port1: unable to enumerate USB device [ 462.398390][ T9844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 462.408107][ T9844] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 462.416072][ T9844] usb 2-1: can't read configurations, error -71 [ 462.455093][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 462.505385][ T5712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 462.523268][ T5712] usb 1-1: can't read configurations, error -71 [ 464.202501][ T6945] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 464.727314][T10456] binder: 10453:10456 ioctl c0205647 200000000480 returned -22 [ 465.614456][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 465.634790][ T9844] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 465.738178][ T6945] usb 3-1: USB disconnect, device number 23 [ 465.810232][ T9844] usb 6-1: Using ep0 maxpacket: 16 [ 465.970485][ T9844] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 465.970533][ T9844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.121758][ T9844] usb 6-1: config 0 descriptor?? [ 466.124144][ T9844] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 466.407153][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 466.630558][ T9844] gspca_sonixj: reg_r err -71 [ 466.635559][ T9844] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 466.664695][ T9844] usb 6-1: USB disconnect, device number 4 [ 466.680381][T10481] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1243'. [ 466.710742][T10483] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1244'. [ 466.726521][T10485] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1244'. [ 467.040900][T10496] bond2 (unregistering): Released all slaves [ 467.058106][ T6945] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 467.148867][T10493] [ 467.151214][T10493] ====================================================== [ 467.158203][T10493] WARNING: possible circular locking dependency detected [ 467.165193][T10493] syzkaller #0 Tainted: G L [ 467.171150][T10493] ------------------------------------------------------ [ 467.178143][T10493] syz.1.1248/10493 is trying to acquire lock: [ 467.184176][T10493] ffff88801c6a7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x555/0x850 [ 467.194605][T10493] [ 467.194605][T10493] but task is already holding lock: [ 467.202035][T10493] ffff88801c6a7980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0x850 [ 467.211451][T10493] [ 467.211451][T10493] which lock already depends on the new lock. [ 467.211451][T10493] [ 467.221841][T10493] [ 467.221841][T10493] the existing dependency chain (in reverse order) is: [ 467.230839][T10493] [ 467.230839][T10493] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 467.238900][T10493] down_write+0x8b/0x1f0 [ 467.243654][T10493] kernfs_add_one+0x38/0x850 [ 467.248838][T10493] kernfs_create_dir_ns+0xfc/0x1a0 [ 467.254456][T10493] internal_create_group+0x36f/0xf40 [ 467.260244][T10493] cpuhp_invoke_callback+0x3ab/0x9a0 [ 467.266034][T10493] cpuhp_issue_call+0x1b8/0x970 [ 467.271387][T10493] __cpuhp_setup_state_cpuslocked+0x431/0x880 [ 467.277961][T10493] __cpuhp_setup_state+0xf4/0x300 [ 467.283495][T10493] do_one_initcall+0x121/0x750 [ 467.288766][T10493] kernel_init_freeable+0x6ea/0x7b0 [ 467.294468][T10493] kernel_init+0x1f/0x1e0 [ 467.299383][T10493] ret_from_fork+0x72b/0xd50 [ 467.304474][T10493] ret_from_fork_asm+0x1a/0x30 [ 467.309834][T10493] [ 467.309834][T10493] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 467.317630][T10493] [ 467.317630][T10493] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 467.325333][T10493] cpus_read_lock+0x42/0x170 [ 467.330443][T10493] static_key_slow_inc+0x12/0x30 [ 467.335885][T10493] setup_udp_tunnel_sock+0x4f9/0x620 [ 467.341678][T10493] l2tp_tunnel_register+0x9e5/0xbe0 [ 467.347378][T10493] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 467.354036][T10493] pppol2tp_connect+0xaf0/0x1c20 [ 467.359496][T10493] __sys_connect_file+0x141/0x1a0 [ 467.365030][T10493] __sys_connect+0x141/0x170 [ 467.370130][T10493] __x64_sys_connect+0x72/0xb0 [ 467.375398][T10493] do_syscall_64+0x10b/0xf80 [ 467.380507][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.386907][T10493] [ 467.386907][T10493] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 467.394615][T10493] lock_sock_nested+0x41/0xf0 [ 467.399797][T10493] inet_shutdown+0x67/0x410 [ 467.404808][T10493] nbd_mark_nsock_dead+0xae/0x5c0 [ 467.410341][T10493] sock_shutdown+0x16b/0x200 [ 467.415442][T10493] nbd_config_put+0x1eb/0x750 [ 467.420618][T10493] nbd_genl_connect+0xaf8/0x1a40 [ 467.426055][T10493] genl_family_rcv_msg_doit+0x214/0x300 [ 467.432116][T10493] genl_rcv_msg+0x560/0x800 [ 467.437132][T10493] netlink_rcv_skb+0x159/0x420 [ 467.442404][T10493] genl_rcv+0x28/0x40 [ 467.446899][T10493] netlink_unicast+0x585/0x850 [ 467.452165][T10493] netlink_sendmsg+0x8b0/0xda0 [ 467.457432][T10493] ____sys_sendmsg+0x9e1/0xb70 [ 467.462699][T10493] ___sys_sendmsg+0x190/0x1e0 [ 467.467879][T10493] __sys_sendmsg+0x170/0x220 [ 467.472971][T10493] do_syscall_64+0x10b/0xf80 [ 467.478067][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.484459][T10493] [ 467.484459][T10493] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 467.492078][T10493] __mutex_lock+0x1a4/0x1b10 [ 467.497260][T10493] nbd_queue_rq+0x428/0x1080 [ 467.502349][T10493] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 467.508393][T10493] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 467.515226][T10493] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 467.521710][T10493] blk_mq_run_hw_queue+0x23c/0x670 [ 467.527325][T10493] blk_mq_dispatch_list+0x51d/0x1360 [ 467.533111][T10493] blk_mq_flush_plug_list+0x130/0x600 [ 467.538982][T10493] __blk_flush_plug+0x2c4/0x4b0 [ 467.544339][T10493] __submit_bio+0x584/0x6c0 [ 467.549350][T10493] submit_bio_noacct_nocheck+0x543/0xbf0 [ 467.555488][T10493] submit_bio_noacct+0xd18/0x2000 [ 467.561010][T10493] submit_bh_wbc+0x681/0x890 [ 467.566098][T10493] block_read_full_folio+0x264/0x8e0 [ 467.571888][T10493] filemap_read_folio+0xfc/0x3b0 [ 467.577336][T10493] do_read_cache_folio+0x2d7/0x6b0 [ 467.582953][T10493] read_part_sector+0xd1/0x370 [ 467.588222][T10493] adfspart_check_ICS+0x91/0x7d0 [ 467.593664][T10493] bdev_disk_changed+0x7a3/0x1250 [ 467.599192][T10493] blkdev_get_whole+0x187/0x290 [ 467.604550][T10493] bdev_open+0x2c7/0xe40 [ 467.609315][T10493] blkdev_open+0x34e/0x4f0 [ 467.614229][T10493] do_dentry_open+0x6d8/0x1660 [ 467.619509][T10493] vfs_open+0x82/0x3f0 [ 467.624086][T10493] path_openat+0x208c/0x31a0 [ 467.629178][T10493] do_file_open+0x20e/0x430 [ 467.634184][T10493] do_sys_openat2+0x10d/0x1e0 [ 467.639366][T10493] __x64_sys_openat+0x12d/0x210 [ 467.644722][T10493] do_syscall_64+0x10b/0xf80 [ 467.649815][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.656207][T10493] [ 467.656207][T10493] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 467.663394][T10493] __mutex_lock+0x1a4/0x1b10 [ 467.668489][T10493] nbd_queue_rq+0xba/0x1080 [ 467.673493][T10493] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 467.679537][T10493] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 467.686371][T10493] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 467.692855][T10493] blk_mq_run_hw_queue+0x23c/0x670 [ 467.698475][T10493] blk_mq_dispatch_list+0x51d/0x1360 [ 467.704260][T10493] blk_mq_flush_plug_list+0x130/0x600 [ 467.710132][T10493] __blk_flush_plug+0x2c4/0x4b0 [ 467.715489][T10493] __submit_bio+0x584/0x6c0 [ 467.720500][T10493] submit_bio_noacct_nocheck+0x543/0xbf0 [ 467.726638][T10493] submit_bio_noacct+0xd18/0x2000 [ 467.732173][T10493] submit_bh_wbc+0x681/0x890 [ 467.737262][T10493] block_read_full_folio+0x264/0x8e0 [ 467.743052][T10493] filemap_read_folio+0xfc/0x3b0 [ 467.748494][T10493] do_read_cache_folio+0x2d7/0x6b0 [ 467.754112][T10493] read_part_sector+0xd1/0x370 [ 467.759382][T10493] adfspart_check_ICS+0x91/0x7d0 [ 467.764825][T10493] bdev_disk_changed+0x7a3/0x1250 [ 467.770352][T10493] blkdev_get_whole+0x187/0x290 [ 467.775707][T10493] bdev_open+0x2c7/0xe40 [ 467.780454][T10493] blkdev_open+0x34e/0x4f0 [ 467.785367][T10493] do_dentry_open+0x6d8/0x1660 [ 467.790635][T10493] vfs_open+0x82/0x3f0 [ 467.795216][T10493] path_openat+0x208c/0x31a0 [ 467.800320][T10493] do_file_open+0x20e/0x430 [ 467.805329][T10493] do_sys_openat2+0x10d/0x1e0 [ 467.810510][T10493] __x64_sys_openat+0x12d/0x210 [ 467.815864][T10493] do_syscall_64+0x10b/0xf80 [ 467.820976][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.827368][T10493] [ 467.827368][T10493] -> #4 (set->srcu){.+.+}-{0:0}: [ 467.834471][T10493] __synchronize_srcu+0xa2/0x300 [ 467.839910][T10493] blk_mq_quiesce_queue+0x149/0x1c0 [ 467.845610][T10493] elevator_switch+0x17b/0x7e0 [ 467.850878][T10493] elevator_change+0x352/0x530 [ 467.856153][T10493] elevator_set_default+0x29e/0x360 [ 467.861857][T10493] blk_register_queue+0x48e/0x630 [ 467.867399][T10493] __add_disk+0x73f/0xe40 [ 467.872229][T10493] add_disk_fwnode+0x118/0x5c0 [ 467.877495][T10493] nbd_dev_add+0x77a/0xb10 [ 467.882408][T10493] nbd_init+0x291/0x2b0 [ 467.887067][T10493] do_one_initcall+0x121/0x750 [ 467.892335][T10493] kernel_init_freeable+0x6ea/0x7b0 [ 467.898039][T10493] kernel_init+0x1f/0x1e0 [ 467.902869][T10493] ret_from_fork+0x72b/0xd50 [ 467.907970][T10493] ret_from_fork_asm+0x1a/0x30 [ 467.913238][T10493] [ 467.913238][T10493] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 467.921030][T10493] __mutex_lock+0x1a4/0x1b10 [ 467.926131][T10493] elevator_change+0x1bc/0x530 [ 467.931396][T10493] elevator_set_none+0x92/0xf0 [ 467.936664][T10493] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 467.942972][T10493] nbd_start_device+0x1a6/0xbd0 [ 467.948321][T10493] nbd_genl_connect+0xff2/0x1a40 [ 467.953758][T10493] genl_family_rcv_msg_doit+0x214/0x300 [ 467.959811][T10493] genl_rcv_msg+0x560/0x800 [ 467.964820][T10493] netlink_rcv_skb+0x159/0x420 [ 467.970088][T10493] genl_rcv+0x28/0x40 [ 467.974572][T10493] netlink_unicast+0x585/0x850 [ 467.979838][T10493] netlink_sendmsg+0x8b0/0xda0 [ 467.985115][T10493] ____sys_sendmsg+0x9e1/0xb70 [ 467.990379][T10493] ___sys_sendmsg+0x190/0x1e0 [ 467.995557][T10493] __sys_sendmsg+0x170/0x220 [ 468.000661][T10493] do_syscall_64+0x10b/0xf80 [ 468.005756][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.012147][T10493] [ 468.012147][T10493] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 468.020725][T10493] blk_alloc_queue+0x610/0x790 [ 468.025997][T10493] blk_mq_alloc_queue+0x174/0x290 [ 468.031522][T10493] __blk_mq_alloc_disk+0x29/0x120 [ 468.037056][T10493] nbd_dev_add+0x492/0xb10 [ 468.041970][T10493] nbd_init+0x291/0x2b0 [ 468.046630][T10493] do_one_initcall+0x121/0x750 [ 468.051904][T10493] kernel_init_freeable+0x6ea/0x7b0 [ 468.057607][T10493] kernel_init+0x1f/0x1e0 [ 468.062431][T10493] ret_from_fork+0x72b/0xd50 [ 468.067525][T10493] ret_from_fork_asm+0x1a/0x30 [ 468.072796][T10493] [ 468.072796][T10493] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 468.079979][T10493] fs_reclaim_acquire+0xc4/0x100 [ 468.085417][T10493] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 468.091294][T10493] __kernfs_iattrs+0x124/0x3e0 [ 468.096557][T10493] __kernfs_setattr+0x4d/0x3c0 [ 468.101820][T10493] kernfs_iop_setattr+0xda/0x130 [ 468.107258][T10493] notify_change+0xb25/0x1330 [ 468.112435][T10493] do_truncate+0x1df/0x240 [ 468.117354][T10493] path_openat+0x2a55/0x31a0 [ 468.122444][T10493] do_file_open+0x20e/0x430 [ 468.127461][T10493] do_sys_openat2+0x10d/0x1e0 [ 468.132642][T10493] __x64_sys_openat+0x12d/0x210 [ 468.137998][T10493] do_syscall_64+0x10b/0xf80 [ 468.143093][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.149489][T10493] [ 468.149489][T10493] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 468.158003][T10493] __lock_acquire+0x14b8/0x2630 [ 468.163357][T10493] lock_acquire+0x1b1/0x370 [ 468.168362][T10493] down_write+0x8b/0x1f0 [ 468.173109][T10493] kernfs_link_sibling+0x555/0x850 [ 468.178725][T10493] kernfs_add_one+0x1e7/0x850 [ 468.183906][T10493] kernfs_create_dir_ns+0xfc/0x1a0 [ 468.189522][T10493] sysfs_create_dir_ns+0x13a/0x2b0 [ 468.195133][T10493] kobject_add_internal+0x2c8/0x930 [ 468.200836][T10493] kobject_add+0x16a/0x1e0 [ 468.205748][T10493] elevator_change_done+0x252/0x650 [ 468.211450][T10493] elv_update_nr_hw_queues+0x1ea/0x2b0 [ 468.217414][T10493] blk_mq_update_nr_hw_queues+0x900/0x15f0 [ 468.223720][T10493] nbd_start_device+0x1a6/0xbd0 [ 468.229070][T10493] nbd_genl_connect+0xff2/0x1a40 [ 468.234507][T10493] genl_family_rcv_msg_doit+0x214/0x300 [ 468.240731][T10493] genl_rcv_msg+0x560/0x800 [ 468.245740][T10493] netlink_rcv_skb+0x159/0x420 [ 468.251006][T10493] genl_rcv+0x28/0x40 [ 468.255490][T10493] netlink_unicast+0x585/0x850 [ 468.260754][T10493] netlink_sendmsg+0x8b0/0xda0 [ 468.266021][T10493] ____sys_sendmsg+0x9e1/0xb70 [ 468.271287][T10493] ___sys_sendmsg+0x190/0x1e0 [ 468.276476][T10493] __sys_sendmsg+0x170/0x220 [ 468.281562][T10493] do_syscall_64+0x10b/0xf80 [ 468.286664][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.293055][T10493] [ 468.293055][T10493] other info that might help us debug this: [ 468.293055][T10493] [ 468.303258][T10493] Chain exists of: [ 468.303258][T10493] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 468.303258][T10493] [ 468.317656][T10493] Possible unsafe locking scenario: [ 468.317656][T10493] [ 468.325093][T10493] CPU0 CPU1 [ 468.330436][T10493] ---- ---- [ 468.335775][T10493] lock(&root->kernfs_rwsem); [ 468.340516][T10493] lock(cpuhp_state_mutex); [ 468.347602][T10493] lock(&root->kernfs_rwsem); [ 468.354861][T10493] lock(&root->kernfs_iattr_rwsem); [ 468.360127][T10493] [ 468.360127][T10493] *** DEADLOCK *** [ 468.360127][T10493] [ 468.368245][T10493] 5 locks held by syz.1.1248/10493: [ 468.373415][T10493] #0: ffffffff906ba688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 468.381574][T10493] #1: ffffffff906ba740 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 468.390515][T10493] #2: ffff8880284ca9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x9d/0x15f0 [ 468.401886][T10493] #3: ffff8880284ca8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb0/0x15f0 [ 468.412906][T10493] #4: ffff88801c6a7980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0x850 [ 468.422718][T10493] [ 468.422718][T10493] stack backtrace: [ 468.428591][T10493] CPU: 1 UID: 0 PID: 10493 Comm: syz.1.1248 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.428612][T10493] Tainted: [L]=SOFTLOCKUP [ 468.428617][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.428625][T10493] Call Trace: [ 468.428630][T10493] [ 468.428636][T10493] dump_stack_lvl+0x100/0x190 [ 468.428653][T10493] print_circular_bug.cold+0x178/0x1c7 [ 468.428676][T10493] check_noncircular+0x146/0x160 [ 468.428691][T10493] ? __bfs+0x150/0x2a0 [ 468.428707][T10493] __lock_acquire+0x14b8/0x2630 [ 468.428726][T10493] ? __lock_acquire+0x4a5/0x2630 [ 468.428743][T10493] lock_acquire+0x1b1/0x370 [ 468.428759][T10493] ? kernfs_link_sibling+0x555/0x850 [ 468.428777][T10493] ? __pfx___might_resched+0x10/0x10 [ 468.428800][T10493] down_write+0x8b/0x1f0 [ 468.428820][T10493] ? kernfs_link_sibling+0x555/0x850 [ 468.428837][T10493] ? __pfx_down_write+0x10/0x10 [ 468.428858][T10493] kernfs_link_sibling+0x555/0x850 [ 468.428878][T10493] kernfs_add_one+0x1e7/0x850 [ 468.428903][T10493] kernfs_create_dir_ns+0xfc/0x1a0 [ 468.428923][T10493] sysfs_create_dir_ns+0x13a/0x2b0 [ 468.428939][T10493] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 468.428955][T10493] ? lock_acquire+0x1b1/0x370 [ 468.428971][T10493] ? rcu_is_watching+0x12/0xc0 [ 468.428991][T10493] ? kfree_const+0x5a/0x70 [ 468.429005][T10493] kobject_add_internal+0x2c8/0x930 [ 468.429028][T10493] kobject_add+0x16a/0x1e0 [ 468.429040][T10493] ? __pfx_kobject_add+0x10/0x10 [ 468.429053][T10493] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 468.429072][T10493] ? do_raw_spin_lock+0x128/0x260 [ 468.429091][T10493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 468.429111][T10493] elevator_change_done+0x252/0x650 [ 468.429131][T10493] ? lockdep_hardirqs_on+0x78/0x100 [ 468.429158][T10493] ? __pfx_elevator_change_done+0x10/0x10 [ 468.429177][T10493] ? elv_update_nr_hw_queues+0x1c7/0x2b0 [ 468.429199][T10493] elv_update_nr_hw_queues+0x1ea/0x2b0 [ 468.429219][T10493] blk_mq_update_nr_hw_queues+0x900/0x15f0 [ 468.429237][T10493] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 468.429256][T10493] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 468.429272][T10493] nbd_start_device+0x1a6/0xbd0 [ 468.429289][T10493] nbd_genl_connect+0xff2/0x1a40 [ 468.429303][T10493] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.429317][T10493] ? __nla_parse+0x40/0x60 [ 468.429334][T10493] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 468.429355][T10493] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 468.429377][T10493] genl_family_rcv_msg_doit+0x214/0x300 [ 468.429397][T10493] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.429417][T10493] ? genl_get_cmd+0x3e7/0x760 [ 468.429443][T10493] ? __alloc_skb+0x185/0x710 [ 468.429463][T10493] ? netlink_alloc_large_skb+0x69/0x150 [ 468.429480][T10493] ? __radix_tree_lookup+0x217/0x2b0 [ 468.429497][T10493] genl_rcv_msg+0x560/0x800 [ 468.429517][T10493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.429535][T10493] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.429550][T10493] ? __lock_acquire+0x4a5/0x2630 [ 468.429567][T10493] netlink_rcv_skb+0x159/0x420 [ 468.429584][T10493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.429603][T10493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.429623][T10493] ? netlink_deliver_tap+0x1ae/0xcc0 [ 468.429640][T10493] genl_rcv+0x28/0x40 [ 468.429657][T10493] netlink_unicast+0x585/0x850 [ 468.429676][T10493] ? __pfx_netlink_unicast+0x10/0x10 [ 468.429695][T10493] netlink_sendmsg+0x8b0/0xda0 [ 468.429713][T10493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.429729][T10493] ? __might_fault+0x50/0x140 [ 468.429751][T10493] ____sys_sendmsg+0x9e1/0xb70 [ 468.429767][T10493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.429784][T10493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.429802][T10493] ? __pfx_futex_wake_mark+0x10/0x10 [ 468.429817][T10493] ___sys_sendmsg+0x190/0x1e0 [ 468.429834][T10493] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.429861][T10493] __sys_sendmsg+0x170/0x220 [ 468.429874][T10493] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.429889][T10493] ? __x64_sys_futex+0x34f/0x4d0 [ 468.429912][T10493] ? rcu_is_watching+0x12/0xc0 [ 468.429932][T10493] do_syscall_64+0x10b/0xf80 [ 468.429950][T10493] ? clear_bhb_loop+0x40/0x90 [ 468.429964][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.429978][T10493] RIP: 0033:0x7f1f7d59ce59 [ 468.429990][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.430004][T10493] RSP: 002b:00007f1f7b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.430017][T10493] RAX: ffffffffffffffda RBX: 00007f1f7d815fa0 RCX: 00007f1f7d59ce59 [ 468.430026][T10493] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000a [ 468.430034][T10493] RBP: 00007f1f7d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 468.430042][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.430050][T10493] R13: 00007f1f7d816038 R14: 00007f1f7d815fa0 R15: 00007fffe2521458 [ 468.430063][T10493] [ 468.915179][ T50] block nbd1: Receive control failed (result -32) [ 468.915472][ T5627] block nbd1: Receive control failed (result -32) [ 470.214901][ T6945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 470.223264][ T6945] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 470.230923][ T6945] usb 3-1: can't read configurations, error -71