last executing test programs: 9m50.63827362s ago: executing program 2 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) 9m50.322661318s ago: executing program 2 (id=469): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) tee(r2, r1, 0x200, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9m49.262550334s ago: executing program 2 (id=476): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0xee00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) statx(0xffffffffffffffff, 0x0, 0x400, 0x400, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) membarrier(0x8, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x5, 0x6, 0x4, 0xfffffff9, 0x94fc]}, &(0x7f0000000080)=0x54) 9m48.221740961s ago: executing program 2 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9m47.807881068s ago: executing program 2 (id=487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e) socketpair(0x1e, 0x80000, 0xfffffff8, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 9m46.417477456s ago: executing program 2 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000880)={@val={0x0, 0x6}, @void, @ipv4=@dccp={{0x2d, 0x4, 0x2, 0x5, 0x199, 0x67, 0x0, 0xa, 0x21, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x27, 0x3, 0x7, [{@loopback, 0x6}]}, @lsrr={0x83, 0x13, 0x33, [@private=0xa010100, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x4, 0x9, "100a14ab0c12b3"}, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0x2, [{@broadcast, 0x9}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0xca, 0x3, 0x4, [{@empty, 0xd}, {@broadcast, 0x4}, {@empty, 0x8}, {@multicast2, 0x5b13912b}]}, @cipso={0x86, 0x3b, 0x3, [{0x0, 0x8, "5595df470c36"}, {0x2, 0x6, "8d861b91"}, {0x5, 0xd, "c637998957798463d5a566"}, {0x6, 0x8, "c9954396ed13"}, {0x0, 0x12, "1cca88b1633bebe25271e5d958ec3c8e"}]}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0xa, 0x6, "fe550a", 0x7, "92317c"}, "7b5dbf1049373f50fa2a30a0a7a8477ed1539e8f181cbfebfba58708b2417f947a533638d59032da20212e1deda350ba6d9ffd217d6543f5e47ab29e53d67bec744a6a22ee6afcb9a62c429ccad53799fe81b7d1080f360deadcd64f471f0ff5982a902c4eacff8af014a17e502f048b3930e34bda54196a82fb77d87346e500a1675ecb4dc3800df0356f4eb27b4344e9472096d469d82f3b62b33bc4157959466e1ea5cd049b5012126943f7de0ea4dd5beaaef9473686e262566930a0fc8f82e606352d3e4efd2a2c7995dbe3a432a8fd99ec46"}}}, 0x19d) 9m44.57693097s ago: executing program 32 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000880)={@val={0x0, 0x6}, @void, @ipv4=@dccp={{0x2d, 0x4, 0x2, 0x5, 0x199, 0x67, 0x0, 0xa, 0x21, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x27, 0x3, 0x7, [{@loopback, 0x6}]}, @lsrr={0x83, 0x13, 0x33, [@private=0xa010100, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x4, 0x9, "100a14ab0c12b3"}, @timestamp_addr={0x44, 0x14, 0x37, 0x1, 0x2, [{@broadcast, 0x9}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0xca, 0x3, 0x4, [{@empty, 0xd}, {@broadcast, 0x4}, {@empty, 0x8}, {@multicast2, 0x5b13912b}]}, @cipso={0x86, 0x3b, 0x3, [{0x0, 0x8, "5595df470c36"}, {0x2, 0x6, "8d861b91"}, {0x5, 0xd, "c637998957798463d5a566"}, {0x6, 0x8, "c9954396ed13"}, {0x0, 0x12, "1cca88b1633bebe25271e5d958ec3c8e"}]}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0xa, 0x6, "fe550a", 0x7, "92317c"}, "7b5dbf1049373f50fa2a30a0a7a8477ed1539e8f181cbfebfba58708b2417f947a533638d59032da20212e1deda350ba6d9ffd217d6543f5e47ab29e53d67bec744a6a22ee6afcb9a62c429ccad53799fe81b7d1080f360deadcd64f471f0ff5982a902c4eacff8af014a17e502f048b3930e34bda54196a82fb77d87346e500a1675ecb4dc3800df0356f4eb27b4344e9472096d469d82f3b62b33bc4157959466e1ea5cd049b5012126943f7de0ea4dd5beaaef9473686e262566930a0fc8f82e606352d3e4efd2a2c7995dbe3a432a8fd99ec46"}}}, 0x19d) 9m23.491126939s ago: executing program 4 (id=543): syz_extract_tcp_res(0x0, 0x6, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000880)=ANY=[], 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f00000b8000/0xa000)=nil, 0xa000, 0x1000, 0x7, &(0x7f00001e2000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000740000/0x1000)=nil, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private0, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x39, &(0x7f0000000600)=[{&(0x7f0000000240)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$kcm(0x10, 0x2, 0x0) 9m21.922540483s ago: executing program 4 (id=546): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)=[{0x3, 0x200, 0x0, 0x0}], 0x1}) 9m18.758623903s ago: executing program 4 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r2, &(0x7f0000000000)=@in={0x2, 0x573, @empty}, 0x10) listen(r2, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='unc=\\127.0.0.1\\share,ip=127.0.0.1,port=1395,vers=3.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/fs/cifs/DebugData\x00', 0x0, 0x0) read(r3, &(0x7f0000000080)=""/104, 0x68) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='p:s/_ ./file', 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x24, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xc, 0x0, 0x0, 0xfffffffffffffff0, 0xc}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x17, 0x4, 0x9, 0x8, 0xb9a}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xad1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x8, 0xe9, &(0x7f00000003c0)=""/233, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x4, 0x8c}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000640)=[{0x2, 0x3, 0x3, 0x8}, {0x3, 0x1, 0xf, 0xa}, {0x2, 0x3, 0x5, 0x1}], 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x5c, 0x0, 0x5, 0xc000000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 9m17.508472561s ago: executing program 4 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)="73797a3016421c8fa04fdc54e30b5e545133ca82d2a7e0609decd21a9d093bd818da5a7c97046b8b12b409584118582651b0d92e5a0ffe76fc73f38be5211bbbe7183eeb89252a4110f6310633074c7051a327ebc5cd239a2e2a47a7ea354cc7f0140bd8b404d7afc221ef05c77424acd27cb00bfa9328ba05ffef4d3595c74bb9e6d2dc9dec09daf8d93285765dcf77a73f43f04ffae977fee3cc842686979b1a8220212a68481803e4e8bf74dd729bb72965cce4b0266b3291c991eb1dba9285d47d247cab72fefc076aa8bcaa5dbad51f2e399c6a20378a3f6bc114a7dcc3a3c28587b71816942e025f177d7bf02aa13803d5ef687752a5464b6aa6", 0xfd) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 9m15.661598044s ago: executing program 4 (id=552): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200086, 0x167) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x89) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = io_uring_setup(0x2a6a, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 9m12.42256664s ago: executing program 4 (id=559): fsopen(&(0x7f00000003c0)='affs\x00', 0x0) (fail_nth: 1) 8m57.052906384s ago: executing program 33 (id=559): fsopen(&(0x7f00000003c0)='affs\x00', 0x0) (fail_nth: 1) 2m37.950242017s ago: executing program 0 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f00002a7000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f00001d3000/0x1000)=nil) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0xf) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d000000003a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322c2eb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f8067b02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf913e0ae1253d38d3a4f0593447", 0x47f, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(0x0, 0x9, 0x88000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r6, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$security_evm(r7, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="026edf5233010000000000000030025a8b"], 0x12, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8b4) 2m36.391171534s ago: executing program 0 (id=1360): syz_extract_tcp_res(0x0, 0x6, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000880)=ANY=[], 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f00000b8000/0xa000)=nil, 0xa000, 0x1000, 0x7, &(0x7f00001e2000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000740000/0x1000)=nil, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private0, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224b04953ecf70e88f0d81c9921efe756ab560100000000000000391e5051d7f5adbadc308cdcd00a51f0f0111213572bcf82fe894f9c12d43b8b860cf06bb97e505d74", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x39, &(0x7f0000000600)=[{&(0x7f0000000240)='j', 0x1}], 0x1}}], 0x2, 0x14) socket$kcm(0x10, 0x2, 0x0) 2m35.540953879s ago: executing program 0 (id=1361): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xa, &(0x7f0000000140)={0x5, 0x2}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r4) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r6, 0x402, 0x80000021) readv(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m33.428049968s ago: executing program 0 (id=1364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xa, &(0x7f0000000140)={0x5, 0x2}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r4) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2000c054) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r6, 0x402, 0x80000021) readv(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c421fc107500c4417877c70f380bae000000000039010000d8c7c724028a000000ff1c240f01cb35040000000f4ecb66baa100b00cee028d3bea66450f3880213e41220a48b861000000000000000f23c00f21f80023f8f21ee6ca66baf80cf8b408c98703efefbafc0cb843b50000ef", 0x70}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m32.880818909s ago: executing program 0 (id=1366): add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x81, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000640)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/udc/dummy_udc.0/soft_connect\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20040000) write$FUSE_OPEN(r2, &(0x7f0000004b00)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="611040000000000095f9ff0000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m29.911903639s ago: executing program 0 (id=1370): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10002, 0xeb) close(r1) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = dup(r4) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xb, 0x5, 0xfff, 0x80000000, 0x8, 0x80000000, 0x200, 0x9}}) ftruncate(0xffffffffffffffff, 0x300004) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d0000000206000005"], 0x1d}}, 0x240cc8c0) 2m13.654845029s ago: executing program 34 (id=1370): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10002, 0xeb) close(r1) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = dup(r4) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xb, 0x5, 0xfff, 0x80000000, 0x8, 0x80000000, 0x200, 0x9}}) ftruncate(0xffffffffffffffff, 0x300004) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d0000000206000005"], 0x1d}}, 0x240cc8c0) 1m36.137886169s ago: executing program 6 (id=1495): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xa, &(0x7f0000000140)={0x5, 0x2}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="c7dadb58c9cfe47e7f9493580224177ebc4ab18a82e39f33cc13c2203e5c62595f192b401566c5ec12d954021742a77114b727955d9fe6422e41fcd1b5b8dfd886ada74fff7ca32e87126affbd3d9035cdb14d58eab10887f110797c9d7643e7103d87d178f6c07deb1784a8b736de462f0c7b8d27a42c0f99308d6db78f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r4) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r6, 0x402, 0x80000021) readv(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m35.506268507s ago: executing program 6 (id=1499): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10002, 0xeb) close(r1) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = dup(r4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xb, 0x5, 0xfff, 0x80000000, 0x8, 0x80000000, 0x200, 0x9}}) ftruncate(0xffffffffffffffff, 0x300004) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d0000000206000005"], 0x1d}}, 0x240cc8c0) 1m35.026670877s ago: executing program 6 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='a', 0x1) 1m33.741832644s ago: executing program 6 (id=1503): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x110008, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_unix(&(0x7f00000001c0)='./cgroup/file0\x00', &(0x7f0000000080)='./cgroup\x00', 0x0, 0x527568a3bd8455ad, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', 0x0, 0x120d080, 0x0) 1m32.598680434s ago: executing program 6 (id=1507): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0xd5d2, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080)=0x1, 0x7f08) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x103, 0x2, {0x0, 0x4, 0x80af, 0xf912}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x10000, 0xda, @value=0x80000000000000d0}) 1m32.213752456s ago: executing program 6 (id=1509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) ioctl$TUNSETOFFLOAD(r0, 0x89e0, 0x110e22fff6) 1m31.945228759s ago: executing program 35 (id=1509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) ioctl$TUNSETOFFLOAD(r0, 0x89e0, 0x110e22fff6) 5.150509078s ago: executing program 3 (id=1743): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x16, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x8001, 0x800c0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.321538873s ago: executing program 7 (id=1758): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.270510711s ago: executing program 1 (id=1759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.2253675s ago: executing program 5 (id=1760): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.089227966s ago: executing program 1 (id=1761): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000000000000000008d"], &(0x7f0000001200)=""/216, 0x2a, 0xd8, 0x1}, 0x28) 2.077563394s ago: executing program 3 (id=1762): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x9, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.945824386s ago: executing program 7 (id=1763): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791228000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.939886485s ago: executing program 5 (id=1764): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x0, 0x0, 0x3454}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, 0x0, &(0x7f00000000c0)=""/34}, 0x20) 1.899583735s ago: executing program 1 (id=1765): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071182a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.814016315s ago: executing program 3 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.813646284s ago: executing program 8 (id=1767): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007b014b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x1}, 0x21, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1.726162979s ago: executing program 5 (id=1768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000018000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.714261142s ago: executing program 7 (id=1769): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711845000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.654555683s ago: executing program 1 (id=1770): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004a00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x40, 0x20000000}, 0x0) 1.654231994s ago: executing program 3 (id=1771): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x0, 0x0, 0x3454}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r1}, &(0x7f00000002c0), &(0x7f0000000d80)}, 0x20) 1.645822051s ago: executing program 8 (id=1772): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x2, 0x4, 0x6a, 0x9, 0x2, 0x0, 0x70bd27, 0x25dfdbfd}, 0x10}}, 0x4000000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) 1.511787988s ago: executing program 3 (id=1773): timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a000011000000000000000000000008001200ffffff7f00000000000000000600320003000000000000000000000010006c00000000000000000000000000fc0200000000000000000000000000000400020001000000010000000000008003000000000000000600000000000000030006000000000002"], 0x88}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.458539034s ago: executing program 5 (id=1774): setreuid(0xffffffffffffffff, 0xee01) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) 1.458320021s ago: executing program 7 (id=1775): r0 = getpgid(0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 1.424646252s ago: executing program 1 (id=1776): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000000800)={0x0, 0x6, 0xc, {0x600000, 0xe}, 0xbfc, 0x1000}) 1.417915547s ago: executing program 8 (id=1777): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x24044890) 1.266406587s ago: executing program 3 (id=1778): socket$nl_generic(0x10, 0x3, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="052bb9afd9b0b5a60fd6884054769a999c79f8b0550f0bd43d73c306587116b4a1a603a91163de8520319b9d9032"], 0x0) 1.243138437s ago: executing program 5 (id=1779): r0 = syz_open_dev$loop(&(0x7f0000002780), 0x10000, 0x4001) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 1.130555791s ago: executing program 8 (id=1780): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) pread64(r3, &(0x7f0000019040)=""/102351, 0x18fcf, 0x3a) 1.049989716s ago: executing program 7 (id=1781): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/234, 0xea}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) 570.565829ms ago: executing program 5 (id=1782): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x164, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "000102030405060708090a0b0c0d0e0f"}}, @replay_esn_val={0x1c}]}, 0x164}}, 0x0) 432.001123ms ago: executing program 1 (id=1783): unshare(0x20000400) r0 = eventfd(0xfffffff9) ppoll(&(0x7f0000000380)=[{r0, 0x8090}], 0x1, 0x0, 0x0, 0x0) 245.877046ms ago: executing program 8 (id=1784): unshare(0x2a020400) setreuid(0x0, 0xee00) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 245.628317ms ago: executing program 7 (id=1785): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) fchdir(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x85, 0x40000, {r1}}, 0x20) 0s ago: executing program 8 (id=1786): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): different from the descriptor's value: 2 [ 690.418942][ T25] usb 6-1: config 5 interface 0 has no altsetting 1 [ 690.438429][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.447051][ T25] usb 6-1: Product: syz [ 690.452906][ T25] usb 6-1: Manufacturer: syz [ 690.457824][ T25] usb 6-1: SerialNumber: syz [ 690.466338][T11150] kAFS: No cell specified [ 690.498127][ T5612] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 690.498205][ T5612] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 690.498246][ T5612] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 690.498324][ T5612] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 690.535865][ T5799] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 690.563167][ T5612] usb 4-1: USB disconnect, device number 41 [ 690.697143][ T5799] usb 7-1: New USB device found, idVendor=0fb5, idProduct=0312, bcdDevice= 0.00 [ 690.698728][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.698764][ T5799] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.698808][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.702434][ T5799] usb 7-1: config 0 descriptor?? [ 690.790809][ T25] usb 6-1: USB disconnect, device number 34 [ 690.820069][ T8836] udevd[8836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:5.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 690.865833][ T5707] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 691.072701][ T5707] usb 2-1: Using ep0 maxpacket: 32 [ 691.086401][T11172] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 691.155899][ T5707] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 691.356261][ T5707] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 691.356308][ T5707] usb 2-1: config 0 has no interface number 0 [ 691.356389][ T5707] usb 2-1: config 0 interface 12 has no altsetting 0 [ 691.712444][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.712492][ T5707] usb 2-1: Product: syz [ 691.712548][ T5707] usb 2-1: Manufacturer: syz [ 691.712571][ T5707] usb 2-1: SerialNumber: syz [ 692.248679][ T5707] usb 2-1: config 0 descriptor?? [ 692.918144][T11171] option changes via remount are deprecated (pid=11170 comm=syz.1.1402) [ 693.646840][T11171] kAFS: No cell specified [ 693.660918][ T5707] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 693.661024][ T5707] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 693.661059][ T5707] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 693.661152][ T5707] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 693.706883][ T5707] usb 2-1: USB disconnect, device number 44 [ 693.736796][ T5799] usbhid 7-1:0.0: can't add hid device: -71 [ 693.736890][ T5799] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 693.773274][ T5799] usb 7-1: USB disconnect, device number 28 [ 693.903665][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.917732][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.930281][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.939740][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.947260][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.097940][ T5607] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 694.120147][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1406'. [ 694.256210][ T5607] usb 4-1: Using ep0 maxpacket: 32 [ 694.264209][ T5607] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 694.294025][ T5607] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 694.304023][ T5607] usb 4-1: config 0 has no interface number 0 [ 694.312486][ T5607] usb 4-1: config 0 interface 12 has no altsetting 0 [ 694.369872][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.379175][ T5607] usb 4-1: Product: syz [ 694.379239][ T5607] usb 4-1: Manufacturer: syz [ 694.383949][ T5607] usb 4-1: SerialNumber: syz [ 694.519974][ T5607] usb 4-1: config 0 descriptor?? [ 695.011957][T11191] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1409'. [ 695.084234][T11179] option changes via remount are deprecated (pid=11178 comm=syz.3.1407) [ 695.238359][T11202] loop9: detected capacity change from 0 to 2640 [ 695.252966][T11202] buffer_io_error: 6 callbacks suppressed [ 695.259689][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 695.566145][T11179] kAFS: No cell specified [ 695.709780][ T30] audit: type=1400 audit(1787914826.535:1208): avc: denied { map } for pid=11200 comm="syz.1.1411" path="socket:[35199]" dev="sockfs" ino=35199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 695.711203][ T30] audit: type=1400 audit(1787914826.535:1209): avc: denied { read } for pid=11200 comm="syz.1.1411" path="socket:[35199]" dev="sockfs" ino=35199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 695.864334][T11206] usb 1-1: USB disconnect, device number 20 [ 696.035980][ T52] Bluetooth: hci2: command tx timeout [ 696.459435][ T5607] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 696.459496][ T5607] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 696.459520][ T5607] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 696.459583][ T5607] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 696.467890][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469018][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469051][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469080][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469126][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469168][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469199][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469216][T11202] ldm_validate_partition_table(): Disk read failed. [ 696.469240][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469280][T11202] Buffer I/O error on dev loop9, logical block 0, async page read [ 696.469318][T11202] Dev loop9: unable to read RDB block 0 [ 696.476029][ T5607] usb 4-1: USB disconnect, device number 42 [ 696.575204][T11202] loop9: unable to read partition table [ 696.575427][T11202] loop_reread_partitions: partition scan of loop9 (D£ >‚³˜) failed (rc=-5) [ 696.577350][ T5804] block nbd0: Possible stuck request ffff888028277000: control (read@0,1024B). Runtime 30 seconds [ 696.577992][ T5804] block nbd0: Possible stuck request ffff8880282771c0: control (read@1024,1024B). Runtime 30 seconds [ 696.578026][ T5804] block nbd0: Possible stuck request ffff888028277380: control (read@2048,1024B). Runtime 30 seconds [ 696.578053][ T5804] block nbd0: Possible stuck request ffff888028277540: control (read@3072,1024B). Runtime 30 seconds [ 697.696027][ T5797] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 697.848037][T11180] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.855692][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.863578][T11180] bridge_slave_0: entered allmulticast mode [ 697.874791][T11180] bridge_slave_0: entered promiscuous mode [ 697.875913][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 697.876653][ T5797] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 697.877654][ T5797] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 697.877680][ T5797] usb 4-1: config 0 has no interface number 0 [ 697.877718][ T5797] usb 4-1: config 0 interface 12 has no altsetting 0 [ 697.879514][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.879539][ T5797] usb 4-1: Product: syz [ 697.879557][ T5797] usb 4-1: Manufacturer: syz [ 697.879574][ T5797] usb 4-1: SerialNumber: syz [ 697.948490][T11180] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.956015][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.956172][T11180] bridge_slave_1: entered allmulticast mode [ 697.957880][T11180] bridge_slave_1: entered promiscuous mode [ 697.963358][ T5797] usb 4-1: config 0 descriptor?? [ 698.077153][T11180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.099977][T11180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.116250][ T52] Bluetooth: hci2: command tx timeout [ 698.174821][T11180] team0: Port device team_slave_0 added [ 698.183922][T11180] team0: Port device team_slave_1 added [ 698.232736][T11180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.232792][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.238405][T11180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.243104][T11180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.243126][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.243152][T11180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.375364][T11219] option changes via remount are deprecated (pid=11218 comm=syz.3.1414) [ 698.381804][T11180] hsr_slave_0: entered promiscuous mode [ 698.382775][T11180] hsr_slave_1: entered promiscuous mode [ 698.385093][T11180] debugfs: 'hsr0' already exists in 'hsr' [ 698.385157][T11180] Cannot create hsr debugfs directory [ 698.753028][T11232] sctp: [Deprecated]: syz.6.1416 (pid 11232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 698.753028][T11232] Use struct sctp_sack_info instead [ 699.163422][T11219] kAFS: No cell specified [ 699.230927][ T5797] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 699.230989][ T5797] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 699.231021][ T5797] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 699.231085][ T5797] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 699.243773][ T5797] usb 4-1: USB disconnect, device number 43 [ 700.410343][ T52] Bluetooth: hci2: command tx timeout [ 700.700139][T11180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 700.710011][T11246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11246 comm=syz.6.1419 [ 700.727364][T11180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.736138][T11180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 700.748997][T11180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.810613][T11180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 701.842830][T11180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 701.843664][T11180] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 701.863299][T11180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.950925][ T1636] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 702.007198][T11180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.007782][T11257] jffs2: notice: (11257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 702.038772][T11257] xt_hashlimit: size too large, truncated to 1048576 [ 702.050199][T11180] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.064359][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.064481][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.099904][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.100007][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.108298][ T1636] usb 4-1: New USB device found, idVendor=0fb5, idProduct=0312, bcdDevice= 0.00 [ 702.111712][ T1636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.111746][ T1636] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.111785][ T1636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.115217][T11259] netlink: 'syz.6.1423': attribute type 1 has an invalid length. [ 702.122521][ T1636] usb 4-1: config 0 descriptor?? [ 702.200316][T11259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.436040][ T52] Bluetooth: hci2: command tx timeout [ 702.474324][T11244] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 702.577969][ T1636] usbhid 4-1:0.0: can't add hid device: -71 [ 702.578074][ T1636] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 702.586966][ T1636] usb 4-1: USB disconnect, device number 44 [ 703.428364][T11180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.607769][T11276] CIFS: Attempting to mount //127.0.0.1/share [ 703.786202][ T1636] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 703.911772][T11180] veth0_vlan: entered promiscuous mode [ 703.929674][T11180] veth1_vlan: entered promiscuous mode [ 703.959906][T11180] veth0_macvtap: entered promiscuous mode [ 703.970744][T11180] veth1_macvtap: entered promiscuous mode [ 704.016517][T11180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.048237][T11180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.119600][T11293] sctp: [Deprecated]: syz.5.1428 (pid 11293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 704.119600][T11293] Use struct sctp_sack_info instead [ 704.427523][T11276] CIFS: VFS: cifs_mount failed w/return code = -112 [ 704.505248][ T1636] usb 7-1: unable to get BOS descriptor or descriptor too short [ 704.507466][ T1636] usb 7-1: not running at top speed; connect to a high speed hub [ 704.507515][ T1636] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 704.508716][ T1636] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 704.508742][ T1636] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 704.508764][ T1636] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 704.508783][ T1636] usb 7-1: config 14 has no interface number 0 [ 704.508802][ T1636] usb 7-1: config 14 has no interface number 1 [ 704.508853][ T1636] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 704.508878][ T1636] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 704.508903][ T1636] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 704.508930][ T1636] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 704.508958][ T1636] usb 7-1: config 14 interface 57 has no altsetting 0 [ 704.508978][ T1636] usb 7-1: config 14 interface 228 has no altsetting 0 [ 704.510798][ T1636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.510823][ T1636] usb 7-1: Product: syz [ 704.510839][ T1636] usb 7-1: Manufacturer: syz [ 704.510855][ T1636] usb 7-1: SerialNumber: syz [ 704.519600][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.614016][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.696818][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.696874][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.837043][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.837099][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.922729][ T617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.930950][ T617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.925473][ T1636] legousbtower 7-1:14.57: interrupt endpoints not found [ 706.974909][T11314] jffs2: notice: (11314) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 707.050049][T11314] xt_hashlimit: size too large, truncated to 1048576 [ 707.127130][T11319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11319 comm=syz.1.1432 [ 707.139663][T11317] netlink: 'syz.5.1433': attribute type 1 has an invalid length. [ 707.298056][T11317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.337842][T11321] befs: (nbd3): unable to read superblock [ 707.391119][ T1636] legousbtower 7-1:14.228: get version request failed: -71 [ 707.391287][ T1636] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 707.424288][ T1636] usb 7-1: USB disconnect, device number 29 [ 707.655916][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1437'. [ 710.191630][T11338] sctp: [Deprecated]: syz.1.1440 (pid 11338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 710.191630][T11338] Use struct sctp_sack_info instead [ 711.219321][T11355] jffs2: notice: (11355) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 711.312571][T11355] xt_hashlimit: size too large, truncated to 1048576 [ 711.427584][T11361] netlink: 'syz.5.1446': attribute type 1 has an invalid length. [ 711.445063][T11361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.054285][T11369] CIFS: Attempting to mount //127.0.0.1/share [ 712.206381][T11375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11375 comm=syz.5.1450 [ 712.978252][T11369] CIFS: VFS: cifs_mount failed w/return code = -112 [ 713.519868][T11386] netlink: 'syz.1.1455': attribute type 12 has an invalid length. [ 713.519912][T11386] netlink: 'syz.1.1455': attribute type 29 has an invalid length. [ 713.519940][T11386] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1455'. [ 713.519962][T11386] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1455'. [ 713.695942][ T5707] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 713.707747][ T5607] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 713.848751][ T5707] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 713.851956][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.851982][ T5707] usb 6-1: Product: syz [ 713.851998][ T5707] usb 6-1: Manufacturer: syz [ 713.852015][ T5707] usb 6-1: SerialNumber: syz [ 713.861337][ T5707] usb 6-1: config 0 descriptor?? [ 713.864399][ T5707] hub 6-1:0.0: bad descriptor, ignoring hub [ 713.864423][ T5707] hub 6-1:0.0: probe with driver hub failed with error -5 [ 713.877899][ T5607] usb 4-1: unable to get BOS descriptor or descriptor too short [ 713.878500][ T5607] usb 4-1: not running at top speed; connect to a high speed hub [ 713.878527][ T5607] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 713.884126][ T5607] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 713.884153][ T5607] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 713.884176][ T5607] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 713.884197][ T5607] usb 4-1: config 14 has no interface number 0 [ 713.884216][ T5607] usb 4-1: config 14 has no interface number 1 [ 713.884288][ T5607] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 713.884314][ T5607] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 713.884359][ T5607] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 713.884410][ T5607] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 713.884437][ T5607] usb 4-1: config 14 interface 57 has no altsetting 0 [ 713.884457][ T5607] usb 4-1: config 14 interface 228 has no altsetting 0 [ 713.890665][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.890691][ T5607] usb 4-1: Product: syz [ 713.890707][ T5607] usb 4-1: Manufacturer: syz [ 713.890723][ T5607] usb 4-1: SerialNumber: syz [ 714.082627][ T5707] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 714.091182][ T5707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 714.092836][ T5707] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 714.092887][ T5707] usb 6-1: media controller created [ 714.141089][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 714.255693][ T5707] DVB: Unable to find symbol dib7000p_attach() [ 714.259897][ T5707] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 714.646840][ T5707] rc_core: IR keymap rc-dib0700-rc5 not found [ 714.647011][ T5707] Registered IR keymap rc-empty [ 714.647226][ T5707] dvb-usb: could not initialize remote control. [ 714.647237][ T5707] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 714.649971][ T5707] usb 6-1: USB disconnect, device number 35 [ 714.665710][ T5607] legousbtower 4-1:14.57: interrupt endpoints not found [ 714.676494][ T5707] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 715.135971][ T5607] legousbtower 4-1:14.228: get version request failed: -121 [ 715.136144][ T5607] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -121 [ 715.957713][ T5607] usb 4-1: USB disconnect, device number 45 [ 716.011913][T11400] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1458'. [ 716.285467][T11411] CIFS: Attempting to mount //127.0.0.1/share [ 716.496084][ T5607] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 717.031606][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1464'. [ 717.034759][ T30] audit: type=1400 audit(1787914847.855:1210): avc: denied { write } for pid=11416 comm="syz.7.1464" name="dlm" dev="configfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 717.038291][ T30] audit: type=1400 audit(1787914847.865:1211): avc: denied { write } for pid=11416 comm="syz.7.1464" name="dlm" dev="configfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 717.167327][ T5607] usb 2-1: unable to get BOS descriptor or descriptor too short [ 718.019956][ T5607] usb 2-1: not running at top speed; connect to a high speed hub [ 718.020006][ T5607] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 718.025369][T11411] CIFS: VFS: cifs_mount failed w/return code = -112 [ 718.045666][ T5607] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 718.045708][ T5607] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 718.045841][ T5607] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 718.045884][ T5607] usb 2-1: config 14 has no interface number 0 [ 718.045906][ T5607] usb 2-1: config 14 has no interface number 1 [ 718.045963][ T5607] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 718.045991][ T5607] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 718.046021][ T5607] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 718.046050][ T5607] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 718.046089][ T5607] usb 2-1: config 14 interface 57 has no altsetting 0 [ 718.046113][ T5607] usb 2-1: config 14 interface 228 has no altsetting 0 [ 718.153545][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.161739][ T5607] usb 2-1: Product: syz [ 718.161762][ T5607] usb 2-1: Manufacturer: syz [ 718.161779][ T5607] usb 2-1: SerialNumber: syz [ 719.829914][ T5607] legousbtower 2-1:14.57: interrupt endpoints not found [ 719.866608][ T5607] legousbtower 2-1:14.228: get version request failed: -71 [ 719.866776][ T5607] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 719.916091][ T5607] usb 2-1: USB disconnect, device number 45 [ 720.357990][T11439] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1472'. [ 720.396178][ T25] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 720.475859][ T5607] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 720.559397][ T25] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 720.574065][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.574119][ T25] usb 6-1: Product: syz [ 720.574140][ T25] usb 6-1: Manufacturer: syz [ 720.574161][ T25] usb 6-1: SerialNumber: syz [ 720.599326][ T25] usb 6-1: config 0 descriptor?? [ 720.608432][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 720.615702][ T25] hub 6-1:0.0: probe with driver hub failed with error -5 [ 720.626379][ T5607] usb 7-1: Using ep0 maxpacket: 32 [ 720.630101][ T5607] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 720.633992][ T5607] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 720.634017][ T5607] usb 7-1: config 0 has no interface number 0 [ 720.634055][ T5607] usb 7-1: config 0 interface 12 has no altsetting 0 [ 720.637196][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.637223][ T5607] usb 7-1: Product: syz [ 720.637241][ T5607] usb 7-1: Manufacturer: syz [ 720.637258][ T5607] usb 7-1: SerialNumber: syz [ 720.653678][ T5607] usb 7-1: config 0 descriptor?? [ 720.816400][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 720.831994][ T25] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 720.844056][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 720.855332][ T25] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 720.855403][ T25] usb 6-1: media controller created [ 720.881291][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 720.993250][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 720.999136][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.999164][ T10] usb 4-1: Product: syz [ 720.999181][ T10] usb 4-1: Manufacturer: syz [ 720.999198][ T10] usb 4-1: SerialNumber: syz [ 721.023887][ T10] usb 4-1: config 0 descriptor?? [ 721.026381][ T25] DVB: Unable to find symbol dib7000p_attach() [ 721.026394][ T25] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 721.033870][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 721.033894][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 721.187016][T11436] option changes via remount are deprecated (pid=11434 comm=syz.6.1470) [ 721.279423][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 721.289915][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.291207][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 721.291255][ T10] usb 4-1: media controller created [ 721.312721][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.345847][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 721.345879][ T25] Registered IR keymap rc-empty [ 721.346098][ T25] dvb-usb: could not initialize remote control. [ 721.346112][ T25] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 721.379820][ T25] usb 6-1: USB disconnect, device number 36 [ 721.437971][ T25] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 721.486175][ T10] DVB: Unable to find symbol dib7000p_attach() [ 721.486202][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 722.753248][T11436] kAFS: No cell specified [ 722.787195][ T5607] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 722.787269][ T5607] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 722.787304][ T5607] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 722.787377][ T5607] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 722.800718][ T5607] usb 7-1: USB disconnect, device number 30 [ 722.838585][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 722.838626][ T10] Registered IR keymap rc-empty [ 722.838879][ T10] dvb-usb: could not initialize remote control. [ 722.838889][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 722.851838][ T10] usb 4-1: USB disconnect, device number 46 [ 722.934806][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 723.186022][ T30] audit: type=1400 audit(1787914853.995:1212): avc: denied { getattr } for pid=11454 comm="syz.7.1476" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 724.025327][T11462] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1478'. [ 724.799801][T11475] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1481'. [ 725.060606][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 727.024015][ T5804] block nbd0: Possible stuck request ffff888028277000: control (read@0,1024B). Runtime 60 seconds [ 727.024065][ T5804] block nbd0: Possible stuck request ffff8880282771c0: control (read@1024,1024B). Runtime 60 seconds [ 727.024099][ T5804] block nbd0: Possible stuck request ffff888028277380: control (read@2048,1024B). Runtime 60 seconds [ 727.024145][ T5804] block nbd0: Possible stuck request ffff888028277540: control (read@3072,1024B). Runtime 60 seconds [ 727.825858][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 727.870110][ T5607] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 727.976112][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 727.982087][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 727.992420][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 727.992460][ T10] usb 6-1: config 0 has no interface number 0 [ 727.992507][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 728.015480][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.015522][ T10] usb 6-1: Product: syz [ 728.015557][ T10] usb 6-1: Manufacturer: syz [ 728.015576][ T10] usb 6-1: SerialNumber: syz [ 728.015881][ T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 728.047111][ T5607] usb 2-1: New USB device found, idVendor=0fb5, idProduct=0312, bcdDevice= 0.00 [ 728.057320][ T5607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.057370][ T5607] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 728.057421][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.092521][ T5607] usb 2-1: config 0 descriptor?? [ 728.101772][ T10] usb 6-1: config 0 descriptor?? [ 728.167581][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 728.168127][ T31] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 728.171835][ T31] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 728.174096][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.174129][ T31] usb 4-1: Product: syz [ 728.174146][ T31] usb 4-1: Manufacturer: syz [ 728.174162][ T31] usb 4-1: SerialNumber: syz [ 728.248900][T11513] jffs2: notice: (11513) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 728.270402][T11513] xt_hashlimit: size too large, truncated to 1048576 [ 728.327740][T11516] netlink: 'syz.7.1492': attribute type 1 has an invalid length. [ 728.352793][T11516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.444239][T11504] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 728.465213][ T30] audit: type=1400 audit(1787914859.285:1213): avc: denied { create } for pid=11507 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 728.525259][T11499] option changes via remount are deprecated (pid=11498 comm=syz.5.1486) [ 728.531220][ T30] audit: type=1400 audit(1787914859.355:1214): avc: denied { ioctl } for pid=11507 comm="syz.3.1490" path="socket:[37025]" dev="sockfs" ino=37025 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 728.572415][ T5607] usbhid 2-1:0.0: can't add hid device: -71 [ 728.579924][ T5607] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 728.601782][ T5607] usb 2-1: USB disconnect, device number 46 [ 728.938039][T11499] kAFS: No cell specified [ 728.948566][ T10] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 728.948637][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 728.948687][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 728.948762][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 729.014986][ T10] usb 6-1: USB disconnect, device number 37 [ 729.034039][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1493'. [ 729.692193][ T31] kobil_sct 4-1:3.0: required endpoints missing [ 729.703448][ T31] usb 4-1: USB disconnect, device number 47 [ 730.725828][ T5607] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 730.745952][T11547] befs: (nbd6): unable to read superblock [ 731.935638][T11541] CIFS: Attempting to mount //127.0.0.1/share [ 731.975974][ T5607] usb 4-1: Using ep0 maxpacket: 32 [ 731.982018][ T5607] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 731.993835][ T5607] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 731.993882][ T5607] usb 4-1: config 0 has no interface number 0 [ 731.993923][ T5607] usb 4-1: config 0 interface 12 has no altsetting 0 [ 732.018808][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.027818][ T5607] usb 4-1: Product: syz [ 732.032410][ T5607] usb 4-1: Manufacturer: syz [ 732.032450][ T5607] usb 4-1: SerialNumber: syz [ 732.046916][ T5607] usb 4-1: config 0 descriptor?? [ 732.103157][T11541] CIFS: VFS: cifs_mount failed w/return code = -512 [ 732.525460][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1504'. [ 732.737556][T11538] option changes via remount are deprecated (pid=11537 comm=syz.3.1498) [ 733.215643][T11538] kAFS: No cell specified [ 733.234789][ T5607] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 733.234843][ T5607] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 733.234871][ T5607] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 733.234918][ T5607] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 733.284490][ T5607] usb 4-1: USB disconnect, device number 48 [ 733.536690][ T5612] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 733.641506][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 733.688330][ T5612] usb 6-1: Using ep0 maxpacket: 8 [ 733.694544][ T5612] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 733.704617][ T2984] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.717267][ T5612] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 733.717312][ T5612] usb 6-1: config 179 has no interface number 0 [ 733.717371][ T5612] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 733.717409][ T5612] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 733.717448][ T5612] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 733.717488][ T5612] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 733.717529][ T5612] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 733.717584][ T5612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.809066][T11564] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 733.843532][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 733.846767][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 733.847661][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 733.847686][ T10] usb 2-1: config 0 has no interface number 0 [ 733.847724][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 733.850019][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.850046][ T10] usb 2-1: Product: syz [ 733.850063][ T10] usb 2-1: Manufacturer: syz [ 733.850081][ T10] usb 2-1: SerialNumber: syz [ 733.861027][ T10] usb 2-1: config 0 descriptor?? [ 734.035503][T11571] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1511'. [ 734.078131][ T2984] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.087868][T11572] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1511'. [ 734.110107][ T5612] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input33 [ 734.226148][T11564] FAULT_INJECTION: forcing a failure. [ 734.226148][T11564] name failslab, interval 1, probability 0, space 0, times 0 [ 734.226198][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.5.1505 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.226221][T11564] Tainted: [L]=SOFTLOCKUP [ 734.226228][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 734.226238][T11564] Call Trace: [ 734.226244][T11564] [ 734.226251][T11564] dump_stack_lvl+0x100/0x190 [ 734.226283][T11564] should_fail_ex.cold+0x5/0xa [ 734.226306][T11564] should_failslab+0xc2/0x120 [ 734.226326][T11564] __kmalloc_noprof+0xfc/0x840 [ 734.226341][T11564] ? rcu_is_watching+0x13/0xc0 [ 734.226362][T11564] ? tomoyo_realpath_from_path+0xb6/0x690 [ 734.226393][T11564] tomoyo_realpath_from_path+0xb6/0x690 [ 734.226423][T11564] tomoyo_path_number_perm+0x23c/0x580 [ 734.226444][T11564] ? tomoyo_path_number_perm+0x22e/0x580 [ 734.226467][T11564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 734.226499][T11564] ? __lock_acquire+0x4c5/0x1ec0 [ 734.226525][T11564] ? __fget_files+0x34/0x3d0 [ 734.226545][T11564] ? find_held_lock+0x2b/0x80 [ 734.226568][T11564] ? hook_file_ioctl_common+0x140/0x440 [ 734.226592][T11564] ? __fget_files+0x21f/0x3d0 [ 734.226614][T11564] security_file_ioctl+0xd3/0x230 [ 734.226640][T11564] __x64_sys_ioctl+0xb7/0x210 [ 734.226668][T11564] do_syscall_64+0x123/0x790 [ 734.226689][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.226707][T11564] RIP: 0033:0x7fcd4579e159 [ 734.226724][T11564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.226742][T11564] RSP: 002b:00007fcd466b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.226761][T11564] RAX: ffffffffffffffda RBX: 00007fcd45a25fa0 RCX: 00007fcd4579e159 [ 734.226785][T11564] RDX: 00002000000001c0 RSI: 0000000040304580 RDI: 0000000000000004 [ 734.226796][T11564] RBP: 00007fcd466b8090 R08: 0000000000000000 R09: 0000000000000000 [ 734.226805][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.226815][T11564] R13: 00007fcd45a26038 R14: 00007fcd45a25fa0 R15: 00007ffe0d40b7c8 [ 734.226838][T11564] [ 734.226880][T11564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 734.299752][T11568] option changes via remount are deprecated (pid=11567 comm=syz.1.1508) [ 734.302183][ T8834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.307083][ T5797] usb 6-1: USB disconnect, device number 38 [ 734.312107][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 734.314433][ T8834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 734.323520][ T8834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 734.324448][ T8834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 734.325016][ T8834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 734.404125][ T2984] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.688615][ T2984] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.722727][T11568] kAFS: No cell specified [ 734.734018][ T10] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 734.734068][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 734.734090][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 734.734161][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 734.758037][ T10] usb 2-1: USB disconnect, device number 47 [ 734.945840][ T5612] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 735.021957][ T2984] bridge_slave_1: left allmulticast mode [ 735.022021][ T2984] bridge_slave_1: left promiscuous mode [ 735.022260][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.044668][ T2984] bridge_slave_0: left allmulticast mode [ 735.044709][ T2984] bridge_slave_0: left promiscuous mode [ 735.044903][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.117459][ T5612] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 735.128090][ T5612] usb 4-1: config 255 has an invalid interface number: 97 but max is 0 [ 735.136671][ T5612] usb 4-1: config 255 has no interface number 0 [ 735.143050][ T5612] usb 4-1: config 255 interface 97 has no altsetting 0 [ 735.152130][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.160585][ T5612] usb 4-1: Product: syz [ 735.160609][ T5612] usb 4-1: Manufacturer: syz [ 735.160627][ T5612] usb 4-1: SerialNumber: syz [ 735.264693][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.276912][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.291284][ T2984] bond0 (unregistering): Released all slaves [ 735.306043][ T10] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 735.496730][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 735.497217][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 735.497247][ T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 735.498133][ T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 735.498159][ T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 735.498188][ T10] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 735.498210][ T10] usb 6-1: config 14 has no interface number 0 [ 735.498227][ T10] usb 6-1: config 14 has no interface number 1 [ 735.498280][ T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 735.498307][ T10] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 735.498334][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 735.498364][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 735.498393][ T10] usb 6-1: config 14 interface 57 has no altsetting 0 [ 735.498412][ T10] usb 6-1: config 14 interface 228 has no altsetting 0 [ 735.500167][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.500198][ T10] usb 6-1: Product: syz [ 735.500215][ T10] usb 6-1: Manufacturer: syz [ 735.500231][ T10] usb 6-1: SerialNumber: syz [ 735.523362][ T2984] tipc: Left network mode [ 735.667462][ T5612] rndis_host 4-1:255.97: ACM capabilities 01, not really RNDIS? [ 735.687369][ T5612] usb 4-1: USB disconnect, device number 49 [ 736.022708][ T10] legousbtower 6-1:14.57: interrupt endpoints not found [ 736.105490][ T2984] hsr_slave_0: left promiscuous mode [ 736.111850][ T2984] hsr_slave_1: left promiscuous mode [ 736.125618][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.133326][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.145247][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.148016][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.179471][ T2984] virt_wifi0: left promiscuous mode [ 736.179574][ T2984] veth1_macvtap: left promiscuous mode [ 736.179601][ T2984] veth0_macvtap: left promiscuous mode [ 736.184999][ T2984] veth1_vlan: left promiscuous mode [ 736.185046][ T2984] veth0_vlan: left promiscuous mode [ 736.318784][ T30] audit: type=1400 audit(1787914867.135:1215): avc: denied { write } for pid=11595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.358723][ T52] Bluetooth: hci5: command tx timeout [ 736.439454][ T10] legousbtower 6-1:14.228: get version request failed: -121 [ 736.439597][ T10] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 736.491738][ T30] audit: type=1400 audit(1787914867.315:1216): avc: denied { write } for pid=11619 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.744931][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1517'. [ 737.135413][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1519'. [ 737.202342][ T10] usb 6-1: USB disconnect, device number 39 [ 738.435842][ T52] Bluetooth: hci5: command tx timeout [ 738.450858][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 738.475201][ T2984] team0 (unregistering): Port device team_slave_0 removed [ 738.677723][ T31] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 738.853138][ T31] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 738.883392][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.892058][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.903492][ T31] usb 4-1: config 0 has no interface number 0 [ 738.910125][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.922332][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.932941][ T31] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.947750][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.030400][ T31] usb 4-1: config 0 descriptor?? [ 739.147808][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 739.192248][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 739.361402][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1525'. [ 739.496388][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.496542][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.496711][T11573] bridge_slave_0: entered allmulticast mode [ 739.504260][T11573] bridge_slave_0: entered promiscuous mode [ 739.526811][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.529289][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.529435][T11573] bridge_slave_1: entered allmulticast mode [ 739.549369][T11573] bridge_slave_1: entered promiscuous mode [ 739.594259][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.594333][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.594379][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.594411][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.594441][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.594471][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.594500][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.594529][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.594558][ T31] holtek_mouse 0003:04D9:A04A.0008: unknown main item tag 0x0 [ 739.690961][ T31] holtek_mouse 0003:04D9:A04A.0008: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.3-1/input1 [ 739.742898][T11573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.750557][T11573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.893505][ T5797] usb 4-1: USB disconnect, device number 50 [ 739.902624][T11573] team0: Port device team_slave_0 added [ 739.919140][T11573] team0: Port device team_slave_1 added [ 739.930146][ T2984] IPVS: stop unused estimator thread 0... [ 739.933780][T11656] fido_id[11656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 739.999002][T11573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.006687][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.008537][T11573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.010403][T11573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.010417][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.010444][T11573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.062218][T11573] hsr_slave_0: entered promiscuous mode [ 740.064590][T11573] hsr_slave_1: entered promiscuous mode [ 740.065175][T11573] debugfs: 'hsr0' already exists in 'hsr' [ 740.065194][T11573] Cannot create hsr debugfs directory [ 740.515859][ T52] Bluetooth: hci5: command tx timeout [ 740.735839][ T5797] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 740.886479][ T5797] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.887392][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.887435][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.887463][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.887487][ T5797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.887526][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.891728][ T5797] usb 4-1: config 0 descriptor?? [ 741.167071][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.167661][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.191600][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.200927][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.539541][ T5797] usbhid 4-1:0.0: can't add hid device: -71 [ 741.539641][ T5797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 741.544698][ T5797] usb 4-1: USB disconnect, device number 51 [ 741.958047][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.958104][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.146237][T11642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.595900][ T52] Bluetooth: hci5: command tx timeout [ 742.702666][T11573] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 743.040361][T11573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.045414][T11573] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 743.159758][T11573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.160566][T11573] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 743.184409][T11573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.970561][T11573] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 743.987814][T11573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.305279][T11573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.349456][T11573] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.376856][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.376989][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.407365][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.407463][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.545992][ T5721] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 744.695945][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 744.702087][ T5721] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 744.712710][ T5721] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 744.725024][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.733195][ T5721] usb 6-1: Product: syz [ 744.737583][ T5721] usb 6-1: Manufacturer: syz [ 744.743845][ T5721] usb 6-1: SerialNumber: syz [ 746.240672][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 746.631893][ T30] audit: type=1400 audit(1787914877.455:1217): avc: denied { write } for pid=11669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.885941][ T5797] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 746.993962][ T30] audit: type=1400 audit(1787914877.815:1218): avc: denied { write } for pid=11716 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.038881][ T5797] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.40 [ 747.041363][ T5797] usb 2-1: config 1 interface 0 has no altsetting 0 [ 747.048116][ T5797] usb 2-1: string descriptor 0 read error: -22 [ 747.048224][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.240961][T11573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.339238][ T5265] 8021q: adding VLAN 0 to HW filter on device eth10 [ 747.659441][ T30] audit: type=1400 audit(1787914878.475:1219): avc: denied { listen } for pid=11730 comm="syz.3.1537" laddr=172.20.20.187 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 747.687927][ T5721] kobil_sct 6-1:3.0: required endpoints missing [ 747.698488][ T5721] usb 6-1: USB disconnect, device number 40 [ 747.847647][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847712][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847776][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847810][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847841][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847871][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847903][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847933][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847964][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.847995][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 747.995062][T11573] veth0_vlan: entered promiscuous mode [ 748.039431][T11573] veth1_vlan: entered promiscuous mode [ 748.100894][T11573] veth0_macvtap: entered promiscuous mode [ 748.108606][ T5797] aquacomputer_d5next 0003:0C70:F014.0009: hidraw0: USB HID v0.05 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0 [ 748.125566][T11573] veth1_macvtap: entered promiscuous mode [ 748.164598][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 748.209926][ T5797] usb 2-1: USB disconnect, device number 48 [ 748.220258][T11573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.235703][T11745] fido_id[11745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 748.251216][T11744] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 748.334927][T11573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.397552][ T1035] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.438212][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.525364][ T617] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.536260][ T2951] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.576672][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1540'. [ 748.590277][ T30] audit: type=1400 audit(1787914879.415:1220): avc: denied { write } for pid=11728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.661530][T11757] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 748.802559][ T30] audit: type=1400 audit(1787914879.625:1221): avc: denied { write } for pid=11765 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.905162][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1541'. [ 748.966013][ T30] audit: type=1326 audit(1787914879.705:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11746 comm="syz.7.1535" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe925b9e159 code=0x7ffc0000 [ 748.966086][ T30] audit: type=1326 audit(1787914879.705:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11746 comm="syz.7.1535" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe925b9e159 code=0x7ffc0000 [ 748.966137][ T30] audit: type=1326 audit(1787914879.705:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11746 comm="syz.7.1535" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe925b9e159 code=0x7ffc0000 [ 748.966186][ T30] audit: type=1326 audit(1787914879.705:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11746 comm="syz.7.1535" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe925b9e159 code=0x7ffc0000 [ 748.966264][ T30] audit: type=1326 audit(1787914879.705:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11746 comm="syz.7.1535" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe925b9e159 code=0x7ffc0000 [ 749.161445][ T5265] 8021q: adding VLAN 0 to HW filter on device eth11 [ 749.238057][ T5799] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 749.410698][ T5799] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 749.441612][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.530905][ T5799] usb 2-1: config 0 descriptor?? [ 749.654759][ T5799] cp210x 2-1:0.0: cp210x converter detected [ 750.069756][ T5799] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 750.069885][ T5799] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 750.193466][ T5799] usb 2-1: cp210x converter now attached to ttyUSB0 [ 751.141815][T11744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 751.210721][ T10] usb 2-1: USB disconnect, device number 49 [ 751.230200][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 751.230753][ T10] cp210x 2-1:0.0: device disconnected [ 751.426916][ T617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.426953][ T617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.810538][T11801] jffs2: notice: (11801) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 751.860659][T11801] xt_hashlimit: size too large, truncated to 1048576 [ 752.153160][T11809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.222106][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 752.222155][ T30] audit: type=1400 audit(1787914883.045:1254): avc: denied { write } for pid=11791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.295103][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.303167][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.535174][ T30] audit: type=1400 audit(1787914883.355:1255): avc: denied { write } for pid=11812 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.223783][ T5265] 8021q: adding VLAN 0 to HW filter on device eth12 [ 753.665819][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 753.778714][T11831] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1552'. [ 753.817611][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 753.818620][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.818668][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.812840][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1554'. [ 755.166768][ T10] wacom 0003:056A:033B.000A: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 755.199006][ T10] wacom 0003:056A:033B.000A: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 755.355590][T11843] sctp: [Deprecated]: syz.3.1548 (pid 11843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 755.355590][T11843] Use struct sctp_sack_info instead [ 755.533324][T11850] CIFS: Attempting to mount //127.0.0.1/share [ 755.546718][T11850] CIFS: VFS: Error connecting to socket. Aborting operation. [ 755.554485][T11850] CIFS: VFS: cifs_mount failed w/return code = -101 [ 755.645236][ T10] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.000A/input/input34 [ 755.772154][T11842] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 756.453582][T11871] FAULT_INJECTION: forcing a failure. [ 756.453582][T11871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.467984][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.3.1560 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.468015][T11871] Tainted: [L]=SOFTLOCKUP [ 756.468022][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 756.468034][T11871] Call Trace: [ 756.468041][T11871] [ 756.468049][T11871] dump_stack_lvl+0x100/0x190 [ 756.468084][T11871] should_fail_ex.cold+0x5/0xa [ 756.468114][T11871] _copy_from_user+0x2e/0xd0 [ 756.468146][T11871] copy_msghdr_from_user+0x9f/0x4c0 [ 756.468176][T11871] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 756.468209][T11871] ? lock_acquire+0x1d1/0x380 [ 756.468230][T11871] ? get_pid_task+0x2a/0x250 [ 756.468262][T11871] ___sys_sendmsg+0x106/0x1e0 [ 756.468286][T11871] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.468311][T11871] ? get_pid_task+0x106/0x250 [ 756.468358][T11871] ? find_held_lock+0x2b/0x80 [ 756.468404][T11871] __sys_sendmsg+0x160/0x210 [ 756.468437][T11871] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.468484][T11871] do_syscall_64+0x123/0x790 [ 756.468510][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.468533][T11871] RIP: 0033:0x7f80f6b9e159 [ 756.468571][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.468593][T11871] RSP: 002b:00007f80f7a4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.468615][T11871] RAX: ffffffffffffffda RBX: 00007f80f6e25fa0 RCX: 00007f80f6b9e159 [ 756.468630][T11871] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 756.468644][T11871] RBP: 00007f80f7a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 756.468659][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.468672][T11871] R13: 00007f80f6e26038 R14: 00007f80f6e25fa0 R15: 00007ffe82d48498 [ 756.468702][T11871] [ 757.451766][ T5804] block nbd0: Possible stuck request ffff888028277000: control (read@0,1024B). Runtime 90 seconds [ 757.451811][ T5804] block nbd0: Possible stuck request ffff8880282771c0: control (read@1024,1024B). Runtime 90 seconds [ 757.451840][ T5804] block nbd0: Possible stuck request ffff888028277380: control (read@2048,1024B). Runtime 90 seconds [ 757.451868][ T5804] block nbd0: Possible stuck request ffff888028277540: control (read@3072,1024B). Runtime 90 seconds [ 757.540014][T11817] Process accounting resumed [ 757.657575][ T4939] usb 6-1: USB disconnect, device number 41 [ 759.745995][ T5797] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 759.878344][ T25] kernel write not supported for file /snd/midiC2D0 (pid: 25 comm: kworker/1:0) [ 759.895892][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 759.896697][ T5797] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 759.897600][ T5797] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 759.897625][ T5797] usb 4-1: config 0 has no interface number 0 [ 759.897663][ T5797] usb 4-1: config 0 interface 12 has no altsetting 0 [ 759.899410][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.899434][ T5797] usb 4-1: Product: syz [ 759.899451][ T5797] usb 4-1: Manufacturer: syz [ 759.899468][ T5797] usb 4-1: SerialNumber: syz [ 759.902055][ T5797] usb 4-1: config 0 descriptor?? [ 760.002332][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1570'. [ 760.103317][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 760.267528][T11913] sctp: [Deprecated]: syz.8.1572 (pid 11913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.267528][T11913] Use struct sctp_sack_info instead [ 760.334455][T11892] option changes via remount are deprecated (pid=11891 comm=syz.3.1566) [ 761.758344][T11892] kAFS: No cell specified [ 762.848902][ T5797] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 762.848993][ T5797] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 762.849032][ T5797] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 762.849126][ T5797] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 762.897419][ T5797] usb 4-1: USB disconnect, device number 52 [ 763.043142][ T30] audit: type=1400 audit(1787914893.865:1256): avc: denied { create } for pid=11935 comm="syz.7.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 763.162582][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.163038][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.211741][ T52] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 763.216093][ T52] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 763.219103][ T30] audit: type=1400 audit(1787914894.045:1257): avc: denied { write } for pid=11935 comm="syz.7.1578" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 763.269451][T11939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.831251][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 764.735467][ T30] audit: type=1400 audit(1787914895.555:1258): avc: denied { write } for pid=11942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.861305][ T30] audit: type=1400 audit(1787914895.685:1259): avc: denied { write } for pid=11963 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.887316][ T5612] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 764.999124][T11966] input: syz1 as /devices/virtual/input/input37 [ 765.005907][ T5797] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 765.008717][T11969] FAULT_INJECTION: forcing a failure. [ 765.008717][T11969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.008750][T11969] CPU: 0 UID: 0 PID: 11969 Comm: syz.8.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.008783][T11969] Tainted: [L]=SOFTLOCKUP [ 765.008792][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 765.008806][T11969] Call Trace: [ 765.008814][T11969] [ 765.008824][T11969] dump_stack_lvl+0x100/0x190 [ 765.008859][T11969] should_fail_ex.cold+0x5/0xa [ 765.008891][T11969] _copy_from_user+0x2e/0xd0 [ 765.008923][T11969] copy_msghdr_from_user+0x9f/0x4c0 [ 765.008951][T11969] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 765.008986][T11969] ? lock_acquire+0x1d1/0x380 [ 765.009008][T11969] ? get_pid_task+0x2a/0x250 [ 765.009041][T11969] ___sys_sendmsg+0x106/0x1e0 [ 765.009069][T11969] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.009095][T11969] ? get_pid_task+0x106/0x250 [ 765.009135][T11969] ? find_held_lock+0x2b/0x80 [ 765.009183][T11969] __sys_sendmsg+0x160/0x210 [ 765.009216][T11969] ? __pfx___sys_sendmsg+0x10/0x10 [ 765.009264][T11969] do_syscall_64+0x123/0x790 [ 765.009291][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.009315][T11969] RIP: 0033:0x7fe75179e159 [ 765.009333][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.009360][T11969] RSP: 002b:00007fe752693028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.009382][T11969] RAX: ffffffffffffffda RBX: 00007fe751a25fa0 RCX: 00007fe75179e159 [ 765.009398][T11969] RDX: 0000000004004004 RSI: 0000200000000240 RDI: 0000000000000003 [ 765.009412][T11969] RBP: 00007fe752693090 R08: 0000000000000000 R09: 0000000000000000 [ 765.009426][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.009440][T11969] R13: 00007fe751a26038 R14: 00007fe751a25fa0 R15: 00007ffc5cfa3428 [ 765.009474][T11969] [ 765.102511][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1583'. [ 765.124813][T11972] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 765.155865][ T5797] usb 6-1: Using ep0 maxpacket: 8 [ 765.157203][ T5797] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 765.159546][ T5797] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 765.159574][ T5797] usb 6-1: config 179 has no interface number 0 [ 765.159616][ T5797] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 765.159646][ T5797] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 765.159676][ T5797] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 765.159705][ T5797] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 765.159735][ T5797] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 765.159776][ T5797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.165187][T11959] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 765.189713][ T5612] usb 4-1: New USB device found, idVendor=0fb5, idProduct=0312, bcdDevice= 0.00 [ 765.301818][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.301863][ T5612] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.301907][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.389392][ T5612] usb 4-1: config 0 descriptor?? [ 765.504354][ T5797] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input38 [ 765.768061][ T30] audit: type=1400 audit(1787914896.595:1260): avc: denied { setopt } for pid=11957 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 765.818255][ T5799] usb 6-1: USB disconnect, device number 42 [ 765.818266][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 765.818395][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 766.055352][ T30] audit: type=1400 audit(1787914896.875:1261): avc: denied { kexec_image_load } for pid=11982 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 766.183652][T11956] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 766.263896][ T5612] usbhid 4-1:0.0: can't add hid device: -71 [ 766.264013][ T5612] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 766.286174][ T5612] usb 4-1: USB disconnect, device number 53 [ 766.325909][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 766.477346][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 766.478297][ T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 766.478326][ T10] usb 2-1: config 1 has no interface number 0 [ 766.478366][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 766.478397][ T10] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.480192][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.480220][ T10] usb 2-1: Product: syz [ 766.480240][ T10] usb 2-1: Manufacturer: syz [ 766.480259][ T10] usb 2-1: SerialNumber: syz [ 766.483660][T11983] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 766.496797][ T10] usb 2-1: Error in usbnet_get_endpoints (-22) [ 766.665859][ T5721] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 766.834735][T11996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11996 comm=syz.3.1590 [ 766.850287][ T5797] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 766.862210][ T5721] usb 9-1: unable to get BOS descriptor or descriptor too short [ 766.872191][ T5721] usb 9-1: not running at top speed; connect to a high speed hub [ 766.872243][ T5721] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 766.886527][ T5721] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 766.886557][ T5721] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 766.886592][ T5721] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 766.886613][ T5721] usb 9-1: config 14 has no interface number 0 [ 766.886632][ T5721] usb 9-1: config 14 has no interface number 1 [ 766.886685][ T5721] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 766.886720][ T5721] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 766.886751][ T5721] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 766.886805][ T5721] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 766.886834][ T5721] usb 9-1: config 14 interface 57 has no altsetting 0 [ 766.886855][ T5721] usb 9-1: config 14 interface 228 has no altsetting 0 [ 766.889989][ T5721] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.890015][ T5721] usb 9-1: Product: syz [ 766.890033][ T5721] usb 9-1: Manufacturer: syz [ 766.890051][ T5721] usb 9-1: SerialNumber: syz [ 767.025911][ T5797] usb 6-1: Using ep0 maxpacket: 32 [ 767.031701][ T5797] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 767.045036][ T5797] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 767.053547][ T5797] usb 6-1: config 0 has no interface number 0 [ 767.060844][ T5797] usb 6-1: config 0 interface 12 has no altsetting 0 [ 767.072546][ T5797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.072589][ T5797] usb 6-1: Product: syz [ 767.072622][ T5797] usb 6-1: Manufacturer: syz [ 767.072649][ T5797] usb 6-1: SerialNumber: syz [ 767.098873][ T5797] usb 6-1: config 0 descriptor?? [ 767.466091][ T5799] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 767.475311][ T5721] legousbtower 9-1:14.57: interrupt endpoints not found [ 767.540241][T11994] option changes via remount are deprecated (pid=11993 comm=syz.5.1589) [ 767.631629][ T5799] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 767.640223][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.640251][ T5799] usb 4-1: Product: syz [ 767.640291][ T5799] usb 4-1: Manufacturer: syz [ 767.640309][ T5799] usb 4-1: SerialNumber: syz [ 767.644862][ T5799] usb 4-1: config 0 descriptor?? [ 767.657725][ T5799] hub 4-1:0.0: bad descriptor, ignoring hub [ 767.657750][ T5799] hub 4-1:0.0: probe with driver hub failed with error -5 [ 767.872644][ T5799] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 767.877138][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 767.878288][ T5799] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 767.878335][ T5799] usb 4-1: media controller created [ 767.890857][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.924561][ T5721] legousbtower 9-1:14.228: get version request failed: -121 [ 767.925205][ T5721] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121 [ 767.950307][ T30] audit: type=1400 audit(1787914898.775:1262): avc: denied { write } for pid=11999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.972404][ T5799] DVB: Unable to find symbol dib7000p_attach() [ 767.972421][ T5799] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 767.993579][T11994] kAFS: No cell specified [ 768.010249][ T5797] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 768.010324][ T5797] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 768.010350][ T5797] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 768.010424][ T5797] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 768.049390][ T5797] usb 6-1: USB disconnect, device number 43 [ 768.078405][ T5799] rc_core: IR keymap rc-dib0700-rc5 not found [ 768.078444][ T5799] Registered IR keymap rc-empty [ 768.078677][ T5799] dvb-usb: could not initialize remote control. [ 768.078686][ T5799] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 768.107335][ T5799] usb 4-1: USB disconnect, device number 54 [ 768.140777][ T10] usb 9-1: USB disconnect, device number 2 [ 768.195450][ T5799] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 768.230572][ T30] audit: type=1400 audit(1787914899.055:1263): avc: denied { write } for pid=12018 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.560787][ T30] audit: type=1400 audit(1787914899.385:1264): avc: denied { write } for pid=12021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.776456][ T30] audit: type=1400 audit(1787914899.555:1265): avc: denied { write } for pid=12032 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.357929][T12040] sctp: [Deprecated]: syz.8.1596 (pid 12040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.357929][T12040] Use struct sctp_sack_info instead [ 769.555307][ T5721] usb 2-1: USB disconnect, device number 50 [ 769.886477][ T5799] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 769.949020][T12051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.039819][ T5799] usb 6-1: unable to get BOS descriptor or descriptor too short [ 770.048636][ T5799] usb 6-1: not running at top speed; connect to a high speed hub [ 770.048674][ T5799] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 770.086021][ T5799] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 770.086067][ T5799] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 770.086103][ T5799] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 770.086155][ T5799] usb 6-1: config 14 has no interface number 0 [ 770.086177][ T5799] usb 6-1: config 14 has no interface number 1 [ 770.086240][ T5799] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 770.086272][ T5799] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 770.086303][ T5799] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.086334][ T5799] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 770.086365][ T5799] usb 6-1: config 14 interface 57 has no altsetting 0 [ 770.086385][ T5799] usb 6-1: config 14 interface 228 has no altsetting 0 [ 770.131304][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.131338][ T5799] usb 6-1: Product: syz [ 770.131358][ T5799] usb 6-1: Manufacturer: syz [ 770.131379][ T5799] usb 6-1: SerialNumber: syz [ 771.945213][ T5799] legousbtower 6-1:14.57: interrupt endpoints not found [ 772.259571][ T5799] legousbtower 6-1:14.228: get version request failed: -121 [ 772.259743][ T5799] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 772.309444][T12081] netlink: 'syz.8.1606': attribute type 12 has an invalid length. [ 772.309494][T12081] netlink: 'syz.8.1606': attribute type 29 has an invalid length. [ 772.309524][T12081] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1606'. [ 772.311165][T12081] netlink: 'syz.8.1606': attribute type 12 has an invalid length. [ 772.311184][T12081] netlink: 'syz.8.1606': attribute type 29 has an invalid length. [ 772.311198][T12081] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1606'. [ 773.202544][ T10] usb 6-1: USB disconnect, device number 44 [ 773.294829][ T30] audit: type=1400 audit(1787914904.105:1266): avc: denied { write } for pid=12055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.295042][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1608'. [ 773.314174][T12091] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 773.906717][ T30] audit: type=1400 audit(1787914904.725:1267): avc: denied { write } for pid=12099 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.093915][T12104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12104 comm=syz.1.1610 [ 775.329754][T12106] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1611'. [ 775.341644][T12123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1616'. [ 775.616195][ T5612] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 775.734917][T12128] netlink: 'syz.7.1618': attribute type 12 has an invalid length. [ 775.744840][T12128] netlink: 'syz.7.1618': attribute type 29 has an invalid length. [ 775.756256][T12128] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1618'. [ 775.768208][T12128] netlink: 'syz.7.1618': attribute type 12 has an invalid length. [ 775.778066][T12128] netlink: 'syz.7.1618': attribute type 29 has an invalid length. [ 775.786012][T12128] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1618'. [ 775.793383][ T5612] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 775.794539][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.806963][ T5612] usb 4-1: config 0 descriptor?? [ 775.818308][ T5612] cp210x 4-1:0.0: cp210x converter detected [ 776.218774][T12133] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1620'. [ 776.219982][ T5612] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 776.220022][ T5612] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 776.227216][ T5612] usb 4-1: cp210x converter now attached to ttyUSB0 [ 776.434543][ T5612] usb 4-1: USB disconnect, device number 55 [ 776.451556][ T5612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 776.454810][ T5612] cp210x 4-1:0.0: device disconnected [ 776.555837][ T5797] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 776.707188][ T5797] usb 6-1: Using ep0 maxpacket: 32 [ 776.710355][ T5797] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 776.732810][ T5797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.732853][ T5797] usb 6-1: Product: syz [ 776.732884][ T5797] usb 6-1: Manufacturer: syz [ 776.732907][ T5797] usb 6-1: SerialNumber: syz [ 776.799201][T12145] sctp: [Deprecated]: syz.1.1622 (pid 12145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.799201][T12145] Use struct sctp_sack_info instead [ 776.890548][ T5797] usb 6-1: config 0 descriptor?? [ 777.145179][ T5797] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 777.153968][ T5797] dvb-usb: bulk message failed: -22 (4/0) [ 777.153995][ T5797] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 777.154115][ T5797] dvb-usb: bulk message failed: -22 (5/0) [ 777.154130][ T5797] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 777.199782][ T5797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 777.211890][ T5797] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 777.211969][ T5797] usb 6-1: media controller created [ 777.248194][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.271461][ T5797] usb 6-1: selecting invalid altsetting 3 [ 777.277411][ T5797] ttusb2: set interface to alts=3 failed [ 777.832917][ T5797] DVB: Unable to find symbol tda10086_attach() [ 777.832951][ T5797] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 777.841914][ T5797] dvb-usb: bulk message failed: -22 (4/0) [ 777.841951][ T5797] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 777.842063][ T5797] dvb-usb: bulk message failed: -22 (5/0) [ 777.842079][ T5797] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 777.842142][ T5797] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 777.901533][ T5797] usb 6-1: USB disconnect, device number 45 [ 777.991914][ T5797] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 778.175825][ T5612] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 778.244549][ T617] IPVS: starting estimator thread 0... [ 778.327453][ T5612] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.328504][ T5612] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.328539][ T5612] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 778.330382][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.330409][ T5612] usb 2-1: Product: syz [ 778.330428][ T5612] usb 2-1: Manufacturer: syz [ 778.330447][ T5612] usb 2-1: SerialNumber: syz [ 778.336730][T12162] IPVS: using max 40 ests per chain, 96000 per kthread [ 778.415829][ T5797] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 778.561924][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.562376][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.578871][ T5797] usb 6-1: Using ep0 maxpacket: 16 [ 778.588806][ T5612] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 778.599681][ T5797] usb 6-1: unable to get BOS descriptor or descriptor too short [ 778.599743][ T5797] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 778.617881][ T5797] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 778.617920][ T5797] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 778.623015][ T5612] usb 2-1: USB disconnect, device number 51 [ 778.647842][ T5797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.647886][ T5797] usb 6-1: Product: syz [ 778.647916][ T5797] usb 6-1: Manufacturer: syz [ 778.647935][ T5797] usb 6-1: SerialNumber: syz [ 779.181409][ T30] audit: type=1804 audit(1787914910.005:1268): pid=12175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1632" name="bus" dev="ramfs" ino=41284 res=1 errno=0 [ 779.339429][T12177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.346238][ T5797] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 779.353206][T12177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.186844][ T5797] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.196036][ T5797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.196072][ T5797] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 780.201516][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.201543][ T5797] usb 2-1: Product: syz [ 780.201560][ T5797] usb 2-1: Manufacturer: syz [ 780.201591][ T5797] usb 2-1: SerialNumber: syz [ 780.373407][ T4939] usb 6-1: USB disconnect, device number 46 [ 780.435934][ T5612] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 780.588198][ T5612] usb 4-1: unable to get BOS descriptor or descriptor too short [ 780.597088][ T5612] usb 4-1: not running at top speed; connect to a high speed hub [ 780.604941][ T5612] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 780.615486][ T5612] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 780.624935][ T5612] usb 4-1: config 5 interface 0 has no altsetting 1 [ 780.639298][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.647576][ T5612] usb 4-1: Product: syz [ 780.647620][ T5612] usb 4-1: Manufacturer: syz [ 780.647641][ T5612] usb 4-1: SerialNumber: syz [ 780.961794][ T5612] usb 4-1: USB disconnect, device number 56 [ 781.012297][ T8836] udevd[8836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 781.480094][ T5797] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 781.495023][ T5797] usb 2-1: USB disconnect, device number 52 [ 781.917282][T12200] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1642'. [ 782.535950][ T5721] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 782.683548][T12213] sctp: [Deprecated]: syz.7.1644 (pid 12213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 782.683548][T12213] Use struct sctp_sack_info instead [ 782.686998][ T5721] usb 9-1: Using ep0 maxpacket: 32 [ 782.688146][ T5721] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 782.691042][ T5721] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 782.691070][ T5721] usb 9-1: config 0 has no interface number 0 [ 782.691111][ T5721] usb 9-1: config 0 interface 12 has no altsetting 0 [ 782.700414][ T5721] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.700444][ T5721] usb 9-1: Product: syz [ 782.700464][ T5721] usb 9-1: Manufacturer: syz [ 782.700481][ T5721] usb 9-1: SerialNumber: syz [ 782.710822][ T5721] usb 9-1: config 0 descriptor?? [ 783.019605][ T4939] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 783.246296][T12203] option changes via remount are deprecated (pid=12198 comm=syz.8.1641) [ 783.247257][ T4939] usb 4-1: device descriptor read/64, error -71 [ 783.735835][ T4939] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 783.848850][T12203] kAFS: No cell specified [ 783.946482][ T5721] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 783.955707][ T5721] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 783.966205][ T5721] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 783.966307][ T5721] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 784.056038][ T4939] usb 4-1: device descriptor read/64, error -71 [ 784.203061][ T5721] usb 9-1: USB disconnect, device number 3 [ 784.207135][ T4939] usb usb4-port1: attempt power cycle [ 784.886782][ T4939] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 785.010782][ T4939] usb 4-1: device descriptor read/8, error -71 [ 785.255868][ T4939] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 785.276665][ T4939] usb 4-1: device descriptor read/8, error -71 [ 785.454821][ T4939] usb usb4-port1: unable to enumerate USB device [ 785.525886][ T5797] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 786.634330][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 787.375931][ T5797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 787.380070][ T5797] usb 2-1: not running at top speed; connect to a high speed hub [ 787.380101][ T5797] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 787.381154][ T5797] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 787.381189][ T5797] usb 2-1: config 5 interface 0 has no altsetting 1 [ 787.467914][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.480736][ T5797] usb 2-1: Product: syz [ 787.480808][ T5797] usb 2-1: Manufacturer: syz [ 787.480823][ T5797] usb 2-1: SerialNumber: syz [ 787.749576][T12251] openvswitch: netlink: IPv6 tunnel dst address is zero [ 787.847360][T12253] netlink: Unknown conntrack attr (0) [ 788.005870][ T5721] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 788.052745][ T5804] block nbd0: Possible stuck request ffff888028277000: control (read@0,1024B). Runtime 120 seconds [ 788.052822][ T5804] block nbd0: Possible stuck request ffff8880282771c0: control (read@1024,1024B). Runtime 120 seconds [ 788.052848][ T5804] block nbd0: Possible stuck request ffff888028277380: control (read@2048,1024B). Runtime 120 seconds [ 788.052875][ T5804] block nbd0: Possible stuck request ffff888028277540: control (read@3072,1024B). Runtime 120 seconds [ 788.081401][ T5797] usb 2-1: USB disconnect, device number 53 [ 788.135885][ T5721] usb 4-1: device descriptor read/64, error -71 [ 788.376028][ T5721] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 788.516006][ T5721] usb 4-1: device descriptor read/64, error -71 [ 788.570444][ T8836] udevd[8836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 788.638067][ T5721] usb usb4-port1: attempt power cycle [ 789.025830][ T5721] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 789.046527][ T5721] usb 4-1: device descriptor read/8, error -71 [ 789.297367][ T5721] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 789.316657][ T5721] usb 4-1: device descriptor read/8, error -71 [ 789.427727][ T5721] usb usb4-port1: unable to enumerate USB device [ 790.279536][ T5721] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 790.514017][ T5721] usb 6-1: unable to get BOS descriptor or descriptor too short [ 790.523949][ T5721] usb 6-1: not running at top speed; connect to a high speed hub [ 790.533092][ T5721] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 790.547515][ T5721] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 790.547560][ T5721] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 790.564646][ T5721] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 790.564704][ T5721] usb 6-1: config 14 has no interface number 0 [ 790.564729][ T5721] usb 6-1: config 14 has no interface number 1 [ 790.564816][ T5721] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 790.564850][ T5721] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 790.564884][ T5721] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 790.564918][ T5721] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 790.564951][ T5721] usb 6-1: config 14 interface 57 has no altsetting 0 [ 790.564976][ T5721] usb 6-1: config 14 interface 228 has no altsetting 0 [ 790.654600][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.663547][ T5721] usb 6-1: Product: syz [ 790.663595][ T5721] usb 6-1: Manufacturer: syz [ 790.663618][ T5721] usb 6-1: SerialNumber: syz [ 790.753470][T12274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1659'. [ 791.125846][ T5799] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 791.427915][ T5721] legousbtower 6-1:14.57: interrupt endpoints not found [ 791.586671][ T5799] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 791.597231][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.610142][ T5799] usb 2-1: config 0 descriptor?? [ 791.619868][ T5799] cp210x 2-1:0.0: cp210x converter detected [ 791.706416][ T5721] legousbtower 6-1:14.228: get version request failed: -121 [ 791.714284][ T5721] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 791.931665][ T31] usb 6-1: USB disconnect, device number 47 [ 792.032572][ T5799] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 792.040736][ T5799] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 792.118012][ T5799] usb 2-1: cp210x converter now attached to ttyUSB0 [ 792.284465][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1666'. [ 792.967912][ T5799] usb 2-1: USB disconnect, device number 54 [ 792.978915][ T5799] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 792.983564][ T5799] cp210x 2-1:0.0: device disconnected [ 793.024721][T12295] netlink: 'syz.8.1667': attribute type 12 has an invalid length. [ 793.033001][T12295] netlink: 'syz.8.1667': attribute type 29 has an invalid length. [ 793.041047][T12295] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1667'. [ 793.053373][T12295] netlink: 'syz.8.1667': attribute type 12 has an invalid length. [ 793.062118][T12295] netlink: 'syz.8.1667': attribute type 29 has an invalid length. [ 793.070682][T12295] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1667'. [ 793.132261][T12284] Process accounting paused [ 793.761773][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1670'. [ 794.581971][T12311] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1671'. [ 794.902020][T12317] jffs2: notice: (12317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 794.967473][T12317] xt_hashlimit: size too large, truncated to 1048576 [ 795.120446][T12323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.901649][T12320] xt_hashlimit: size too large, truncated to 1048576 [ 796.455906][T12326] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 797.858143][ T5797] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 798.019119][ T5797] usb 9-1: Using ep0 maxpacket: 32 [ 798.025314][ T5797] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 798.036222][ T5797] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 798.036263][ T5797] usb 9-1: config 0 has no interface number 0 [ 798.036315][ T5797] usb 9-1: config 0 interface 12 has no altsetting 0 [ 798.166541][ T5797] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.191804][ T5797] usb 9-1: config 0 descriptor?? [ 798.199151][ T5797] usb 9-1: can't set config #0, error -71 [ 798.212959][ T5797] usb 9-1: USB disconnect, device number 4 [ 798.243143][T12341] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1681'. [ 798.325858][ T5799] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 798.476012][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 798.481156][ T5799] usb 6-1: unable to get BOS descriptor or descriptor too short [ 798.481200][ T5799] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 798.482760][ T5799] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 798.482793][ T5799] usb 6-1: can't read configurations, error -61 [ 798.606039][ T5799] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 798.657514][ T4939] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 798.762715][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 798.768975][ T5799] usb 6-1: unable to get BOS descriptor or descriptor too short [ 798.769023][ T5799] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 798.772714][ T5799] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 798.772781][ T5799] usb 6-1: can't read configurations, error -61 [ 798.773132][ T5799] usb usb6-port1: attempt power cycle [ 798.958410][ T4939] usb 4-1: unable to get BOS descriptor or descriptor too short [ 798.959121][ T4939] usb 4-1: not running at top speed; connect to a high speed hub [ 798.959150][ T4939] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 798.961682][ T4939] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 798.961708][ T4939] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 798.961731][ T4939] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 798.961752][ T4939] usb 4-1: config 14 has no interface number 0 [ 798.961770][ T4939] usb 4-1: config 14 has no interface number 1 [ 798.961822][ T4939] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 798.961847][ T4939] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 798.961875][ T4939] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 798.961903][ T4939] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 798.961931][ T4939] usb 4-1: config 14 interface 57 has no altsetting 0 [ 798.961952][ T4939] usb 4-1: config 14 interface 228 has no altsetting 0 [ 798.964060][ T4939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.964085][ T4939] usb 4-1: Product: syz [ 798.964101][ T4939] usb 4-1: Manufacturer: syz [ 798.964118][ T4939] usb 4-1: SerialNumber: syz [ 799.116165][ T5799] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 799.141129][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 799.167676][ T5799] usb 6-1: unable to get BOS descriptor or descriptor too short [ 799.178407][ T5799] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 799.232764][ T5799] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 799.242735][ T5799] usb 6-1: can't read configurations, error -61 [ 799.375810][ T5799] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 799.397345][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 799.406436][ T5799] usb 6-1: unable to get BOS descriptor or descriptor too short [ 799.406499][ T5799] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 799.428788][ T5799] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 799.428855][ T5799] usb 6-1: can't read configurations, error -61 [ 799.437065][ T5799] usb usb6-port1: unable to enumerate USB device [ 799.662613][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 800.275286][ T4939] legousbtower 4-1:14.57: interrupt endpoints not found [ 801.199125][ T4939] legousbtower 4-1:14.228: get version request failed: -121 [ 801.199301][ T4939] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -121 [ 801.287967][T12367] CIFS: Attempting to mount //127.0.0.1/share [ 801.296758][T12367] CIFS: VFS: Error connecting to socket. Aborting operation. [ 801.305572][T12367] CIFS: VFS: cifs_mount failed w/return code = -101 [ 801.639815][ T30] audit: type=1400 audit(1787914932.465:1269): avc: denied { setopt } for pid=12368 comm="syz.8.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 803.395663][ T30] audit: type=1326 audit(1787914933.935:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4579e159 code=0x7ffc0000 [ 803.398040][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.398092][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.404095][ T30] audit: type=1326 audit(1787914933.935:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4579e159 code=0x7ffc0000 [ 803.404161][ T30] audit: type=1326 audit(1787914934.045:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcd4579e159 code=0x7ffc0000 [ 803.404207][ T30] audit: type=1326 audit(1787914934.045:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4579e159 code=0x7ffc0000 [ 803.404252][ T30] audit: type=1326 audit(1787914934.045:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4579e159 code=0x7ffc0000 [ 803.406275][ T30] audit: type=1326 audit(1787914934.105:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcd4575e98e code=0x7ffc0000 [ 803.406328][ T30] audit: type=1326 audit(1787914934.105:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4579e159 code=0x7ffc0000 [ 803.406374][ T30] audit: type=1326 audit(1787914934.105:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4579e159 code=0x7ffc0000 [ 803.406421][ T30] audit: type=1326 audit(1787914934.115:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12381 comm="syz.5.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd4579e159 code=0x7ffc0000 [ 806.797033][ T5721] usb 4-1: USB disconnect, device number 65 [ 807.684029][T12424] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1703'. [ 807.930737][T12428] sctp: [Deprecated]: syz.5.1702 (pid 12428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.930737][T12428] Use struct sctp_sack_info instead [ 811.246502][ T5797] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 811.421937][ T5797] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 811.461684][ T5612] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 811.523377][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.523439][ T5797] usb 4-1: Product: syz [ 811.523524][ T5797] usb 4-1: Manufacturer: syz [ 811.523816][ T5797] usb 4-1: SerialNumber: syz [ 811.647276][ T5797] usb 4-1: config 0 descriptor?? [ 811.829348][ T5797] hub 4-1:0.0: bad descriptor, ignoring hub [ 811.837912][ T5797] hub 4-1:0.0: probe with driver hub failed with error -5 [ 811.930182][T12468] sctp: [Deprecated]: syz.1.1717 (pid 12468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.930182][T12468] Use struct sctp_sack_info instead [ 812.004938][ T5612] usb 9-1: Using ep0 maxpacket: 32 [ 812.038255][ T5612] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 812.137283][ T5612] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 812.137329][ T5612] usb 9-1: config 0 has no interface number 0 [ 812.137385][ T5612] usb 9-1: config 0 interface 12 has no altsetting 0 [ 812.272449][ T5612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.272500][ T5612] usb 9-1: Product: syz [ 812.272655][ T5612] usb 9-1: Manufacturer: syz [ 812.272678][ T5612] usb 9-1: SerialNumber: syz [ 812.706684][ T5797] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 812.764218][ T5612] usb 9-1: config 0 descriptor?? [ 812.932900][ T5797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 812.936985][ T5797] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 812.937292][ T5797] usb 4-1: media controller created [ 813.067258][ T5797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 814.571048][ T5797] DVB: Unable to find symbol dib7000p_attach() [ 814.577983][ T5797] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 814.609327][ T5612] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 814.609402][ T5612] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 814.609430][ T5612] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 814.609500][ T5612] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 814.617598][ T5612] usb 9-1: USB disconnect, device number 5 [ 815.427651][ T5797] rc_core: IR keymap rc-dib0700-rc5 not found [ 815.427703][ T5797] Registered IR keymap rc-empty [ 815.427968][ T5797] dvb-usb: could not initialize remote control. [ 815.427983][ T5797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 815.469857][ T5797] usb 4-1: USB disconnect, device number 66 [ 815.522815][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 815.533317][ T5797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 815.825334][ T1035] nci: nci_rx_work: unknown MT 0x6 [ 816.084009][T12504] jffs2: notice: (12504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 816.111889][T12504] xt_hashlimit: size too large, truncated to 1048576 [ 816.400738][T12512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.021771][T12519] FAULT_INJECTION: forcing a failure. [ 817.021771][T12519] name failslab, interval 1, probability 0, space 0, times 0 [ 817.021833][T12519] CPU: 1 UID: 0 PID: 12519 Comm: syz.3.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.021982][T12519] Tainted: [L]=SOFTLOCKUP [ 817.021991][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 817.022005][T12519] Call Trace: [ 817.022027][T12519] [ 817.022038][T12519] dump_stack_lvl+0x100/0x190 [ 817.022079][T12519] should_fail_ex.cold+0x5/0xa [ 817.022109][T12519] should_failslab+0xc2/0x120 [ 817.022132][T12519] __kmalloc_cache_noprof+0x91/0x6d0 [ 817.022165][T12519] ? __might_fault+0xc5/0x140 [ 817.022195][T12519] ? alloc_pipe_info+0x10e/0x590 [ 817.022232][T12519] alloc_pipe_info+0x10e/0x590 [ 817.022260][T12519] splice_direct_to_actor+0x78f/0xa30 [ 817.022288][T12519] ? __lock_acquire+0x4c5/0x1ec0 [ 817.022314][T12519] ? __pfx_direct_splice_actor+0x10/0x10 [ 817.022340][T12519] ? lock_acquire+0x1d1/0x380 [ 817.022421][T12519] ? get_pid_task+0x2a/0x250 [ 817.022465][T12519] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 817.022500][T12519] ? lock_acquire+0x1d1/0x380 [ 817.022528][T12519] do_splice_direct+0x174/0x240 [ 817.022558][T12519] ? __pfx_do_splice_direct+0x10/0x10 [ 817.022584][T12519] ? avc_policy_seqno+0x9/0x20 [ 817.022609][T12519] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 817.022636][T12519] ? bpf_lsm_file_permission+0x9/0x10 [ 817.022663][T12519] ? security_file_permission+0x76/0x210 [ 817.022698][T12519] ? rw_verify_area+0xce/0x6d0 [ 817.022732][T12519] do_sendfile+0xadc/0xe20 [ 817.022770][T12519] ? __pfx_do_sendfile+0x10/0x10 [ 817.022800][T12519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 817.022825][T12519] ? __fget_files+0x21f/0x3d0 [ 817.022916][T12519] __x64_sys_sendfile64+0x1d8/0x220 [ 817.022944][T12519] ? ksys_write+0x1ac/0x250 [ 817.022977][T12519] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 817.023013][T12519] do_syscall_64+0x123/0x790 [ 817.023040][T12519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.023064][T12519] RIP: 0033:0x7f80f6b9e159 [ 817.023085][T12519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.023107][T12519] RSP: 002b:00007f80f7a4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.023130][T12519] RAX: ffffffffffffffda RBX: 00007f80f6e25fa0 RCX: 00007f80f6b9e159 [ 817.023146][T12519] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 817.023160][T12519] RBP: 00007f80f7a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 817.023174][T12519] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 817.023189][T12519] R13: 00007f80f6e26038 R14: 00007f80f6e25fa0 R15: 00007ffe82d48498 [ 817.023220][T12519] [ 817.514506][T12528] sctp: [Deprecated]: syz.3.1734 (pid 12528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 817.514506][T12528] Use struct sctp_sack_info instead [ 818.493544][ T5804] block nbd0: Possible stuck request ffff888028277000: control (read@0,1024B). Runtime 150 seconds [ 818.516432][ T5804] block nbd0: Possible stuck request ffff8880282771c0: control (read@1024,1024B). Runtime 150 seconds [ 818.517635][ T5804] block nbd0: Possible stuck request ffff888028277380: control (read@2048,1024B). Runtime 150 seconds [ 818.521244][ T5804] block nbd0: Possible stuck request ffff888028277540: control (read@3072,1024B). Runtime 150 seconds [ 818.536440][T12486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.572455][ T5612] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 818.816110][ T5612] usb 6-1: Using ep0 maxpacket: 32 [ 818.866906][ T5612] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 818.882128][ T5612] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 818.890872][ T5612] usb 6-1: config 0 has no interface number 0 [ 818.897593][ T5612] usb 6-1: config 0 interface 12 has no altsetting 0 [ 818.985706][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.999941][ T5612] usb 6-1: Product: syz [ 819.004734][ T5612] usb 6-1: Manufacturer: syz [ 819.009961][ T5612] usb 6-1: SerialNumber: syz [ 819.035498][ T5612] usb 6-1: config 0 descriptor?? [ 819.737335][T12541] sctp: [Deprecated]: syz.1.1737 (pid 12541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 819.737335][T12541] Use struct sctp_sack_info instead [ 819.980746][T12526] option changes via remount are deprecated (pid=12523 comm=syz.5.1733) [ 820.146133][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 820.154340][ T30] audit: type=1326 audit(1787914950.915:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.182723][ T30] audit: type=1326 audit(1787914950.915:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.182958][ T30] audit: type=1326 audit(1787914950.925:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.183163][ T30] audit: type=1326 audit(1787914950.925:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.183536][ T30] audit: type=1326 audit(1787914950.925:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.215939][ T30] audit: type=1326 audit(1787914950.925:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f80f6b5e98e code=0x7ffc0000 [ 820.216162][ T30] audit: type=1326 audit(1787914950.925:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.216348][ T30] audit: type=1326 audit(1787914950.925:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.216576][ T30] audit: type=1326 audit(1787914950.925:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.216874][ T30] audit: type=1326 audit(1787914950.935:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.3.1740" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f6b9e159 code=0x7ffc0000 [ 820.545256][T12526] kAFS: No cell specified [ 820.554129][ T5612] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 820.554213][ T5612] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 820.554245][ T5612] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 820.554315][ T5612] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 820.613714][ T5612] usb 6-1: USB disconnect, device number 52 [ 820.899178][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 822.146748][ T5612] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 822.296946][ T5612] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 822.517592][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.528132][ T5612] usb 4-1: Product: syz [ 822.538681][ T5612] usb 4-1: Manufacturer: syz [ 822.544907][ T5612] usb 4-1: SerialNumber: syz [ 822.697053][ T5612] usb 4-1: config 0 descriptor?? [ 822.860649][ T5612] hub 4-1:0.0: bad descriptor, ignoring hub [ 822.869440][ T5612] hub 4-1:0.0: probe with driver hub failed with error -5 [ 822.955044][ T5612] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 822.970510][ T5612] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 822.981713][ T5612] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 822.990772][ T5612] usb 4-1: media controller created [ 823.025564][ T5612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.220460][ T5612] DVB: Unable to find symbol dib7000p_attach() [ 823.220490][ T5612] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 823.223102][T12581] Process accounting resumed [ 823.435832][ T5612] rc_core: IR keymap rc-dib0700-rc5 not found [ 823.435865][ T5612] Registered IR keymap rc-empty [ 823.436096][ T5612] dvb-usb: could not initialize remote control. [ 823.436110][ T5612] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 823.476469][ T5612] usb 4-1: USB disconnect, device number 67 [ 823.588264][ T5612] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 825.126486][T11593] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 825.320394][T11593] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 825.340255][T11593] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.340334][T11593] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.359784][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 825.359802][ T30] audit: type=1400 audit(1787914956.165:1334): avc: denied { read } for pid=12649 comm="syz.7.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 825.394323][T11593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 825.394374][T11593] usb 4-1: SerialNumber: syz [ 825.671960][T11593] usb 4-1: 0:2 : does not exist [ 825.672091][T11593] usb 4-1: unit 185 not found! [ 825.672136][T11593] usb 4-1: unit 175 not found! [ 825.672158][T11593] usb 4-1: unit 217 not found! [ 825.672179][T11593] usb 4-1: unit 176 not found! [ 825.672197][T11593] usb 4-1: unit 181 not found! [ 825.672214][T11593] usb 4-1: unit 166 not found! [ 825.672231][T11593] usb 4-1: unit 15 not found! [ 825.672248][T11593] usb 4-1: unit 214 not found! [ 825.672264][T11593] usb 4-1: unit 136 not found! [ 825.672281][T11593] usb 4-1: unit 64 not found! [ 825.672299][T11593] usb 4-1: unit 84 not found! [ 825.710217][T11593] usb 4-1: unit 118 not found! [ 825.710239][T11593] usb 4-1: unit 154 not found! [ 825.710258][T11593] usb 4-1: unit 153 not found! [ 825.710274][T11593] usb 4-1: unit 156 not found! [ 825.710291][T11593] usb 4-1: unit 121 not found! [ 825.710309][T11593] usb 4-1: unit 248 not found! [ 825.760416][ T30] audit: type=1400 audit(1787914956.585:1335): avc: denied { mounton } for pid=12658 comm="syz.7.1785" path="/proc/234/cgroup" dev="proc" ino=42558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 825.766905][ T30] audit: type=1400 audit(1787914956.595:1336): avc: denied { remount } for pid=12658 comm="syz.7.1785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 825.776732][ T30] audit: type=1400 audit(1787914956.605:1337): avc: denied { create } for pid=12658 comm="syz.7.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 825.809807][ T32] INFO: task syz.0.1370:11069 blocked for more than 144 seconds. [ 825.809833][ T32] Tainted: G L syzkaller #0 [ 825.809844][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.809851][ T32] task:syz.0.1370 state:D stack:28024 pid:11069 tgid:11061 ppid:5603 task_flags:0x400140 flags:0x00080002 [ 825.809903][ T32] Call Trace: [ 825.809909][ T32] [ 825.809920][ T32] __schedule+0x1259/0x6920 [ 825.809952][ ** replaying previous printk message ** [ 825.809952][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 825.809977][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 825.810005][ T32] ? __pfx___schedule+0x10/0x10 [ 825.810027][ T32] ? find_held_lock+0x2b/0x80 [ 825.810069][ T32] ? schedule+0x225/0x2c0 [ 825.810097][ T32] schedule+0xdd/0x2c0 [ 825.810120][ T32] schedule_preempt_disabled+0x13/0x30 [ 825.810145][ T32] __mutex_lock+0xcbf/0x1bc0 [ 825.810163][ T32] ? bdev_open+0xa2/0xe40 [ 825.810190][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 825.810209][ T32] ? bd_prepare_to_claim+0x1e0/0x280 [ 825.810231][ T32] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 825.810253][ T32] ? file_init_path+0x48e/0x670 [ 825.810282][ T32] ? bdev_open+0xa2/0xe40 [ 825.810316][ T32] bdev_open+0xa2/0xe40 [ 825.810345][ T32] bdev_file_open_by_dev+0x179/0x210 [ 825.810370][ T32] setup_bdev_super+0x78/0x770 [ 825.810397][ T32] get_tree_bdev_flags+0x363/0x620 [ 825.810422][ T32] ? __pfx_befs_fill_super+0x10/0x10 [ 825.810449][ T32] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 825.810479][ T32] ? __pfx_befs_get_tree+0x10/0x10 [ 825.810502][ T32] ? vfs_get_tree+0x49/0x320 [ 825.810526][ T32] vfs_get_tree+0x92/0x320 [ 825.810551][ T32] path_mount+0x7d0/0x24c0 [ 825.810579][ T32] ? __pfx_path_mount+0x10/0x10 [ 825.810613][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 825.810635][ T32] ? putname+0xb1/0x110 [ 825.810656][ T32] ? kmem_cache_free+0x127/0x6c0 [ 825.810692][ T32] ? __x64_sys_mount+0x293/0x310 [ 825.810714][ T32] __x64_sys_mount+0x293/0x310 [ 825.810738][ T32] ? __pfx___x64_sys_mount+0x10/0x10 [ 825.810762][ T32] ? kcov_ioctl+0x17a/0x760 [ 825.810788][ T32] do_syscall_64+0x123/0x790 [ 825.810810][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.810830][ T32] RIP: 0033:0x7f7f4cf9e159 [ 825.810846][ T32] RSP: 002b:00007f7f4dd8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 825.810881][ T32] RAX: ffffffffffffffda RBX: 00007f7f4d226270 RCX: 00007f7f4cf9e159 [ 825.810894][ T32] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000180 [ 825.810906][ T32] RBP: 00007f7f4d035024 R08: 0000000000000000 R09: 0000000000000000 [ 825.810918][ T32] R10: 0000000000800841 R11: 0000000000000246 R12: 0000000000000000 [ 825.810930][ T32] R13: 00007f7f4d226308 R14: 00007f7f4d226270 R15: 00007ffcbf08b938 [ 825.810970][ T32] [ 825.811012][ T32] [ 825.811012][ T32] Showing all locks held in the system: [ 825.811025][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 825.811039][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 825.842224][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 825.842243][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 825.846794][ T32] locks held by kworker/u8:11/2984: 2, on CPU#1: [ 825.846815][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 825.846926][ T32] #1: ffffc9000dd07d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 825.846992][ T32] locks held by getty/5360: 2, on CPU#1: [ 825.847007][ T32] #0: ffff88803777d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 825.847064][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 825.847125][ T32] locks held by kworker/u8:12/6023: 2, last CPU#1: [ 825.847140][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 825.847200][ T32] #1: ffffc9000511fd08 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 825.847262][ T32] locks held by udevd/8898: 4, on CPU#0: [ 825.847277][ T32] #0: ffff888055952cf8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 825.847327][ T32] #1: ffff888057139c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 825.847689][ T32] #2: ffff8880575c8e18 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 825.847755][ T32] #3: ffff88802bd131d8 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 825.847813][ T32] locks held by udevd/8903: 1, on CPU#0: [ 825.847835][ T32] #0: ffff88802801e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 825.847897][ T32] locks held by syz.0.1370/11069: 2, on CPU#1: [ 825.847913][ T32] #0: ffff88802277c0e8 (&type->s_umount_key#88/1){+.+.}-{4:4}, at: sget_fc+0x3c2/0x1f20 [ 825.847983][ T32] #1: ffff88802801e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 825.848040][ T32] locks held by kworker/0:2/11593: 8, last CPU#0: [ 825.848056][ T32] #0: ffff888021e91140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 825.848116][ T32] #1: ffffc90004e7fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 825.848175][ T32] #2: ffff88802aa591d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 825.848224][ T32] #3: ffff88802bd131d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 825.848283][ T32] #4: ffff88807d0921a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 825.848340][ T32] #5: ffffffff90bc6440 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x385/0x3b10 [ 825.848406][ T32] #6: ffffffff90b84880 (sound_mutex){+.+.}-{4:4}, at: snd_register_device+0x1ac/0x6d0 [ 825.848456][ T32] #7: ffffffff8ecac320 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x15b/0x2c0 [ 825.853148][ T32] locks held by syz.7.1739/12547: 1, last CPU#1: [ 825.853171][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 825.853238][ T32] locks held by syz.5.1782/12653: 1, on CPU#1: [ 825.853255][ T32] #0: ffff88803402eb90 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 825.853319][ T32] locks held by syz.7.1785/12658: 1, on CPU#1: [ 825.853336][ T32] #0: ffff888078db5cf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x160/0x6f0 [ 825.853414][ T32] locks held by syz.7.1785/12662: 4, last CPU#1: [ 825.853431][ T32] #0: ffffffff8ef3cab0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4806/0x8370 [ 825.853486][ T32] #1: ffff888078db5cf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 825.853545][ T32] #2: ffff88802e34d038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 825.853608][ T32] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 825.853661][ T32] locks held by syz.8.1784/12660: 1, on CPU#1: [ 825.853678][ T32] #0: ffffffff8edf7f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 825.853744][ T32] locks held by modprobe/12663: 1, last CPU#1: [ 825.853760][ T32] #0: ffff88807e968e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 825.863970][ T32] [ 825.863983][ T32] ============================================= [ 825.863983][ T32] [ 825.864014][ T32] NMI backtrace for cpu 1 [ 825.864032][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 825.864063][ T32] Tainted: [L]=SOFTLOCKUP [ 825.864072][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 825.864086][ T32] Call Trace: [ 825.864094][ T32] [ 825.864102][ T32] dump_stack_lvl+0x100/0x190 [ 825.864139][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 825.864172][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 825.864198][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 825.864232][ T32] sys_info+0x141/0x190 [ 825.864257][ T32] watchdog+0xcb1/0x1030 [ 825.864287][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 825.864321][ T32] ? __pfx_watchdog+0x10/0x10 [ 825.864345][ T32] ? __kthread_parkme+0x18f/0x230 [ 825.864374][ T32] ? kthread+0x13a/0x450 [ 825.864400][ T32] ? __pfx_watchdog+0x10/0x10 [ 825.864422][ T32] kthread+0x373/0x450 [ 825.864449][ T32] ? __pfx_kthread+0x10/0x10 [ 825.864479][ T32] ret_from_fork+0x730/0xd60 [ 825.864504][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 825.864529][ T32] ? __switch_to+0x800/0x10f0 [ 825.864558][ T32] ? __pfx_kthread+0x10/0x10 [ 825.864588][ T32] ret_from_fork_asm+0x1a/0x30 [ 825.864624][ T32] [ 825.864655][ T32] Sending NMI from CPU 1 to CPUs 0: [ 825.864687][ C0] NMI backtrace for cpu 0 [ 825.864702][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.864730][ C0] Tainted: [L]=SOFTLOCKUP [ 825.864737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 825.864751][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 825.864781][ C0] Code: e5 5c fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 3d 94 22 06 e8 e8 f6 cf fc eb a2 e8 71 f7 [ 825.864801][ C0] RSP: 0000:ffffc90000157958 EFLAGS: 00000002 [ 825.864818][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 825.864832][ C0] RDX: 00000000000003fd RSI: ffffffff85aef170 RDI: ffffffff9bc5bb60 [ 825.864846][ C0] RBP: ffffffff9bc5bb20 R08: 0000000000000001 R09: 000000000000001f [ 825.864860][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 825.864873][ C0] R13: 0000000000000020 R14: fffffbfff378b7c1 R15: dffffc0000000000 [ 825.864887][ C0] FS: 0000000000000000(0000) GS:ffff888123b69000(0000) knlGS:0000000000000000 [ 825.864906][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 825.864920][ C0] CR2: 00007ffcdcfe5d50 CR3: 00000000742eb000 CR4: 00000000003526f0 [ 825.864934][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 825.864947][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 825.864961][ C0] Call Trace: [ 825.864968][ C0] [ 825.864976][ C0] wait_for_lsr+0x13a/0x210 [ 825.865009][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 825.865042][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 825.865073][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 825.865102][ C0] serial8250_console_write+0xf46/0x1330 [ 825.865128][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 825.865149][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 825.865181][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 825.865217][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 825.865250][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 825.865280][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 825.865309][ C0] ? do_raw_spin_lock+0x90/0x260 [ 825.865337][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 825.865382][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 825.865413][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 825.865442][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 825.865476][ C0] nbcon_kthread_func+0x613/0x7d0 [ 825.865509][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 825.865544][ C0] ? __kthread_parkme+0x18f/0x230 [ 825.865568][ C0] ? kthread+0x13a/0x450 [ 825.865593][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 825.865623][ C0] kthread+0x373/0x450 [ 825.865648][ C0] ? __pfx_kthread+0x10/0x10 [ 825.865676][ C0] ret_from_fork+0x730/0xd60 [ 825.865698][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 825.865720][ C0] ? __switch_to+0x800/0x10f0 [ 825.865744][ C0] ? __pfx_kthread+0x10/0x10 [ 825.865769][ C0] ret_from_fork_asm+0x1a/0x30 [ 825.865796][ C0] [ 825.881435][ T30] audit: type=1400 audit(1787914956.705:1338): avc: denied { sys_admin } for pid=12658 comm="syz.7.1785" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 825.881534][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 826.983172][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 826.993848][ T32] Tainted: [L]=SOFTLOCKUP [ 826.998169][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 827.008215][ T32] Call Trace: [ 827.011492][ T32] [ 827.014411][ T32] dump_stack_lvl+0x100/0x190 [ 827.019102][ T32] vpanic+0x553/0x970 [ 827.023097][ T32] ? __pfx_vpanic+0x10/0x10 [ 827.027599][ T32] panic+0xd1/0xe0 [ 827.031312][ T32] ? __pfx_panic+0x10/0x10 [ 827.035731][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 827.041888][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 827.048068][ T32] ? watchdog.cold+0x1ec/0x234 [ 827.052829][ T32] watchdog.cold+0x1fd/0x234 [ 827.057416][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 827.063227][ T32] ? __pfx_watchdog+0x10/0x10 [ 827.067902][ T32] ? __kthread_parkme+0x18f/0x230 [ 827.072927][ T32] ? kthread+0x13a/0x450 [ 827.077174][ T32] ? __pfx_watchdog+0x10/0x10 [ 827.081845][ T32] kthread+0x373/0x450 [ 827.085915][ T32] ? __pfx_kthread+0x10/0x10 [ 827.090505][ T32] ret_from_fork+0x730/0xd60 [ 827.095095][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 827.100220][ T32] ? __switch_to+0x800/0x10f0 [ 827.104917][ T32] ? __pfx_kthread+0x10/0x10 [ 827.109505][ T32] ret_from_fork_asm+0x1a/0x30 [ 827.114274][ T32] [ 827.117576][ T32] Kernel Offset: disabled [ 827.121888][ T32] Rebooting in 86400 seconds..