last executing test programs:

6.924769787s ago: executing program 2 (id=2596):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000300)=""/227, 0xe3)

5.844088751s ago: executing program 4 (id=2604):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0xa, 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.117704713s ago: executing program 3 (id=2607):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)
listen(r3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.083460319s ago: executing program 4 (id=2608):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)

4.337030354s ago: executing program 4 (id=2611):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)
listen(r3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.242460591s ago: executing program 1 (id=2612):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)
listen(r3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.73235044s ago: executing program 2 (id=2613):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)
listen(r3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.507593499s ago: executing program 3 (id=2614):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2", 0x4ae, r3)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.952361418s ago: executing program 4 (id=2615):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='all\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='+192.0.2.1\n', 0xb)

2.881127433s ago: executing program 0 (id=2616):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(r1, &(0x7f00000002c0)='./config\x00', 0x1, 0x0)
close(r2)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='1', 0x1)

2.847854373s ago: executing program 1 (id=2617):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0xa, 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.702952013s ago: executing program 0 (id=2618):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)

2.320938657s ago: executing program 4 (id=2619):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

2.203083013s ago: executing program 0 (id=2620):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

2.09144552s ago: executing program 2 (id=2621):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x103000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x181000)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.062511418s ago: executing program 0 (id=2622):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20)
write(r0, &(0x7f0000000000)='3', 0x4e)
syz_open_dev$vim2m(0x0, 0x401, 0x2)
write$P9_RREADDIR(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000100)={0x48})

2.038527383s ago: executing program 1 (id=2623):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2282, 0x10b)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), 0x0)
write$tun(r1, &(0x7f0000000040)=ANY=[], 0x103)

1.924885659s ago: executing program 3 (id=2624):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200)=0x2, 0x4)
setsockopt(r0, 0x84, 0x7d, &(0x7f0000000240)="0000000001000000", 0x8)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280)=0x800, 0x4)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000200)=0x2, 0x4)
setsockopt(r1, 0x84, 0x7d, &(0x7f0000000240)="0000000001000000", 0x8)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r1, &(0x7f0000001000)='\x00'/2049, 0x801, 0x0, 0x0, 0x0)

1.863490371s ago: executing program 0 (id=2625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.713355012s ago: executing program 1 (id=2626):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='all\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='+192.0.2.1\n', 0xb)

1.636065259s ago: executing program 3 (id=2627):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))

1.567429482s ago: executing program 3 (id=2628):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, <r4=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x80000})

1.518719932s ago: executing program 2 (id=2629):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.517055613s ago: executing program 1 (id=2630):
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$vim2m(&(0x7f0000000800), 0x1, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
listen(r0, 0x5)
syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)

1.327667297s ago: executing program 0 (id=2631):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)

969.630799ms ago: executing program 2 (id=2632):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)

852.01306ms ago: executing program 3 (id=2633):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r3)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

558.302661ms ago: executing program 1 (id=2634):
inotify_init()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90)

513.906852ms ago: executing program 4 (id=2635):
mkdirat(0xffffffffffffffff, 0x0, 0x59)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[], 0x20)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x4000921, 0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9362, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
syz_clone(0x18000040, &(0x7f0000000440)="d29cc444ef49257da19425ea6f07296f837caf59dbc65ee07242dff7abc46260ff9ecea649261dd780352aec8b8458b2d8089e62d200006c9a0b20a402894d4072d1277d90e08c04a37c729e3c24b8ce485427095a5bd7792eb8078f0eb68c7a23559a676beef586ca6f19ca701b57d268743933122e529dd08a156fc981aa904e959dab9e2363aa003327f6bee8b9fa143e840f47ee1704fd5c0a8a33a6dea66c322a80bc0c25805ef03cd068344f90959100414b6ca464a2b3a673ba45df9f7c2aa4e2de94520419e4708708efb3445ec37ce0b34432c3cfcf7c902bce7ac8445fd0cc01b1e008e6a3be7f18e8c064aa8d85cdacda0706c0c8dd8b29362602875152d2dc9cbaf99f88b14d9a29f378ba3c44f3aaff34e630c7afb64b0e57363b91dcb16041bbec0cac6ec950f1ef4be04c8559a793a3bce3bfe9b5d5aa9966bdb7c6f5fae940e018c75b44481218a789c4ab5ddde21214e6aaccded8feb777ea2a4d54125c30914c9543d39bad09b1c64839f935bd868aca54bef538d22b1302e0de114848f998887a4d04fa9e4dbcb222fcff43499715c23e505209fad17ea8fce40a6934d5075b5ebdb9478591a557c54df2d67343b069b03c30e548f85f9748cb75d49569ced63935f583f4373b90c268f322bb0889e2b433ca2a367742bbebd13647593f998fca9d6b7452042e3b7a9d7be745fddf54a8564b2cce132edf8577b97a695cc37de3ddc6371154998994ce2bf05b4c6f3ca142ebf70213bec0eb60bdb7ce2a1e9450c065c2535bb16e544f0406209686d2c12eefc574c51e588f5ac2e1d5d217191d274bf1af5f5e1f8b545debdaa6868a43b1d61a26b0ea444d089aa70360b3a90b953ce5026d3af39983291b713da3d32c8cee98fd0e084f95ee821f529406c0f5414a799084031ca042b01249b593a3a81f4f8d47dfbf8dd99f8ddfcf4d3a9234dc8d76c1c919d3cf053e6541ad04c063eecc70d400b4faf22db8e1ccf90d20837bad4c3c1a60d3d17bdda427323959eba8ff772e8485d12e6e0717866609bd0aabf1b2e4308b8140fb19245e5e3cf59a55d01153f9716166fb59880cc65cd09179be807b5fa9bfe0c6c2261ecefe762456980c16b1d0c32d76adbf435f6553ad284bdaab4672813dcc1402ea91faed11e0eb343c1ba0113e2151b6e7297d2a914046d885d96facdd5d069de9dc93dff6a9518218b1e6af725d30f9a5d4450f3c904b000d9f6a268941b39adce9917a59c2e14a3d38a8cbcf4be36ad75e4a4f41f5dddf8849ee55d5ef9616c30f77c6a9aa16f413f741bbe2963d9a522acd5bfeed6761a5ef688338377d6ff1e434e55f12b58b2e39b4432024189b96d2fa9903368a797985c6fd34eb62766756c462df78b47f78501d41b2e2c4269dbfbbb4a7efa29dc4eb37a7cd2db150ae9c28470d5cb4ec8462d888664a654df966ba9bb2539c56a3f85137af59d1cdcbbd2f0d0cc15f0678daf6f18a559b578feda437ac19da8d435141922b219968c8cc41198678528151ee025e5373136e418321c48b7c553e396b571aaeba0897b4c67e2680dc6c15ecb4b9f42397d870f9ad5977bdbde062d6b13b7b7d9d4e8b451411e75127884d14cc60558747f982c4fa7ee13abe8434a6efa6fd1bd45204015e300b7e31bb52a5a6a27eaf97d16ce9db2995eef59cc6547117cd0f40821840d9b4100cd5078e119034b58cd3df80d0a58e3f7a9cf8b7f8682d4dc74a408ad939a52626f2ce888781d45cebb70bb50a6e17b9a329f144037b6dbe8462f40edb316264d4f77dea7c847911475b0d819ee92e5d249ad376b59d36a88ea4b0a6fbfe261e8a7fc3705658f34364673b9dc6d9deb288b90e9c21d9aec86d68fac38ac94790e0ab900912c9236f00323820cfd2894cc4782b36b2dd7043596d9872cd7d79bb195b8da937aacdbe150742155e10970fa03f5de874957399bbe6bdf73ef8247dcd56c9f713a67468f22a5d91eaaa68be0f9c023394864e9d229c49e313bee88fc226f3c1504600e51e6d8a392e7e89c14cc409412c155280dcb535bb487dbb203e3f77b5773b208a2b3f3927ed86e8f1a157d5152e7cb7bdf6406dbb696120e7015ce736f0a134fc99abb518e82389e61c03d257d276d7a94b82cecfc58234c064ba1e053c45375055c2fd4738a98d61513b5822dae408b248c4cbff66d2ce8e70d92501af69e156cda7404678f697295414f93cf51d55282ec6dda2f48a3cbd2b3c3986ed3f1a60ab318f9782467dee80824955f44971f19db282e7bcf81997a87864af998a65d68ebfba92d888192c0fb6b231a288e17c17e6d40ed38d1da3d1ff46d5c26b86feef573e4de5e330d097a8e30d4954399f8a8c93255d2cc4ef37621e532297e4a211350a8b673583730b18652c2ca760ae9f26043e00aca50a9eb9d9f6f5e5097617b4262f68a2f478dd1fa14d66b2b79e2779ca7f3cfe6d391829a5eae18ed23f04efc232b6e7435ba685908d26979e4fd0ecb0b677192f0718d75677fd74f586411defb7aaee1822b60080737653124690d7da3d20ecb9993658ca6ab30f9a958527459ba5f411492a69911e69dcb7a9a10d31197f1e1dbe1b239d80beca7a41df3a7ce8110b44e0e61d813c025afd9ec3a0406bc9e5aa52e5fd6dc6da6e5ab84cab3421d1eb553e317cee1a4dcf33f47a3e65b690fea6a3abd226088996cb46e452849be8b140a65ddf9c68ae7133f367e91ac9162c73107c28b2f6d66cc43ad2c3ac63f7e77888676299d03192da3e0fa9a7d709e1f19dcf99c29cd7f96576b6e23c624f97bb4549fba14e8b697fc55dd5ac64278c1fc2cfa716b4f4db1baac9840ab52aa5bc7dd61b5d39702f2bf4db4ed3d6f19e7605829947e0d3277dbdbc5b26de3500db7bcb2218828c50f5d13c77d83734660f56612db5f8ae97dd3d85caffc7c308de5af10c6ef8e76acc91d5f3e3affcc5dc13a511a082bf9ed9515556261a3d090539c1ed7a6ff79574c6c3ad0a416b45cca89a0422bd8139ab5260c0e778145647fb8d3e2047abe220a37d17aa9af3a079c618577d9e832e26009bba85deac2727fbb7a40e1c26debefa0dc2f57926246e6be3966589a8c9d1df25f6819d0f941bf492c57da740475d62ec55ab685b117e2101cb12335b976869feca3b7f5f220d005381ca6425b9767d5d8af00ff06d3b8c4590d164b912676f1d9c229147575db76ab2b460092d7ba5365caa68e1ee94f3e0f46e7fd155d23d2ae5da3b0c7512821ee7c6738834d51ce4c199268ada0a7934a5180e6796c60d8662a640d928deec76037b1cab663505b6504a3bc53142f78497f64f86b9a9d181982699973f208299369ec6195eeda93d050c9d346c101d11176578e4ec1cb6e3b265b530836882a91b789811947f3b2a3bfe0765cdf07d5458a9d4564578a5cbc2b34f8f05e9a42faa75e77a3bd8c70ecdd405fcc9e5431e5425cde6a01f9e3589aa06856a05558864d368e3a667957f65614b83b9e601f2008b58159b00aa0d21767c54b150b09df0e65f028e8be2a86380cb7e05c5b9d27a8a54fbf1ff5ad0e126d9c03113986ce1f980d5ed05cf58386539bdbb67dadf1da98bccce684d69e2bfa2505a77fb5679c4a011ab94e1e7d1bde41cfd12e11be0849e6deeaa8cfe2024e9be46205475d6f3a477e75b24e232c6cdcdf9ebad938cb870f8c610fe8ac10574e082ae1812e1d1667fb2ae8520546f18380d45a21ce01772ed961baa0563e4419d0fe7dc3f2a99f1c8d9bd582dbbea991b3fdacab05f13262feed105052903c1104328e289c250913e23d64e99af72af156b198fb5cf2c3585538d2e1e34e8110e0203a73199c41d625b67e34c3fcb164c5112a05aaa2154a18ef9c85566de75a2cab5743f1247363b353e7dc2b8bb6a1cce7768081b8e6a8e298e279d2d422df3a6007d5de196b032b9eb0c1cc55b4cfe2f9df62fd16aa149a7cc2bc5dad575cdd8b0fa9f5dc4e9d32a3055a2144b1ab4cf7b79c768ac20377a1592ab22511d062afd6563e645a957e36c0717ef2f1456fad365e4473aadb6df5679c005c30e252bb1556048ecc29e736c465b342ae76375768e0d8161a2bc51efd86afb907b8d4a906489e354a0a7c3b3ff6b9e8a6f1ca7891c81583801878fe643bbd3fcc4c2fa2c50cd2c7bbf8d64f488564f65c9f3523aac797f12d64be8f557e6bf4809ef35eeb2c65495469373fdcb342bd11d7d1e1f14bf9612a9097e114a96b1f4fc99b4d4bcbbd24333e921ca2303536e4343924809cce9e69e7cb3db0a4075084b700672a6127d0209a567f19cf572323ff6d9e91fd283ae7d5152582196c7cce0b70384255b023a4e47b13c4c912725592fb3d9a2fa2bb5d985d3d43d7619909fcc047f1969adc8afaec35dbdf62ceecf23cce3d0dfed3a409b573e3ce93dc8ef4669933f47ddc80f9bbcaeafb1263e80ca8c0590730ad3b99006c1d5291ad77a41db70cd08d221734e5133d7aa28dfac789f2cab440e81c18e514fb21f8f8849b63dfbfff275fcb0e9e3b4c97682a1c9beada8c0dc869c73869d637e4a5cc4464ba16b4d8e4ae69289f96d16ac56d7811735d70b93ddc783dcae1d022e186d6f2c65fa5f3f5988db82c7d73e06814a0f3c737e851bcff97221bb27d04c06157f876c75d1cc1c7a25c2530174b9b2251db7899628763fb2885d33950fd0de844141fa811bb997a011d8b836a46061dd1831caa3dfd07d57dbdd407991b3709dc724e42719b54262f00ec35197f53283ad6e436d8734f81857d83ceafbea3859e276234a41b1769e6df986635a02448ac61fe360c211b27e11b667e87389879b0b597a87a5ed37f3a7e4c15b63ea74358b49bc543836b5f258ed63e3dff9fb45e6d676058f9289b8d9a5fa5966a24ea4de4489a3e0462c23b28f3f5d74cf3990c6f56f030908c9483be7f2e4beb3744327bbc23079ceefeca3e479d2d8113cd165cca79961efe77d6e4690ad89a1b9888916b6817cb8785b106a690b921202450d0968c34cb2978e86d715437e1fb1cf08d2c219ee51def3c50eb8abe83402bc1452a53c5c7d0c8545fb5afec93aa2fb025f610f41b2cc40aa90e903cc55555d77cd06865fb214b040fda8637ce521b3e0596cedf3039ce1dea4eace910cfd7df3b3e1ea80053701bebec9d9e06d1d7850bb60431cc45ff3f0bf51a7f922ce2441caa409bbc54b01c5c3f2b4799aaee0cabf331d82d0a310787ab9ffd27d7a140190c9d6bde6fe64a01b4a20da0be8cb68b2b946e57ccdc95330e33742a36a3eea48d7c8eabd0f3cbe6f3dee0e9b0eba5b53faff7613dc83d941a8c80dd98aee84022c8f394bef623af417507c00f0e94a04f853dd6f70a90cc09542cd1929033ec612b573f2b42844f41f328115b3cc04bab229a0d34f0b14243b948edae4f71baa3d0fa73938707cbf7bce573e0c83d34a29b1d03a448f61f4195d2de1a71128675ac04e9a3aa7c2726728094da0649aeb4c8ba12eab87d1fb2578af83faa03b4dcf3eba107ec2a432a55e8844311b347d4a0960bfb8c05ef153d9aabef15eb94a3d7bfdb36570cba9f5f6085bffe7560b6e83d9381c27df063c8467e9377505afe64dd2c433941f3ccb50f50400278245fe510bb6fe563ddd06450b1365ca418cfdfbf85b1b3ac3da943e39872d315dcda89ada9d3c21f32657b07795371913d6db9fedae0783679a9d0cb2810e1638415764c5ee3d48509ed8f64a7746d7bfc00a88e567274a4f0719fce51bbd0847c769f3fca01567b7845193", 0x1000, &(0x7f0000000180), &(0x7f0000001480), &(0x7f00000014c0)="73bebb326a1b8af20709f947021d0cb2dddbb6dd9726db54f69154e0940f71507ae38ba0b7b8b3d6f2a2a2ffe6693128dee9d678c6f54a112c7efa3a0b93ad6e02af983e39bd325fe73fa39861520372fd66be90980344d05cdd8e938a00466ddab9a6876d44febbb9ef1d144cbaf3be1a597e2dc9f31000b5acc24b5db977b45c91cd35eee85d258769b969889d18cf719dda516fa61238090b5d5cf381f4db632f7e5743b7bc1407b7e6b2288bb586a1d019c0584f0bfa15818d6007ab6ffc01d6645f269e02e4e6dad04b267602d947f35d7091bf80fe20996f892d9610a70218154bc453de639abeb3023243ae8a7907ef05b2317a7a333e5ca0505aa8501f9054b10bddd3d6f4725f2f107501cebb7335ce0fedf4cc9bd016d3d1f1a20edf6d1402cdf961d06c460d55d17d5a7649cdc1fa1161c5736c356fbb29eaa7f83b935dc82def3a3e305f000feed89768202b4f6c8d44d1579a7bcd7d7c596eaeb00d0df7c80980034c2b34cc9f0ed390978b89e1cbfda6f2d4171cfebc5ee25b18dba8196870b68368ddb610ebc2536200e833fce175ba584aff193c6429d9669eb057eacf314a44de6893a18d0eb671256d903d0f0316ad68e061a5a48745ffc41dcdcd26c81bb4ef0b8ae960ee017a6a84b09d7c4d7d08216b41ba839b7bb1bf94c621a326debdc9708e7389551855a55323cb491a90bc69e0c9c667fd843a8774ff4b20edf5540e7177e3cd81b776f8b96bf1ed2cd0f92ea5eaf4662a88d7a95b61e3d592558f69a78298e1e829e46643330340154affa96290859ba83d1a80d1b329215bb0cc8d681a8a7931316f622e90fdde95a6be8fc461bbb568990b26dc5eba871737d96094c3d09b880b4c8a67eba51ea45e7695a00bc9dc115e4e74222c41997ed3989477170368ed86c044ef546e0fb282e2016317c2a39931551199266cb913d4a298ed987b8f689cd7cc5c40f0ee1301a6216cfc1ea2d37b902bccf4fd820dbed09d85f5ae5f97456059424a97c136c9d061b257e7a2d8a35e0c37ba9f86d9720572dad4ca589c6aed4e9ae535c8b55fe8c826cd81f57e317c8523aa6683062f98745092f2521c84260ba035579a2be70ad69cd27f8f3d7db84d5d199190f011b7d4fff1106a6803d0ca06cbf2a255917528d930b02ef28f2bfc7b8ff7561e78e4bd5c65c3c94a32b6226fd6665a9cd5e30aea086ae522815000b6df9bdbb16c9b31eff47130b636557f5baa6da87ce3d2a9776795c13e97eab99e69b89f7f74cbbda2f6dc463687a71b351c3da35ff23fce033340ed10e6c153a1b8815e49f1b3420172059a3b0151816105b3b18b6a6f1e666b15d4fe174de4da5408f96e174dd256399b2c7664121cb4aec0fb280093e7ba84b10c41f35d3b015bb30878b932ad17c242aaf53aa3473f339b144132bd058c1739f43102099da584b56612f93d515cc85a8facef56e91561ba6999b49778d5f53779971c4843d86e5b20b5dfd6166085336d91b7e73dfdfa95de0df8322215b974ace51ac36491286e1881125be6b74dba054747347f1f46d912e7dbe2c48722ccc14e85b92b22baf65350f0e45582cdd6ec9c987a0a6ba8cdc8abab9a401ce45b9bb98ee0b0e03f80fffd0b4d7a2c0f497deb22fd2eeda2aacde97e1e2e4e28918483510779cf5f3e98532b80a8e88eac711f8048f0e49f961704088178a3bc286e3347282edf1c8dcbe864cb03e136069de04aa1b5cf7f73ac58e5aceedd1f15ad8bc4d83548f6483fcec1940bfebded9e9301374c8f706b658a5bbb95c5d965dbdb4b4c3d6dacedafe9e3caab9d07a6a29109cf66dd9573c968b91aaa4d7a6b2e0b3c1a23de13e3c72869521c6e8455cfbef7758b8e702f91ea8641896e48280c10efc31ff89c816f51136b0cf7e0121116d3685d4ac6f023786adb82b339423936c3cc582a86c9df417f4f33577974e84574905a617a55223a5ac78128015d136a55e5d823fc38bdd9637f99312d4ec49f8959e77bd3e1d691733426abdc3e3b0c171e79bee4f9c846cd3c7a9312f1dbb73a73774f35b9db6e37366ab05373cff37080ffcf7f7a48839f39706d14eddfa588c684d84cc409afba0e426a76f84535cb043f1f871ef22123a34fe4b9664b3433e00e528699a7310e8f983e3fabfe845555d80511ceb4573e9dbc08cb73a1dd2dcdae43215d791958023116b2dba4b9deeda9bae68fe2e0b68b71e4e9a6e1931e59cfd29e0e0cc7bb510ca11f9196c21c3377e74178a74b1d33584bb0f21d46b436035393b1c2a10f18f72331d444131f700ee2002d031cb6bb374a0ec9ee288dade2b9e4ef6394d9f825298ef20c058eb868c8bc9b0a02117128075c6feecb5292e3d2b9db46b60b859553a6d934de63eeea0feaec62e8ec59eb7365e2858241973ebf97f7e0a42992c49d5fd3406070669531468809cc538db838873f10676e7aeba79d4826f31ee05655c8b0a66d8539a6c3584cc115fc353a52b4f4e46733faf1e2c95508713f51f178763eea9c3cacb06d901fedd2b2b67827ebb1cb7ecd4539779b29d3bcd8b740793039a7e8055badcad0ec46dde55be4671d50bbef5a93bd292d93e8c78ca46891f99632a66b53a2c51adeddce5cc750ca8ebe2498f969c3e752a7030206b2f931b08ccd6993f2a4b040429aa66cbab5fecad3654de3854ea455c996bc376009b1b63cd42b43b18bf59dab18cde6f666a97e5eb1037b1947d9f84e8690439adf702f6880dd8e718a8054282c5921187c7565b7f00747c039b1000d64ccc46e0c25b69e19494f99c1c489773960f45ce93d114818b4f1cbc7108768c36493d4b5b9959aa9654c469ee7e05a218973b71183a48c502fc76cb579a42ede354923e01791ef01fb86acb8d6db929cd5aebae5036951f52410b3fbe5276c8d25081c67cb9bbaa43bfecc15b9f1e3ad72f6492455670fde30ae8933fa8ed99b01ec28c65a60628687f39ab2454820b50c6bdc8922f745cb65877aa5285fc10fec5df5058f758c4379edd26ed5b606ff419fc3bbc4a55269fa364135c60db95cf3a89dd068da6f8d443b8c40343437a94c47a844f25898d0f28513832a04aa73d41ef297853b1420cd37f2008951a099a3c49be590634daf341492c41e3116c93b71193cae4aaacb107855a339df032a1a88fbb91aeea5c7a7f63153a5b4ec0b1258198578301e4ea66d5a9383ab916ad4d6bcdb11288365fbf8301957c226112d0e090bb85cd96bb31eb17c9f660717ca8e359745fa16724292c46c4fcdbb36c568725744d7a9b2668ba6e5416e3138e1b2c054ee0aab2113b6ea74b20118d7cb524d9fed060d7d6369554c8c4750ee9836277a4f44cab981e47d7c9b5092f45e5d54ff61e1e1071137e736484c94c2a2d51df040410b10bf274a09fe89c3d8f9e03debfd4c3a6f55e40c05b35497414e8c05eeb9965ee8d7f8b66ec71dff36f1b0393e888a3e3b4628d99e08e178d09b6ebc26435fad1a36fada523054a2a056bdcd961d31b74227b8420561ccbc36f627180681aff8ae96c6fbf90275bf617b91ad6f57c3d10b598227f151cdb9f108bfc303d6e121c9c0b4338cd13122ad6fb62d0b7aa860f46d83b06d80ef8032468b7e716f4ce1b27457637daccad4dc389b5a4de41460c1dc5489f6c6061c2a2152b0698df05ea33152b66caa3196ccb5687ae989b4116e5955d2540d23a14a8364d04379563d44d01ecff1bbbb163e0b6a5040506639ba580e372640af4360be515725f2bb0d1d0ea2d5719cde0aa0b8aae57d0addd4e13cedabfcba211d35a4fbdb7ce9f989de9bdf4e55836915e765513f1d51828a3efe8f7c296b137ad3318353efc6b6eb51385f18cdd6c6a0fd32b286d89beca4cf91592f964263118272e8872cee845c7e50bfbdbf65d3c790f3750ff3333bd6fb2e31acc1070ac083050727b5571eddad2b9bc5a1d8e4a045fe18f7af59bcc03d842c6bd4e7485546905929dd758731a1e184492bf24c823ac81b3a5c590817904280d7e45cd7f1b549f3acbc56f32ff93ee3d1197444a7cae187db97cbfdc5d662fe14066c88917aa26defaf099f73ac957b1e51b0548e1c2d1ce4095bf64dbe35f9d2ef146d525c3922dc92d314d388881445fc8eb30688386804bd9198a04f8b3fdbb7235d33f9ab64ccf834f45187e254c4764f07c00a3cb1783fe63e461625eccee78babe49036aa1bf99e35ff07d94f217187c8677a3412655b00fd9d229984f3da70abe3913e74bd9798c236aece1a1c088f23a0fc7fbe22f682d2906131a457ff0ef2d8b54989d3f7cb2cf145c34c31e3b2b8")

0s ago: executing program 2 (id=2636):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000300)=""/227, 0xe3)

kernel console output (not intermixed with test programs):

0.340:3029): pid=11136 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1486" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  599.797623][T11149] veth0: entered promiscuous mode
[  600.061907][   T31] audit: type=1400 audit(1790155360.840:3030): avc:  denied  { shutdown } for  pid=11142 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  600.062275][   T31] audit: type=1800 audit(1790155361.030:3031): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1489" name=08 dev="sda1" ino=2048 res=0 errno=0
[  600.763627][   T31] audit: type=1800 audit(1790155361.760:3032): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1491" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  601.306791][   T31] audit: type=1800 audit(1790155362.290:3033): pid=11169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1494" name=08 dev="sda1" ino=2048 res=0 errno=0
[  601.819179][T11148] veth0: left promiscuous mode
[  602.326856][   T31] audit: type=1800 audit(1790155363.330:3034): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1496" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  603.392706][   T31] audit: type=1800 audit(1790155364.340:3035): pid=11183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1497" name=08 dev="sda1" ino=2048 res=0 errno=0
[  604.064996][T11193] nvme_fabrics: unknown parameter or missing value '#!  	»›�¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=
pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request
[  604.137999][   T31] audit: type=1800 audit(1790155365.140:3036): pid=11192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1499" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  604.329359][   T31] audit: type=1800 audit(1790155365.330:3037): pid=11194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1501" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  604.406017][   T31] audit: type=1800 audit(1790155365.410:3038): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1502" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  604.414104][T11193] nvme_fabrics: missing parameter 'nqn=%s'
[  605.398487][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'.
[  605.587255][   T31] audit: type=1800 audit(1790155366.590:3039): pid=11216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1507" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  612.629309][T11260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  612.682687][   T31] audit: type=1800 audit(1790155373.680:3040): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1518" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  614.715328][   T31] audit: type=1800 audit(1790155375.700:3041): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1523" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  616.643033][   T31] audit: type=1400 audit(1790155376.660:3042): avc:  denied  { write } for  pid=11282 comm="syz.0.1525" name="functions" dev="configfs" ino=13445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  616.643081][   T31] audit: type=1800 audit(1790155376.960:3043): pid=11292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1524" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  617.658793][T11288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  617.833288][T11298] FAULT_INJECTION: forcing a failure.
[  617.833288][T11298] name failslab, interval 1, probability 0, space 0, times 0
[  617.833322][T11298] CPU: 0 UID: 0 PID: 11298 Comm: syz.4.1528 Not tainted syzkaller #0 PREEMPT(full) 
[  617.833344][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  617.833358][T11298] Call Trace:
[  617.833365][T11298]  <TASK>
[  617.833373][T11298]  dump_stack_lvl+0x100/0x190
[  617.833415][T11298]  should_fail_ex.cold+0x5/0xa
[  617.833444][T11298]  should_failslab+0xc2/0x120
[  617.833473][T11298]  __kvmalloc_node_noprof+0x113/0x9b0
[  617.833499][T11298]  ? sbitmap_init_node+0x1cc/0x720
[  617.833523][T11298]  sbitmap_init_node+0x1cc/0x720
[  617.833546][T11298]  sbitmap_queue_init_node+0x40/0x4a0
[  617.833570][T11298]  kyber_alloc_sched_data+0x30f/0x7b0
[  617.833601][T11298]  ? __pfx_kyber_alloc_sched_data+0x10/0x10
[  617.833629][T11298]  blk_mq_alloc_sched_res+0x105/0x250
[  617.833656][T11298]  elevator_change+0x136/0x530
[  617.833679][T11298]  elv_iosched_store+0x3be/0x460
[  617.833699][T11298]  ? __pfx_elv_iosched_store+0x10/0x10
[  617.833729][T11298]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  617.833752][T11298]  ? __pfx_elv_iosched_store+0x10/0x10
[  617.833772][T11298]  queue_attr_store+0x25f/0x2f0
[  617.833803][T11298]  ? __pfx_queue_attr_store+0x10/0x10
[  617.833830][T11298]  ? __lock_acquire+0x5c0/0x1f40
[  617.833860][T11298]  ? lock_acquire+0x1d1/0x380
[  617.833879][T11298]  ? sysfs_file_kobj+0x21/0x290
[  617.833900][T11298]  ? find_held_lock+0x2b/0x80
[  617.833923][T11298]  ? sysfs_file_kobj+0xe4/0x290
[  617.833945][T11298]  ? sysfs_file_kobj+0xe4/0x290
[  617.833972][T11298]  ? __pfx_queue_attr_store+0x10/0x10
[  617.834001][T11298]  sysfs_kf_write+0xf2/0x150
[  617.834025][T11298]  kernfs_fop_write_iter+0x3e0/0x5f0
[  617.834043][T11298]  ? __pfx_sysfs_kf_write+0x10/0x10
[  617.834065][T11298]  vfs_write+0x6af/0x1050
[  617.834077][T11298]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  617.834090][T11298]  ? __pfx_vfs_write+0x10/0x10
[  617.834100][T11298]  ? find_held_lock+0x2b/0x80
[  617.834126][T11298]  ksys_write+0x12a/0x250
[  617.834137][T11298]  ? __pfx_ksys_write+0x10/0x10
[  617.834153][T11298]  do_syscall_64+0x123/0x790
[  617.834171][T11298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.834182][T11298] RIP: 0033:0x7fa40b59e159
[  617.834193][T11298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.834203][T11298] RSP: 002b:00007fa40c3a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  617.834214][T11298] RAX: ffffffffffffffda RBX: 00007fa40b825fa0 RCX: 00007fa40b59e159
[  617.834222][T11298] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[  617.834228][T11298] RBP: 00007fa40b63506b R08: 0000000000000000 R09: 0000000000000000
[  617.834235][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  617.834241][T11298] R13: 00007fa40b826038 R14: 00007fa40b825fa0 R15: 00007ffcac1a62f8
[  617.834256][T11298]  </TASK>
[  617.981174][T11302] FAULT_INJECTION: forcing a failure.
[  617.981174][T11302] name failslab, interval 1, probability 0, space 0, times 0
[  617.981202][T11302] CPU: 0 UID: 0 PID: 11302 Comm: syz.3.1530 Not tainted syzkaller #0 PREEMPT(full) 
[  617.981221][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  617.981231][T11302] Call Trace:
[  617.981236][T11302]  <TASK>
[  617.981243][T11302]  dump_stack_lvl+0x100/0x190
[  617.981274][T11302]  should_fail_ex.cold+0x5/0xa
[  617.981299][T11302]  should_failslab+0xc2/0x120
[  617.981321][T11302]  __kmalloc_cache_node_noprof+0x94/0x720
[  617.981346][T11302]  ? sbitmap_queue_init_node+0x291/0x4a0
[  617.981368][T11302]  sbitmap_queue_init_node+0x291/0x4a0
[  617.981393][T11302]  kyber_alloc_sched_data+0x30f/0x7b0
[  617.981419][T11302]  ? __pfx_kyber_alloc_sched_data+0x10/0x10
[  617.981441][T11302]  blk_mq_alloc_sched_res+0x105/0x250
[  617.981465][T11302]  elevator_change+0x136/0x530
[  617.981488][T11302]  elv_iosched_store+0x3be/0x460
[  617.981511][T11302]  ? __pfx_elv_iosched_store+0x10/0x10
[  617.981538][T11302]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  617.981559][T11302]  ? __pfx_elv_iosched_store+0x10/0x10
[  617.981579][T11302]  queue_attr_store+0x25f/0x2f0
[  617.981605][T11302]  ? __pfx_queue_attr_store+0x10/0x10
[  617.981628][T11302]  ? __lock_acquire+0x5c0/0x1f40
[  617.981653][T11302]  ? lock_acquire+0x1d1/0x380
[  617.981670][T11302]  ? sysfs_file_kobj+0x21/0x290
[  617.981690][T11302]  ? find_held_lock+0x2b/0x80
[  617.981712][T11302]  ? sysfs_file_kobj+0xe4/0x290
[  617.981730][T11302]  ? sysfs_file_kobj+0xe4/0x290
[  617.981753][T11302]  ? __pfx_queue_attr_store+0x10/0x10
[  617.981777][T11302]  sysfs_kf_write+0xf2/0x150
[  617.981799][T11302]  kernfs_fop_write_iter+0x3e0/0x5f0
[  617.981815][T11302]  ? __pfx_sysfs_kf_write+0x10/0x10
[  617.981837][T11302]  vfs_write+0x6af/0x1050
[  617.981855][T11302]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  617.981875][T11302]  ? __pfx_vfs_write+0x10/0x10
[  617.981889][T11302]  ? find_held_lock+0x2b/0x80
[  617.981928][T11302]  ksys_write+0x12a/0x250
[  617.981945][T11302]  ? __pfx_ksys_write+0x10/0x10
[  617.981969][T11302]  do_syscall_64+0x123/0x790
[  617.981995][T11302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.982012][T11302] RIP: 0033:0x7f756af9e159
[  617.982026][T11302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.982042][T11302] RSP: 002b:00007f756be6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  617.982059][T11302] RAX: ffffffffffffffda RBX: 00007f756b225fa0 RCX: 00007f756af9e159
[  617.982070][T11302] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[  617.982080][T11302] RBP: 00007f756b03506b R08: 0000000000000000 R09: 0000000000000000
[  617.982089][T11302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  617.982099][T11302] R13: 00007f756b226038 R14: 00007f756b225fa0 R15: 00007ffc4a158ae8
[  617.982123][T11302]  </TASK>
[  619.052697][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  619.052769][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  620.542861][T11330] FAULT_INJECTION: forcing a failure.
[  620.542861][T11330] name fail_futex, interval 1, probability 0, space 0, times 0
[  620.542885][T11330] CPU: 0 UID: 0 PID: 11330 Comm: syz.1.1540 Not tainted syzkaller #0 PREEMPT(full) 
[  620.542900][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  620.542907][T11330] Call Trace:
[  620.542912][T11330]  <TASK>
[  620.542917][T11330]  dump_stack_lvl+0x100/0x190
[  620.542938][T11330]  should_fail_ex.cold+0x5/0xa
[  620.542955][T11330]  get_futex_key+0x1d0/0x14f0
[  620.542975][T11330]  ? __pfx_get_futex_key+0x10/0x10
[  620.542989][T11330]  ? wakeup_preempt_fair+0x5c3/0xdc0
[  620.543004][T11330]  ? tracing_record_taskinfo_sched_switch+0xac/0x560
[  620.543021][T11330]  futex_wait_setup+0x91/0x540
[  620.543036][T11330]  __futex_wait+0x19f/0x300
[  620.543047][T11330]  ? __pfx___futex_wait+0x10/0x10
[  620.543057][T11330]  ? __pfx_try_to_wake_up+0x10/0x10
[  620.543070][T11330]  ? futex_hash+0x311/0x400
[  620.543087][T11330]  ? __pfx_futex_wake_mark+0x10/0x10
[  620.543107][T11330]  ? find_held_lock+0x2b/0x80
[  620.543122][T11330]  ? futex_wake+0x4ea/0x5e0
[  620.543135][T11330]  futex_wait+0xe6/0x370
[  620.543146][T11330]  ? __pfx_futex_wait+0x10/0x10
[  620.543159][T11330]  ? rcu_read_lock_any_held+0x6a/0x90
[  620.543175][T11330]  ? find_held_lock+0x2b/0x80
[  620.543190][T11330]  ? ksys_write+0x190/0x250
[  620.543201][T11330]  ? ksys_write+0x190/0x250
[  620.543213][T11330]  do_futex+0x265/0x440
[  620.543229][T11330]  ? __pfx_do_futex+0x10/0x10
[  620.543244][T11330]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  620.543264][T11330]  __x64_sys_futex+0x34f/0x4d0
[  620.543281][T11330]  ? __pfx___x64_sys_futex+0x10/0x10
[  620.543302][T11330]  do_syscall_64+0x123/0x790
[  620.543319][T11330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.543330][T11330] RIP: 0033:0x7fb6def9e159
[  620.543341][T11330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.543352][T11330] RSP: 002b:00007fb6dd1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  620.543366][T11330] RAX: ffffffffffffffda RBX: 00007fb6df225fa8 RCX: 00007fb6def9e159
[  620.543373][T11330] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb6df225fa8
[  620.543379][T11330] RBP: 00007fb6df225fa0 R08: 0000000000000000 R09: 0000000000000000
[  620.543386][T11330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  620.543392][T11330] R13: 00007fb6df226038 R14: 00007ffeda786d00 R15: 00007ffeda786de8
[  620.543406][T11330]  </TASK>
[  621.073832][   T31] audit: type=1800 audit(1790155382.080:3044): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1543" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  621.275934][T11354] syzkaller0: entered promiscuous mode
[  621.275955][T11354] syzkaller0: entered allmulticast mode
[  621.883759][T11361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  622.825359][T11374] syzkaller0: entered promiscuous mode
[  622.825380][T11374] syzkaller0: entered allmulticast mode
[  624.110035][T11401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  624.589963][   T31] audit: type=1800 audit(1790155385.590:3045): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1559" name=08 dev="sda1" ino=2048 res=0 errno=0
[  624.909354][   T31] audit: type=1400 audit(1790155385.910:3046): avc:  denied  { cmd } for  pid=11403 comm="iou-wrk-11404" path="socket:[35283]" dev="sockfs" ino=35283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  625.025732][T11409] syzkaller0: entered promiscuous mode
[  625.025753][T11409] syzkaller0: entered allmulticast mode
[  626.323731][T11422] syzkaller0: entered promiscuous mode
[  626.323745][T11422] syzkaller0: entered allmulticast mode
[  627.080690][T11451] syzkaller0: entered promiscuous mode
[  627.080711][T11451] syzkaller0: entered allmulticast mode
[  627.652369][T11472] syzkaller0: entered promiscuous mode
[  627.652393][T11472] syzkaller0: entered allmulticast mode
[  627.653511][T11479] tipc: Started in network mode
[  627.653536][T11479] tipc: Node identity 3a8d98d70e64, cluster identity 4711
[  627.657462][T11479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.745199][T11485] syzkaller0: entered promiscuous mode
[  627.745223][T11485] syzkaller0: entered allmulticast mode
[  627.747598][T11485] tipc: Resetting bearer <eth:syzkaller0>
[  627.802685][T11480] syzkaller0: entered promiscuous mode
[  627.802702][T11480] syzkaller0: entered allmulticast mode
[  630.713373][T11476] tipc: Resetting bearer <eth:syzkaller0>
[  632.418681][T11476] tipc: Disabling bearer <eth:syzkaller0>
[  633.634479][ T5337] tipc: Node number set to 887724247
[  634.535120][T11553] capability: warning: `syz.4.1582' uses deprecated v2 capabilities in a way that may be insecure
[  634.636851][T11563] syzkaller0: entered promiscuous mode
[  634.636880][T11563] syzkaller0: entered allmulticast mode
[  639.631737][T11581] veth0: entered promiscuous mode
[  639.631872][T11581] veth0: left promiscuous mode
[  639.946186][T11639] syzkaller0: entered promiscuous mode
[  639.946205][T11639] syzkaller0: entered allmulticast mode
[  639.967873][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  640.142114][   T10] usb 3-1: Using ep0 maxpacket: 32
[  640.146113][   T10] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  640.237543][   T10] usb 3-1: config 0 has an invalid interface number: 61 but max is 1
[  640.237599][   T10] usb 3-1: config 0 has no interface number 1
[  640.283831][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.283886][   T10] usb 3-1: Product: syz
[  640.283935][   T10] usb 3-1: Manufacturer: syz
[  640.283980][   T10] usb 3-1: SerialNumber: syz
[  640.345876][   T10] usb 3-1: config 0 descriptor??
[  640.472833][   T10] viperboard 3-1:0.61: version 0.00 found at bus 003 address 011
[  640.491596][   T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  640.491635][   T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  640.523923][   T10] viperboard 3-1:0.0: version 0.00 found at bus 003 address 011
[  640.542998][   T10] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  640.543028][   T10] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  640.763274][   T31] audit: type=1800 audit(1790155401.750:3047): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1609" name=08 dev="sda1" ino=2048 res=0 errno=0
[  642.105751][   T30] usb 3-1: USB disconnect, device number 11
[  642.677522][   T31] audit: type=1400 audit(1790155403.660:3048): avc:  denied  { node_bind } for  pid=11684 comm="syz.4.1617" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  642.677571][   T31] audit: type=1400 audit(1790155403.680:3049): avc:  denied  { write } for  pid=11684 comm="syz.4.1617" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  642.677609][   T31] audit: type=1400 audit(1790155403.680:3050): avc:  denied  { name_connect } for  pid=11684 comm="syz.4.1617" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  642.830573][T11691] syzkaller0: entered promiscuous mode
[  642.830595][T11691] syzkaller0: entered allmulticast mode
[  642.932385][T11698] tipc: Started in network mode
[  642.932412][T11698] tipc: Node identity 7287253fff86, cluster identity 4711
[  642.932531][T11698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  642.991355][T11698] syzkaller0: entered promiscuous mode
[  642.991381][T11698] syzkaller0: entered allmulticast mode
[  642.998381][T11698] tipc: Resetting bearer <eth:syzkaller0>
[  643.095041][T11696] tipc: Resetting bearer <eth:syzkaller0>
[  644.952819][ T2318] page_pool_release_retry() stalled pool shutdown: id 34, 47 inflight 182 sec
[  646.002250][ T2318] page_pool_release_retry() stalled pool shutdown: id 35, 29 inflight 181 sec
[  646.510859][T11696] tipc: Disabling bearer <eth:syzkaller0>
[  646.527068][ T5337] tipc: Node number set to 2365662527
[  646.546054][T11717] syzkaller0: entered promiscuous mode
[  646.546073][T11717] syzkaller0: entered allmulticast mode
[  646.812700][   T31] audit: type=1800 audit(1790155407.800:3051): pid=11760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1635" name=08 dev="sda1" ino=2048 res=0 errno=0
[  647.778061][   T31] audit: type=1800 audit(1790155408.770:3052): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1642" name=08 dev="sda1" ino=2048 res=0 errno=0
[  650.739278][T11815] syz_tun: entered allmulticast mode
[  651.125472][   T31] audit: type=1800 audit(1790155412.110:3053): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1655" name=08 dev="sda1" ino=2048 res=0 errno=0
[  651.375353][T11812] syz_tun: left allmulticast mode
[  652.206960][T11830] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  652.496452][T11849] FAULT_INJECTION: forcing a failure.
[  652.496452][T11849] name failslab, interval 1, probability 0, space 0, times 0
[  652.496500][T11849] CPU: 1 UID: 0 PID: 11849 Comm: syz.3.1660 Not tainted syzkaller #0 PREEMPT(full) 
[  652.496524][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  652.496535][T11849] Call Trace:
[  652.496542][T11849]  <TASK>
[  652.496550][T11849]  dump_stack_lvl+0x100/0x190
[  652.496583][T11849]  should_fail_ex.cold+0x5/0xa
[  652.496619][T11849]  should_failslab+0xc2/0x120
[  652.496644][T11849]  __kmalloc_cache_node_noprof+0x94/0x720
[  652.496670][T11849]  ? sbitmap_queue_init_node+0x291/0x4a0
[  652.496697][T11849]  sbitmap_queue_init_node+0x291/0x4a0
[  652.496721][T11849]  kyber_alloc_sched_data+0x30f/0x7b0
[  652.496754][T11849]  ? __pfx_kyber_alloc_sched_data+0x10/0x10
[  652.496782][T11849]  blk_mq_alloc_sched_res+0x105/0x250
[  652.496809][T11849]  elevator_change+0x136/0x530
[  652.496836][T11849]  elv_iosched_store+0x3be/0x460
[  652.496858][T11849]  ? __pfx_elv_iosched_store+0x10/0x10
[  652.496888][T11849]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  652.496912][T11849]  ? __pfx_elv_iosched_store+0x10/0x10
[  652.496934][T11849]  queue_attr_store+0x25f/0x2f0
[  652.496962][T11849]  ? __pfx_queue_attr_store+0x10/0x10
[  652.496990][T11849]  ? __lock_acquire+0x5c0/0x1f40
[  652.497019][T11849]  ? lock_acquire+0x1d1/0x380
[  652.497038][T11849]  ? sysfs_file_kobj+0x21/0x290
[  652.497061][T11849]  ? find_held_lock+0x2b/0x80
[  652.497088][T11849]  ? sysfs_file_kobj+0xe4/0x290
[  652.497108][T11849]  ? sysfs_file_kobj+0xe4/0x290
[  652.497135][T11849]  ? __pfx_queue_attr_store+0x10/0x10
[  652.497163][T11849]  sysfs_kf_write+0xf2/0x150
[  652.497189][T11849]  kernfs_fop_write_iter+0x3e0/0x5f0
[  652.497208][T11849]  ? __pfx_sysfs_kf_write+0x10/0x10
[  652.497235][T11849]  vfs_write+0x6af/0x1050
[  652.497257][T11849]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  652.497280][T11849]  ? __pfx_vfs_write+0x10/0x10
[  652.497297][T11849]  ? find_held_lock+0x2b/0x80
[  652.497342][T11849]  ksys_write+0x12a/0x250
[  652.497361][T11849]  ? __pfx_ksys_write+0x10/0x10
[  652.497389][T11849]  do_syscall_64+0x123/0x790
[  652.497422][T11849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.497440][T11849] RIP: 0033:0x7f756af9e159
[  652.497457][T11849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  652.497476][T11849] RSP: 002b:00007f756be6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  652.497495][T11849] RAX: ffffffffffffffda RBX: 00007f756b225fa0 RCX: 00007f756af9e159
[  652.497507][T11849] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[  652.497518][T11849] RBP: 00007f756b03506b R08: 0000000000000000 R09: 0000000000000000
[  652.497529][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  652.497539][T11849] R13: 00007f756b226038 R14: 00007f756b225fa0 R15: 00007ffc4a158ae8
[  652.497566][T11849]  </TASK>
[  652.922491][   T31] audit: type=1800 audit(1790155413.790:3054): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1661" name=08 dev="sda1" ino=2048 res=0 errno=0
[  653.302340][   T31] audit: type=1400 audit(1790155414.310:3055): avc:  denied  { write } for  pid=11867 comm="syz.0.1665" name="configs" dev="configfs" ino=13446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  655.577829][T11924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1683'.
[  655.778687][T11931] batman_adv: batadv0: Adding interface: syzkaller0
[  655.778705][T11931] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.779089][T11931] batman_adv: batadv0: Interface activated: syzkaller0
[  655.838866][T11929] batman_adv: batadv0: Interface deactivated: syzkaller0
[  655.855962][T11929] batman_adv: batadv0: Removing interface: syzkaller0
[  656.531619][T11956] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1694'.
[  656.608651][   T31] audit: type=1400 audit(1790155417.610:3056): avc:  denied  { link } for  pid=11949 comm="syz.2.1692" name="file0" dev="fuse" ino=4503599627370496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  657.806544][T11974] batman_adv: batadv0: Adding interface: syzkaller0
[  657.806608][T11974] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.806756][T11974] batman_adv: batadv0: Interface activated: syzkaller0
[  657.854205][T11973] batman_adv: batadv0: Interface deactivated: syzkaller0
[  659.140042][T11973] batman_adv: batadv0: Removing interface: syzkaller0
[  663.104937][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'.
[  664.396274][T12057] syzkaller1: entered promiscuous mode
[  664.396295][T12057] syzkaller1: entered allmulticast mode
[  665.249902][T12073] device-mapper: ioctl: name not supplied when creating device
[  666.293733][T12096] overlayfs: missing 'lowerdir'
[  667.282763][T11830] Bluetooth: hci1: command tx timeout
[  667.306894][T12121] overlayfs: failed to resolve './file1': -2
[  667.432457][T11830] Bluetooth: hci0: command tx timeout
[  667.852634][ T2318] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  668.003085][ T2318] usb 2-1: Using ep0 maxpacket: 32
[  668.003540][ T2318] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  668.004456][ T2318] usb 2-1: config 0 has an invalid interface number: 61 but max is 1
[  668.004477][ T2318] usb 2-1: config 0 has no interface number 1
[  668.008547][ T2318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.008572][ T2318] usb 2-1: Product: syz
[  668.008585][ T2318] usb 2-1: Manufacturer: syz
[  668.008600][ T2318] usb 2-1: SerialNumber: syz
[  668.018315][ T2318] usb 2-1: config 0 descriptor??
[  668.139526][ T2318] viperboard 2-1:0.61: version 0.00 found at bus 002 address 012
[  668.159175][ T2318] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  668.159342][ T2318] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  668.174472][ T2318] viperboard 2-1:0.0: version 0.00 found at bus 002 address 012
[  668.207566][ T2318] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  668.207593][ T2318] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  668.464655][ T5337] usb 2-1: USB disconnect, device number 12
[  670.602433][T11830] Bluetooth: hci3: command tx timeout
[  671.335703][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'.
[  671.548345][T12196] device-mapper: table: 248:2: zero-length target
[  671.548361][T12196] device-mapper: ioctl: error adding target to table
[  673.776731][T12235] FAULT_INJECTION: forcing a failure.
[  673.776731][T12235] name failslab, interval 1, probability 0, space 0, times 0
[  673.776763][T12235] CPU: 1 UID: 0 PID: 12235 Comm: syz.1.1781 Not tainted syzkaller #0 PREEMPT(full) 
[  673.776786][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  673.776798][T12235] Call Trace:
[  673.776805][T12235]  <TASK>
[  673.776813][T12235]  dump_stack_lvl+0x100/0x190
[  673.776846][T12235]  should_fail_ex.cold+0x5/0xa
[  673.776875][T12235]  should_failslab+0xc2/0x120
[  673.776901][T12235]  __kmalloc_noprof+0xfc/0x840
[  673.776928][T12235]  ? rcu_is_watching+0x13/0xc0
[  673.776954][T12235]  ? tomoyo_realpath_from_path+0xb6/0x690
[  673.776985][T12235]  tomoyo_realpath_from_path+0xb6/0x690
[  673.777016][T12235]  tomoyo_path_number_perm+0x23c/0x580
[  673.777038][T12235]  ? tomoyo_path_number_perm+0x22e/0x580
[  673.777064][T12235]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  673.777088][T12235]  ? __pfx_futex_wait+0x10/0x10
[  673.777115][T12235]  ? __lock_acquire+0x5c0/0x1f40
[  673.777149][T12235]  ? __fget_files+0x34/0x3d0
[  673.777173][T12235]  ? find_held_lock+0x2b/0x80
[  673.777202][T12235]  ? hook_file_ioctl_common+0x140/0x440
[  673.777235][T12235]  ? __fget_files+0x21f/0x3d0
[  673.777263][T12235]  security_file_ioctl+0xd3/0x230
[  673.777286][T12235]  __x64_sys_ioctl+0xb7/0x210
[  673.777309][T12235]  do_syscall_64+0x123/0x790
[  673.777341][T12235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.777361][T12235] RIP: 0033:0x7fb6def9e159
[  673.777377][T12235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.777396][T12235] RSP: 002b:00007fb6dd1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  673.777417][T12235] RAX: ffffffffffffffda RBX: 00007fb6df225fa0 RCX: 00007fb6def9e159
[  673.777430][T12235] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000003
[  673.777442][T12235] RBP: 00007fb6df03506b R08: 0000000000000000 R09: 0000000000000000
[  673.777453][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  673.777464][T12235] R13: 00007fb6df226038 R14: 00007fb6df225fa0 R15: 00007ffeda786de8
[  673.777491][T12235]  </TASK>
[  673.777552][T12235] ERROR: Out of memory at tomoyo_realpath_from_path.
[  673.937877][T12238] fuse: Bad value for 'fd'
[  675.020756][T12266] device-mapper: table: 248:1: zero-length target
[  675.020773][T12266] device-mapper: ioctl: error adding target to table
[  679.187131][T12326] fuse: Bad value for 'fd'
[  680.487156][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  680.487187][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  680.825252][   T31] audit: type=1326 audit(1790155441.830:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x0
[  681.201316][   T31] audit: type=1326 audit(1790155442.200:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.201918][   T31] audit: type=1326 audit(1790155442.200:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.256296][   T31] audit: type=1326 audit(1790155442.200:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.257735][   T31] audit: type=1326 audit(1790155442.260:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.257778][   T31] audit: type=1326 audit(1790155442.260:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.257828][   T31] audit: type=1326 audit(1790155442.260:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.257868][   T31] audit: type=1326 audit(1790155442.260:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.257907][   T31] audit: type=1326 audit(1790155442.260:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.257944][   T31] audit: type=1326 audit(1790155442.260:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12353 comm="syz.2.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2af9e159 code=0x7fc00000
[  681.625564][T12364] syzkaller0: entered promiscuous mode
[  681.625579][T12364] syzkaller0: entered allmulticast mode
[  681.984188][T12373] kvm: requested 197790 ns i8254 timer period limited to 200000 ns
[  682.004655][T12373] kvm: requested 72076 ns i8254 timer period limited to 200000 ns
[  682.019346][T12373] kvm: requested 176000 ns i8254 timer period limited to 200000 ns
[  682.035741][T12373] kvm: requested 54476 ns i8254 timer period limited to 200000 ns
[  682.036999][T12373] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[  687.840834][T12416] kexec: Could not allocate control_code_buffer
[  688.488648][T12454] nvme_fabrics: unknown parameter or missing value '#!  	»›�¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=
pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request
[  688.594780][T12454] nvme_fabrics: missing parameter 'transport=%s'
[  688.594801][T12454] nvme_fabrics: missing parameter 'nqn=%s'
[  690.075575][T12468] input: syz0 as /devices/virtual/input/input6
[  690.156260][ T5617] Bluetooth: hci3: command 0x2016 tx timeout
[  690.349206][T12476] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL)
[  690.349228][T12476] device-mapper: ioctl: error adding target to table
[  692.278179][ T5617] Bluetooth: hci3: command 0x2016 tx timeout
[  693.827526][T12524] syzkaller0: entered promiscuous mode
[  693.827552][T12524] syzkaller0: entered allmulticast mode
[  693.828753][T12526] syz_tun: entered allmulticast mode
[  694.231486][T12537] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL)
[  694.231588][T12537] device-mapper: ioctl: error adding target to table
[  694.305816][T12542] input: syz0 as /devices/virtual/input/input7
[  695.153784][  T189] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  695.314541][  T189] usb 3-1: Using ep0 maxpacket: 32
[  695.316495][  T189] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  695.319391][  T189] usb 3-1: config 0 has an invalid interface number: 61 but max is 1
[  695.319441][  T189] usb 3-1: config 0 has no interface number 1
[  695.438170][  T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.438223][  T189] usb 3-1: Product: syz
[  695.438251][  T189] usb 3-1: Manufacturer: syz
[  695.438277][  T189] usb 3-1: SerialNumber: syz
[  695.492957][  T189] usb 3-1: config 0 descriptor??
[  695.604244][  T189] viperboard 3-1:0.61: version 0.00 found at bus 003 address 012
[  695.661167][  T189] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  695.661196][  T189] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  695.688950][  T189] viperboard 3-1:0.0: version 0.00 found at bus 003 address 012
[  695.708109][  T189] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  695.708135][  T189] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  696.086667][ T5337] usb 3-1: USB disconnect, device number 12
[  696.169606][T11830] Bluetooth: hci2: command 0x0406 tx timeout
[  696.339634][T12564] input: syz0 as /devices/virtual/input/input8
[  696.763572][T12569] device-mapper: table: 248:3: mirror: Unrecognised feature requested (-EINVAL)
[  696.763598][T12569] device-mapper: ioctl: error adding target to table
[  696.885270][   T31] kauditd_printk_skb: 391 callbacks suppressed
[  696.885289][   T31] audit: type=1400 audit(1790155457.890:3458): avc:  denied  { sqpoll } for  pid=12575 comm="syz.1.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  698.260925][T11830] Bluetooth: hci2: command 0x0406 tx timeout
[  698.365832][T12582] input: syz0 as /devices/virtual/input/input9
[  698.445877][T12588] input: syz0 as /devices/virtual/input/input10
[  699.560074][ T5617] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  701.100973][   T31] audit: type=1326 audit(1790155462.100:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x0
[  701.158825][T12627] device-mapper: table: 248:1: zero-length target
[  701.158842][T12627] device-mapper: ioctl: error adding target to table
[  701.730228][ T5617] Bluetooth: hci0: command 0x2016 tx timeout
[  701.810885][   T31] audit: type=1800 audit(1790155462.420:3460): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1883" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  702.228014][   T31] audit: type=1326 audit(1790155463.230:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228069][   T31] audit: type=1326 audit(1790155463.230:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228106][   T31] audit: type=1326 audit(1790155463.230:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228144][   T31] audit: type=1326 audit(1790155463.230:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228181][   T31] audit: type=1326 audit(1790155463.230:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228219][   T31] audit: type=1326 audit(1790155463.230:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228268][   T31] audit: type=1326 audit(1790155463.230:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228305][   T31] audit: type=1326 audit(1790155463.230:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228343][   T31] audit: type=1326 audit(1790155463.230:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.228381][   T31] audit: type=1326 audit(1790155463.230:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756af9e159 code=0x7fc00000
[  702.640693][T12651] input: syz0 as /devices/virtual/input/input11
[  703.393527][T12665] input: syz0 as /devices/virtual/input/input12
[  704.053659][ T5617] Bluetooth: hci0: command 0x2016 tx timeout
[  704.918230][T12677] fuse: Unknown parameter 'user_id00000000000000000000'
[  705.103045][T12681] device-mapper: ioctl: populate_table: no targets specified
[  705.112211][  T189] page_pool_release_retry() stalled pool shutdown: id 34, 47 inflight 242 sec
[  706.506288][  T189] page_pool_release_retry() stalled pool shutdown: id 35, 29 inflight 242 sec
[  707.029143][T12724] fuse: Unknown parameter '0x0000000000000003'
[  708.505656][T12736] input: syz0 as /devices/virtual/input/input13
[  709.013288][   T31] kauditd_printk_skb: 29 callbacks suppressed
[  709.013309][   T31] audit: type=1800 audit(1790155469.910:3500): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1911" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  709.487441][T12745] input: syz0 as /devices/virtual/input/input14
[  710.572197][T12759] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL)
[  710.572248][T12759] device-mapper: ioctl: error adding target to table
[  712.734731][T12793] input: syz0 as /devices/virtual/input/input15
[  715.240189][T12814] input: syz0 as /devices/virtual/input/input16
[  715.583478][T12813] input: syz0 as /devices/virtual/input/input17
[  715.675876][T12815] input: syz0 as /devices/virtual/input/input18
[  716.156997][T12838] kvm: requested 72914 ns i8254 timer period limited to 200000 ns
[  716.157165][T12838] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  716.185357][T12838] kvm: requested 72914 ns i8254 timer period limited to 200000 ns
[  716.185521][T12838] kvm: requested 15923 ns i8254 timer period limited to 200000 ns
[  716.185698][T12838] kvm: requested 113142 ns i8254 timer period limited to 200000 ns
[  716.297061][T12849] kvm: requested 72914 ns i8254 timer period limited to 200000 ns
[  716.298088][T12849] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  716.313066][T12849] kvm: requested 72914 ns i8254 timer period limited to 200000 ns
[  716.315061][T12849] kvm: requested 15923 ns i8254 timer period limited to 200000 ns
[  716.315243][T12849] kvm: requested 113142 ns i8254 timer period limited to 200000 ns
[  716.340334][T12853] FAULT_INJECTION: forcing a failure.
[  716.340334][T12853] name fail_futex, interval 1, probability 0, space 0, times 0
[  716.340367][T12853] CPU: 1 UID: 0 PID: 12853 Comm: syz.2.1936 Not tainted syzkaller #0 PREEMPT(full) 
[  716.340386][T12853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  716.340396][T12853] Call Trace:
[  716.340402][T12853]  <TASK>
[  716.340409][T12853]  dump_stack_lvl+0x100/0x190
[  716.340438][T12853]  should_fail_ex.cold+0x5/0xa
[  716.340461][T12853]  get_futex_key+0x1d0/0x14f0
[  716.340486][T12853]  ? __pfx_get_futex_key+0x10/0x10
[  716.340506][T12853]  ? find_held_lock+0x2b/0x80
[  716.340528][T12853]  ? futex_wake+0x4ea/0x5e0
[  716.340548][T12853]  futex_wake+0xf4/0x5e0
[  716.340566][T12853]  ? __pfx_futex_wake+0x10/0x10
[  716.340583][T12853]  ? lock_acquire+0x1d1/0x380
[  716.340600][T12853]  ? __fget_files+0x34/0x3d0
[  716.340620][T12853]  ? find_held_lock+0x2b/0x80
[  716.340645][T12853]  do_futex+0x2b2/0x440
[  716.340667][T12853]  ? __pfx_do_futex+0x10/0x10
[  716.340693][T12853]  __x64_sys_futex+0x34f/0x4d0
[  716.340716][T12853]  ? __pfx___x64_sys_getdents64+0x10/0x10
[  716.340735][T12853]  ? __pfx___x64_sys_futex+0x10/0x10
[  716.340765][T12853]  do_syscall_64+0x123/0x790
[  716.340791][T12853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.340807][T12853] RIP: 0033:0x7f7c2af9e159
[  716.340820][T12853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.340836][T12853] RSP: 002b:00007f7c2bdda0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  716.340852][T12853] RAX: ffffffffffffffda RBX: 00007f7c2b226188 RCX: 00007f7c2af9e159
[  716.340863][T12853] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7c2b22618c
[  716.340872][T12853] RBP: 00007f7c2b226180 R08: 0000000000000001 R09: 0000000000000000
[  716.340882][T12853] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  716.340892][T12853] R13: 00007f7c2b226218 R14: 00007ffcff7a8de0 R15: 00007ffcff7a8ec8
[  716.340913][T12853]  </TASK>
[  716.421694][   T31] audit: type=1400 audit(1790155477.420:3501): avc:  denied  { checkpoint_restore } for  pid=12854 comm="syz.4.1937" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  717.018363][T12864] input: syz0 as /devices/virtual/input/input19
[  717.919251][T12884] input: syz0 as /devices/virtual/input/input20
[  718.765461][T12904] input: syz0 as /devices/virtual/input/input21
[  719.139803][T12907] FAULT_INJECTION: forcing a failure.
[  719.139803][T12907] name failslab, interval 1, probability 0, space 0, times 0
[  719.139834][T12907] CPU: 1 UID: 0 PID: 12907 Comm: syz.2.1950 Not tainted syzkaller #0 PREEMPT(full) 
[  719.139854][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  719.139865][T12907] Call Trace:
[  719.139871][T12907]  <TASK>
[  719.139879][T12907]  dump_stack_lvl+0x100/0x190
[  719.139911][T12907]  should_fail_ex.cold+0x5/0xa
[  719.139941][T12907]  should_failslab+0xc2/0x120
[  719.139967][T12907]  __kmalloc_noprof+0xfc/0x840
[  719.139985][T12907]  ? rcu_is_watching+0x13/0xc0
[  719.140010][T12907]  ? fuse_readdir_uncached+0x215/0x1c00
[  719.140045][T12907]  fuse_readdir_uncached+0x215/0x1c00
[  719.140084][T12907]  ? lock_acquire+0x1d1/0x380
[  719.140104][T12907]  ? futex_unqueue+0x29/0x2c0
[  719.140128][T12907]  ? __pfx_fuse_readdir_uncached+0x10/0x10
[  719.140157][T12907]  ? find_held_lock+0x2b/0x80
[  719.140182][T12907]  ? futex_unqueue+0x133/0x2c0
[  719.140205][T12907]  ? futex_unqueue+0x133/0x2c0
[  719.140230][T12907]  ? look_up_lock_class+0x64/0x120
[  719.140260][T12907]  ? register_lock_class+0x3f/0x7b0
[  719.140289][T12907]  ? futex_unqueue+0x13d/0x2c0
[  719.140314][T12907]  ? look_up_lock_class+0x55/0x120
[  719.140343][T12907]  ? register_lock_class+0x3f/0x7b0
[  719.140366][T12907]  ? __lock_acquire+0x5c0/0x1f40
[  719.140386][T12907]  ? look_up_lock_class+0x55/0x120
[  719.140429][T12907]  ? find_held_lock+0x2b/0x80
[  719.140455][T12907]  ? fuse_readdir+0x9a7/0x1f20
[  719.140483][T12907]  ? fuse_readdir+0x9a7/0x1f20
[  719.140517][T12907]  fuse_readdir+0x9bb/0x1f20
[  719.140553][T12907]  ? avc_policy_seqno+0x9/0x20
[  719.140587][T12907]  iterate_dir+0x296/0xae0
[  719.140613][T12907]  __x64_sys_getdents64+0x13b/0x2c0
[  719.140633][T12907]  ? __x64_sys_futex+0x358/0x4d0
[  719.140660][T12907]  ? __pfx___x64_sys_getdents64+0x10/0x10
[  719.140682][T12907]  ? __pfx_filldir64+0x10/0x10
[  719.140714][T12907]  do_syscall_64+0x123/0x790
[  719.140745][T12907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.140765][T12907] RIP: 0033:0x7f7c2af9e159
[  719.140780][T12907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.140799][T12907] RSP: 002b:00007f7c2be1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  719.140818][T12907] RAX: ffffffffffffffda RBX: 00007f7c2b225fa0 RCX: 00007f7c2af9e159
[  719.140832][T12907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  719.140844][T12907] RBP: 00007f7c2b03506b R08: 0000000000000000 R09: 0000000000000000
[  719.140856][T12907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.140868][T12907] R13: 00007f7c2b226038 R14: 00007f7c2b225fa0 R15: 00007ffcff7a8ec8
[  719.140895][T12907]  </TASK>
[  720.233804][   T31] audit: type=1326 audit(1790155481.240:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.1.1962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6def9e159 code=0x0
[  720.276528][T12933] input: syz0 as /devices/virtual/input/input22
[  721.212056][   T31] audit: type=1326 audit(1790155482.190:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.1.1962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6def9e159 code=0x7fc00000
[  722.837842][   T31] audit: type=1800 audit(1790155483.840:3504): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1969" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  723.183735][T12980] fuse: Bad value for 'fd'
[  723.512747][   T31] audit: type=1800 audit(1790155484.500:3505): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1972" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  724.644788][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'.
[  724.644810][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'.
[  724.711707][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'.
[  724.711738][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'.
[  724.753011][T11435] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  724.753051][T11435] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  724.753080][T11435] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  724.753107][T11435] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  724.860663][   T31] audit: type=1800 audit(1790155485.850:3506): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1979" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  725.318582][T13009] No control pipe specified
[  725.382868][T13012] fuse: Bad value for 'fd'
[  726.535387][T12969] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  726.862193][T12969] usb 1-1: Using ep0 maxpacket: 32
[  726.862833][T12969] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  726.864785][T12969] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  726.864812][T12969] usb 1-1: config 0 has no interface number 1
[  726.866487][T12969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.866505][T12969] usb 1-1: Product: syz
[  726.866519][T12969] usb 1-1: Manufacturer: syz
[  726.866534][T12969] usb 1-1: SerialNumber: syz
[  726.869827][T12969] usb 1-1: config 0 descriptor??
[  726.982539][T12969] viperboard 1-1:0.61: version 0.00 found at bus 001 address 012
[  727.006867][T12969] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  727.006899][T12969] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  727.040874][T12969] viperboard 1-1:0.0: version 0.00 found at bus 001 address 012
[  727.068417][T12969] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  727.068447][T12969] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  727.269097][   T31] audit: type=1800 audit(1790155488.260:3507): pid=13046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1991" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  727.839262][    T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  727.877742][ T2318] usb 1-1: USB disconnect, device number 12
[  727.883262][    T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  727.900223][T13055] fuse: Bad value for 'fd'
[  727.978981][T13042] ceph: No mds server is up or the cluster is laggy
[  728.526401][T13069] input: syz0 as /devices/virtual/input/input23
[  729.562254][ T2318] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  729.606892][   T31] audit: type=1326 audit(1790155490.610:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13031 comm="syz.4.1989" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40b59e159 code=0x7fc00000
[  729.712013][ T2318] usb 3-1: Using ep0 maxpacket: 32
[  729.712478][ T2318] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  729.713292][ T2318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  729.713319][ T2318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  729.713349][ T2318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.714762][ T2318] usb 3-1: config 0 descriptor??
[  730.573670][   T31] audit: type=1800 audit(1790155491.560:3509): pid=13100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2010" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  730.573819][   T31] audit: type=1800 audit(1790155491.570:3510): pid=13102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2009" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  730.946398][ T2318] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[  730.946431][ T2318] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[  731.008026][ T2318] ft260 0003:0403:6030.0008: chip code: 0000 0000
[  731.245094][   T31] audit: type=1800 audit(1790155492.240:3511): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2014" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  731.634829][ T2318] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[  731.660497][ T2318] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup
[  731.870570][   T31] audit: type=1800 audit(1790155492.860:3512): pid=13120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2016" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  732.456935][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'.
[  732.456958][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'.
[  732.690846][T13135] input: syz0 as /devices/virtual/input/input24
[  733.130744][   T31] audit: type=1326 audit(1790155494.130:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13123 comm="syz.1.2018" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6def9e159 code=0x7fc00000
[  733.437501][   T31] audit: type=1800 audit(1790155494.420:3514): pid=13152 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2025" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  734.252165][    T9] usb 3-1: USB disconnect, device number 13
[  734.439681][T13143] input: syz0 as /devices/virtual/input/input25
[  734.666429][T13160] input: syz0 as /devices/virtual/input/input26
[  735.642926][T13178] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2034'.
[  735.742288][T12969] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  735.912598][T12969] usb 1-1: Using ep0 maxpacket: 32
[  735.915796][T12969] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  735.945521][T12969] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  735.945864][T12969] usb 1-1: config 0 has no interface number 1
[  735.980432][T12969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.980846][T12969] usb 1-1: Product: syz
[  735.981037][T12969] usb 1-1: Manufacturer: syz
[  735.981307][T12969] usb 1-1: SerialNumber: syz
[  736.034042][T12969] usb 1-1: config 0 descriptor??
[  736.236751][T12969] viperboard 1-1:0.61: version 0.00 found at bus 001 address 013
[  736.711528][T12969] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  736.711559][T12969] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  736.874134][T12969] viperboard 1-1:0.0: version 0.00 found at bus 001 address 013
[  736.922032][T12969] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  736.922061][T12969] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  736.951687][T12969] usb 1-1: USB disconnect, device number 13
[  736.966039][T13189] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2035'.
[  737.177628][T13198] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL)
[  737.177650][T13198] device-mapper: ioctl: error adding target to table
[  737.341871][T13204] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n
[  737.341894][T13204] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  737.341903][T13204] device-mapper: ioctl: error adding target to table
[  737.471479][T13206] input: syz0 as /devices/virtual/input/input27
[  739.783369][T13232] device-mapper: ioctl: populate_table: no targets specified
[  740.297147][   T31] audit: type=1800 audit(1790155501.280:3515): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2052" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  740.912329][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'.
[  740.912351][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'.
[  740.912976][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'.
[  740.912990][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2050'.
[  741.916326][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  741.916376][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  742.262112][   T30] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  742.344322][   T31] audit: type=1800 audit(1790155503.330:3516): pid=13263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2056" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  742.452700][   T30] usb 4-1: Using ep0 maxpacket: 32
[  742.890889][   T30] usb 4-1: unable to get BOS descriptor or descriptor too short
[  742.890933][   T30] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  742.891659][   T30] usb 4-1: unable to read config index 0 descriptor/start: -71
[  742.891688][   T30] usb 4-1: can't read configurations, error -71
[  744.499966][T13283] input: syz0 as /devices/virtual/input/input28
[  744.851109][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2065'.
[  744.865875][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2065'.
[  744.942262][T11432] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  744.942304][T11432] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  744.942333][T11432] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  744.942362][T11432] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  745.507367][   T31] audit: type=1800 audit(1790155506.490:3517): pid=13305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2066" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  746.261476][   T31] audit: type=1800 audit(1790155507.250:3518): pid=13313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2068" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  747.302064][ T2318] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  747.411305][   T31] audit: type=1800 audit(1790155508.410:3519): pid=13332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2074" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  747.882037][ T2318] usb 4-1: Using ep0 maxpacket: 32
[  747.882849][ T2318] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  747.883763][ T2318] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[  747.883786][ T2318] usb 4-1: config 0 has no interface number 1
[  747.885994][ T2318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.886015][ T2318] usb 4-1: Product: syz
[  747.886028][ T2318] usb 4-1: Manufacturer: syz
[  747.886043][ T2318] usb 4-1: SerialNumber: syz
[  747.896962][ T2318] usb 4-1: config 0 descriptor??
[  748.012526][ T2318] viperboard 4-1:0.61: version 0.00 found at bus 004 address 011
[  748.355340][ T2318] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  748.355367][ T2318] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  748.406753][ T2318] viperboard 4-1:0.0: version 0.00 found at bus 004 address 011
[  748.553292][ T2318] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  748.553320][ T2318] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  749.174955][T13349] input: syz0 as /devices/virtual/input/input29
[  749.370448][ T1211] usb 4-1: USB disconnect, device number 11
[  750.247496][T13366] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n
[  750.247532][T13366] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  750.247547][T13366] device-mapper: ioctl: error adding target to table
[  752.450006][T13393] input: syz0 as /devices/virtual/input/input30
[  753.339377][   T31] audit: type=1800 audit(1790155514.320:3520): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2098" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  754.707379][T13144] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  755.024721][T13144] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  755.027680][T13144] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  755.027728][T13144] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  755.030648][T13144] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  755.030693][T13144] usb 3-1: Manufacturer: syz
[  755.132109][T13144] usb 3-1: config 0 descriptor??
[  755.400293][T13144] usb 3-1: USB disconnect, device number 14
[  755.556625][   T31] audit: type=1400 audit(1790155516.560:3521): avc:  denied  { read } for  pid=13426 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  756.650481][   T31] audit: type=1800 audit(1790155517.650:3522): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2104" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  757.229382][   T31] audit: type=1800 audit(1790155518.220:3523): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2105" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  757.682069][   T31] audit: type=1400 audit(1790155518.670:3524): avc:  denied  { create } for  pid=13440 comm="syz.1.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  757.682120][   T31] audit: type=1400 audit(1790155518.680:3525): avc:  denied  { write } for  pid=13440 comm="syz.1.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  759.553421][   T30] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  759.842123][   T30] usb 2-1: Using ep0 maxpacket: 32
[  759.956570][   T30] usb 2-1: unable to get BOS descriptor or descriptor too short
[  759.956733][   T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  759.958314][   T30] usb 2-1: unable to read config index 0 descriptor/start: -71
[  759.958396][   T30] usb 2-1: can't read configurations, error -71
[  762.830907][   T30] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  763.598132][   T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  763.611541][   T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  763.611647][   T30] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  763.611731][   T30] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  763.744349][   T30] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  763.744374][   T30] usb 4-1: Manufacturer: syz
[  763.961865][   T30] usb 4-1: config 0 descriptor??
[  765.685655][   T30] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  765.790436][ T5782] usb 4-1: USB disconnect, device number 12
[  766.079926][    T9] page_pool_release_retry() stalled pool shutdown: id 34, 47 inflight 303 sec
[  766.314761][T13517] input: syz0 as /devices/virtual/input/input31
[  767.134401][    T9] page_pool_release_retry() stalled pool shutdown: id 35, 29 inflight 302 sec
[  768.028180][   T31] audit: type=1326 audit(1790155529.030:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13543 comm="syz.0.2139" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23d3d9e159 code=0x0
[  768.032069][   T30] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  768.182463][   T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  768.183326][   T30] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  768.183364][   T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  768.183385][   T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  768.184531][   T30] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  768.184552][   T30] usb 4-1: Manufacturer: syz
[  768.186855][   T30] usb 4-1: config 0 descriptor??
[  768.191482][   T30] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  768.219256][   T31] audit: type=1804 audit(1790155529.220:3527): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2139" name="/newroot/425/file1" dev="fuse" ino=1 res=1 errno=0
[  768.219301][   T31] audit: type=1800 audit(1790155529.220:3528): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2139" name="/" dev="fuse" ino=1 res=0 errno=0
[  768.305033][   T31] audit: type=1400 audit(1790155529.290:3529): avc:  denied  { mount } for  pid=13550 comm="syz.1.2141" name="/" dev="autofs" ino=47433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  768.437148][T13144] usb 4-1: USB disconnect, device number 13
[  771.085650][T13590] input: syz0 as /devices/virtual/input/input32
[  771.462027][T13144] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  771.760562][T13144] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  772.102921][T13144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  772.102957][T13144] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  772.102990][T13144] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  772.161520][T13144] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  772.161543][T13144] usb 4-1: Manufacturer: syz
[  772.170898][T13144] usb 4-1: config 0 descriptor??
[  772.173686][T13144] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  773.048846][ T5337] usb 4-1: USB disconnect, device number 14
[  773.545399][T13614] fuse: Bad value for 'user_id'
[  773.545420][T13614] fuse: Bad value for 'user_id'
[  773.790391][T13616] input: syz0 as /devices/virtual/input/input33
[  774.756565][   T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  775.315672][T13636] input: syz0 as /devices/virtual/input/input34
[  775.721657][   T30] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  775.742734][   T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  775.742769][   T30] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  775.742801][   T30] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  775.768821][   T30] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  775.768846][   T30] usb 2-1: Manufacturer: syz
[  776.022425][T13630] kthread_run failed with err -4
[  776.077169][T13639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2165'.
[  776.077412][T13639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2165'.
[  776.119686][   T30] usb 2-1: config 0 descriptor??
[  776.122853][   T30] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  776.612238][T13144] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  776.774171][T13144] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  776.777817][T13144] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  776.777906][T13144] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  776.777995][T13144] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  776.780914][T13144] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  776.780944][T13144] usb 1-1: Manufacturer: syz
[  776.921378][T13144] usb 1-1: config 0 descriptor??
[  777.031890][T13144] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  777.473488][ T5705] usb 2-1: USB disconnect, device number 15
[  779.844488][   T30] usb 1-1: USB disconnect, device number 14
[  782.369607][T13726] input: syz0 as /devices/virtual/input/input35
[  782.815109][T13733] syzkaller0: entered promiscuous mode
[  782.815134][T13733] syzkaller0: entered allmulticast mode
[  786.111159][T13766] fuse: Unknown parameter 'user_i00000000000000000000'
[  790.610185][T13810] input: syz0 as /devices/virtual/input/input36
[  792.822150][T13828] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2211'.
[  792.991999][ T5782] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  793.141991][ T5782] usb 1-1: Using ep0 maxpacket: 32
[  793.142573][ T5782] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  793.143503][ T5782] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  793.143527][ T5782] usb 1-1: config 0 has no interface number 1
[  793.145213][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.145234][ T5782] usb 1-1: Product: syz
[  793.145248][ T5782] usb 1-1: Manufacturer: syz
[  793.145261][ T5782] usb 1-1: SerialNumber: syz
[  793.147852][ T5782] usb 1-1: config 0 descriptor??
[  793.252441][ T5782] viperboard 1-1:0.61: version 0.00 found at bus 001 address 015
[  793.271755][ T5782] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  793.271784][ T5782] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  793.301199][ T5782] viperboard 1-1:0.0: version 0.00 found at bus 001 address 015
[  793.330817][ T5782] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  793.330849][ T5782] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  794.343865][ T5782] usb 1-1: USB disconnect, device number 15
[  795.066151][T13843] kthread_run failed with err -4
[  795.143226][T13851] input: syz0 as /devices/virtual/input/input37
[  801.412515][T13885] input: syz0 as /devices/virtual/input/input38
[  803.392685][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  803.392750][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  806.122952][T13910] input: syz0 as /devices/virtual/input/input39
[  808.334351][T13939] fuse: Unknown parameter 'user_id00000000000000000000'
[  808.668902][T13945] input: syz0 as /devices/virtual/input/input40
[  811.687423][T13953] kthread_run failed with err -4
[  814.595056][T13977] input: syz0 as /devices/virtual/input/input41
[  815.859172][T13993] fuse: Bad value for 'fd'
[  818.292021][   T31] audit: type=1400 audit(1790155579.240:3530): avc:  denied  { bind } for  pid=14007 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  818.292073][   T31] audit: type=1400 audit(1790155579.240:3531): avc:  denied  { listen } for  pid=14007 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  818.292110][   T31] audit: type=1400 audit(1790155579.240:3532): avc:  denied  { accept } for  pid=14007 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  820.102499][ T5705] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  820.991269][   T31] audit: type=1400 audit(1790155581.990:3533): avc:  denied  { write } for  pid=14021 comm="syz.3.2262" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  820.991572][   T31] audit: type=1400 audit(1790155581.990:3534): avc:  denied  { open } for  pid=14021 comm="syz.3.2262" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  821.001975][ T5705] usb 2-1: Using ep0 maxpacket: 32
[  821.015335][   T31] audit: type=1400 audit(1790155582.000:3535): avc:  denied  { read } for  pid=14021 comm="syz.3.2262" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  821.022006][   T31] audit: type=1400 audit(1790155582.020:3536): avc:  denied  { ioctl } for  pid=14021 comm="syz.3.2262" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=926 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  821.041005][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short
[  821.041044][ T5705] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  821.044975][ T5705] usb 2-1: unable to read config index 0 descriptor/start: -71
[  821.045001][ T5705] usb 2-1: can't read configurations, error -71
[  821.442717][   T31] audit: type=1400 audit(1790155582.440:3537): avc:  denied  { create } for  pid=14034 comm="syz.2.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  821.902730][T14044] ieee802154 phy0 wpan0: encryption failed: -22
[  822.217291][   T31] audit: type=1400 audit(1790155582.440:3538): avc:  denied  { read } for  pid=14034 comm="syz.2.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  822.217341][   T31] audit: type=1400 audit(1790155582.730:3539): avc:  denied  { ioctl } for  pid=14034 comm="syz.2.2264" path="socket:[48625]" dev="sockfs" ino=48625 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  822.661721][T14043] input: syz0 as /devices/virtual/input/input43
[  822.717324][T14036] input: syz0 as /devices/virtual/input/input42
[  823.583334][ T5337] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  823.732247][ T5337] usb 4-1: Using ep0 maxpacket: 32
[  824.006479][ T5337] usb 4-1: unable to get BOS descriptor or descriptor too short
[  824.007794][ T5337] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  824.332638][ T5337] usb 4-1: unable to read config index 0 descriptor/start: -71
[  824.334347][ T5337] usb 4-1: can't read configurations, error -71
[  825.454409][T14078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  826.473502][T13144] page_pool_release_retry() stalled pool shutdown: id 34, 47 inflight 363 sec
[  827.585115][ T2318] page_pool_release_retry() stalled pool shutdown: id 35, 29 inflight 363 sec
[  827.588326][T13144] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  829.604414][T13144] usb 2-1: device descriptor read/all, error -71
[  829.629372][T11830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  829.629397][T11830] CPU: 0 UID: 0 PID: 11830 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  829.629422][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  829.629437][T11830] Workqueue: hci3 hci_rx_work
[  829.629471][T11830] Call Trace:
[  829.629478][T11830]  <TASK>
[  829.629486][T11830]  dump_stack_lvl+0x100/0x190
[  829.629518][T11830]  sysfs_warn_dup.cold+0x1c/0x28
[  829.629549][T11830]  sysfs_create_dir_ns+0x24b/0x2b0
[  829.629575][T11830]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  829.629599][T11830]  ? find_held_lock+0x2b/0x80
[  829.629627][T11830]  ? kobject_add_internal+0x25f/0x930
[  829.629649][T11830]  ? kobject_add_internal+0x25f/0x930
[  829.629673][T11830]  ? do_raw_spin_unlock+0x145/0x1e0
[  829.629700][T11830]  kobject_add_internal+0x2c8/0x930
[  829.629728][T11830]  kobject_add+0x16a/0x1e0
[  829.629753][T11830]  ? __pfx_kobject_add+0x10/0x10
[  829.629773][T11830]  ? class_to_subsys+0x10f/0x150
[  829.629806][T11830]  ? kobject_put+0xb9/0x640
[  829.629824][T11830]  ? _raw_spin_unlock+0x28/0x50
[  829.629857][T11830]  device_add+0x294/0x1970
[  829.629885][T11830]  ? __pfx_dev_set_name+0x10/0x10
[  829.629904][T11830]  ? __pfx_device_add+0x10/0x10
[  829.629931][T11830]  ? mgmt_send_event_skb+0x2fb/0x460
[  829.629965][T11830]  hci_conn_add_sysfs+0x1a3/0x260
[  829.629995][T11830]  le_conn_complete_evt+0x122f/0x2130
[  829.630026][T11830]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  829.630049][T11830]  ? hci_event_packet+0x186/0xcd0
[  829.630079][T11830]  hci_le_conn_complete_evt+0x23c/0x3a0
[  829.630112][T11830]  ? skb_pull_data+0x15f/0x1e0
[  829.630145][T11830]  hci_le_meta_evt+0x34a/0x5f0
[  829.630172][T11830]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  829.630202][T11830]  hci_event_packet+0x51c/0xcd0
[  829.630228][T11830]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  829.630258][T11830]  ? __pfx_hci_event_packet+0x10/0x10
[  829.630289][T11830]  ? lockdep_hardirqs_on+0x7d/0x110
[  829.630325][T11830]  hci_rx_work+0x451/0xfc0
[  829.630353][T11830]  process_one_work+0xac7/0x1b10
[  829.630395][T11830]  ? __pfx_process_one_work+0x10/0x10
[  829.630426][T11830]  ? lock_acquire+0x1d1/0x380
[  829.630454][T11830]  ? __pfx_hci_rx_work+0x10/0x10
[  829.630480][T11830]  worker_thread+0x5ef/0xe50
[  829.630517][T11830]  ? __pfx_worker_thread+0x10/0x10
[  829.630548][T11830]  ? kthread+0x13a/0x450
[  829.630573][T11830]  ? __pfx_worker_thread+0x10/0x10
[  829.630600][T11830]  kthread+0x373/0x450
[  829.630624][T11830]  ? __pfx_kthread+0x10/0x10
[  829.630653][T11830]  ret_from_fork+0x730/0xd60
[  829.630678][T11830]  ? __pfx_ret_from_fork+0x10/0x10
[  829.630701][T11830]  ? __switch_to+0x800/0x10f0
[  829.630728][T11830]  ? __pfx_kthread+0x10/0x10
[  829.630757][T11830]  ret_from_fork_asm+0x1a/0x30
[  829.630792][T11830]  </TASK>
[  829.630908][T11830] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  829.630946][T11830] Bluetooth: hci3: failed to register connection device
[  829.934357][T14123] ieee802154 phy0 wpan0: encryption failed: -22
[  830.076752][T14123] input: syz0 as /devices/virtual/input/input44
[  832.504711][T14159] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  833.019521][T14165] FAULT_INJECTION: forcing a failure.
[  833.019521][T14165] name failslab, interval 1, probability 0, space 0, times 0
[  833.019551][T14165] CPU: 1 UID: 0 PID: 14165 Comm: syz.1.2299 Not tainted syzkaller #0 PREEMPT(full) 
[  833.019575][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  833.019588][T14165] Call Trace:
[  833.019594][T14165]  <TASK>
[  833.019602][T14165]  dump_stack_lvl+0x100/0x190
[  833.019636][T14165]  should_fail_ex.cold+0x5/0xa
[  833.019671][T14165]  should_failslab+0xc2/0x120
[  833.019696][T14165]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  833.019722][T14165]  ? kstrdup_const+0x63/0x80
[  833.019745][T14165]  kstrdup+0x51/0xe0
[  833.019763][T14165]  kstrdup_const+0x63/0x80
[  833.019780][T14165]  __kernfs_new_node+0x9b/0xa10
[  833.019814][T14165]  ? __pfx___kernfs_new_node+0x10/0x10
[  833.019846][T14165]  ? lock_acquire+0x1d1/0x380
[  833.019866][T14165]  ? kernfs_root+0x23/0x2a0
[  833.019891][T14165]  ? find_held_lock+0x2b/0x80
[  833.019917][T14165]  ? kernfs_root+0xee/0x2a0
[  833.019941][T14165]  ? kernfs_root+0xee/0x2a0
[  833.019972][T14165]  kernfs_new_node+0x117/0x150
[  833.020006][T14165]  kernfs_create_link+0xcc/0x240
[  833.020031][T14165]  sysfs_do_create_link_sd+0x90/0x140
[  833.020059][T14165]  sysfs_create_link+0x61/0xc0
[  833.020084][T14165]  driver_sysfs_add+0x91/0x2d0
[  833.020106][T14165]  really_probe+0x146/0xa60
[  833.020132][T14165]  __driver_probe_device+0x210/0x460
[  833.020154][T14165]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  833.020181][T14165]  driver_probe_device+0x4a/0x140
[  833.020205][T14165]  __driver_attach+0x21f/0x5b0
[  833.020230][T14165]  ? __pfx___driver_attach+0x10/0x10
[  833.020255][T14165]  bus_for_each_dev+0x13e/0x1d0
[  833.020274][T14165]  ? __pfx_bus_for_each_dev+0x10/0x10
[  833.020291][T14165]  ? bus_add_driver+0x2b5/0x5b0
[  833.020320][T14165]  bus_add_driver+0x305/0x5b0
[  833.020342][T14165]  driver_register+0x1e2/0x360
[  833.020366][T14165]  ? rcu_is_watching+0x13/0xc0
[  833.020392][T14165]  usb_gadget_register_driver_owner+0x132/0x210
[  833.020417][T14165]  raw_ioctl+0x1a85/0x2b80
[  833.020443][T14165]  ? __pfx_raw_ioctl+0x10/0x10
[  833.020461][T14165]  ? selinux_file_ioctl+0x13b/0x290
[  833.020482][T14165]  ? selinux_file_ioctl+0xb6/0x290
[  833.020505][T14165]  ? __pfx_raw_ioctl+0x10/0x10
[  833.020525][T14165]  __x64_sys_ioctl+0x18e/0x210
[  833.020546][T14165]  do_syscall_64+0x123/0x790
[  833.020577][T14165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.020596][T14165] RIP: 0033:0x7fb6def9ddeb
[  833.020612][T14165] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  833.020629][T14165] RSP: 002b:00007fb6dd1f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  833.020649][T14165] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb6def9ddeb
[  833.020666][T14165] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  833.020678][T14165] RBP: 00007fb6dd1f4fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  833.020690][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  833.020701][T14165] R13: 0000200000000180 R14: 0000000000000000 R15: 0000000000000000
[  833.020728][T14165]  </TASK>
[  833.021873][T14165] raw-gadget.0 gadget.1: really_probe: driver_sysfs_add failed
[  833.034880][T14159] md: pers->run() failed ...
[  833.062532][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.062909][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.428698][T14169] device-mapper: multipath: 248:0: Failing path 7:0.
[  833.454772][T14169] Buffer I/O error on dev dm-0, logical block 0, async page read
[  833.940239][T14179] ieee802154 phy0 wpan0: encryption failed: -22
[  833.994847][T14179] input: syz0 as /devices/virtual/input/input45
[  834.692120][ T5782] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  834.842067][ T5782] usb 4-1: Using ep0 maxpacket: 32
[  834.844874][ T5782] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  834.882737][ T5782] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[  834.882816][ T5782] usb 4-1: config 0 has no interface number 1
[  834.942612][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.942721][ T5782] usb 4-1: Product: syz
[  834.942779][ T5782] usb 4-1: Manufacturer: syz
[  834.942854][ T5782] usb 4-1: SerialNumber: syz
[  835.168044][ T5782] usb 4-1: config 0 descriptor??
[  835.940912][ T5782] viperboard 4-1:0.61: version 0.00 found at bus 004 address 017
[  836.906510][ T5782] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  836.906607][ T5782] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  837.208671][ T5782] viperboard 4-1:0.0: version 0.00 found at bus 004 address 017
[  837.529582][ T5782] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  837.529612][ T5782] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  838.473793][ T5782] usb 4-1: USB disconnect, device number 17
[  841.572038][ T5705] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  841.735898][ T5705] usb 5-1: Using ep0 maxpacket: 32
[  841.736402][ T5705] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  841.737440][ T5705] usb 5-1: config 0 has an invalid interface number: 61 but max is 1
[  841.737464][ T5705] usb 5-1: config 0 has no interface number 1
[  841.739806][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.739829][ T5705] usb 5-1: Product: syz
[  841.739860][ T5705] usb 5-1: Manufacturer: syz
[  841.739874][ T5705] usb 5-1: SerialNumber: syz
[  841.745652][ T5705] usb 5-1: config 0 descriptor??
[  841.924033][ T5705] viperboard 5-1:0.61: version 0.00 found at bus 005 address 010
[  842.262544][ T5705] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  842.262619][ T5705] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  844.664839][ T5705] viperboard 5-1:0.0: version 0.00 found at bus 005 address 010
[  845.029417][ T5705] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  845.029447][ T5705] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  845.038805][ T5705] usb 5-1: USB disconnect, device number 10
[  845.532051][   T30] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  845.683668][   T30] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  845.684492][   T30] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  845.684511][   T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  845.684525][   T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  845.693669][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.693691][   T30] usb 4-1: Product: syz
[  845.693704][   T30] usb 4-1: Manufacturer: syz
[  845.693716][   T30] usb 4-1: SerialNumber: syz
[  845.699956][   T30] usb 4-1: config 0 descriptor??
[  845.700527][T14290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  846.085622][T14290] sd 0:0:1:0: device reset
[  846.094877][   T31] kauditd_printk_skb: 1 callbacks suppressed
[  846.094892][   T31] audit: type=1400 audit(1790155607.080:3541): avc:  denied  { read } for  pid=14289 comm="syz.3.2332" name="sg0" dev="devtmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  846.094930][   T31] audit: type=1400 audit(1790155607.080:3542): avc:  denied  { open } for  pid=14289 comm="syz.3.2332" path="/dev/sg0" dev="devtmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  846.094964][   T31] audit: type=1400 audit(1790155607.090:3543): avc:  denied  { ioctl } for  pid=14289 comm="syz.3.2332" path="/dev/sg0" dev="devtmpfs" ino=878 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  846.124717][T14297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2334'.
[  846.124738][T14297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2334'.
[  846.182042][   T30] rc_core: IR keymap rc-streamzap not found
[  846.182059][   T30] Registered IR keymap rc-empty
[  846.198180][   T30] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  846.201475][   T30] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46
[  846.348858][   T30] usb 4-1: USB disconnect, device number 18
[  847.243106][T14313] input: syz0 as /devices/virtual/input/input47
[  848.272033][ T5705] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  848.272135][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  848.442066][    T9] usb 1-1: Using ep0 maxpacket: 8
[  848.442683][ T5705] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  848.442782][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  848.443506][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  848.443522][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  848.443535][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  848.443819][    T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  848.443839][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  848.443887][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  848.443900][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  848.443914][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  848.443929][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  848.443948][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.447255][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.447268][ T5705] usb 4-1: Product: syz
[  848.447290][ T5705] usb 4-1: Manufacturer: syz
[  848.447298][ T5705] usb 4-1: SerialNumber: syz
[  848.448645][ T5705] usb 4-1: config 0 descriptor??
[  848.449767][T14324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  848.525350][T14335] device-mapper: multipath: 248:0: Failing path 7:0.
[  848.525586][T14335] Buffer I/O error on dev dm-0, logical block 0, async page read
[  848.671964][ T5705] rc_core: IR keymap rc-streamzap not found
[  848.671998][ T5705] Registered IR keymap rc-empty
[  848.672631][ T5705] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  848.673533][ T5705] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48
[  848.694203][    T9] usb 1-1: usb_control_msg returned -71
[  848.694239][    T9] usbtmc 1-1:16.0: can't read capabilities
[  848.746865][    T9] usb 1-1: USB disconnect, device number 16
[  848.807212][T14324] sd 0:0:1:0: device reset
[  848.808653][ T5705] usb 4-1: USB disconnect, device number 19
[  850.192236][T13866] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  850.394328][T13866] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  850.395858][T13866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  850.395885][T13866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  850.395914][T13866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  850.399867][T13866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.399896][T13866] usb 4-1: Product: syz
[  850.399910][T13866] usb 4-1: Manufacturer: syz
[  850.399922][T13866] usb 4-1: SerialNumber: syz
[  850.475145][T13866] usb 4-1: config 0 descriptor??
[  850.475762][T14350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  850.633413][T13866] rc_core: IR keymap rc-streamzap not found
[  850.633430][T13866] Registered IR keymap rc-empty
[  850.661893][T13866] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  850.665762][T13866] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49
[  850.683170][T14372] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  850.736732][T14350] sd 0:0:1:0: device reset
[  850.773793][T13866] usb 4-1: USB disconnect, device number 20
[  851.049975][T14378] device-mapper: multipath: 248:0: Failing path 7:0.
[  851.050121][T14378] Buffer I/O error on dev dm-0, logical block 0, async page read
[  851.153629][T14380] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  852.070425][T14392] syzkaller0: entered promiscuous mode
[  852.070438][T14392] syzkaller0: entered allmulticast mode
[  852.970433][T14410] device-mapper: multipath: 248:0: Failing path 7:0.
[  852.970554][T14410] Buffer I/O error on dev dm-0, logical block 0, async page read
[  853.221894][T14414] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  853.707870][T14422] input: syz0 as /devices/virtual/input/input50
[  855.006620][T14440] device-mapper: multipath: 248:0: Failing path 7:0.
[  855.006982][T14440] Buffer I/O error on dev dm-0, logical block 0, async page read
[  855.032408][T13866] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  855.198027][T13866] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  855.199220][T13866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  855.199239][T13866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  855.199254][T13866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  855.200887][T13866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.200901][T13866] usb 1-1: Product: syz
[  855.200909][T13866] usb 1-1: Manufacturer: syz
[  855.200917][T13866] usb 1-1: SerialNumber: syz
[  855.215075][T13866] usb 1-1: config 0 descriptor??
[  855.216969][T14436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  855.342933][T13866] rc_core: IR keymap rc-streamzap not found
[  855.342951][T13866] Registered IR keymap rc-empty
[  855.343461][T13866] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  855.346632][T13866] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input51
[  855.530697][T13866] usb 1-1: USB disconnect, device number 17
[  858.154431][T14465] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9)
[  858.175307][T14466] Buffer I/O error on dev dm-0, logical block 0, async page read
[  859.983741][T14481] =======================================================
[  859.983741][T14481] WARNING: The mand mount option has been deprecated and
[  859.983741][T14481]          and is ignored by this kernel. Remove the mand
[  859.983741][T14481]          option from the mount to silence this warning.
[  859.983741][T14481] =======================================================
[  860.077613][T14481] overlayfs: overlapping lowerdir path
[  864.832585][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  864.832658][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  865.929155][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'.
[  865.929267][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'.
[  866.381198][T14542] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  866.505579][T14546] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  868.182719][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  868.465259][    T9] usb 3-1: Using ep0 maxpacket: 32
[  868.469603][    T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  868.504296][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  868.525018][    T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  868.525043][    T9] usb 3-1: Product: syz
[  868.525058][    T9] usb 3-1: Manufacturer: syz
[  868.525072][    T9] usb 3-1: SerialNumber: syz
[  868.527296][    T9] usb 3-1: config 0 descriptor??
[  868.527822][T14571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  868.528916][    T9] hub 3-1:0.0: bad descriptor, ignoring hub
[  868.528937][    T9] hub 3-1:0.0: probe with driver hub failed with error -5
[  868.635354][   T31] audit: type=1400 audit(1790155629.640:3544): avc:  denied  { create } for  pid=14580 comm="syz.4.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  869.352358][   T31] audit: type=1400 audit(1790155630.350:3545): avc:  denied  { mount } for  pid=14588 comm="syz.3.2417" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  869.358018][   T31] audit: type=1807 audit(1790155630.360:3546): action=measure UNKNOWN=func= res=0
[  869.358924][   T31] audit: type=1802 audit(1790155630.360:3547): pid=14589 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.2417" res=0 errno=0
[  869.359357][T14588] ima: policy update failed
[  869.359470][   T31] audit: type=1802 audit(1790155630.360:3548): pid=14588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.2417" res=0 errno=0
[  869.457789][   T31] audit: type=1400 audit(1790155630.460:3549): avc:  denied  { unmount } for  pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  869.515947][   T31] audit: type=1800 audit(1790155630.520:3550): pid=14591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2418" name=08 dev="sda1" ino=2048 res=0 errno=0
[  870.486096][T11459] raw-gadget.0 gadget.2: failed to queue suspend event
[  870.742226][T14571] raw-gadget.0 gadget.2: failed to queue resume event
[  870.762934][T11459] raw-gadget.0 gadget.2: failed to queue suspend event
[  870.842043][T14571] raw-gadget.0 gadget.2: failed to queue resume event
[  870.875170][T11459] raw-gadget.0 gadget.2: failed to queue suspend event
[  870.952133][T14571] raw-gadget.0 gadget.2: failed to queue resume event
[  870.987425][T11459] raw-gadget.0 gadget.2: failed to queue suspend event
[  871.050845][T14571] raw-gadget.0 gadget.2: failed to queue disconnect event
[  871.153348][T13866] usb 3-1: USB disconnect, device number 15
[  871.794750][T14622] input: syz0 as /devices/virtual/input/input52
[  873.199946][ T5617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  873.199975][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  873.199999][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  873.200013][ T5617] Workqueue: hci4 hci_rx_work
[  873.200042][ T5617] Call Trace:
[  873.200049][ T5617]  <TASK>
[  873.200056][ T5617]  dump_stack_lvl+0x100/0x190
[  873.200088][ T5617]  sysfs_warn_dup.cold+0x1c/0x28
[  873.200121][ T5617]  sysfs_create_dir_ns+0x24b/0x2b0
[  873.200154][ T5617]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  873.200179][ T5617]  ? find_held_lock+0x2b/0x80
[  873.200206][ T5617]  ? kobject_add_internal+0x25f/0x930
[  873.200230][ T5617]  ? kobject_add_internal+0x25f/0x930
[  873.200255][ T5617]  ? do_raw_spin_unlock+0x145/0x1e0
[  873.200282][ T5617]  kobject_add_internal+0x2c8/0x930
[  873.200308][ T5617]  kobject_add+0x16a/0x1e0
[  873.200330][ T5617]  ? __pfx_kobject_add+0x10/0x10
[  873.200351][ T5617]  ? class_to_subsys+0x10f/0x150
[  873.200383][ T5617]  ? kobject_put+0xb9/0x640
[  873.200401][ T5617]  ? _raw_spin_unlock+0x28/0x50
[  873.200430][ T5617]  device_add+0x294/0x1970
[  873.200460][ T5617]  ? __pfx_dev_set_name+0x10/0x10
[  873.200480][ T5617]  ? __pfx_device_add+0x10/0x10
[  873.200506][ T5617]  ? mgmt_send_event_skb+0x2fb/0x460
[  873.200539][ T5617]  hci_conn_add_sysfs+0x1a3/0x260
[  873.200568][ T5617]  le_conn_complete_evt+0x122f/0x2130
[  873.200598][ T5617]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  873.200620][ T5617]  ? hci_event_packet+0x186/0xcd0
[  873.200648][ T5617]  hci_le_conn_complete_evt+0x23c/0x3a0
[  873.200674][ T5617]  ? skb_pull_data+0x15f/0x1e0
[  873.200706][ T5617]  hci_le_meta_evt+0x34a/0x5f0
[  873.200732][ T5617]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  873.200761][ T5617]  hci_event_packet+0x51c/0xcd0
[  873.200785][ T5617]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  873.200811][ T5617]  ? __pfx_hci_event_packet+0x10/0x10
[  873.200840][ T5617]  ? lockdep_hardirqs_on+0x7d/0x110
[  873.200874][ T5617]  hci_rx_work+0x451/0xfc0
[  873.200901][ T5617]  process_one_work+0xac7/0x1b10
[  873.200941][ T5617]  ? __pfx_process_one_work+0x10/0x10
[  873.200971][ T5617]  ? lock_acquire+0x1d1/0x380
[  873.200999][ T5617]  ? __pfx_hci_rx_work+0x10/0x10
[  873.201024][ T5617]  worker_thread+0x5ef/0xe50
[  873.201063][ T5617]  ? kthread+0x13a/0x450
[  873.201088][ T5617]  ? __pfx_worker_thread+0x10/0x10
[  873.201114][ T5617]  kthread+0x373/0x450
[  873.201146][ T5617]  ? __pfx_kthread+0x10/0x10
[  873.201175][ T5617]  ret_from_fork+0x730/0xd60
[  873.201199][ T5617]  ? __pfx_ret_from_fork+0x10/0x10
[  873.201224][ T5617]  ? __switch_to+0x800/0x10f0
[  873.201251][ T5617]  ? __pfx_kthread+0x10/0x10
[  873.201277][ T5617]  ret_from_fork_asm+0x1a/0x30
[  873.201308][ T5617]  </TASK>
[  873.223614][ T5617] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  873.223659][ T5617] Bluetooth: hci4: failed to register connection device
[  873.541995][T13144] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  873.905904][T13144] usb 3-1: Using ep0 maxpacket: 32
[  873.908137][T13144] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  873.912977][T13144] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  873.917895][T13144] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  873.917916][T13144] usb 3-1: Product: syz
[  873.917929][T13144] usb 3-1: Manufacturer: syz
[  873.917941][T13144] usb 3-1: SerialNumber: syz
[  873.932978][T13144] usb 3-1: config 0 descriptor??
[  873.935661][T14633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  873.936945][T13144] hub 3-1:0.0: bad descriptor, ignoring hub
[  873.936963][T13144] hub 3-1:0.0: probe with driver hub failed with error -5
[  874.579295][T13866] usb 3-1: USB disconnect, device number 16
[  877.299747][T14695] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  877.568920][T14702] overlayfs: overlapping lowerdir path
[  878.823739][T14708] device-mapper: multipath: 248:0: Failing path 7:0.
[  878.824029][T14708] Buffer I/O error on dev dm-0, logical block 0, async page read
[  879.683738][ T5617] Bluetooth: hci4: command 0x0406 tx timeout
[  881.442327][ T5705] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  881.812876][ T5705] usb 3-1: Using ep0 maxpacket: 32
[  881.813902][ T5705] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  881.948330][ T5705] usb 3-1: config 0 has an invalid interface number: 61 but max is 1
[  881.948345][ T5705] usb 3-1: config 0 has no interface number 1
[  881.961624][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.961647][ T5705] usb 3-1: Product: syz
[  881.961655][ T5705] usb 3-1: Manufacturer: syz
[  881.961664][ T5705] usb 3-1: SerialNumber: syz
[  881.963384][ T5705] usb 3-1: config 0 descriptor??
[  882.075418][ T5705] viperboard 3-1:0.61: version 0.00 found at bus 003 address 017
[  882.078863][ T5705] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  882.078880][ T5705] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  882.081882][ T5705] viperboard 3-1:0.0: version 0.00 found at bus 003 address 017
[  882.127068][ T5705] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  882.127101][ T5705] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  884.546062][ T5782] usb 3-1: USB disconnect, device number 17
[  885.799073][T14784] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  886.332053][T13866] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  886.482222][T13866] usb 3-1: Using ep0 maxpacket: 32
[  886.485778][T13866] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  886.516703][T14800] overlayfs: overlapping lowerdir path
[  886.540092][T13866] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  886.575093][T13866] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  886.575145][T13866] usb 3-1: Product: syz
[  886.575239][T13866] usb 3-1: Manufacturer: syz
[  886.575301][T13866] usb 3-1: SerialNumber: syz
[  886.641285][T13866] usb 3-1: config 0 descriptor??
[  886.650484][T14790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  886.688456][T13866] hub 3-1:0.0: bad descriptor, ignoring hub
[  886.689018][T13866] hub 3-1:0.0: probe with driver hub failed with error -5
[  887.355448][T13144] page_pool_release_retry() stalled pool shutdown: id 34, 47 inflight 424 sec
[  887.644374][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  887.648045][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  887.802158][ T5705] usb 3-1: USB disconnect, device number 18
[  888.394131][ T5705] page_pool_release_retry() stalled pool shutdown: id 35, 29 inflight 424 sec
[  888.713230][T13144] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  888.839002][T14823] input: syz0 as /devices/virtual/input/input53
[  888.942143][T13144] usb 3-1: Using ep0 maxpacket: 32
[  888.944252][T13144] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  888.947350][T13144] usb 3-1: config 0 has an invalid interface number: 61 but max is 1
[  888.947399][T13144] usb 3-1: config 0 has no interface number 1
[  888.954049][T13144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.954100][T13144] usb 3-1: Product: syz
[  888.954133][T13144] usb 3-1: Manufacturer: syz
[  888.954174][T13144] usb 3-1: SerialNumber: syz
[  889.025185][T13144] usb 3-1: config 0 descriptor??
[  889.143629][T13144] viperboard 3-1:0.61: version 0.00 found at bus 003 address 019
[  889.167341][T13144] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  889.167371][T13144] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  889.194103][T13144] viperboard 3-1:0.0: version 0.00 found at bus 003 address 019
[  889.197858][T13144] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  889.197875][T13144] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  889.486752][   T30] usb 3-1: USB disconnect, device number 19
[  890.079999][T14843] overlayfs: failed to resolve './file1/file0': -2
[  891.911241][T14856] syzkaller0: entered promiscuous mode
[  891.913141][T14856] syzkaller0: entered allmulticast mode
[  895.156069][T14889] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  898.970012][T14945] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL)
[  898.970035][T14945] device-mapper: ioctl: error adding target to table
[  899.558130][T14958] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  900.363238][   T31] audit: type=1800 audit(1790155661.370:3551): pid=14969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2520" name=08 dev="sda1" ino=2048 res=0 errno=0
[  903.143723][T15015] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  903.690634][   T31] audit: type=1800 audit(1790155664.690:3552): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2536" name=08 dev="sda1" ino=2048 res=0 errno=0
[  905.621824][T15039] overlayfs: failed to resolve './file1/file0': -2
[  908.737995][T15055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2544'.
[  909.745619][T11830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  909.745642][T11830] CPU: 1 UID: 0 PID: 11830 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  909.745666][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  909.745680][T11830] Workqueue: hci3 hci_rx_work
[  909.745707][T11830] Call Trace:
[  909.745713][T11830]  <TASK>
[  909.745721][T11830]  dump_stack_lvl+0x100/0x190
[  909.745754][T11830]  sysfs_warn_dup.cold+0x1c/0x28
[  909.745785][T11830]  sysfs_create_dir_ns+0x24b/0x2b0
[  909.745811][T11830]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  909.745843][T11830]  ? find_held_lock+0x2b/0x80
[  909.745871][T11830]  ? kobject_add_internal+0x25f/0x930
[  909.745894][T11830]  ? kobject_add_internal+0x25f/0x930
[  909.745918][T11830]  ? do_raw_spin_unlock+0x145/0x1e0
[  909.745946][T11830]  kobject_add_internal+0x2c8/0x930
[  909.745974][T11830]  kobject_add+0x16a/0x1e0
[  909.745996][T11830]  ? __pfx_kobject_add+0x10/0x10
[  909.746015][T11830]  ? class_to_subsys+0x10f/0x150
[  909.746047][T11830]  ? kobject_put+0xb9/0x640
[  909.746062][T11830]  ? _raw_spin_unlock+0x28/0x50
[  909.746096][T11830]  device_add+0x294/0x1970
[  909.746124][T11830]  ? __pfx_dev_set_name+0x10/0x10
[  909.746143][T11830]  ? __pfx_device_add+0x10/0x10
[  909.746171][T11830]  ? mgmt_send_event_skb+0x2fb/0x460
[  909.746204][T11830]  hci_conn_add_sysfs+0x1a3/0x260
[  909.746233][T11830]  le_conn_complete_evt+0x122f/0x2130
[  909.746264][T11830]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  909.746287][T11830]  ? hci_event_packet+0x186/0xcd0
[  909.746317][T11830]  hci_le_conn_complete_evt+0x23c/0x3a0
[  909.746342][T11830]  ? skb_pull_data+0x15f/0x1e0
[  909.746374][T11830]  hci_le_meta_evt+0x34a/0x5f0
[  909.746399][T11830]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  909.746429][T11830]  hci_event_packet+0x51c/0xcd0
[  909.746453][T11830]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  909.746481][T11830]  ? __pfx_hci_event_packet+0x10/0x10
[  909.746511][T11830]  ? lockdep_hardirqs_on+0x7d/0x110
[  909.746544][T11830]  hci_rx_work+0x451/0xfc0
[  909.746573][T11830]  process_one_work+0xac7/0x1b10
[  909.746614][T11830]  ? __pfx_process_one_work+0x10/0x10
[  909.746647][T11830]  ? lock_acquire+0x1d1/0x380
[  909.746675][T11830]  ? __pfx_hci_rx_work+0x10/0x10
[  909.746699][T11830]  worker_thread+0x5ef/0xe50
[  909.746734][T11830]  ? __pfx_worker_thread+0x10/0x10
[  909.746767][T11830]  ? kthread+0x13a/0x450
[  909.746793][T11830]  ? __pfx_worker_thread+0x10/0x10
[  909.746828][T11830]  kthread+0x373/0x450
[  909.746854][T11830]  ? __pfx_kthread+0x10/0x10
[  909.746883][T11830]  ret_from_fork+0x730/0xd60
[  909.746906][T11830]  ? __pfx_ret_from_fork+0x10/0x10
[  909.746931][T11830]  ? __switch_to+0x800/0x10f0
[  909.746958][T11830]  ? __pfx_kthread+0x10/0x10
[  909.746986][T11830]  ret_from_fork_asm+0x1a/0x30
[  909.747021][T11830]  </TASK>
[  909.747107][T11830] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  909.747138][T11830] Bluetooth: hci3: failed to register connection device
[  911.756113][ T5617] Bluetooth: hci3: command 0x2016 tx timeout
[  912.298894][T15093] device-mapper: ioctl: name not supplied when creating device
[  912.431523][ T5705] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  913.765691][ T5705] usb 3-1: Using ep0 maxpacket: 32
[  913.766715][ T5705] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  913.769409][ T5705] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  913.793560][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  913.793584][ T5705] usb 3-1: Product: syz
[  913.793596][ T5705] usb 3-1: Manufacturer: syz
[  913.793608][ T5705] usb 3-1: SerialNumber: syz
[  913.795710][ T5705] usb 3-1: config 0 descriptor??
[  913.822159][T15090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  913.823216][ T5705] hub 3-1:0.0: bad descriptor, ignoring hub
[  913.823234][ T5705] hub 3-1:0.0: probe with driver hub failed with error -5
[  913.839077][ T5617] Bluetooth: hci3: command 0x2016 tx timeout
[  914.790397][T15115] overlayfs: overlapping lowerdir path
[  915.207933][ T5337] usb 3-1: USB disconnect, device number 20
[  916.832145][T15129] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  918.851351][T15149] device-mapper: ioctl: name not supplied when creating device
[  920.435238][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  920.582006][    T9] usb 5-1: Using ep0 maxpacket: 32
[  920.582733][    T9] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  920.583711][    T9] usb 5-1: config 0 has an invalid interface number: 61 but max is 1
[  920.583734][    T9] usb 5-1: config 0 has no interface number 1
[  920.585912][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.585927][    T9] usb 5-1: Product: syz
[  920.585934][    T9] usb 5-1: Manufacturer: syz
[  920.585943][    T9] usb 5-1: SerialNumber: syz
[  920.651936][    T9] usb 5-1: config 0 descriptor??
[  920.734480][T15164] md: could not open device unknown-block(0,0).
[  920.734523][T15164] md: error, md_import_device() returned -6
[  920.766333][    T9] viperboard 5-1:0.61: version 0.00 found at bus 005 address 011
[  920.969047][    T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  920.969067][    T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  920.995737][    T9] viperboard 5-1:0.0: version 0.00 found at bus 005 address 011
[  921.009802][    T9] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  921.009821][    T9] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  921.333156][   T31] audit: type=1400 audit(1790155682.340:3553): avc:  denied  { mounton } for  pid=15178 comm="syz.0.2578" path="/511/file0" dev="tmpfs" ino=2812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  921.345275][   T31] audit: type=1400 audit(1790155682.350:3554): avc:  denied  { write } for  pid=15178 comm="syz.0.2578" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  921.423137][ T5337] usb 5-1: USB disconnect, device number 11
[  922.687587][T15209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2585'.
[  923.696525][   T31] audit: type=1326 audit(1790155684.690:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.1.2586" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6def9e159 code=0x0
[  924.312122][   T30] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  924.472234][   T30] usb 3-1: Using ep0 maxpacket: 8
[  924.475089][   T30] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  924.480947][   T30] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  924.481225][   T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  924.481291][   T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  924.481354][   T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  924.481419][   T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  924.481482][   T30] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  924.481655][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.704996][   T31] audit: type=1326 audit(1790155685.710:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.1.2586" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6def9e159 code=0x7fc00000
[  924.883006][   T30] usb 3-1: GET_CAPABILITIES returned 0
[  924.883045][   T30] usbtmc 3-1:16.0: can't read capabilities
[  925.068229][T15234] overlayfs: overlapping lowerdir path
[  925.648279][T15237] overlayfs: overlapping lowerdir path
[  925.991345][ T5705] usb 3-1: USB disconnect, device number 22
[  926.237475][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  926.237548][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  927.017076][   T31] audit: type=1400 audit(1790155688.020:3557): avc:  denied  { write } for  pid=15242 comm="syz.4.2595" name="subsystems" dev="configfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  927.093958][   T31] audit: type=1400 audit(1790155688.100:3558): avc:  denied  { write } for  pid=15242 comm="syz.4.2595" name="namespaces" dev="configfs" ino=63632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  927.148216][T15243] nvmet: adding nsid 1 to subsystem testsubsys
[  927.322017][   T30] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  927.482173][   T30] usb 3-1: Using ep0 maxpacket: 32
[  927.493175][   T30] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  927.495818][   T30] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  927.621858][   T30] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  927.622186][   T30] usb 3-1: Product: syz
[  927.622237][   T30] usb 3-1: Manufacturer: syz
[  927.622283][   T30] usb 3-1: SerialNumber: syz
[  927.646668][   T30] usb 3-1: config 0 descriptor??
[  927.647876][T15247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  927.649054][   T30] hub 3-1:0.0: bad descriptor, ignoring hub
[  927.649074][   T30] hub 3-1:0.0: probe with driver hub failed with error -5
[  928.753930][   T31] audit: type=1400 audit(1790155689.760:3559): avc:  denied  { setopt } for  pid=15279 comm="syz.3.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  928.756606][   T31] audit: type=1400 audit(1790155689.760:3560): avc:  denied  { connect } for  pid=15279 comm="syz.3.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  928.787403][T15281] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  928.984181][T15287] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2609'.
[  929.005601][T11459] raw-gadget.0 gadget.2: failed to queue suspend event
[  929.272818][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  929.320157][T12624] raw-gadget.0 gadget.2: failed to queue suspend event
[  929.382012][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  929.412740][T11459] raw-gadget.0 gadget.2: failed to queue suspend event
[  929.482059][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  929.549933][T11459] raw-gadget.0 gadget.2: failed to queue suspend event
[  929.622384][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  929.660417][T11459] raw-gadget.0 gadget.2: failed to queue suspend event
[  929.723360][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  929.744252][T12624] raw-gadget.0 gadget.2: failed to queue suspend event
[  929.812168][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  929.836198][T12624] raw-gadget.0 gadget.2: failed to queue suspend event
[  929.902058][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  929.925641][T12624] raw-gadget.0 gadget.2: failed to queue suspend event
[  930.002388][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  930.023527][ T1132] raw-gadget.0 gadget.2: failed to queue suspend event
[  930.092549][T15247] raw-gadget.0 gadget.2: failed to queue resume event
[  930.114016][T12624] raw-gadget.0 gadget.2: failed to queue suspend event
[  930.188476][T15247] raw-gadget.0 gadget.2: failed to queue disconnect event
[  930.333242][   T30] usb 3-1: USB disconnect, device number 23
[  930.702587][T15315] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  931.919461][   T31] audit: type=1400 audit(1790155692.920:3561): avc:  denied  { write } for  pid=15335 comm="syz.1.2623" name="sg0" dev="devtmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  931.945894][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  931.958348][T15338] FAULT_INJECTION: forcing a failure.
[  931.958348][T15338] name fail_futex, interval 1, probability 0, space 0, times 0
[  931.958378][T15338] CPU: 1 UID: 0 PID: 15338 Comm: syz.0.2622 Not tainted syzkaller #0 PREEMPT(full) 
[  931.958401][T15338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  931.958411][T15338] Call Trace:
[  931.958418][T15338]  <TASK>
[  931.958426][T15338]  dump_stack_lvl+0x100/0x190
[  931.958457][T15338]  should_fail_ex.cold+0x5/0xa
[  931.958492][T15338]  get_futex_key+0x1d0/0x14f0
[  931.958521][T15338]  ? __pfx_get_futex_key+0x10/0x10
[  931.958554][T15338]  futex_wake+0xf4/0x5e0
[  931.958575][T15338]  ? __pfx_futex_wake+0x10/0x10
[  931.958591][T15338]  ? __call_rcu_common.constprop.0+0x3f2/0x9b0
[  931.958623][T15338]  do_futex+0x2b2/0x440
[  931.958649][T15338]  ? __pfx_do_futex+0x10/0x10
[  931.958672][T15338]  ? __pfx___might_resched+0x10/0x10
[  931.958692][T15338]  ? blkcg_maybe_throttle_current+0x5e7/0xeb0
[  931.958714][T15338]  ? _raw_spin_unlock_irq+0x23/0x50
[  931.958741][T15338]  __x64_sys_futex+0x34f/0x4d0
[  931.958769][T15338]  ? __pfx___x64_sys_futex+0x10/0x10
[  931.958794][T15338]  ? rcu_is_watching+0x13/0xc0
[  931.958825][T15338]  do_syscall_64+0x123/0x790
[  931.958854][T15338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.958872][T15338] RIP: 0033:0x7f23d3d9e159
[  931.958890][T15338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  931.958906][T15338] RSP: 002b:00007f23d1ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  931.958924][T15338] RAX: ffffffffffffffda RBX: 00007f23d4025fa8 RCX: 00007f23d3d9e159
[  931.958935][T15338] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23d4025fac
[  931.958947][T15338] RBP: 00007f23d4025fa0 R08: 0000000000000001 R09: 0000000000000000
[  931.958957][T15338] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  931.958967][T15338] R13: 00007f23d4026038 R14: 00007ffcaf3646c0 R15: 00007ffcaf3647a8
[  931.958989][T15338]  </TASK>
[  932.019567][T15336] sg_write: data in/out 32658/217 bytes for SCSI command 0x0-- guessing data in;
[  932.019567][T15336]    program syz.1.2623 not setting count and/or reply_len properly
[  932.094777][    T9] usb 5-1: Using ep0 maxpacket: 8
[  932.099686][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  932.138163][    T9] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  932.138209][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  932.138233][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  932.138254][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  932.138276][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  932.138297][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  932.138333][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.389578][T15351] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  932.464002][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  932.464042][    T9] usbtmc 5-1:16.0: can't read capabilities
[  932.680678][   T31] audit: type=1400 audit(1790155693.680:3562): avc:  denied  { write } for  pid=15328 comm="syz.4.2619" name="usbtmc0" dev="devtmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  932.685960][ T5337] usb 5-1: USB disconnect, device number 12
[  934.002144][T15372] 
[  934.004501][T15372] ======================================================
[  934.011500][T15372] WARNING: possible circular locking dependency detected
[  934.018507][T15372] syzkaller #0 Not tainted
[  934.022897][T15372] ------------------------------------------------------
[  934.029896][T15372] syz.4.2635/15372 is trying to acquire lock:
[  934.035939][T15372] ffff88808adc6138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90
[  934.045693][T15372] 
[  934.045693][T15372] but task is already holding lock:
[  934.053046][T15372] ffff8880550d7080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  934.062336][T15372] 
[  934.062336][T15372] which lock already depends on the new lock.
[  934.062336][T15372] 
[  934.072723][T15372] 
[  934.072723][T15372] the existing dependency chain (in reverse order) is:
[  934.081735][T15372] 
[  934.081735][T15372] -> #2 (&of->mutex){+.+.}-{4:4}:
[  934.088930][T15372]        lock_acquire+0x1d1/0x380
[  934.093948][T15372]        __mutex_lock+0x1a4/0x1bd0
[  934.099054][T15372]        kernfs_fop_write_iter+0x2c2/0x5f0
[  934.104840][T15372]        iter_file_splice_write+0x830/0x10b0
[  934.110826][T15372]        do_splice+0x109c/0x1fa0
[  934.115783][T15372]        __do_splice+0x33b/0x370
[  934.120718][T15372]        __x64_sys_splice+0x187/0x250
[  934.126091][T15372]        do_syscall_64+0x123/0x790
[  934.131196][T15372]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.137594][T15372] 
[  934.137594][T15372] -> #1 (&pipe->mutex){+.+.}-{4:4}:
[  934.144962][T15372]        lock_acquire+0x1d1/0x380
[  934.149986][T15372]        __mutex_lock+0x1a4/0x1bd0
[  934.155092][T15372]        anon_pipe_prefill_and_lock+0x16c/0x580
[  934.161314][T15372]        anon_pipe_write+0x164/0x1b50
[  934.166664][T15372]        __kernel_write_iter+0x6bb/0x930
[  934.172276][T15372]        __kernel_write+0xf6/0x140
[  934.177365][T15372]        autofs_notify_daemon+0x50d/0xd90
[  934.183066][T15372]        autofs_wait+0x10fd/0x1b50
[  934.188155][T15372]        autofs_mount_wait+0x132/0x3b0
[  934.193593][T15372]        autofs_d_automount+0x490/0x950
[  934.199115][T15372]        __traverse_mounts+0x1b9/0x8a0
[  934.204564][T15372]        step_into_slowpath+0xb7e/0xf90
[  934.210094][T15372]        link_path_walk+0xf28/0x1cc0
[  934.215357][T15372]        path_lookupat+0x74/0xc40
[  934.220355][T15372]        filename_lookup+0x202/0x590
[  934.225615][T15372]        vfs_statx+0xff/0x3f0
[  934.230270][T15372]        __do_sys_newstat+0xaa/0x130
[  934.235539][T15372]        do_syscall_64+0x123/0x790
[  934.240636][T15372]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.247044][T15372] 
[  934.247044][T15372] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  934.254759][T15372]        check_prev_add+0xeb/0xe60
[  934.259882][T15372]        __lock_acquire+0x1528/0x1f40
[  934.265305][T15372]        lock_acquire+0x1d1/0x380
[  934.270345][T15372]        __mutex_lock+0x1a4/0x1bd0
[  934.275466][T15372]        autofs_notify_daemon+0x4f8/0xd90
[  934.281184][T15372]        autofs_wait+0x10fd/0x1b50
[  934.286330][T15372]        autofs_mount_wait+0x132/0x3b0
[  934.291774][T15372]        autofs_d_automount+0x490/0x950
[  934.297296][T15372]        __traverse_mounts+0x1b9/0x8a0
[  934.302743][T15372]        step_into_slowpath+0xb7e/0xf90
[  934.308260][T15372]        path_lookupat+0x58b/0xc40
[  934.313349][T15372]        filename_lookup+0x202/0x590
[  934.318615][T15372]        kern_path+0x37/0x50
[  934.323176][T15372]        lookup_bdev+0xd8/0x2a0
[  934.327996][T15372]        resume_store+0x1d6/0x460
[  934.332994][T15372]        kobj_attr_store+0x58/0x80
[  934.338090][T15372]        sysfs_kf_write+0xf2/0x150
[  934.343174][T15372]        kernfs_fop_write_iter+0x3e0/0x5f0
[  934.348951][T15372]        vfs_write+0x6af/0x1050
[  934.353794][T15372]        ksys_write+0x12a/0x250
[  934.358616][T15372]        do_syscall_64+0x123/0x790
[  934.363703][T15372]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.370098][T15372] 
[  934.370098][T15372] other info that might help us debug this:
[  934.370098][T15372] 
[  934.380311][T15372] Chain exists of:
[  934.380311][T15372]   &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex
[  934.380311][T15372] 
[  934.392713][T15372]  Possible unsafe locking scenario:
[  934.392713][T15372] 
[  934.400146][T15372]        CPU0                    CPU1
[  934.405482][T15372]        ----                    ----
[  934.410816][T15372]   lock(&of->mutex);
[  934.414767][T15372]                                lock(&pipe->mutex);
[  934.421425][T15372]                                lock(&of->mutex);
[  934.427895][T15372]   lock(&sbi->pipe_mutex);
[  934.432367][T15372] 
[  934.432367][T15372]  *** DEADLOCK ***
[  934.432367][T15372] 
[  934.440480][T15372] locks held by syz.4.2635/15372: 4, last CPU#0:
[  934.446786][T15372]  #0: ffff88802bbcf270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  934.455806][T15372]  #1: ffff8880371e2460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  934.464735][T15372]  #2: ffff8880550d7080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  934.474449][T15372]  #3: ffff88801fad0698 (kn->active#70){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  934.484430][T15372] 
[  934.484430][T15372] stack backtrace:
[  934.490307][T15372] CPU: 0 UID: 0 PID: 15372 Comm: syz.4.2635 Not tainted syzkaller #0 PREEMPT(full) 
[  934.499659][T15372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  934.509716][T15372] Call Trace:
[  934.512975][T15372]  <TASK>
[  934.515880][T15372]  dump_stack_lvl+0x100/0x190
[  934.520536][T15372]  print_circular_bug.cold+0x178/0x1be
[  934.525976][T15372]  check_noncircular+0x146/0x160
[  934.530888][T15372]  check_prev_add+0xeb/0xe60
[  934.535459][T15372]  __lock_acquire+0x1528/0x1f40
[  934.540305][T15372]  ? lookup_address+0x108/0x170
[  934.545144][T15372]  lock_acquire+0x1d1/0x380
[  934.549625][T15372]  ? autofs_notify_daemon+0x4f8/0xd90
[  934.554995][T15372]  ? __pfx___might_resched+0x10/0x10
[  934.560271][T15372]  __mutex_lock+0x1a4/0x1bd0
[  934.564843][T15372]  ? autofs_notify_daemon+0x4f8/0xd90
[  934.570196][T15372]  ? autofs_notify_daemon+0x4f8/0xd90
[  934.575545][T15372]  ? __asan_memset+0x23/0x50
[  934.580107][T15372]  ? find_held_lock+0x2b/0x80
[  934.584767][T15372]  ? autofs_notify_daemon+0x4a0/0xd90
[  934.590115][T15372]  ? autofs_notify_daemon+0x4a0/0xd90
[  934.595462][T15372]  ? __pfx___mutex_lock+0x10/0x10
[  934.600465][T15372]  ? __mutex_unlock_slowpath+0x35d/0x930
[  934.606083][T15372]  ? autofs_d_automount+0x490/0x950
[  934.611266][T15372]  ? __traverse_mounts+0x1b9/0x8a0
[  934.616382][T15372]  ? from_kgid_munged+0xab/0x130
[  934.621304][T15372]  ? __pfx_from_kgid_munged+0x10/0x10
[  934.627004][T15372]  ? do_syscall_64+0x123/0x790
[  934.631750][T15372]  ? autofs_notify_daemon+0x4f8/0xd90
[  934.637114][T15372]  autofs_notify_daemon+0x4f8/0xd90
[  934.642326][T15372]  ? __pfx_autofs_notify_daemon+0x10/0x10
[  934.648048][T15372]  ? lockdep_init_map_type+0x5c/0x250
[  934.653402][T15372]  ? lockdep_init_map_type+0x5c/0x250
[  934.658750][T15372]  autofs_wait+0x10fd/0x1b50
[  934.663318][T15372]  ? __pfx_autofs_wait+0x10/0x10
[  934.668231][T15372]  ? find_held_lock+0x2b/0x80
[  934.672896][T15372]  ? path_has_submounts+0xcf/0x120
[  934.677988][T15372]  ? do_raw_spin_unlock+0x145/0x1e0
[  934.683161][T15372]  ? find_held_lock+0x2b/0x80
[  934.687828][T15372]  autofs_mount_wait+0x132/0x3b0
[  934.692741][T15372]  autofs_d_automount+0x490/0x950
[  934.697743][T15372]  __traverse_mounts+0x1b9/0x8a0
[  934.702657][T15372]  step_into_slowpath+0xb7e/0xf90
[  934.707661][T15372]  ? rcu_is_watching+0x13/0xc0
[  934.712402][T15372]  ? __pfx_step_into_slowpath+0x10/0x10
[  934.717929][T15372]  ? lookup_slow+0x5b/0x70
[  934.722349][T15372]  ? lookup_slow+0x5b/0x70
[  934.726751][T15372]  path_lookupat+0x58b/0xc40
[  934.731336][T15372]  filename_lookup+0x202/0x590
[  934.736079][T15372]  ? __pfx_filename_lookup+0x10/0x10
[  934.741342][T15372]  ? do_getname_kernel+0x5d/0x250
[  934.746342][T15372]  ? __asan_memcpy+0x3c/0x60
[  934.750923][T15372]  kern_path+0x37/0x50
[  934.754980][T15372]  lookup_bdev+0xd8/0x2a0
[  934.759293][T15372]  ? __pfx_lookup_bdev+0x10/0x10
[  934.764209][T15372]  ? __asan_memcpy+0x3c/0x60
[  934.768776][T15372]  resume_store+0x1d6/0x460
[  934.773258][T15372]  ? __pfx_resume_store+0x10/0x10
[  934.778259][T15372]  ? lock_acquire+0x1d1/0x380
[  934.782906][T15372]  ? sysfs_file_kobj+0x21/0x290
[  934.787743][T15372]  ? find_held_lock+0x2b/0x80
[  934.792401][T15372]  ? sysfs_file_kobj+0xe4/0x290
[  934.797223][T15372]  ? sysfs_file_kobj+0xe4/0x290
[  934.802046][T15372]  ? __pfx_resume_store+0x10/0x10
[  934.807044][T15372]  kobj_attr_store+0x58/0x80
[  934.811607][T15372]  ? __pfx_kobj_attr_store+0x10/0x10
[  934.816864][T15372]  sysfs_kf_write+0xf2/0x150
[  934.821429][T15372]  kernfs_fop_write_iter+0x3e0/0x5f0
[  934.826685][T15372]  ? __pfx_sysfs_kf_write+0x10/0x10
[  934.831857][T15372]  vfs_write+0x6af/0x1050
[  934.836165][T15372]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  934.841949][T15372]  ? __pfx_vfs_write+0x10/0x10
[  934.846681][T15372]  ? find_held_lock+0x2b/0x80
[  934.851339][T15372]  ksys_write+0x12a/0x250
[  934.855652][T15372]  ? __pfx_ksys_write+0x10/0x10
[  934.860539][T15372]  do_syscall_64+0x123/0x790
[  934.865121][T15372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.870999][T15372] RIP: 0033:0x7fa40b59e159
[  934.875399][T15372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  934.894988][T15372] RSP: 002b:00007fa40c3a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  934.903370][T15372] RAX: ffffffffffffffda RBX: 00007fa40b825fa0 RCX: 00007fa40b59e159
[  934.911321][T15372] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000007
[  934.919264][T15372] RBP: 00007fa40b63506b R08: 0000000000000000 R09: 0000000000000000
[  934.927208][T15372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  934.935151][T15372] R13: 00007fa40b826038 R14: 00007fa40b825fa0 R15: 00007ffcac1a62f8
[  934.943100][T15372]  </TASK>
[  935.104561][T15372] PM: Image not found (code -6)
[  935.124969][ T5705] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  935.272235][ T5705] usb 3-1: Using ep0 maxpacket: 32
[  935.272677][ T5705] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  935.273449][ T5705] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  935.274918][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  935.274941][ T5705] usb 3-1: Product: syz
[  935.274954][ T5705] usb 3-1: Manufacturer: syz
[  935.274967][ T5705] usb 3-1: SerialNumber: syz
[  935.275723][ T5705] usb 3-1: config 0 descriptor??
[  935.276467][T15378] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  935.277765][ T5705] hub 3-1:0.0: bad descriptor, ignoring hub
[  935.277784][ T5705] hub 3-1:0.0: probe with driver hub failed with error -5
[  936.632318][ T1132] raw-gadget.0 gadget.2: failed to queue suspend event
[  936.712022][T15378] raw-gadget.0 gadget.2: failed to queue resume event
[  936.742377][ T1132] raw-gadget.0 gadget.2: failed to queue suspend event
[  936.811975][T15378] raw-gadget.0 gadget.2: failed to queue resume event
[  936.852264][T11462] raw-gadget.0 gadget.2: failed to queue suspend event
[  936.921971][T15378] raw-gadget.0 gadget.2: failed to queue resume event
[  936.942724][ T1132] raw-gadget.0 gadget.2: failed to queue suspend event
[  936.948266][T15378] raw-gadget.0 gadget.2: failed to queue disconnect event
[  936.967397][ T5337] usb 3-1: USB disconnect, device number 24