last executing test programs: 11.328311706s ago: executing program 2 (id=353): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x42) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x1, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}, {&(0x7f0000000400)="e1", 0x1}], 0x2) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter6\x00') 11.272015021s ago: executing program 0 (id=355): syz_usb_connect(0x2, 0x47, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) close(0xffffffffffffffff) madvise(&(0x7f00008d8000/0x3000)=nil, 0x3000, 0x64) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r3 = userfaultfd(0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x111}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x87, 0x7, 0x4000000000000e51, 0xfffffffffffffffd, 0xab7, 0x1035, 0x280000000006, 0x0, 0x328, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0x6, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x80, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x4}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0x5a, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x40}, {0x2, 0x25, 0x10, '\x00', 0x5}, {0xf, 0x4, 0x8, '\x00', 0x7f}, {0x6, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x85}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x2e, 0x5, '\x00', 0xa}, {0xb, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x25, 0x0, '\x00', 0xb}]}}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b81b010f00d09a81008500baf80c66b8c0991f8c66efbafc0cedf30fc7b20f00ba2000b004ee0f01c26766c7442400000000006766c74424025d4700006766c744240600000000670f011424f3d93b64640f086766c7442400030000006766c7442402b2a600006766c744240600000000670f011424", 0x76}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000074f000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000380)="650f22ddb9bb020000b8a9270000ba000000000f30660f38801f0fc76d39f30f300f20d835200000000f22d80fc7b38c0000003e67861dc7442400ac22139bc744240241670000c7442406000000000f011424ff1a", 0x55}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000200)=@arm64={0x3, 0x5, 0x9d, '\x00', 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.990473972s ago: executing program 2 (id=357): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSIG(r5, 0x540f, 0x40000000000031) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) 8.591940935s ago: executing program 2 (id=363): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 8.416288426s ago: executing program 1 (id=365): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_open_dev$loop(0x0, 0x0, 0x187540) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x200) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x4040001) socket$nl_route(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r5, 0xc08c5114, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 7.761435556s ago: executing program 2 (id=367): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "0fc1cd79"}]}}, 0x0}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="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", 0x55d, 0x40000, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c300000000ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000000)=0x40) lsm_list_modules(0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") io_setup(0x4, &(0x7f0000000780)) 7.330995973s ago: executing program 3 (id=369): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = gettid() prlimit64(r0, 0xd, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x542, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0xe, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xef3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x7, 0x1e}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xbf, 0x1, 0x5, 0x40}, 0x10f, &(0x7f0000000440)={0x5, 0xf, 0x10f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0xe, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x10, 0xff00}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "014dba3500"}, @ssp_cap={0x0, 0x10, 0xa, 0x7, 0x0, 0x9, 0xf, 0x92, [0x3f, 0xc00f]}]}, 0x5, [{0x3b, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x43f}}, {0x21, &(0x7f00000005c0)=@string={0x21, 0x3, "fabee2f0a3ac21dd342e451fab79305f33b73427bb7a3e2bd4ccee3f18fd96"}}, {0x7f, &(0x7f0000000600)=@string={0x7f, 0x3, "09d49827d743544cbdeb9611016f6c1857f3e1524aac6037d31347be188fad5b4bbdd572ded0c9b8f48056476e18128e312f9f3a561435d2763a6f71e50044c8fa170f48319a477fe378a036408d3400e8f6b1431684d7b539e2ec1cb7d153cc7e1474171f7a0b1d8dba8170d6ff3842967170daa6570bf1bc0f3765e3"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x41f}}]}) semget$private(0x0, 0x4000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000003"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x3ff, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000c41}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.119158185s ago: executing program 0 (id=370): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() pipe2(0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf253, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x1fffe, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x7, 0x400004, 0x3, 0x9, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xffffffa3, 0x136, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000300)=""/63, 0x3f}], 0x1) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 5.150465025s ago: executing program 0 (id=373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "5df80ec201dc77ea", "e5bec7a5e9d8c0dc7f7df958bf232735", "943d18db", "bd8d627dbf50bee8"}, 0x28) socket$netlink(0x10, 0x3, 0x0) close(0x3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, 0x0, 0x11) listen(r5, 0x3) accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1301"], 0x16) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 5.048663967s ago: executing program 4 (id=374): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x6, 0xe9, 0x8, 0x402, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0d020015e479fe38d40001000014e68887ec144fe4657138df8ddc124e0005000400a2b72f12"], 0x1c}}, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f00000007c0)=0x40000401, 0x4) write$FUSE_INIT(r4, &(0x7f00000028c0)={0x50, 0x0, r5, {0x7, 0x2d, 0x4, 0x4000810, 0x5, 0x9, 0x4, 0x1ff, 0x0, 0x0, 0x40, 0x8}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) mremap(&(0x7f0000a97000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f00000af000/0x3000)=nil) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 5.012436039s ago: executing program 1 (id=375): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) (fail_nth: 7) 4.436581118s ago: executing program 4 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f", 0x554, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x14e}, 0x0, &(0x7f0000000a00)="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", 0x0) 3.084862433s ago: executing program 1 (id=377): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 3.084100493s ago: executing program 3 (id=378): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x7) syslog(0x3, &(0x7f0000000300)=""/121, 0x79) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x9) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(r0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.083647662s ago: executing program 1 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) statx(r2, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10) 3.083454603s ago: executing program 4 (id=380): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x5, 0x84) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r1, 0x1000000, 0x0) 3.083232194s ago: executing program 2 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r3, &(0x7f00000027c0)=[{&(0x7f00000004c0)=' ', 0x1}, {&(0x7f0000000500)="1c", 0x1}], 0x2) 3.081939583s ago: executing program 4 (id=382): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x40eb, &(0x7f0000000380)={0x0, 0xade9, 0x100, 0xfffffffe, 0x40054}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)=@IORING_OP_FSETXATTR={0x29, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x7ff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a"], 0x94}}, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xe5cc, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd, r6}, 0x38) syz_usb_connect$midi(0x2, 0x67, &(0x7f0000000080)=ANY=[@ANYBLOB="e2ec33a689b7f80679225209bd8b525f62982a5a1be379e34e78e70693d73ee3f6e006028445f6b3183c4bdf50d6e370cf78bf5e8c751376f66b22afe24e5dfb7a81dcc93aeacf446d5c3f0b9069339256bbbd6ae1b84893e5ccee510fee802acec91048fb6036f0d620d807479e8b1ff94531b6115a463743d8af555cb4150e5a8466744c07239cd5b16a092ccc129e3b8181215f9e379fac43decbcac3d29a9fcc88049c81359130f317e8e5d3b20f21696eed211f8e3e747047d8"], 0x0) 3.080285172s ago: executing program 0 (id=383): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x20, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3df1fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xf8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/61, 0x3d) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x15) io_destroy(0x0) 2.744754174s ago: executing program 3 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000005580)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.689603074s ago: executing program 1 (id=385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 7) 2.37859114s ago: executing program 1 (id=386): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x4010, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) (async) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (rerun: 64) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) 1.772490278s ago: executing program 32 (id=386): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x4010, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) (async) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (rerun: 64) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) 1.769680994s ago: executing program 2 (id=388): creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/pm_debug_messages', 0x2600, 0xc1) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x27, 0x0, 0x0, 0x0, 0x1}) fremovexattr(r0, &(0x7f0000000000)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) get_robust_list(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xfffffffb, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000180)="b4eb3b47", 0x4}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000004000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000de00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.175426371s ago: executing program 3 (id=389): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x80044100, 0x40944f9c780000) pwrite64(r0, &(0x7f0000000100)='123', 0x3, 0x1e8030) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) 756.844224ms ago: executing program 3 (id=390): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x7) syslog(0x3, &(0x7f0000000300)=""/121, 0x79) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x9) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 716.377406ms ago: executing program 0 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x554, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x14e}, 0x0, &(0x7f0000000a00)="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", 0x0) 330.673348ms ago: executing program 4 (id=392): r0 = socket$packet(0x11, 0x3, 0x300) keyctl$get_keyring_id(0x0, 0x0, 0x6) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x3, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x10003, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x2, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfff8, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 232.879216ms ago: executing program 0 (id=393): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedK\xb66J\xa4v\xee\x9eH\xa2#_c\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES8=r1], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) listen(r3, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) 190.881917ms ago: executing program 3 (id=394): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5, 0x3}, 0x18) sendmmsg$inet(r3, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d1", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, 0x0, 0x0) 0s ago: executing program 4 (id=395): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@getqdisc={0x4c, 0x26, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xc, 0xa}, {0x0, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115ad", 0xeb}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004000}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x0, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './tracefs_dir/buffer_size_kb\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='3', 0x1) kernel console output (not intermixed with test programs): 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.824081][ T5963] RSP: 002b:00007fe07e9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.824099][ T5963] RAX: ffffffffffffffda RBX: 00007fe080a26180 RCX: 00007fe08079e159 [ 83.824111][ T5963] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 83.824121][ T5963] RBP: 00007fe07e9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 83.824132][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.824142][ T5963] R13: 00007fe080a26218 R14: 00007fe080a26180 R15: 00007fff44372ef8 [ 83.824166][ T5963] [ 83.828041][ T30] audit: type=1400 audit(1788187609.150:246): avc: denied { setopt } for pid=5960 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.828203][ T30] audit: type=1400 audit(1788187609.150:247): avc: denied { accept } for pid=5960 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.016263][ T92] usb 2-1: USB disconnect, device number 2 [ 84.533538][ T92] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.700144][ T92] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 84.707640][ T92] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.707694][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.018216][ T92] usb 2-1: selecting invalid altsetting 1 [ 85.124993][ T5971] mmap: syz.4.48 (5971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.463300][ T5972] FAULT_INJECTION: forcing a failure. [ 85.463300][ T5972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.492297][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT(full) [ 85.492325][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 85.492335][ T5972] Call Trace: [ 85.492342][ T5972] [ 85.492350][ T5972] dump_stack_lvl+0x100/0x190 [ 85.492383][ T5972] should_fail_ex.cold+0x5/0xa [ 85.492410][ T5972] _copy_from_user+0x2e/0xd0 [ 85.492439][ T5972] kstrtouint_from_user+0xd6/0x1d0 [ 85.492464][ T5972] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 85.492491][ T5972] ? lock_acquire+0x1d1/0x380 [ 85.492515][ T5972] proc_fail_nth_write+0x83/0x220 [ 85.492537][ T5972] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.492565][ T5972] vfs_write+0x2aa/0x1050 [ 85.492601][ T5972] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.492621][ T5972] ? lock_acquire+0x1d1/0x380 [ 85.492639][ T5972] ? __fget_files+0x34/0x3d0 [ 85.492659][ T5972] ? __pfx_vfs_write+0x10/0x10 [ 85.492684][ T5972] ? find_held_lock+0x2b/0x80 [ 85.492709][ T5972] ? __fget_files+0x215/0x3d0 [ 85.492734][ T5972] ? __fget_files+0x21f/0x3d0 [ 85.492761][ T5972] ksys_write+0x12a/0x250 [ 85.492778][ T5972] ? __pfx_ksys_write+0x10/0x10 [ 85.492795][ T5972] ? trace_hardirqs_off+0x70/0x170 [ 85.492824][ T5972] do_syscall_64+0x123/0x790 [ 85.492848][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.492868][ T5972] RIP: 0033:0x7efed315e98e [ 85.492884][ T5972] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.492900][ T5972] RSP: 002b:00007efed3fe5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.492919][ T5972] RAX: ffffffffffffffda RBX: 00007efed3fe66c0 RCX: 00007efed315e98e [ 85.492931][ T5972] RDX: 0000000000000001 RSI: 00007efed3fe60a0 RDI: 0000000000000004 [ 85.492941][ T5972] RBP: 00007efed3fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 85.492952][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.492962][ T5972] R13: 00007efed3426128 R14: 00007efed3426090 R15: 00007fffe800c7e8 [ 85.492986][ T5972] [ 85.559010][ T92] dvb_ttusb_budget: ttusb_init_controller: error [ 85.559025][ T92] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 86.012340][ T92] DVB: Unable to find symbol stv0299_attach() [ 86.129005][ T30] audit: type=1400 audit(1788187611.470:248): avc: denied { search } for pid=5973 comm="syz.2.49" name="/" dev="configfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.153803][ T30] audit: type=1400 audit(1788187611.480:249): avc: denied { search } for pid=5973 comm="syz.2.49" name="nvmet" dev="configfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.249915][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 86.525838][ T92] DVB: Unable to find symbol tda8083_attach() [ 86.534338][ T92] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 86.896923][ T92] usb 2-1: USB disconnect, device number 3 [ 87.573077][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 87.573147][ T30] audit: type=1400 audit(1788187612.920:280): avc: denied { connect } for pid=5982 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.633317][ T30] audit: type=1400 audit(1788187612.970:281): avc: denied { name_connect } for pid=5982 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 87.761632][ T30] audit: type=1400 audit(1788187613.110:282): avc: denied { listen } for pid=5982 comm="syz.3.43" lport=55015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.982826][ T30] audit: type=1400 audit(1788187613.330:283): avc: denied { write } for pid=5979 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.982861][ T30] audit: type=1400 audit(1788187613.330:284): avc: denied { read } for pid=5979 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.058712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 88.136649][ T5983] capability: warning: `syz.3.43' uses 32-bit capabilities (legacy support in use) [ 88.165270][ T30] audit: type=1400 audit(1788187613.510:285): avc: denied { accept } for pid=5982 comm="syz.3.43" lport=55015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.185776][ T30] audit: type=1400 audit(1788187613.510:286): avc: denied { ioctl } for pid=5979 comm="syz.1.50" path="socket:[8001]" dev="sockfs" ino=8001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.437381][ T5997] fuse: Bad value for 'fd' [ 88.443656][ T30] audit: type=1400 audit(1788187613.790:287): avc: denied { read } for pid=5996 comm="syz.0.53" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.469872][ T30] audit: type=1400 audit(1788187613.820:288): avc: denied { open } for pid=5996 comm="syz.0.53" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.496953][ T2281] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.500836][ T5998] FAULT_INJECTION: forcing a failure. [ 88.500836][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.500860][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.4.52 Not tainted syzkaller #0 PREEMPT(full) [ 88.500878][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.500887][ T5998] Call Trace: [ 88.500892][ T5998] [ 88.500898][ T5998] dump_stack_lvl+0x100/0x190 [ 88.500923][ T5998] should_fail_ex.cold+0x5/0xa [ 88.500945][ T5998] _copy_from_user+0x2e/0xd0 [ 88.500968][ T5998] sctp_setsockopt+0x8cc/0xb370 [ 88.500997][ T5998] ? __pfx_sctp_setsockopt+0x10/0x10 [ 88.501019][ T5998] ? __fget_files+0x215/0x3d0 [ 88.501039][ T5998] ? selinux_socket_setsockopt+0x6a/0x80 [ 88.501066][ T5998] ? sock_common_setsockopt+0x2e/0xf0 [ 88.501084][ T5998] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 88.501104][ T5998] do_sock_setsockopt+0xf3/0x1d0 [ 88.501124][ T5998] __sys_setsockopt+0x195/0x220 [ 88.501150][ T5998] __x64_sys_setsockopt+0xbd/0x160 [ 88.501172][ T5998] ? do_syscall_64+0xae/0x790 [ 88.501189][ T5998] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.501205][ T5998] do_syscall_64+0x123/0x790 [ 88.501224][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.501240][ T5998] RIP: 0033:0x7fe08079e159 [ 88.501253][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.501266][ T5998] RSP: 002b:00007fe07e9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.501282][ T5998] RAX: ffffffffffffffda RBX: 00007fe080a26180 RCX: 00007fe08079e159 [ 88.501292][ T5998] RDX: 0000000000000012 RSI: 0000000000000084 RDI: 0000000000000003 [ 88.501301][ T5998] RBP: 00007fe07e9d5090 R08: 0000000000000004 R09: 0000000000000000 [ 88.501310][ T5998] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.501319][ T5998] R13: 00007fe080a26218 R14: 00007fe080a26180 R15: 00007fff44372ef8 [ 88.501339][ T5998] [ 88.689677][ T30] audit: type=1400 audit(1788187614.040:289): avc: denied { create } for pid=5996 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.709813][ T2281] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.766847][ T2281] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.767764][ T2281] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 88.806846][ T2281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.806910][ T2281] usb 4-1: SerialNumber: syz [ 88.980996][ T2281] hub 4-1:1.0: bad descriptor, ignoring hub [ 88.987640][ T2281] hub 4-1:1.0: probe with driver hub failed with error -5 [ 89.078414][ T2281] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 89.087779][ T2281] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 89.087882][ T2281] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 89.701277][ T6010] netdevsim netdevsim0 ªªªªª»: renamed from netdevsim0 (while UP) [ 89.758867][ T31] usb 4-1: USB disconnect, device number 2 [ 91.148668][ T2281] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.299307][ T2281] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 91.309323][ T2281] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 91.309349][ T2281] usb 5-1: config 255 has no interface number 0 [ 91.309369][ T2281] usb 5-1: config 255 interface 97 has no altsetting 0 [ 91.332788][ T2281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.332811][ T2281] usb 5-1: Product: syz [ 91.332825][ T2281] usb 5-1: Manufacturer: syz [ 91.332835][ T2281] usb 5-1: SerialNumber: syz [ 91.754409][ T6020] tmpfs: Bad value for 'mpol' [ 92.021141][ T2281] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 92.058141][ T2281] usb 5-1: USB disconnect, device number 2 [ 92.333455][ T6033] syz_tun: entered allmulticast mode [ 92.344296][ T6033] Bluetooth: MGMT ver 1.23 [ 92.351582][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 92.381284][ T6035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=6035 comm=syz.1.67 [ 92.681150][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 92.681194][ T30] audit: type=1400 audit(1788187618.020:303): avc: denied { ioctl } for pid=6036 comm="syz.0.68" path="socket:[9440]" dev="sockfs" ino=9440 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.988850][ T30] audit: type=1400 audit(1788187619.330:304): avc: denied { setopt } for pid=6041 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.623341][ T6042] ======================================================= [ 94.623341][ T6042] WARNING: The mand mount option has been deprecated and [ 94.623341][ T6042] and is ignored by this kernel. Remove the mand [ 94.623341][ T6042] option from the mount to silence this warning. [ 94.623341][ T6042] ======================================================= [ 95.038241][ T30] audit: type=1400 audit(1788187619.970:305): avc: denied { mount } for pid=6041 comm="syz.4.69" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.063331][ T30] audit: type=1400 audit(1788187620.410:306): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.142647][ T30] audit: type=1400 audit(1788187620.490:307): avc: denied { prog_load } for pid=6044 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.269183][ T30] audit: type=1400 audit(1788187620.620:308): avc: denied { connect } for pid=6046 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.291259][ T6032] syz_tun: left allmulticast mode [ 95.294056][ T30] audit: type=1400 audit(1788187620.640:309): avc: denied { read } for pid=6046 comm="syz.4.70" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.294095][ T30] audit: type=1400 audit(1788187620.640:310): avc: denied { open } for pid=6046 comm="syz.4.70" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.294326][ T30] audit: type=1400 audit(1788187620.640:311): avc: denied { ioctl } for pid=6046 comm="syz.4.70" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.339039][ T30] audit: type=1800 audit(1788187621.680:312): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.61" name="addr_trtype" dev="configfs" ino=9470 res=0 errno=0 [ 96.409535][ T6060] nvmet_tcp: address family 255 not supported [ 97.418913][ T92] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 97.826517][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 97.833315][ T30] audit: type=1400 audit(1788187623.170:333): avc: denied { read write } for pid=6081 comm="syz.0.82" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.859933][ T30] audit: type=1400 audit(1788187623.170:334): avc: denied { open } for pid=6081 comm="syz.0.82" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.897998][ T30] audit: type=1400 audit(1788187623.240:335): avc: denied { map } for pid=6081 comm="syz.0.82" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.909576][ T92] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 97.911396][ T92] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.911426][ T92] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.911465][ T92] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.911488][ T92] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.911516][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.913667][ T92] usb 2-1: config 0 descriptor?? [ 98.061442][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.104269][ T6095] vlan2: entered allmulticast mode [ 98.104319][ T6095] bridge1: entered allmulticast mode [ 98.139441][ T6095] bridge1: port 1(erspan0) entered blocking state [ 98.146995][ T6095] bridge1: port 1(erspan0) entered disabled state [ 98.154123][ T6095] erspan0: entered allmulticast mode [ 98.161553][ T6095] erspan0: entered promiscuous mode [ 98.167918][ T6095] bridge1: port 1(erspan0) entered blocking state [ 98.168775][ T6095] bridge1: port 1(erspan0) entered forwarding state [ 98.234421][ T6098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.85'. [ 98.288461][ T30] audit: type=1400 audit(1788187623.630:336): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.341436][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.341481][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.344238][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.344260][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.344277][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.344294][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.344310][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.344327][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.344343][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.344360][ T92] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 98.401202][ T92] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 99.677426][ T30] audit: type=1800 audit(1788187625.020:337): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.86" name="addr_trtype" dev="configfs" ino=10299 res=0 errno=0 [ 99.733450][ T30] audit: type=1800 audit(1788187625.060:338): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.86" name="addr_traddr" dev="configfs" ino=10300 res=0 errno=0 [ 99.733578][ T30] audit: type=1800 audit(1788187625.070:339): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.86" name="addr_trsvcid" dev="configfs" ino=10301 res=0 errno=0 [ 99.733677][ T30] audit: type=1400 audit(1788187625.070:340): avc: denied { write } for pid=6102 comm="syz.4.86" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.733756][ T30] audit: type=1400 audit(1788187625.080:341): avc: denied { write } for pid=6102 comm="syz.4.86" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.733790][ T6104] nvmet_tcp: address family 255 not supported [ 100.140883][ T30] audit: type=1400 audit(1788187625.490:342): avc: denied { name_bind } for pid=6105 comm="syz.0.87" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 100.462872][ T9] usb 2-1: USB disconnect, device number 4 [ 100.957518][ T6124] input: syz1 as /devices/virtual/input/input7 [ 102.074550][ T6131] ªªªªªª: renamed from vlan0 (while UP) [ 102.147910][ T6138] netlink: 52 bytes leftover after parsing attributes in process `syz.3.96'. [ 102.177275][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.177641][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.199866][ T6141] netlink: 52 bytes leftover after parsing attributes in process `syz.3.96'. [ 102.338658][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.038929][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 103.047883][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.074140][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.086213][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.101442][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.125857][ T31] usb 5-1: config 0 descriptor?? [ 103.228781][ T31] hub 5-1:0.0: bad descriptor, ignoring hub [ 103.235325][ T31] hub 5-1:0.0: probe with driver hub failed with error -5 [ 103.253633][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 103.508919][ T6153] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 103.575959][ T6153] random: crng reseeded on system resumption [ 103.576832][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 103.576845][ T30] audit: type=1400 audit(1788187628.920:355): avc: denied { write } for pid=6152 comm="syz.3.101" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.576880][ T30] audit: type=1400 audit(1788187628.920:356): avc: denied { open } for pid=6152 comm="syz.3.101" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.731504][ T6128] netlink: 168 bytes leftover after parsing attributes in process `syz.0.94'. [ 103.748103][ T6128] netlink: 168 bytes leftover after parsing attributes in process `syz.0.94'. [ 103.918842][ T30] audit: type=1400 audit(1788187629.220:357): avc: denied { read write } for pid=6152 comm="syz.3.101" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.918906][ T30] audit: type=1400 audit(1788187629.220:358): avc: denied { open } for pid=6152 comm="syz.3.101" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.918953][ T30] audit: type=1400 audit(1788187629.220:359): avc: denied { ioctl } for pid=6152 comm="syz.3.101" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.057166][ T30] audit: type=1400 audit(1788187629.400:360): avc: denied { firmware_load } for pid=6152 comm="syz.3.101" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 104.217227][ T30] audit: type=1400 audit(1788187629.560:361): avc: denied { write } for pid=6164 comm="syz.1.100" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.241508][ T30] audit: type=1400 audit(1788187629.590:362): avc: denied { write } for pid=6164 comm="syz.1.100" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.265514][ T6165] nvmet_tcp: address family 255 not supported [ 104.367647][ T6153] syz.3.101 (6153) used greatest stack depth: 19632 bytes left [ 105.513615][ T30] audit: type=1400 audit(1788187630.860:363): avc: denied { read write } for pid=6182 comm="syz.4.109" name="radio8" dev="devtmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.539228][ T5696] usb 5-1: USB disconnect, device number 3 [ 105.547936][ T30] audit: type=1400 audit(1788187630.890:364): avc: denied { open } for pid=6182 comm="syz.4.109" path="/dev/radio8" dev="devtmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.749271][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.838817][ T92] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.878763][ T9] usb 2-1: device descriptor read/64, error -71 [ 105.993886][ T92] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 105.994851][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.994887][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.005075][ T92] usb 5-1: config 0 descriptor?? [ 106.011722][ T92] pwc: Askey VC010 type 2 USB webcam detected. [ 106.179469][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.611988][ T9] usb 2-1: device descriptor read/64, error -71 [ 106.649635][ T5985] IPVS: starting estimator thread 0... [ 106.669468][ T2281] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.719220][ T9] usb usb2-port1: attempt power cycle [ 106.738655][ T6195] IPVS: using max 48 ests per chain, 115200 per kthread [ 106.818859][ T2281] usb 3-1: Using ep0 maxpacket: 8 [ 106.819651][ T2281] usb 3-1: New USB device found, idVendor=187f, idProduct=0301, bcdDevice=1d.f0 [ 106.821010][ T2281] usb 3-1: config 129 has an invalid interface number: 138 but max is 0 [ 106.821310][ T2281] usb 3-1: config 129 has no interface number 0 [ 106.821345][ T2281] usb 3-1: config 129 interface 138 has no altsetting 0 [ 106.823764][ T2281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.823789][ T2281] usb 3-1: Product: syz [ 106.823970][ T2281] usb 3-1: Manufacturer: syz [ 106.823988][ T2281] usb 3-1: SerialNumber: syz [ 106.845747][ T92] pwc: recv_control_msg error -32 req 02 val 2b00 [ 106.846533][ T92] pwc: recv_control_msg error -32 req 02 val 2700 [ 106.847336][ T92] pwc: recv_control_msg error -32 req 02 val 2c00 [ 106.847901][ T92] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.008551][ T6199] FAULT_INJECTION: forcing a failure. [ 107.008551][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 107.022006][ T6199] CPU: 1 UID: 0 PID: 6199 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 107.022031][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.022042][ T6199] Call Trace: [ 107.022048][ T6199] [ 107.022055][ T6199] dump_stack_lvl+0x100/0x190 [ 107.022087][ T6199] should_fail_ex.cold+0x5/0xa [ 107.022114][ T6199] should_failslab+0xc2/0x120 [ 107.022137][ T6199] __kmalloc_noprof+0xfc/0x840 [ 107.022155][ T6199] ? rcu_is_watching+0x13/0xc0 [ 107.022179][ T6199] ? tomoyo_encode2+0xfb/0x3c0 [ 107.022201][ T6199] tomoyo_encode2+0xfb/0x3c0 [ 107.022221][ T6199] tomoyo_encode+0x29/0x50 [ 107.022237][ T6199] tomoyo_realpath_from_path+0x18c/0x690 [ 107.022266][ T6199] tomoyo_check_open_permission+0x2af/0x3c0 [ 107.022292][ T6199] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 107.022317][ T6199] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 107.022347][ T6199] ? hook_file_open+0x248/0x8e0 [ 107.022392][ T6199] tomoyo_file_open+0x6b/0x90 [ 107.022414][ T6199] security_file_open+0xb5/0x1e0 [ 107.022434][ T6199] do_dentry_open+0x588/0x14d0 [ 107.022460][ T6199] vfs_open+0x82/0x3f0 [ 107.022486][ T6199] path_openat+0x19fa/0x2440 [ 107.022511][ T6199] ? __pfx_path_openat+0x10/0x10 [ 107.022539][ T6199] do_file_open+0x20e/0x430 [ 107.022562][ T6199] ? __pfx_do_file_open+0x10/0x10 [ 107.022602][ T6199] ? _raw_spin_unlock+0x28/0x50 [ 107.022630][ T6199] ? alloc_fd+0x471/0x7a0 [ 107.022659][ T6199] do_sys_openat2+0x10f/0x1e0 [ 107.022682][ T6199] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.022705][ T6199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.022727][ T6199] ? __fget_files+0x21f/0x3d0 [ 107.022751][ T6199] __x64_sys_openat+0x12d/0x210 [ 107.022774][ T6199] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.022796][ T6199] ? ksys_write+0x1ac/0x250 [ 107.022821][ T6199] do_syscall_64+0x123/0x790 [ 107.022844][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.022862][ T6199] RIP: 0033:0x7f54f539e159 [ 107.022878][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.022894][ T6199] RSP: 002b:00007f54f62ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.022911][ T6199] RAX: ffffffffffffffda RBX: 00007f54f5625fa0 RCX: 00007f54f539e159 [ 107.022923][ T6199] RDX: 0000000000101082 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 107.022934][ T6199] RBP: 00007f54f62ed090 R08: 0000000000000000 R09: 0000000000000000 [ 107.022944][ T6199] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 107.022954][ T6199] R13: 00007f54f5626038 R14: 00007f54f5625fa0 R15: 00007fff2e181b58 [ 107.022979][ T6199] [ 107.032750][ T6199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.039264][ T6201] FAULT_INJECTION: forcing a failure. [ 107.039264][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 107.039292][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 107.039310][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.039319][ T6201] Call Trace: [ 107.039324][ T6201] [ 107.039330][ T6201] dump_stack_lvl+0x100/0x190 [ 107.039356][ T6201] should_fail_ex.cold+0x5/0xa [ 107.039378][ T6201] should_failslab+0xc2/0x120 [ 107.039397][ T6201] kmem_cache_alloc_noprof+0x92/0x6a0 [ 107.039414][ T6201] ? do_getname+0x35/0x390 [ 107.039438][ T6201] do_getname+0x35/0x390 [ 107.039461][ T6201] user_path_at+0x26/0x60 [ 107.039478][ T6201] __x64_sys_mount+0x1fb/0x310 [ 107.039500][ T6201] ? __pfx___x64_sys_mount+0x10/0x10 [ 107.039528][ T6201] do_syscall_64+0x123/0x790 [ 107.039547][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.039563][ T6201] RIP: 0033:0x7fa19e39e159 [ 107.039576][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.039590][ T6201] RSP: 002b:00007fa19f253028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.039606][ T6201] RAX: ffffffffffffffda RBX: 00007fa19e625fa0 RCX: 00007fa19e39e159 [ 107.039617][ T6201] RDX: 0000200000000c00 RSI: 0000200000000b00 RDI: 0000000000000000 [ 107.039626][ T6201] RBP: 00007fa19f253090 R08: 0000000000000000 R09: 0000000000000000 [ 107.039635][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.039645][ T6201] R13: 00007fa19e626038 R14: 00007fa19e625fa0 R15: 00007ffd265ef758 [ 107.039666][ T6201] [ 107.059843][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.083032][ T9] usb 2-1: device descriptor read/8, error -71 [ 107.310373][ T2281] smsusb:smsusb_probe: board id=12, interface number 138 [ 107.316140][ T2281] usb 3-1: USB disconnect, device number 3 [ 107.319168][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.346912][ T9] usb 2-1: device descriptor read/8, error -71 [ 107.381774][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 107.449293][ T9] usb usb2-port1: unable to enumerate USB device [ 107.728893][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 107.879205][ T9] usb 4-1: Invalid ep0 maxpacket: 9 [ 108.009173][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 108.158691][ T9] usb 4-1: Invalid ep0 maxpacket: 9 [ 108.159182][ T9] usb usb4-port1: attempt power cycle [ 108.569364][ T92] pwc: recv_control_msg error -71 req 04 val 1400 [ 108.569716][ T92] pwc: recv_control_msg error -71 req 02 val 2000 [ 108.571833][ T92] pwc: recv_control_msg error -71 req 02 val 2100 [ 108.572278][ T92] pwc: recv_control_msg error -71 req 04 val 1500 [ 108.579364][ T92] pwc: recv_control_msg error -71 req 02 val 2500 [ 108.579713][ T92] pwc: recv_control_msg error -71 req 02 val 2400 [ 108.580029][ T92] pwc: recv_control_msg error -71 req 02 val 2600 [ 108.580336][ T92] pwc: recv_control_msg error -71 req 02 val 2900 [ 108.582478][ T92] pwc: recv_control_msg error -71 req 02 val 2800 [ 108.583791][ T92] pwc: recv_control_msg error -71 req 04 val 1100 [ 108.586280][ T92] pwc: recv_control_msg error -71 req 04 val 1200 [ 108.608875][ T92] pwc: Registered as video103. [ 108.630501][ T92] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 108.683432][ T92] usb 5-1: USB disconnect, device number 4 [ 108.699936][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 108.722192][ T9] usb 4-1: Invalid ep0 maxpacket: 9 [ 108.787358][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 108.787402][ T30] audit: type=1400 audit(1788187634.130:371): avc: denied { create } for pid=6226 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.849814][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 108.869868][ T9] usb 4-1: Invalid ep0 maxpacket: 9 [ 108.870086][ T9] usb usb4-port1: unable to enumerate USB device [ 108.905391][ T30] audit: type=1400 audit(1788187634.250:372): avc: denied { cmd } for pid=6226 comm="iou-wrk-6229" path="socket:[11407]" dev="sockfs" ino=11407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.573533][ T30] audit: type=1400 audit(1788187634.920:373): avc: denied { append } for pid=6238 comm="syz.2.124" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.610404][ T30] audit: type=1400 audit(1788187634.960:374): avc: denied { append } for pid=6238 comm="syz.2.124" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.738407][ T6239] usb usb7: usbfs: process 6239 (syz.2.124) did not claim interface 9 before use [ 110.410250][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.128'. [ 110.410298][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 110.490109][ T30] audit: type=1400 audit(1788187635.840:375): avc: denied { watch } for pid=6261 comm="syz.1.130" path="/21" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.659072][ T30] audit: type=1400 audit(1788187636.000:376): avc: denied { open } for pid=6263 comm="syz.3.131" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.168970][ T30] audit: type=1400 audit(1788187636.490:377): avc: denied { ioctl } for pid=6263 comm="syz.3.131" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10556 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.553744][ T9] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 111.749342][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 111.772274][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 111.772315][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.772336][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.772356][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 111.772376][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 111.830431][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 111.831321][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.831348][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.831368][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 111.831389][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 111.845979][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 111.846019][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.846040][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.846060][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 111.846079][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.312265][ T9] usb 2-1: string descriptor 0 read error: -22 [ 112.312381][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.327563][ T30] audit: type=1400 audit(1788187637.670:378): avc: denied { ioctl } for pid=6268 comm="syz.2.132" path="socket:[11466]" dev="sockfs" ino=11466 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.380520][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 112.727894][ T30] audit: type=1400 audit(1788187638.070:379): avc: denied { append } for pid=6276 comm="syz.4.136" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.859713][ T30] audit: type=1400 audit(1788187638.210:380): avc: denied { mount } for pid=6276 comm="syz.4.136" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 114.971348][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 114.971374][ T30] audit: type=1400 audit(1788187639.910:382): avc: denied { setopt } for pid=6286 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.019350][ T5696] usb 2-1: USB disconnect, device number 9 [ 116.425413][ T30] audit: type=1400 audit(1788187640.960:383): avc: denied { getopt } for pid=6293 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.425451][ T30] audit: type=1400 audit(1788187641.320:384): avc: denied { module_load } for pid=6293 comm="syz.2.140" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=1417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 116.979570][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 117.061912][ T6308] vlan2: entered allmulticast mode [ 117.067139][ T6308] bridge1: entered allmulticast mode [ 118.003596][ T30] audit: type=1400 audit(1788187642.880:385): avc: denied { mount } for pid=6309 comm="syz.2.145" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 118.003669][ T30] audit: type=1400 audit(1788187642.900:386): avc: denied { mount } for pid=6309 comm="syz.2.145" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.199163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 118.598299][ T6317] FAULT_INJECTION: forcing a failure. [ 118.598299][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 118.599070][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.1.146 Not tainted syzkaller #0 PREEMPT(full) [ 118.599092][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.599102][ T6317] Call Trace: [ 118.599108][ T6317] [ 118.599115][ T6317] dump_stack_lvl+0x100/0x190 [ 118.599139][ T6317] should_fail_ex.cold+0x5/0xa [ 118.599155][ T6317] should_failslab+0xc2/0x120 [ 118.599169][ T6317] kmem_cache_alloc_noprof+0x92/0x6a0 [ 118.599181][ T6317] ? jbd2__journal_start+0x194/0x6b0 [ 118.599202][ T6317] jbd2__journal_start+0x194/0x6b0 [ 118.599221][ T6317] __ext4_journal_start_sb+0x314/0x610 [ 118.599235][ T6317] ? ext4_dirty_inode+0xa1/0x130 [ 118.599248][ T6317] ? inode_maybe_inc_iversion+0x169/0x220 [ 118.599262][ T6317] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 118.599275][ T6317] ext4_dirty_inode+0xa1/0x130 [ 118.599289][ T6317] ? rcu_is_watching+0x13/0xc0 [ 118.599304][ T6317] __mark_inode_dirty+0x1f3/0x16e0 [ 118.599324][ T6317] file_update_time_flags+0x49c/0x520 [ 118.599342][ T6317] kiocb_modified+0x79/0xa0 [ 118.599357][ T6317] ext4_write_checks+0xa5/0x240 [ 118.599369][ T6317] ext4_buffered_write_iter+0xbe/0x3c0 [ 118.599387][ T6317] ext4_file_write_iter+0xa0f/0x1d90 [ 118.599399][ T6317] ? find_held_lock+0x2b/0x80 [ 118.599418][ T6317] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 118.599428][ T6317] ? __x64_sys_pwrite64+0x1eb/0x250 [ 118.599444][ T6317] vfs_write+0x6af/0x1050 [ 118.599461][ T6317] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 118.599474][ T6317] ? __pfx_vfs_write+0x10/0x10 [ 118.599489][ T6317] ? find_held_lock+0x2b/0x80 [ 118.599513][ T6317] __x64_sys_pwrite64+0x1eb/0x250 [ 118.599524][ T6317] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 118.599539][ T6317] do_syscall_64+0x123/0x790 [ 118.599553][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.599567][ T6317] RIP: 0033:0x7efed319e159 [ 118.599577][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.599588][ T6317] RSP: 002b:00007efed3fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 118.599598][ T6317] RAX: ffffffffffffffda RBX: 00007efed3426090 RCX: 00007efed319e159 [ 118.599605][ T6317] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 118.599611][ T6317] RBP: 00007efed3fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.599617][ T6317] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.599624][ T6317] R13: 00007efed3426128 R14: 00007efed3426090 R15: 00007fffe800c7e8 [ 118.599637][ T6317] [ 118.990839][ T6299] bridge1: port 1(erspan0) entered blocking state [ 118.990910][ T6299] bridge1: port 1(erspan0) entered disabled state [ 118.990996][ T6299] erspan0: entered allmulticast mode [ 118.995043][ T6299] erspan0: entered promiscuous mode [ 118.998951][ T6299] bridge1: port 1(erspan0) entered blocking state [ 118.999028][ T6299] bridge1: port 1(erspan0) entered forwarding state [ 119.273830][ T30] audit: type=1400 audit(1788187644.620:387): avc: denied { bind } for pid=6321 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.369456][ T6326] syz.3.147 (6326) used greatest stack depth: 18952 bytes left [ 120.507467][ T30] audit: type=1400 audit(1788187645.850:388): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 121.549137][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 123.030474][ T30] audit: type=1400 audit(1788187648.380:389): avc: denied { sqpoll } for pid=6339 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.748327][ T30] audit: type=1400 audit(1788187649.090:390): avc: denied { wake_alarm } for pid=6339 comm="syz.4.153" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.517516][ T30] audit: type=1326 audit(1788187649.860:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4e899e159 code=0x0 [ 124.836755][ T30] audit: type=1400 audit(1788187650.180:392): avc: denied { setopt } for pid=6364 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.865523][ T6365] netlink: 'syz.4.157': attribute type 8 has an invalid length. [ 124.935971][ T30] audit: type=1400 audit(1788187650.280:393): avc: denied { write } for pid=6364 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.168010][ T30] audit: type=1400 audit(1788187651.510:394): avc: denied { mounton } for pid=6373 comm="syz.4.162" path="/36/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.210105][ T6378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 126.949391][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'. [ 127.260483][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.260544][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.367268][ T30] audit: type=1400 audit(1788187652.710:395): avc: denied { node_bind } for pid=6386 comm="syz.1.164" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 127.901142][ T30] audit: type=1400 audit(1788187653.250:396): avc: denied { listen } for pid=6392 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.920720][ T30] audit: type=1400 audit(1788187653.250:397): avc: denied { connect } for pid=6392 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.205053][ T30] audit: type=1800 audit(1788187653.540:398): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.160" name="addr_trtype" dev="configfs" ino=10787 res=0 errno=0 [ 128.221950][ T30] audit: type=1400 audit(1788187653.570:399): avc: denied { write } for pid=6395 comm="syz.0.160" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.223013][ T30] audit: type=1400 audit(1788187653.570:400): avc: denied { write } for pid=6395 comm="syz.0.160" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.223934][ T6397] nvmet_tcp: address family 255 not supported [ 130.358690][ T1213] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 130.518114][ T30] audit: type=1400 audit(1788187655.860:401): avc: denied { mount } for pid=6416 comm="syz.1.173" name="/" dev="rpc_pipefs" ino=10847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 130.545398][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.173'. [ 130.546810][ T30] audit: type=1400 audit(1788187655.890:402): avc: denied { write } for pid=6416 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.590166][ T1213] usb 5-1: not running at top speed; connect to a high speed hub [ 130.590202][ T1213] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 130.591306][ T1213] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.591345][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.593730][ T30] audit: type=1400 audit(1788187655.940:403): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 130.604420][ T1213] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 130.749161][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 131.268610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.380885][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'. [ 131.542694][ T31] usb 1-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 131.558223][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 131.605451][ T31] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 131.605511][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 131.628098][ T30] audit: type=1400 audit(1788187656.960:404): avc: denied { write } for pid=6411 comm="syz.4.170" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.654280][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.662734][ T31] usb 1-1: Product: syz [ 131.667004][ T31] usb 1-1: Manufacturer: syz [ 131.667022][ T31] usb 1-1: SerialNumber: syz [ 131.840160][ T6437] nvmet_tcp: address family 255 not supported [ 132.157127][ T30] audit: type=1800 audit(1788187657.160:405): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.179" name="addr_trtype" dev="configfs" ino=11762 res=0 errno=0 [ 132.157462][ T30] audit: type=1800 audit(1788187657.170:406): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.179" name="addr_traddr" dev="configfs" ino=11763 res=0 errno=0 [ 132.157660][ T30] audit: type=1800 audit(1788187657.180:407): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.179" name="addr_trsvcid" dev="configfs" ino=11764 res=0 errno=0 [ 132.157807][ T30] audit: type=1400 audit(1788187657.180:408): avc: denied { write } for pid=6435 comm="syz.2.179" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.157953][ T30] audit: type=1400 audit(1788187657.190:409): avc: denied { write } for pid=6435 comm="syz.2.179" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.158117][ T30] audit: type=1400 audit(1788187657.220:410): avc: denied { name_connect } for pid=6433 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 134.909400][ T1213] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 134.909847][ T1213] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 134.910069][ T1213] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 134.913603][ T1213] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 134.925118][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.926584][ T1213] usb 5-1: USB disconnect, device number 5 [ 134.928015][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 134.937770][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.940720][ T31] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 134.943208][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.958880][ T5333] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 135.079465][ T30] audit: type=1400 audit(1788187660.430:411): avc: denied { read write } for pid=6443 comm="syz.2.180" name="frontend0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 135.111695][ T30] audit: type=1400 audit(1788187660.430:412): avc: denied { open } for pid=6443 comm="syz.2.180" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 135.116129][ T6446] FAULT_INJECTION: forcing a failure. [ 135.116129][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.116155][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) [ 135.116173][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.116182][ T6446] Call Trace: [ 135.116187][ T6446] [ 135.116194][ T6446] dump_stack_lvl+0x100/0x190 [ 135.116229][ T6446] should_fail_ex.cold+0x5/0xa [ 135.116251][ T6446] _copy_to_user+0x32/0xd0 [ 135.116277][ T6446] simple_read_from_buffer+0xcb/0x170 [ 135.116297][ T6446] proc_fail_nth_read+0x1af/0x230 [ 135.116317][ T6446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.116335][ T6446] ? rw_verify_area+0xce/0x6d0 [ 135.116357][ T6446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.116375][ T6446] vfs_read+0x1e4/0xb40 [ 135.116398][ T6446] ? lock_acquire+0x1d1/0x380 [ 135.116414][ T6446] ? __fget_files+0x34/0x3d0 [ 135.116432][ T6446] ? __pfx_vfs_read+0x10/0x10 [ 135.116453][ T6446] ? find_held_lock+0x2b/0x80 [ 135.116474][ T6446] ? __fget_files+0x215/0x3d0 [ 135.116495][ T6446] ? __fget_files+0x21f/0x3d0 [ 135.116519][ T6446] ksys_read+0x12a/0x250 [ 135.116541][ T6446] ? __pfx_ksys_read+0x10/0x10 [ 135.116570][ T6446] do_syscall_64+0x123/0x790 [ 135.116590][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.116607][ T6446] RIP: 0033:0x7fd4e895e98e [ 135.116620][ T6446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.116635][ T6446] RSP: 002b:00007fd4e9829fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.116651][ T6446] RAX: ffffffffffffffda RBX: 00007fd4e982a6c0 RCX: 00007fd4e895e98e [ 135.116662][ T6446] RDX: 000000000000000f RSI: 00007fd4e982a0a0 RDI: 0000000000000004 [ 135.116671][ T6446] RBP: 00007fd4e982a090 R08: 0000000000000000 R09: 0000000000000000 [ 135.116681][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.116691][ T6446] R13: 00007fd4e8c26128 R14: 00007fd4e8c26090 R15: 00007fff9e6203f8 [ 135.116712][ T6446] [ 135.162572][ T31] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 135.177172][ T31] usb 1-1: USB disconnect, device number 4 [ 135.317920][ T30] audit: type=1400 audit(1788187660.660:413): avc: denied { write } for pid=6449 comm="syz.4.182" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.357182][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.381017][ T6448] sit0: entered promiscuous mode [ 135.399039][ T6448] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 135.399058][ T6448] netlink: 1 bytes leftover after parsing attributes in process `syz.0.181'. [ 136.671816][ T6473] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.988985][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 137.835506][ T6486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.190'. [ 138.755873][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 138.755916][ T30] audit: type=1400 audit(1788187664.100:420): avc: denied { connect } for pid=6485 comm="syz.3.190" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.232912][ T30] audit: type=1800 audit(1788187664.580:421): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.193" name="addr_trtype" dev="configfs" ino=11885 res=0 errno=0 [ 139.282260][ T30] audit: type=1800 audit(1788187664.620:422): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.193" name="addr_traddr" dev="configfs" ino=11886 res=0 errno=0 [ 139.314660][ T30] audit: type=1800 audit(1788187664.660:423): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.193" name="addr_trsvcid" dev="configfs" ino=11887 res=0 errno=0 [ 139.344184][ T6498] nvmet_tcp: address family 255 not supported [ 139.356740][ T30] audit: type=1400 audit(1788187664.690:424): avc: denied { write } for pid=6494 comm="syz.3.193" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.380030][ T30] audit: type=1400 audit(1788187664.690:425): avc: denied { write } for pid=6494 comm="syz.3.193" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.340333][ T6501] FAULT_INJECTION: forcing a failure. [ 140.340333][ T6501] name failslab, interval 1, probability 0, space 0, times 0 [ 140.354064][ T2281] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.372775][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 140.372802][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.372813][ T6501] Call Trace: [ 140.372819][ T6501] [ 140.372826][ T6501] dump_stack_lvl+0x100/0x190 [ 140.372859][ T6501] should_fail_ex.cold+0x5/0xa [ 140.372880][ T6501] ? lockdep_hardirqs_on+0x7d/0x110 [ 140.372907][ T6501] should_failslab+0xc2/0x120 [ 140.372929][ T6501] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 140.372948][ T6501] ? sidtab_sid2str_get+0x84/0x670 [ 140.372968][ T6501] ? sidtab_sid2str_get+0x17a/0x670 [ 140.372992][ T6501] kmemdup_noprof+0x29/0x60 [ 140.373019][ T6501] sidtab_sid2str_get+0x17a/0x670 [ 140.373042][ T6501] security_sid_to_context_core+0x373/0x700 [ 140.373075][ T6501] avc_audit_post_callback+0x109/0x910 [ 140.373098][ T6501] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 140.373117][ T6501] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 140.373136][ T6501] ? skb_put+0x138/0x180 [ 140.373160][ T6501] ? audit_log_n_string+0x2a3/0x5a0 [ 140.373196][ T6501] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 140.373214][ T6501] common_lsm_audit+0x23f/0x2b0 [ 140.373233][ T6501] ? __pfx_common_lsm_audit+0x10/0x10 [ 140.373253][ T6501] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 140.373286][ T6501] slow_avc_audit+0x186/0x210 [ 140.373308][ T6501] ? __pfx_slow_avc_audit+0x10/0x10 [ 140.373332][ T6501] ? avc_denied+0x14a/0x190 [ 140.373355][ T6501] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 140.373380][ T6501] avc_has_perm+0x1a6/0x1e0 [ 140.373403][ T6501] ? __pfx_avc_has_perm+0x10/0x10 [ 140.373435][ T6501] sel_write_load+0x1a7/0x560 [ 140.373460][ T6501] ? __pfx_sel_write_load+0x10/0x10 [ 140.373490][ T6501] vfs_write+0x2aa/0x1050 [ 140.373519][ T6501] ? __pfx_sel_write_load+0x10/0x10 [ 140.373541][ T6501] ? lock_acquire+0x1d1/0x380 [ 140.373559][ T6501] ? __fget_files+0x34/0x3d0 [ 140.373580][ T6501] ? __pfx_vfs_write+0x10/0x10 [ 140.373604][ T6501] ? find_held_lock+0x2b/0x80 [ 140.373628][ T6501] ? __fget_files+0x215/0x3d0 [ 140.373653][ T6501] ? __fget_files+0x21f/0x3d0 [ 140.373678][ T6501] ksys_write+0x12a/0x250 [ 140.373695][ T6501] ? __pfx_ksys_write+0x10/0x10 [ 140.373730][ T6501] do_syscall_64+0x123/0x790 [ 140.373751][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.373774][ T6501] RIP: 0033:0x7fa19e39e159 [ 140.373789][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.373804][ T6501] RSP: 002b:00007fa19f232028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.373822][ T6501] RAX: ffffffffffffffda RBX: 00007fa19e626090 RCX: 00007fa19e39e159 [ 140.373834][ T6501] RDX: 000000000000fdcf RSI: 0000200000000000 RDI: 0000000000000003 [ 140.373845][ T6501] RBP: 00007fa19f232090 R08: 0000000000000000 R09: 0000000000000000 [ 140.373856][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.373866][ T6501] R13: 00007fa19e626128 R14: 00007fa19e626090 R15: 00007ffd265ef758 [ 140.373899][ T6501] [ 140.536682][ T2281] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 140.556920][ T2281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.556961][ T2281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.556973][ T2281] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.556986][ T2281] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.557006][ T2281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.783608][ T30] audit: type=1400 audit(1788187665.690:426): avc: denied { load_policy } for pid=6499 comm="syz.0.189" ssid=147 tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 140.784595][ T6501] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 140.784781][ T6501] SELinux: failed to load policy [ 141.126077][ T30] audit: type=1400 audit(1788187666.470:427): avc: denied { create } for pid=6509 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.147782][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.164061][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.165621][ T30] audit: type=1400 audit(1788187666.510:428): avc: denied { ioctl } for pid=6496 comm="syz.2.194" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.206670][ T30] audit: type=1400 audit(1788187666.550:429): avc: denied { setopt } for pid=6506 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.618621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 141.648739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 141.998599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.236664][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.200'. [ 142.492960][ T6510] tipc: Started in network mode [ 142.493004][ T6510] tipc: Node identity 7f000001, cluster identity 4711 [ 142.494271][ T6510] tipc: New replicast peer: 127.0.0.0 [ 142.495227][ T6510] tipc: Enabled bearer , priority 10 [ 142.610083][ T2281] gud 3-1:1.0: Failed to add properties (error=-71) [ 142.616886][ T2281] gud 3-1:1.0: probe with driver gud failed with error -71 [ 142.695336][ T2281] usb 3-1: USB disconnect, device number 4 [ 142.937401][ T6525] jffs2: notice: (6525) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 143.016038][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 143.016090][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.202'. [ 143.030921][ T6525] geneve2: entered promiscuous mode [ 143.030938][ T6525] geneve2: entered allmulticast mode [ 143.099197][ T2281] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.329708][ T2281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 143.439573][ T2281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.813080][ T92] tipc: Node number set to 2130706433 [ 144.465716][ T2281] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 144.603571][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 144.714663][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 144.714709][ T30] audit: type=1400 audit(1788187670.030:433): avc: denied { remount } for pid=6539 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.570430][ T6543] veth3: entered promiscuous mode [ 145.575721][ T6543] veth3: entered allmulticast mode [ 145.579748][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'. [ 145.660834][ T5333] usb 3-1: USB disconnect, device number 5 [ 145.827676][ T6551] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 145.937254][ T6523] openvswitch: netlink: IPv4 tunnel dst address is zero [ 146.210742][ T30] audit: type=1400 audit(1788187671.550:434): avc: denied { connect } for pid=6553 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.680982][ T30] audit: type=1800 audit(1788187672.030:435): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.211" name="addr_trtype" dev="configfs" ino=11986 res=0 errno=0 [ 146.734003][ T30] audit: type=1800 audit(1788187672.070:436): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.211" name="addr_traddr" dev="configfs" ino=11987 res=0 errno=0 [ 146.771939][ T30] audit: type=1400 audit(1788187672.120:437): avc: denied { write } for pid=6558 comm="syz.3.211" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.773007][ T30] audit: type=1400 audit(1788187672.120:438): avc: denied { write } for pid=6558 comm="syz.3.211" name="subsystems" dev="configfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.773861][ T6560] nvmet_tcp: address family 255 not supported [ 149.220422][ T6581] busy [ 149.491437][ T5921] IPVS: starting estimator thread 0... [ 149.599127][ T6583] IPVS: using max 44 ests per chain, 105600 per kthread [ 150.129590][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.214'. [ 150.630102][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 150.639734][ T6596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.759706][ T30] audit: type=1400 audit(1788187676.110:439): avc: denied { mount } for pid=6597 comm="syz.0.219" name="/" dev="hugetlbfs" ino=12039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 150.939143][ T6604] random: crng reseeded on system resumption [ 151.694791][ T30] audit: type=1400 audit(1788187677.040:440): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 151.721442][ T30] audit: type=1400 audit(1788187677.070:441): avc: denied { create } for pid=6603 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.780398][ T6614] fuse: Bad value for 'fd' [ 152.116626][ T30] audit: type=1400 audit(1788187677.460:442): avc: denied { bind } for pid=6610 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.116702][ T30] audit: type=1400 audit(1788187677.460:443): avc: denied { listen } for pid=6610 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.284512][ T30] audit: type=1400 audit(1788187677.630:444): avc: denied { create } for pid=6621 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.534100][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.683525][ T25] usb 5-1: device descriptor read/64, error -71 [ 152.948701][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.267180][ T25] usb 5-1: device descriptor read/64, error -71 [ 153.369579][ T25] usb usb5-port1: attempt power cycle [ 153.728892][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.813766][ T25] usb 5-1: device descriptor read/8, error -71 [ 154.048755][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.158273][ T25] usb 5-1: device descriptor read/8, error -71 [ 154.270517][ T6637] smpboot: CPU 1 is now offline [ 154.285922][ T25] usb usb5-port1: unable to enumerate USB device [ 154.407222][ T6645] fuse: Unknown parameter '0xffffffffffffffff' [ 155.532092][ T30] audit: type=1400 audit(1788187680.880:445): avc: denied { write } for pid=6625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.431400][ T6659] kAFS: No cell specified [ 157.462328][ T30] audit: type=1400 audit(1788187682.810:446): avc: denied { write } for pid=6665 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.102635][ T6655] busy [ 158.173484][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'. [ 159.326958][ T6681] binder: 6679:6681 ioctl c00c6211 0 returned -14 [ 159.397553][ T30] audit: type=1400 audit(1788187684.740:447): avc: denied { bind } for pid=6679 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.397591][ T30] audit: type=1400 audit(1788187684.740:448): avc: denied { node_bind } for pid=6679 comm="syz.3.234" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 159.719294][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 159.885749][ T30] audit: type=1400 audit(1788187685.230:449): avc: denied { write } for pid=6676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.910326][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 159.924853][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.066182][ T9] usb 4-1: config 0 descriptor?? [ 160.113749][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 161.222487][ T30] audit: type=1400 audit(1788187686.570:450): avc: denied { write } for pid=6712 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.010414][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'. [ 162.094965][ T30] audit: type=1400 audit(1788187687.430:451): avc: denied { mount } for pid=6709 comm="syz.4.242" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 162.134580][ T30] audit: type=1400 audit(1788187687.480:452): avc: denied { search } for pid=6709 comm="syz.4.242" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 162.134630][ T30] audit: type=1400 audit(1788187687.480:453): avc: denied { read } for pid=6709 comm="syz.4.242" name="export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 162.134657][ T30] audit: type=1400 audit(1788187687.480:454): avc: denied { open } for pid=6709 comm="syz.4.242" path="/48/nfsd/export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 162.236564][ T30] audit: type=1400 audit(1788187687.580:455): avc: denied { ioctl } for pid=6709 comm="syz.4.242" path="/dev/video36" dev="devtmpfs" ino=1038 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.278647][ T2281] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 162.382735][ T6720] 9p: Bad value for 'wfdno' [ 162.439201][ T2281] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 162.450034][ T2281] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.466468][ T2281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 162.474717][ T2281] usb 2-1: Product: syz [ 162.474728][ T2281] usb 2-1: Manufacturer: syz [ 162.474737][ T2281] usb 2-1: SerialNumber: syz [ 162.502564][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 162.502597][ T30] audit: type=1400 audit(1788187687.850:458): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 162.747468][ T2281] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.773763][ T2281] usb 2-1: USB disconnect, device number 10 [ 162.803924][ T2281] usblp0: removed [ 163.001705][ T30] audit: type=1400 audit(1788187688.350:459): avc: denied { read } for pid=6729 comm="syz.4.247" dev="sockfs" ino=12384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.169939][ T9] gp8psk: usb in 137 operation failed. [ 163.169961][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 163.169986][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 163.829563][ T9] usb 4-1: USB disconnect, device number 8 [ 163.902114][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.248'. [ 164.315211][ T6753] FAULT_INJECTION: forcing a failure. [ 164.315211][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 164.315247][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.4.253 Not tainted syzkaller #0 PREEMPT(full) [ 164.315261][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.315267][ T6753] Call Trace: [ 164.315271][ T6753] [ 164.315276][ T6753] dump_stack_lvl+0x100/0x190 [ 164.315296][ T6753] should_fail_ex.cold+0x5/0xa [ 164.315312][ T6753] should_failslab+0xc2/0x120 [ 164.315330][ T6753] __kmalloc_cache_noprof+0x91/0x6d0 [ 164.315351][ T6753] ? copy_mount_options+0x55/0x190 [ 164.315371][ T6753] copy_mount_options+0x55/0x190 [ 164.315390][ T6753] __x64_sys_mount+0x1ab/0x310 [ 164.315409][ T6753] ? __pfx___x64_sys_mount+0x10/0x10 [ 164.315428][ T6753] do_syscall_64+0x123/0x790 [ 164.315445][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.315456][ T6753] RIP: 0033:0x7fe08079e159 [ 164.315468][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.315479][ T6753] RSP: 002b:00007fe08158f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.315490][ T6753] RAX: ffffffffffffffda RBX: 00007fe080a25fa0 RCX: 00007fe08079e159 [ 164.315500][ T6753] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 164.315506][ T6753] RBP: 00007fe08158f090 R08: 00002000000004c0 R09: 0000000000000000 [ 164.315513][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.315519][ T6753] R13: 00007fe080a26038 R14: 00007fe080a25fa0 R15: 00007fff44372ef8 [ 164.315532][ T6753] [ 166.259334][ T6760] input: syz1 as /devices/virtual/input/input9 [ 166.267186][ T30] audit: type=1400 audit(1788187691.610:460): avc: denied { read } for pid=4952 comm="acpid" name="event4" dev="devtmpfs" ino=2868 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.267225][ T30] audit: type=1400 audit(1788187691.610:461): avc: denied { open } for pid=4952 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2868 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.267248][ T30] audit: type=1400 audit(1788187691.610:462): avc: denied { ioctl } for pid=4952 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2868 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.514258][ T6766] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 166.717877][ T6766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.800098][ T30] audit: type=1400 audit(1788187692.140:463): avc: denied { write } for pid=6763 comm="syz.3.256" name="usb_gadget" dev="configfs" ino=1387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.835708][ T6768] bond1: (slave geneve2): making interface the new active one [ 166.907283][ T6768] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 166.949451][ T5697] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 167.017454][ T6773] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 167.047967][ T30] audit: type=1400 audit(1788187692.390:464): avc: denied { mount } for pid=6772 comm="syz.1.249" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 167.112010][ T5697] usb 5-1: not running at top speed; connect to a high speed hub [ 167.112041][ T5697] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 167.133629][ T5697] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.133661][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.188337][ T5697] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 167.277664][ T6780] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.259'. [ 167.297709][ T6782] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.259'. [ 167.312576][ T30] audit: type=1400 audit(1788187692.660:465): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 167.478072][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 167.552456][ T6785] vlan2: entered allmulticast mode [ 167.552492][ T6785] bridge1: entered allmulticast mode [ 167.581096][ T6785] bridge1: port 1(erspan0) entered blocking state [ 167.587664][ T6785] bridge1: port 1(erspan0) entered disabled state [ 167.594370][ T6785] erspan0: entered allmulticast mode [ 167.607445][ T6785] erspan0: entered promiscuous mode [ 167.607917][ T6785] bridge1: port 1(erspan0) entered blocking state [ 167.607962][ T6785] bridge1: port 1(erspan0) entered forwarding state [ 167.675588][ T30] audit: type=1326 audit(1788187693.020:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.3.261" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54f539e159 code=0x0 [ 167.765750][ T5697] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 167.776163][ T5697] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 167.776198][ T5697] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 167.776485][ T5697] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 167.816471][ T5697] usb 5-1: USB disconnect, device number 10 [ 167.908902][ T30] audit: type=1400 audit(1788187693.250:467): avc: denied { write } for pid=6786 comm="syz.3.261" name="strings" dev="configfs" ino=12565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.976754][ T30] audit: type=1400 audit(1788187693.320:468): avc: denied { write } for pid=6786 comm="syz.3.261" name="configs" dev="configfs" ino=12564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.080687][ T6797] fuse: Unknown parameter '0xffffffffffffffff' [ 168.153612][ T30] audit: type=1400 audit(1788187693.500:469): avc: denied { mount } for pid=6796 comm="syz.2.264" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 169.084140][ T6800] busy [ 169.222822][ T6804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.266'. [ 169.502514][ T30] audit: type=1400 audit(1788187694.850:470): avc: denied { watch } for pid=6805 comm="syz.2.267" path="/49/file0" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.502555][ T30] audit: type=1400 audit(1788187694.850:471): avc: denied { watch_sb watch_reads } for pid=6805 comm="syz.2.267" path="/49/file0" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.697283][ T6815] input: syz1 as /devices/virtual/input/input10 [ 169.848747][ T5697] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.003329][ T30] audit: type=1400 audit(1788187695.350:472): avc: denied { create } for pid=6819 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.024444][ T5697] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.034991][ T5697] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.035013][ T5697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.035029][ T5697] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.035053][ T5697] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.035069][ T5697] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.140790][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.140824][ T5697] usb 4-1: Product: syz [ 170.140839][ T5697] usb 4-1: Manufacturer: syz [ 170.168242][ T5697] cdc_wdm 4-1:1.0: skipping garbage [ 170.175324][ T5697] cdc_wdm 4-1:1.0: skipping garbage [ 170.183372][ T30] audit: type=1400 audit(1788187695.530:473): avc: denied { ioctl } for pid=6819 comm="syz.4.271" path="socket:[12917]" dev="sockfs" ino=12917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.218482][ T30] audit: type=1400 audit(1788187695.560:474): avc: denied { bind } for pid=6819 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.258123][ T5697] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 170.266128][ T5697] cdc_wdm 4-1:1.0: Unknown control protocol [ 170.401230][ T6813] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 170.408004][ T30] audit: type=1400 audit(1788187695.750:475): avc: denied { read write } for pid=6812 comm="syz.3.268" name="cdc-wdm0" dev="devtmpfs" ino=2875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 170.501393][ T6813] XFS (nbd3): SB validate failed with error -5. [ 170.558822][ T5697] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.602715][ T2281] usb 4-1: USB disconnect, device number 9 [ 170.619311][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.718909][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 170.724414][ T5697] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.735557][ T5697] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 170.735589][ T5697] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.735608][ T5697] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.735623][ T5697] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.735638][ T5697] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.735666][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.791140][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 170.792614][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 170.818526][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.818544][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.818645][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 170.818671][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.843734][ T9] usb 3-1: config 0 descriptor?? [ 171.083452][ T5697] usb 5-1: GET_CAPABILITIES returned 0 [ 171.089503][ T5697] usbtmc 5-1:16.0: can't read capabilities [ 171.328239][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0002/input/input11 [ 171.354410][ T6820] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 171.367670][ T6843] FAULT_INJECTION: forcing a failure. [ 171.367670][ T6843] name failslab, interval 1, probability 0, space 0, times 0 [ 171.367703][ T6843] CPU: 0 UID: 0 PID: 6843 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(full) [ 171.367717][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.367723][ T6843] Call Trace: [ 171.367727][ T6843] [ 171.367732][ T6843] dump_stack_lvl+0x100/0x190 [ 171.367751][ T6843] should_fail_ex.cold+0x5/0xa [ 171.367766][ T6843] should_failslab+0xc2/0x120 [ 171.367780][ T6843] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 171.367792][ T6843] ? __alloc_skb+0x5b7/0x710 [ 171.367809][ T6843] ? __alloc_skb+0x140/0x710 [ 171.367827][ T6843] __alloc_skb+0x140/0x710 [ 171.367842][ T6843] ? __alloc_skb+0x5b7/0x710 [ 171.367858][ T6843] ? __pfx___alloc_skb+0x10/0x10 [ 171.367878][ T6843] netlink_alloc_large_skb+0x69/0x150 [ 171.367896][ T6843] netlink_sendmsg+0x680/0xda0 [ 171.367914][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.367932][ T6843] ? selinux_socket_sendmsg+0x198/0x2f0 [ 171.367951][ T6843] ____sys_sendmsg+0xa4d/0xbe0 [ 171.367964][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.367981][ T6843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.367998][ T6843] ? lock_acquire+0x1d1/0x380 [ 171.368009][ T6843] ? get_pid_task+0x2a/0x250 [ 171.368024][ T6843] ___sys_sendmsg+0x190/0x1e0 [ 171.368039][ T6843] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.368053][ T6843] ? get_pid_task+0x106/0x250 [ 171.368072][ T6843] ? find_held_lock+0x2b/0x80 [ 171.368095][ T6843] __sys_sendmsg+0x160/0x210 [ 171.368106][ T6843] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.368124][ T6843] do_syscall_64+0x123/0x790 [ 171.368138][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.368150][ T6843] RIP: 0033:0x7efed319e159 [ 171.368159][ T6843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.368170][ T6843] RSP: 002b:00007efed4007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.368181][ T6843] RAX: ffffffffffffffda RBX: 00007efed3425fa0 RCX: 00007efed319e159 [ 171.368188][ T6843] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 171.368194][ T6843] RBP: 00007efed4007090 R08: 0000000000000000 R09: 0000000000000000 [ 171.368200][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.368207][ T6843] R13: 00007efed3426038 R14: 00007efed3425fa0 R15: 00007fffe800c7e8 [ 171.368220][ T6843] [ 172.415456][ T5697] usb 5-1: USB disconnect, device number 11 [ 172.475235][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0002/input/input12 [ 172.650743][ T9] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 172.710522][ T9] usb 3-1: USB disconnect, device number 6 [ 172.731540][ T6849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.772645][ T6851] fuse: Unknown parameter '0xffffffffffffffff' [ 172.882231][ T6855] netlink: 132 bytes leftover after parsing attributes in process `syz.1.277'. [ 172.948025][ T6853] fido_id[6853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 173.770965][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 173.770991][ T30] audit: type=1400 audit(1788187699.120:480): avc: denied { getopt } for pid=6862 comm="syz.4.281" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.800198][ T30] audit: type=1400 audit(1788187699.150:481): avc: denied { read } for pid=6862 comm="syz.4.281" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.822041][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 173.851450][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 174.391545][ T30] audit: type=1400 audit(1788187699.740:482): avc: denied { name_bind } for pid=6874 comm="syz.3.286" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 174.429610][ T6876] netlink: 'syz.3.286': attribute type 9 has an invalid length. [ 174.448163][ T6877] overlayfs: missing 'lowerdir' [ 174.462713][ T6876] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 174.502615][ T6877] netlink: 11 bytes leftover after parsing attributes in process `syz.1.287'. [ 174.788342][ T30] audit: type=1400 audit(1788187700.130:483): avc: denied { connect } for pid=6887 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.930668][ T6891] netlink: 'syz.0.290': attribute type 1 has an invalid length. [ 174.930691][ T6891] netlink: 224 bytes leftover after parsing attributes in process `syz.0.290'. [ 175.009073][ T30] audit: type=1400 audit(1788187700.360:484): avc: denied { ioctl } for pid=6887 comm="syz.0.290" path="socket:[13265]" dev="sockfs" ino=13265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.042455][ T30] audit: type=1400 audit(1788187700.390:485): avc: denied { read write } for pid=6894 comm="syz.2.293" name="sg0" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.067402][ T30] audit: type=1400 audit(1788187700.420:486): avc: denied { open } for pid=6894 comm="syz.2.293" path="/dev/sg0" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.067869][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 175.107331][ T6898] capability: warning: `syz.4.284' uses deprecated v2 capabilities in a way that may be insecure [ 175.120853][ T30] audit: type=1400 audit(1788187700.470:487): avc: denied { ioctl } for pid=6894 comm="syz.2.293" path="/dev/sg0" dev="devtmpfs" ino=1100 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.272011][ T6903] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 175.289237][ T6903] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 175.331074][ T30] audit: type=1400 audit(1788187700.680:488): avc: denied { setopt } for pid=6904 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.366598][ T6909] fuse: Bad value for 'fd' [ 175.387837][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 175.488388][ T30] audit: type=1400 audit(1788187700.830:489): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 175.622317][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.299'. [ 175.768741][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.121178][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 176.148762][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 176.414338][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.449311][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.449328][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 176.449353][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.656143][ T9] usb 4-1: config 0 descriptor?? [ 176.987883][ T6934] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 177.077553][ T6927] netlink: 204 bytes leftover after parsing attributes in process `syz.0.303'. [ 177.222775][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 177.286814][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input13 [ 177.341761][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input14 [ 177.354908][ T6938] vlan0: entered allmulticast mode [ 177.362123][ T6938] bridge1: entered allmulticast mode [ 177.414753][ T6938] bridge1: port 1(erspan0) entered blocking state [ 177.414805][ T6938] bridge1: port 1(erspan0) entered disabled state [ 177.414871][ T6938] erspan0: entered allmulticast mode [ 177.435932][ T6938] erspan0: entered promiscuous mode [ 177.444303][ T6938] bridge1: port 1(erspan0) entered blocking state [ 177.444356][ T6938] bridge1: port 1(erspan0) entered forwarding state [ 177.589264][ T9] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 177.622148][ T9] usb 4-1: USB disconnect, device number 10 [ 177.845027][ T6945] fido_id[6945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 177.944090][ T6948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.311'. [ 178.253603][ T5725] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 178.894354][ T5725] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 178.942751][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.942780][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.942805][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.975408][ T5725] usb 2-1: config 0 descriptor?? [ 179.844300][ T6961] FAULT_INJECTION: forcing a failure. [ 179.844300][ T6961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.017868][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.1.310 Not tainted syzkaller #0 PREEMPT(full) [ 180.017886][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 180.017893][ T6961] Call Trace: [ 180.017897][ T6961] [ 180.017902][ T6961] dump_stack_lvl+0x100/0x190 [ 180.017923][ T6961] should_fail_ex.cold+0x5/0xa [ 180.017939][ T6961] strncpy_from_user+0x3b/0x2d0 [ 180.017959][ T6961] do_getname+0x78/0x390 [ 180.017978][ T6961] user_path_at+0x26/0x60 [ 180.017990][ T6961] __x64_sys_mount+0x1fb/0x310 [ 180.018006][ T6961] ? __pfx___x64_sys_mount+0x10/0x10 [ 180.018026][ T6961] do_syscall_64+0x123/0x790 [ 180.018043][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.018055][ T6961] RIP: 0033:0x7efed319e159 [ 180.018065][ T6961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.018075][ T6961] RSP: 002b:00007efed3fe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.018086][ T6961] RAX: ffffffffffffffda RBX: 00007efed3426090 RCX: 00007efed319e159 [ 180.018093][ T6961] RDX: 00002000000003c0 RSI: 0000200000000400 RDI: 00002000000000c0 [ 180.018100][ T6961] RBP: 00007efed3fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.018106][ T6961] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 180.018113][ T6961] R13: 00007efed3426128 R14: 00007efed3426090 R15: 00007fffe800c7e8 [ 180.018126][ T6961] [ 180.184234][ T5725] aquacomputer_d5next 0003:0C70:F0B6.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 180.205313][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 180.205338][ T30] audit: type=1400 audit(1788187705.550:493): avc: denied { connect } for pid=6947 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.263147][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.314'. [ 180.308385][ T30] audit: type=1400 audit(1788187705.650:494): avc: denied { ioctl } for pid=6947 comm="syz.1.310" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 180.439664][ T6971] overlayfs: conflicting options: nfs_export=on,index=off [ 180.659000][ T5725] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 180.817936][ T30] audit: type=1400 audit(1788187706.160:495): avc: denied { create } for pid=6982 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 180.839730][ T5725] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 180.851414][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.851445][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.851475][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.887881][ T5725] usb 3-1: config 0 descriptor?? [ 181.971110][ T5725] aquacomputer_d5next 0003:0C70:F0B6.0005: hidraw1: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 182.047830][ T30] audit: type=1400 audit(1788187707.390:496): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 182.677458][ T6993] FAULT_INJECTION: forcing a failure. [ 182.677458][ T6993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.677491][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.3.322 Not tainted syzkaller #0 PREEMPT(full) [ 182.677504][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.677510][ T6993] Call Trace: [ 182.677515][ T6993] [ 182.677519][ T6993] dump_stack_lvl+0x100/0x190 [ 182.677539][ T6993] should_fail_ex.cold+0x5/0xa [ 182.677555][ T6993] _copy_to_user+0x32/0xd0 [ 182.677574][ T6993] simple_read_from_buffer+0xcb/0x170 [ 182.677588][ T6993] proc_fail_nth_read+0x1af/0x230 [ 182.677602][ T6993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.677615][ T6993] ? rw_verify_area+0xce/0x6d0 [ 182.677631][ T6993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.677643][ T6993] vfs_read+0x1e4/0xb40 [ 182.677661][ T6993] ? lock_acquire+0x1d1/0x380 [ 182.677672][ T6993] ? __fget_files+0x34/0x3d0 [ 182.677684][ T6993] ? __pfx_vfs_read+0x10/0x10 [ 182.677699][ T6993] ? find_held_lock+0x2b/0x80 [ 182.677714][ T6993] ? __fget_files+0x215/0x3d0 [ 182.677729][ T6993] ? __fget_files+0x21f/0x3d0 [ 182.677745][ T6993] ksys_read+0x12a/0x250 [ 182.677761][ T6993] ? __pfx_ksys_read+0x10/0x10 [ 182.677782][ T6993] do_syscall_64+0x123/0x790 [ 182.677796][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.677807][ T6993] RIP: 0033:0x7f54f535e98e [ 182.677816][ T6993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.677827][ T6993] RSP: 002b:00007f54f62ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.677838][ T6993] RAX: ffffffffffffffda RBX: 00007f54f62ed6c0 RCX: 00007f54f535e98e [ 182.677845][ T6993] RDX: 000000000000000f RSI: 00007f54f62ed0a0 RDI: 0000000000000005 [ 182.677851][ T6993] RBP: 00007f54f62ed090 R08: 0000000000000000 R09: 0000000000000000 [ 182.677858][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.677864][ T6993] R13: 00007f54f5626038 R14: 00007f54f5625fa0 R15: 00007fff2e181b58 [ 182.677878][ T6993] [ 183.012766][ T5697] usb 3-1: USB disconnect, device number 7 [ 183.030989][ T6992] fido_id[6992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 183.728990][ T5599] Bluetooth: hci2: command 0x0406 tx timeout [ 183.737784][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 183.774955][ T6999] syzkaller1: entered promiscuous mode [ 183.774969][ T6999] syzkaller1: entered allmulticast mode [ 184.057329][ T9] usb 2-1: USB disconnect, device number 11 [ 184.081580][ T30] audit: type=1400 audit(1788187709.420:497): avc: denied { append } for pid=6998 comm="syz.0.324" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.169945][ T5697] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.331607][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 184.337081][ T5697] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 184.348404][ T5697] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.348421][ T5697] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.348432][ T5697] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.348453][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.348465][ T5697] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.348477][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.348498][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.401510][ T5697] usb 3-1: config 0 descriptor?? [ 184.533976][ T30] audit: type=1400 audit(1788187709.880:498): avc: denied { append } for pid=7005 comm="syz.4.329" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 185.359918][ T5697] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.397226][ T30] audit: type=1400 audit(1788187710.740:499): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 185.654663][ T4919] Bluetooth: hci0: command 0x0406 tx timeout [ 185.654698][ T4919] Bluetooth: hci1: command 0x0406 tx timeout [ 185.833536][ T30] audit: type=1400 audit(1788187711.180:500): avc: denied { read write } for pid=7000 comm="syz.2.326" name="lp0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 185.833588][ T30] audit: type=1400 audit(1788187711.180:501): avc: denied { open } for pid=7000 comm="syz.2.326" path="/dev/usb/lp0" dev="devtmpfs" ino=2952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 186.494729][ T92] usb 3-1: USB disconnect, device number 8 [ 186.514114][ T92] usblp0: removed [ 186.799065][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.934699][ T30] audit: type=1326 audit(1788187712.280:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7027 comm="syz.0.334" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa19e39e159 code=0x0 [ 186.963460][ T9] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 186.974838][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.987667][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.987690][ T9] usb 5-1: Product: syz [ 186.987704][ T9] usb 5-1: Manufacturer: syz [ 186.987719][ T9] usb 5-1: SerialNumber: syz [ 187.018003][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 187.041363][ T9] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 187.253004][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.253438][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.275640][ T9] usb 5-1: USB disconnect, device number 12 [ 187.415894][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.422716][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.536352][ T30] audit: type=1400 audit(1788187712.880:503): avc: denied { bind } for pid=7038 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.632810][ T30] audit: type=1400 audit(1788187712.980:504): avc: denied { create } for pid=7040 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.577648][ T30] audit: type=1400 audit(1788187713.920:505): avc: denied { getopt } for pid=7044 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 188.803969][ T7049] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.827770][ T30] audit: type=1400 audit(1788187714.170:506): avc: denied { setopt } for pid=7046 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.849318][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 188.946402][ T7054] netlink: 'syz.0.340': attribute type 1 has an invalid length. [ 189.119161][ T92] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 189.130603][ T30] audit: type=1400 audit(1788187714.480:507): avc: denied { read write } for pid=7060 comm="syz.1.343" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 189.130638][ T30] audit: type=1400 audit(1788187714.480:508): avc: denied { open } for pid=7060 comm="syz.1.343" path="/65/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 189.282452][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 191.081307][ T7066] busy [ 191.248998][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.345'. [ 191.249981][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.345'. [ 191.490464][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 191.503734][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 191.503770][ T30] audit: type=1400 audit(1788187716.850:513): avc: denied { create } for pid=7078 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.532224][ T30] audit: type=1400 audit(1788187716.880:514): avc: denied { setopt } for pid=7078 comm="syz.3.348" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.557927][ T30] audit: type=1400 audit(1788187716.900:515): avc: denied { map } for pid=7078 comm="syz.3.348" path="/65/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 191.756427][ T30] audit: type=1400 audit(1788187717.100:516): avc: denied { connect } for pid=7081 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.779964][ T92] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.780001][ T92] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 191.797176][ T92] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 191.797195][ T92] usb 3-1: can't read configurations, error -71 [ 191.845256][ T30] audit: type=1400 audit(1788187717.190:517): avc: denied { read } for pid=7081 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.040186][ T30] audit: type=1400 audit(1788187717.390:518): avc: denied { getopt } for pid=7081 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.072965][ T7082] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 192.149210][ T5725] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.309746][ T5725] usb 2-1: Using ep0 maxpacket: 8 [ 192.315972][ T5725] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 192.326067][ T5725] usb 2-1: config 252 has an invalid interface number: 101 but max is 0 [ 192.326088][ T5725] usb 2-1: config 252 has no interface number 0 [ 192.326108][ T5725] usb 2-1: config 252 interface 101 has no altsetting 0 [ 192.326126][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.372581][ T5725] pvrusb2: Hardware description: Terratec Grabster AV400 [ 192.385236][ T5725] pvrusb2: ********** [ 192.389465][ T5725] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 192.389474][ T5725] pvrusb2: Important functionality might not be entirely working. [ 192.389479][ T5725] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 192.389484][ T5725] pvrusb2: ********** [ 192.424994][ T5725] usb 2-1: selecting invalid altsetting 0 [ 192.435651][ T2339] pvrusb2: Invalid write control endpoint [ 193.309646][ T92] usb 2-1: USB disconnect, device number 12 [ 193.510539][ T2339] pvrusb2: Invalid write control endpoint [ 193.510560][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 193.510571][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 193.510577][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 193.510584][ T2339] pvrusb2: Device being rendered inoperable [ 193.511082][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 193.511113][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 193.600516][ T2339] pvrusb2: Attached sub-driver cx25840 [ 193.625232][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 193.635673][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 193.655964][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 193.859359][ T30] audit: type=1400 audit(1788187719.200:519): avc: denied { write } for pid=7097 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.758651][ T5869] IPVS: starting estimator thread 0... [ 194.849102][ T7115] IPVS: using max 78 ests per chain, 187200 per kthread [ 195.823622][ T7128] input: syz1 as /devices/virtual/input/input15 [ 197.579437][ T5697] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.729516][ T5725] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 197.739195][ T5697] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.749760][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.749790][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.772850][ T5697] usb 3-1: config 0 descriptor?? [ 197.868796][ T5725] usb 4-1: device descriptor read/64, error -71 [ 198.169480][ T5725] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 198.632473][ T5725] usb 4-1: device descriptor read/64, error -71 [ 198.761311][ T5725] usb usb4-port1: attempt power cycle [ 198.894014][ T7153] input: syz1 as /devices/virtual/input/input16 [ 199.026535][ T5697] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 199.039511][ T30] audit: type=1400 audit(1788187724.390:520): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 199.069725][ T5697] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input17 [ 199.139739][ T5725] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 199.161066][ T5725] usb 4-1: device descriptor read/8, error -71 [ 199.182995][ T30] audit: type=1400 audit(1788187724.530:521): avc: denied { create } for pid=7159 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.226402][ T7160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.372'. [ 199.247828][ T30] audit: type=1326 audit(1788187724.590:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e899e159 code=0x7ffc0000 [ 199.247865][ T30] audit: type=1326 audit(1788187724.590:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e899e159 code=0x7ffc0000 [ 199.309567][ T30] audit: type=1326 audit(1788187724.660:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4e899e159 code=0x7ffc0000 [ 199.309601][ T30] audit: type=1326 audit(1788187724.660:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e899e159 code=0x7ffc0000 [ 199.309628][ T30] audit: type=1326 audit(1788187724.660:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e899e159 code=0x7ffc0000 [ 199.398662][ T5725] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 199.408448][ T30] audit: type=1326 audit(1788187724.750:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4e899e159 code=0x7ffc0000 [ 199.408488][ T30] audit: type=1326 audit(1788187724.750:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e899e159 code=0x7ffc0000 [ 199.408511][ T30] audit: type=1326 audit(1788187724.750:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7146 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e899e159 code=0x7ffc0000 [ 199.438034][ T5725] usb 4-1: device descriptor read/8, error -71 [ 199.557321][ T5725] usb usb4-port1: unable to enumerate USB device [ 199.575951][ T5697] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 199.848946][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 199.885144][ T7168] FAULT_INJECTION: forcing a failure. [ 199.885144][ T7168] name failslab, interval 1, probability 0, space 0, times 0 [ 199.885188][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(full) [ 199.885202][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 199.885208][ T7168] Call Trace: [ 199.885212][ T7168] [ 199.885217][ T7168] dump_stack_lvl+0x100/0x190 [ 199.885236][ T7168] should_fail_ex.cold+0x5/0xa [ 199.885252][ T7168] should_failslab+0xc2/0x120 [ 199.885266][ T7168] __kmalloc_cache_noprof+0x91/0x6d0 [ 199.885282][ T7168] ? shrinker_alloc+0xf5/0xc90 [ 199.885303][ T7168] shrinker_alloc+0xf5/0xc90 [ 199.885320][ T7168] ? mark_held_locks+0x40/0x70 [ 199.885332][ T7168] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 199.885351][ T7168] ? rcu_is_watching+0x13/0xc0 [ 199.885366][ T7168] ? __pfx_shrinker_alloc+0x10/0x10 [ 199.885383][ T7168] ? lockdep_init_map_type+0x5c/0x250 [ 199.885395][ T7168] ? lockdep_init_map_type+0x5c/0x250 [ 199.885407][ T7168] ? __raw_spin_lock_init+0x3a/0x110 [ 199.885420][ T7168] ? __init_rwsem+0x10e/0x180 [ 199.885434][ T7168] sget_fc+0x979/0x1f20 [ 199.885454][ T7168] ? __pfx_set_anon_super_fc+0x10/0x10 [ 199.885470][ T7168] ? __pfx_sget_fc+0x10/0x10 [ 199.885486][ T7168] ? refcount_dec_not_one+0x136/0x1c0 [ 199.885502][ T7168] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 199.885517][ T7168] ? __kasan_kmalloc+0xaa/0xb0 [ 199.885529][ T7168] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 199.885544][ T7168] ? __kasan_kmalloc+0xaa/0xb0 [ 199.885557][ T7168] ? __pfx_mqueue_fill_super+0x10/0x10 [ 199.885570][ T7168] get_tree_nodev+0x28/0x190 [ 199.885581][ T7168] mqueue_get_tree+0xf1/0x130 [ 199.885595][ T7168] vfs_get_tree+0x92/0x320 [ 199.885610][ T7168] fc_mount_longterm+0x1a/0x270 [ 199.885622][ T7168] mq_init_ns+0x482/0x820 [ 199.885638][ T7168] copy_ipcs+0x3dd/0x7e0 [ 199.885655][ T7168] create_new_namespaces+0x20a/0xac0 [ 199.885668][ T7168] ? security_capable+0x80/0x260 [ 199.885685][ T7168] unshare_nsproxy_namespaces+0xf2/0x220 [ 199.885698][ T7168] ksys_unshare+0x4a2/0xa70 [ 199.885712][ T7168] ? __pfx_ksys_unshare+0x10/0x10 [ 199.885724][ T7168] ? ksys_write+0x1ac/0x250 [ 199.885739][ T7168] __x64_sys_unshare+0x31/0x40 [ 199.885751][ T7168] do_syscall_64+0x123/0x790 [ 199.885765][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.885777][ T7168] RIP: 0033:0x7efed319e159 [ 199.885786][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.885796][ T7168] RSP: 002b:00007efed4007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 199.885814][ T7168] RAX: ffffffffffffffda RBX: 00007efed3425fa0 RCX: 00007efed319e159 [ 199.885821][ T7168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040000 [ 199.885827][ T7168] RBP: 00007efed4007090 R08: 0000000000000000 R09: 0000000000000000 [ 199.885833][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.885840][ T7168] R13: 00007efed3426038 R14: 00007efed3425fa0 R15: 00007fffe800c7e8 [ 199.885854][ T7168] [ 200.447649][ T5725] usb 3-1: USB disconnect, device number 11 [ 201.295780][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.382'. [ 202.058658][ T5697] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 202.136127][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 202.172827][ T7196] loop4: detected capacity change from 0 to 7 [ 202.188872][ T5697] usb 5-1: device descriptor read/64, error -71 [ 202.200591][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 202.217112][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.217275][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 202.238830][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.238886][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 202.262661][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.262717][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 202.290000][ T7195] vlan3: entered allmulticast mode [ 202.290021][ T7195] bridge2: entered allmulticast mode [ 202.332305][ T5629] Buffer I/O error on dev loop4, logical block 0, async page read [ 202.350740][ T5629] Buffer I/O error on dev loop4, logical block 0, async page read [ 202.429650][ T5697] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 202.542380][ T5725] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 202.568671][ T5697] usb 5-1: device descriptor read/64, error -71 [ 202.597618][ T5988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.609356][ T5598] Bluetooth: hci3: command 0x0406 tx timeout [ 202.680696][ T5697] usb usb5-port1: attempt power cycle [ 202.701393][ T5725] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 202.712760][ T5725] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 202.712783][ T5725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.712799][ T5725] usb 1-1: config 0 has no interface number 0 [ 202.712819][ T5725] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 202.712836][ T5725] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 256, setting to 64 [ 202.712852][ T5725] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.712868][ T5725] usb 1-1: config 0 interface 52 has no altsetting 0 [ 202.789124][ T5725] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 202.789148][ T5725] usb 1-1: Manufacturer: syz [ 202.805521][ T5725] usb 1-1: config 0 descriptor?? [ 202.821863][ T5725] hub 1-1:0.52: bad descriptor, ignoring hub [ 202.827924][ T5725] hub 1-1:0.52: probe with driver hub failed with error -5 [ 202.984852][ T5988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.030948][ T5697] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 203.089893][ T5725] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input18 [ 203.115813][ T5697] usb 5-1: device descriptor read/8, error -71 [ 203.307294][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.318835][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.326685][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.338852][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.347195][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.355542][ T5697] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 203.380023][ T5697] usb 5-1: device descriptor read/8, error -71 [ 203.419519][ T5988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.451192][ T9] usb 1-1: USB disconnect, device number 5 [ 203.490869][ T5697] usb usb5-port1: unable to enumerate USB device [ 203.617615][ T5988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.686372][ T7205] loop0: detected capacity change from 0 to 3904 [ 203.758733][ T7205] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 203.758759][ T7205] ldm_validate_privheads(): Disk read failed. [ 203.778506][ T7205] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 203.820580][ T7205] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 203.820605][ T7205] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 203.820616][ T7205] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 203.820624][ T7205] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 203.820656][ T7205] loop0: [ 203.820668][ T7205] loop0: partition table partially beyond EOD, truncated [ 204.327902][ T5988] bridge_slave_1: left allmulticast mode [ 204.327950][ T5988] bridge_slave_1: left promiscuous mode [ 204.329581][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.430934][ T5988] bridge_slave_0: left allmulticast mode [ 204.430960][ T5988] bridge_slave_0: left promiscuous mode [ 204.431070][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.517598][ T5988] erspan0: left allmulticast mode [ 204.541202][ T5988] erspan0: left promiscuous mode [ 204.546417][ T5988] bridge1: port 1(erspan0) entered disabled state [ 204.688958][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 205.408717][ T5598] Bluetooth: hci1: command tx timeout [ 205.600741][ T7231] xt_cgroup: invalid path, errno=-2 [ 205.621250][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 205.621275][ T30] audit: type=1400 audit(1788187730.960:566): avc: denied { ioctl } for pid=7230 comm="syz.4.395" path="socket:[15487]" dev="sockfs" ino=15487 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.969644][ T30] audit: type=1400 audit(1788187731.320:567): avc: denied { write } for pid=7223 comm="syz.0.393" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.498172][ T5598] Bluetooth: hci1: command tx timeout [ 209.693640][ T5598] Bluetooth: hci1: command tx timeout [ 211.681228][ C0] sched: DL replenish lagged too much [ 211.761038][ T52] Bluetooth: hci1: command tx timeout [ 250.239317][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.256580][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.177722][ T5598] Bluetooth: hci4: command 0x0406 tx timeout [ 317.870008][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.881620][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.861164][ T5598] Bluetooth: hci1: command 0x0406 tx timeout [ 347.698508][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 347.705471][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3258/1:b..l [ 347.713359][ C0] rcu: (detected by 0, t=10502 jiffies, g=26537, q=1304984 ncpus=1) [ 347.721402][ C0] task:kworker/u8:8 state:R running task stack:20664 pid:3258 tgid:3258 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 347.734947][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 347.740918][ C0] Call Trace: [ 347.744173][ C0] [ 347.747092][ C0] __schedule+0x1259/0x6920 [ 347.751608][ C0] ? __page_table_check_zero+0x284/0x410 [ 347.757231][ C0] ? __pfx___schedule+0x10/0x10 [ 347.762072][ C0] ? mark_held_locks+0x40/0x70 [ 347.766809][ C0] preempt_schedule_irq+0x4e/0x90 [ 347.771813][ C0] irqentry_exit+0x205/0xa10 [ 347.776463][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.782685][ C0] RIP: 0010:unwind_next_frame+0x9a/0x2090 [ 347.788391][ C0] Code: 46 19 00 00 49 8b 45 48 48 89 44 24 08 49 8d 45 38 48 89 c2 48 89 04 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 0c 19 00 00 49 8b 45 38 48 89 44 24 10 e8 12 0e 36 00 31 d2 [ 347.808066][ C0] RSP: 0018:ffffc9000e7cdf40 EFLAGS: 00000246 [ 347.814104][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc9000e7cdf04 [ 347.822051][ C0] RDX: 1ffff92001cf9bfd RSI: ffffffff8533a8d9 RDI: ffffc9000e7cdfb0 [ 347.830008][ C0] RBP: ffffc9000e7cdff8 R08: 0000000000000001 R09: 0000000000000007 [ 347.837967][ C0] R10: 0000000000000200 R11: 0000000000017344 R12: ffffffff81f5bde0 [ 347.845909][ C0] R13: ffffc9000e7cdfb0 R14: 0000000000000000 R15: ffff888034b54b00 [ 347.853854][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 347.860001][ C0] ? kmem_alloc_batch+0x49/0x170 [ 347.864917][ C0] ? kmem_alloc_batch+0x49/0x170 [ 347.869842][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 347.875983][ C0] arch_stack_walk+0x94/0xf0 [ 347.880559][ C0] ? kmem_alloc_batch+0x49/0x170 [ 347.885488][ C0] stack_trace_save+0x8e/0xc0 [ 347.890679][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 347.896043][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 347.900953][ C0] kasan_save_stack+0x30/0x50 [ 347.905608][ C0] ? kasan_save_stack+0x30/0x50 [ 347.910437][ C0] ? kasan_save_track+0x14/0x30 [ 347.915264][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 347.920257][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 347.925869][ C0] ? kmem_alloc_batch+0x49/0x170 [ 347.930812][ C0] kasan_save_track+0x14/0x30 [ 347.935469][ C0] __kasan_slab_alloc+0x89/0x90 [ 347.940307][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 347.945755][ C0] ? kmem_alloc_batch+0x49/0x170 [ 347.950684][ C0] kmem_alloc_batch+0x49/0x170 [ 347.955434][ C0] debug_objects_fill_pool+0x24d/0x590 [ 347.961139][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 347.967362][ C0] ? mark_held_locks+0x40/0x70 [ 347.972105][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 347.977887][ C0] __debug_object_init+0xb5/0x3d0 [ 347.982896][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 347.988510][ C0] ? mark_held_locks+0x40/0x70 [ 347.993261][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 347.999044][ C0] ? virtscsi_add_cmd+0x9f/0x160 [ 348.003962][ C0] __init_work+0x51/0x60 [ 348.008190][ C0] scsi_init_command+0x11a/0x290 [ 348.013111][ C0] scsi_queue_rq+0xc08/0x3c00 [ 348.017768][ C0] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 348.023292][ C0] ? sbitmap_find_bit+0x5d0/0x680 [ 348.028351][ C0] ? sbitmap_get+0x1d7/0x360 [ 348.032935][ C0] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 348.038892][ C0] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 348.044766][ C0] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 348.051083][ C0] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 348.057832][ C0] ? lock_acquire+0x1d1/0x380 [ 348.062479][ C0] ? blk_mq_run_hw_queue+0x314/0x670 [ 348.067750][ C0] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 348.073717][ C0] blk_mq_run_hw_queue+0x34b/0x670 [ 348.078803][ C0] blk_mq_dispatch_list+0x51d/0x1360 [ 348.084060][ C0] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 348.089837][ C0] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 348.095627][ C0] blk_mq_flush_plug_list+0x130/0x600 [ 348.100969][ C0] ? update_io_ticks+0x137/0x2a0 [ 348.105969][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 348.111831][ C0] ? __pfx_update_io_ticks+0x10/0x10 [ 348.117089][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 348.122956][ C0] blk_add_rq_to_plug+0x1ca/0x540 [ 348.127971][ C0] blk_mq_submit_bio+0x1e3a/0x3000 [ 348.133064][ C0] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 348.138508][ C0] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 348.144211][ C0] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 348.149902][ C0] __submit_bio+0x90/0x3d0 [ 348.154319][ C0] submit_bio_noacct_nocheck+0x549/0xc00 [ 348.160014][ C0] ? rcu_read_unlock+0x17/0x60 [ 348.164755][ C0] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 348.170890][ C0] ? __pfx___might_resched+0x10/0x10 [ 348.176159][ C0] submit_bio_noacct+0xc93/0x2130 [ 348.181160][ C0] ext4_io_submit+0xf7/0x1a0 [ 348.185726][ C0] ext4_bio_write_folio+0x709/0x1ab0 [ 348.190994][ C0] mpage_process_page_bufs+0x473/0x8b0 [ 348.196492][ C0] mpage_prepare_extent_to_map+0xb7f/0x1a20 [ 348.202371][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 348.208680][ C0] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 348.214302][ C0] ? ext4_init_io_end+0x24/0x170 [ 348.219269][ C0] ext4_do_writepages+0x9bc/0x3e80 [ 348.224382][ C0] ? arch_stack_walk+0x94/0xf0 [ 348.229141][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 348.234058][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 348.239598][ C0] ? ext4_writepages+0x34a/0x750 [ 348.244515][ C0] ext4_writepages+0x34a/0x750 [ 348.249268][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 348.254531][ C0] ? do_writepages+0x4b5/0x600 [ 348.259279][ C0] ? do_writepages+0x4b5/0x600 [ 348.264042][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 348.269318][ C0] do_writepages+0x278/0x600 [ 348.274088][ C0] ? __pfx_do_writepages+0x10/0x10 [ 348.279203][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 348.284465][ C0] ? writeback_sb_inodes+0x3e1/0x1c50 [ 348.289827][ C0] __writeback_single_inode+0x164/0x1560 [ 348.295446][ C0] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 348.301327][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 348.307374][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 348.312547][ C0] writeback_sb_inodes+0x766/0x1c50 [ 348.317736][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 348.323340][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 348.328267][ C0] ? _raw_spin_unlock+0x28/0x50 [ 348.333103][ C0] ? move_expired_inodes+0x5ea/0x8f0 [ 348.338376][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 348.343557][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 348.349333][ C0] ? queue_io+0x287/0x530 [ 348.353648][ C0] wb_writeback+0x6f6/0xb50 [ 348.358125][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 348.363123][ C0] ? get_nr_inodes+0x100/0x150 [ 348.367869][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.373044][ C0] wb_workfn+0x93f/0xc80 [ 348.377270][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 348.382539][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 348.387276][ C0] ? process_one_work+0x906/0x1b10 [ 348.392634][ C0] ? process_one_work+0x906/0x1b10 [ 348.397745][ C0] process_one_work+0xac7/0x1b10 [ 348.402677][ C0] ? __pfx_process_one_work+0x10/0x10 [ 348.408025][ C0] ? lock_acquire+0x1d1/0x380 [ 348.412770][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 348.417516][ C0] worker_thread+0x5ef/0xe50 [ 348.422084][ C0] ? __pfx_worker_thread+0x10/0x10 [ 348.427170][ C0] ? kthread+0x13a/0x450 [ 348.431385][ C0] ? __pfx_worker_thread+0x10/0x10 [ 348.436472][ C0] kthread+0x373/0x450 [ 348.440513][ C0] ? __pfx_kthread+0x10/0x10 [ 348.445078][ C0] ret_from_fork+0x730/0xd60 [ 348.449667][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 348.454774][ C0] ? __switch_to+0x800/0x10f0 [ 348.459439][ C0] ? __pfx_kthread+0x10/0x10 [ 348.464011][ C0] ret_from_fork_asm+0x1a/0x30 [ 348.468763][ C0]