last executing test programs: 2m53.540173134s ago: executing program 3 (id=1757): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x14b102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000600)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r1, 0x1) sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000800)={&(0x7f0000001a00)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001ac0)}], 0x1, &(0x7f0000001b00)}, 0x0) recvmsg(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/138, 0x584}], 0x1}, 0x0) 2m49.270504926s ago: executing program 3 (id=1764): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000008040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7fffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) io_uring_setup(0x5e28, &(0x7f0000000200)={0x0, 0x350e, 0x1000, 0x0, 0x1d4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000008080)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000080c0)='./file0\x00', &(0x7f0000008100), 0x8, &(0x7f0000008140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000008180)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000081c0)='./file1\x00', 0x0) unlink(&(0x7f0000008200)='./file1\x00') mount$fuse(0x0, &(0x7f0000008240)='./file0\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000008280)='./file1\x00', 0x0) getdents64(r4, &(0x7f00000082c0)=""/50, 0x32) 2m47.851391164s ago: executing program 3 (id=1766): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x76, &(0x7f0000001e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000403afffe8000000000000000000000000000bbff0200"/50], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000001480)=0x50078, 0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000021c0)={{}, r2, 0x4, @inherit={0x68, &(0x7f00000031c0)=ANY=[]}, @name="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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x24044080) sendmsg$key(0xffffffffffffffff, &(0x7f00000017c0)={0x3, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x2, 0x6, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007", @ANYRESOCT=r0], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m47.392308491s ago: executing program 3 (id=1769): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000500)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r4 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0xfe, 0x7fff0007}]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000800)) 2m46.220130534s ago: executing program 3 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000c00)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x7) sched_rr_get_interval(r2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000dc0)=0x6) ptrace(0x10, 0x1) r5 = syz_open_dev$sndpcmc(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e40)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x16, 0x0, &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000f80), 0x8}, 0x94) mkdirat(r6, &(0x7f0000001300)='./sys/module/usbcore/parameters/quirks\x00', 0x140) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000d40)={0x100, 0x3, 0x8, 0x0, 0x2, 0x7, 0x9, 0x6, 0x1}, &(0x7f0000000d80)=0x20) mount(0x0, &(0x7f0000000fc0)='./sys\x00', &(0x7f0000001000)='sysfs\x00', 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000001040)='./sys/module/usbcore/parameters/quirks\x00', &(0x7f0000001080)={0x200, 0x168, 0x10}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, 0x48) 2m44.953124994s ago: executing program 3 (id=1774): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x800001d, 0x0) r0 = syz_open_dev$video(&(0x7f00000008c0), 0x8, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x180, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x301) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000003c0)=0x3fa, 0x4) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000240)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f0000000180)={0xa37, 0x30000, 0xffffffff, 0x2, 0x2, 0x1, 0x40, 0x8, 0x1, 0xfffffe00, 0xffffffff, 0x10, &(0x7f0000000040)=[0x8000, 0x5, 0xab, 0xa7, 0x3, 0xfffffff7, 0x2, 0x5396bcfb, 0x6, 0xe4], 0xa, &(0x7f0000000080)="7534a7a9554c9d4f0ccb8c9addd0c7bf8f5c58ba3c94cb4c5db7d678da7732d325a38fa13f850bc17e16248425c65a32aea44e2f7e7592239a06082de2c082735df62de96387f7183fba748616d5894836f035886cb2ba13ab0d925392ad0e3df34999eb7ef3f848c0021d10d8048ae380a1dfc3a6c960652e14b3957956c9b2f9295779e8acef1d82e4da41d69c4ef50b1ae0dd25c3a638bcc051b6c50d69752b1535927c83046f897e0add316f902d1c717c6b9393200293ddac9761c5d3c2ab2971da7cf0114259d1664b804e18a0d55eebd85c7392bdbbd891987d265d7d6a130f0145cfaa8f87622cc311ddc5d76637eb079b", 0xf5}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000900)={0x1, 0x102, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 2m29.736211748s ago: executing program 32 (id=1774): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x800001d, 0x0) r0 = syz_open_dev$video(&(0x7f00000008c0), 0x8, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x180, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x301) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000003c0)=0x3fa, 0x4) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000240)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f0000000180)={0xa37, 0x30000, 0xffffffff, 0x2, 0x2, 0x1, 0x40, 0x8, 0x1, 0xfffffe00, 0xffffffff, 0x10, &(0x7f0000000040)=[0x8000, 0x5, 0xab, 0xa7, 0x3, 0xfffffff7, 0x2, 0x5396bcfb, 0x6, 0xe4], 0xa, &(0x7f0000000080)="7534a7a9554c9d4f0ccb8c9addd0c7bf8f5c58ba3c94cb4c5db7d678da7732d325a38fa13f850bc17e16248425c65a32aea44e2f7e7592239a06082de2c082735df62de96387f7183fba748616d5894836f035886cb2ba13ab0d925392ad0e3df34999eb7ef3f848c0021d10d8048ae380a1dfc3a6c960652e14b3957956c9b2f9295779e8acef1d82e4da41d69c4ef50b1ae0dd25c3a638bcc051b6c50d69752b1535927c83046f897e0add316f902d1c717c6b9393200293ddac9761c5d3c2ab2971da7cf0114259d1664b804e18a0d55eebd85c7392bdbbd891987d265d7d6a130f0145cfaa8f87622cc311ddc5d76637eb079b", 0xf5}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000900)={0x1, 0x102, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 12.897423974s ago: executing program 1 (id=2172): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x148282, 0x0) write(r0, &(0x7f0000000500)="6e616d65207e20221d222626dc", 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) syz_emit_vhci(0x0, 0x9) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f00000006c0)='\x00', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000740)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0xfd, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x6, 0x2}, 0xe) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/142, 0x8e}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffe00}], 0x2, 0x140, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000440)={0xf400, 0x1000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000280)) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x0, 0x40002) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f0000000540)) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f00000005c0)={0x0, {0x0, 0x0, @qam}}) 11.351983297s ago: executing program 5 (id=2175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019500)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000019540)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000019580)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000195c0)=@filename='mtd0\x00', &(0x7f0000019600)='./file0\x00', &(0x7f0000019640)='jffs2\x00', 0x800000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) 9.558179126s ago: executing program 5 (id=2177): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x0, &(0x7f00000004c0)}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = socket$inet6(0xa, 0x1, 0x0) listen(r1, 0xb) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000540)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000c40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000740)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x20, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x145}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xfffff7ff}}], 0x1, 0x0, 0x0) 9.544826329s ago: executing program 1 (id=2178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.459197861s ago: executing program 4 (id=2179): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000003580)={0x100000000000000}, &(0x7f0000003740)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe5, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c82900100000001e00", "00000000030000000010e809", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000004c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x5, 0x405}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') read$FUSE(r6, 0x0, 0x0) 7.894341175s ago: executing program 1 (id=2181): setsockopt(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)="060000007f00000100500000000000006d6800"/44, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)="060000007f00000100500000000000006d6800"/44, 0x2c) 7.849670545s ago: executing program 0 (id=2182): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000600)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r1, 0x1) sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000800)={&(0x7f0000001a00)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001ac0)}], 0x1, &(0x7f0000001b00)}, 0x0) recvmsg(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/138, 0x584}], 0x1}, 0x0) 7.826622509s ago: executing program 4 (id=2183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 7.116248505s ago: executing program 1 (id=2184): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_getaffinity(r0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002380)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', 0x0, 0x2d) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.342164689s ago: executing program 5 (id=2185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x12, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 5.696636014s ago: executing program 5 (id=2187): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) socket(0x10, 0x3, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 5.67563608s ago: executing program 4 (id=2188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019500)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000019540)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000019580)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000195c0)=@filename='mtd0\x00', &(0x7f0000019600)='./file0\x00', &(0x7f0000019640)='jffs2\x00', 0x800000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) 5.393399287s ago: executing program 0 (id=2189): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc6}]}, 0x4c}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x4000090) 4.457471175s ago: executing program 4 (id=2190): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x86c0, 0x101) fanotify_init(0xf00, 0x0) symlinkat(&(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00') r3 = fanotify_init(0x4, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0x0, 0x124) fanotify_mark(r3, 0x441, 0x800003b, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file1/file2\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0/file2\x00', 0x200000000000000) 4.333669844s ago: executing program 2 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) close(0x3) 4.144357169s ago: executing program 2 (id=2192): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = socket$inet6(0xa, 0x1, 0x0) listen(r1, 0xb) r2 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000c40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000740)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x20, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x145}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xfffff7ff}}], 0x1, 0x0, 0x0) 3.989232735s ago: executing program 2 (id=2193): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffec4, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) capset(0x0, &(0x7f00000003c0)={0x200000, 0x200000}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x18e) close(r3) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 3.295948221s ago: executing program 0 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000008040)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7fffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) io_uring_setup(0x5e28, &(0x7f0000000200)={0x0, 0x350e, 0x1000, 0x0, 0x1d4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000008080)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000080c0)='./file0\x00', &(0x7f0000008100), 0x8, &(0x7f0000008140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000008180)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000081c0)='./file1\x00', 0x0) unlink(&(0x7f0000008200)='./file1\x00') mount$fuse(0x0, &(0x7f0000008240)='./file0\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000008280)='./file1\x00', 0x0) getdents64(r4, &(0x7f00000082c0)=""/50, 0x32) 3.054319481s ago: executing program 2 (id=2195): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040021) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c00000000000700000100"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c001a8018000580140006bd9cdac1c3225c05124c5b311de62d0758cec002d7926ea13667ec4afca96074df3e256f580c7014e0d4cb140008074f314293c7e9c2430000eb1edad84af6004a4be7922e201207da24dd5071f3d2fe7e58750191163fb3a03ee992444f60187edfb33cfb25e018bce12688cb0d38aa7bff452f2bcea1075a6da43a7a3057250a1828b27612e48727055de7"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40080c0) r3 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r4 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000680)={0x0, &(0x7f00000006c0)}) sched_setscheduler(r4, 0x2, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000840), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) poll(&(0x7f00000005c0)=[{r6, 0x1021}, {r0, 0xc292}, {r1, 0x2142}, {r5, 0x200}, {r3, 0x680}, {0xffffffffffffffff, 0x1000}, {r5, 0x24c}, {r6, 0x20}], 0x8, 0x1000005) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000900)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 2.002334152s ago: executing program 0 (id=2196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000840)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000062) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000008c0)=@file={0x0, './cfg\x00'}, 0x61) sendmmsg$unix(r4, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000980), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x4, &(0x7f0000000e40)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001000)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./cfg\x00', &(0x7f0000000a80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000ffffffff0000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f6164003400028008000440000000000800054000000000082b45224f88dfe07b00024000000002080006400000000208000740000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x9c}}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@iptfs_pkt_size={0x8, 0x29, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40844}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xc, &(0x7f0000000140)=""/12, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.984370453s ago: executing program 5 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x12, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 1.881306085s ago: executing program 2 (id=2198): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x0, &(0x7f00000004c0)}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = socket$inet6(0xa, 0x1, 0x0) listen(r1, 0xb) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000540)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000c40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000740)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x20, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x145}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xfffff7ff}}], 0x1, 0x0, 0x0) 1.880243853s ago: executing program 4 (id=2199): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffec4, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x18e) close(r3) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 1.134741175s ago: executing program 1 (id=2200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000700)=@filename='./dev\x00', &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000880)='/dev/comedi4\x00', 0x20300, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000008c0)={0x4000000, 0xff92, 0x0, 0x0, 0x2}) 835.074926ms ago: executing program 0 (id=2201): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/thread-self/fail-nth\x00', 0x2, 0x162) write(r0, &(0x7f0000000d40)='27', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 250.267379ms ago: executing program 5 (id=2202): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000c00)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000c40)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000c80)={0xe9af, 0x481, 0x0, 0xfffffffe, 0x19, "e31500000000000000000000000100"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000001c40)={0x2020}, 0x2020) read$watch_queue(r2, 0x0, 0x0) 151.556267ms ago: executing program 4 (id=2203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 97.051294ms ago: executing program 2 (id=2204): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000001ac0)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000001b00)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) 32.291954ms ago: executing program 0 (id=2205): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0xba, &(0x7f0000000540)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000800)=0x2) recvmmsg(r1, &(0x7f0000000840), 0x10106, 0x2, 0x0) getrlimit(0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write(r3, &(0x7f0000000200)="0600000003001400", 0x8) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r4 = openat$nvram(0xffffff9c, 0x0, 0x4441, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x40801) ioctl$BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000f40)={'\x00', 0x8, 0x6f14, 0x6, 0x2, 0x11c3adec}) ioctl$BLKTRACESTART(r5, 0x1276, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000f80), &(0x7f0000000fc0)=ANY=[], 0x0, 0x0) 0s ago: executing program 1 (id=2206): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000008040)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7fffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) io_uring_setup(0x5e28, &(0x7f0000000200)={0x0, 0x350e, 0x1000, 0x0, 0x1d4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000008080)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000080c0)='./file0\x00', &(0x7f0000008100), 0x8, &(0x7f0000008140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000008180)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000081c0)='./file1\x00', 0x0) unlink(&(0x7f0000008200)='./file1\x00') mount$fuse(0x0, &(0x7f0000008240)='./file0\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000008280)='./file1\x00', 0x0) getdents64(r4, &(0x7f00000082c0)=""/50, 0x32) kernel console output (not intermixed with test programs): 'TerraTec NOXON DAB Stick' in warm state [ 407.408199][T10339] i2c i2c-0: delete_device: Extra parameters [ 407.993780][ T5736] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 408.618527][T10361] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1366'. [ 409.036890][ T11] usb 2-1: USB disconnect, device number 34 [ 411.548864][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 411.710532][ T10] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 411.719288][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.719310][ T10] usb 1-1: Product: syz [ 411.719323][ T10] usb 1-1: Manufacturer: syz [ 411.719335][ T10] usb 1-1: SerialNumber: syz [ 411.729323][ T10] usb 1-1: config 0 descriptor?? [ 412.779900][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 413.623977][T10433] syz.2.1391 (10433): drop_caches: 2 [ 414.572937][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 415.657722][ T25] usb 1-1: USB disconnect, device number 15 [ 415.855137][ T31] audit: type=1400 audit(1794231829.932:671): avc: denied { sqpoll } for pid=10454 comm="syz.1.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 416.779038][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 416.939613][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 416.947635][ T25] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.966795][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 416.966842][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.966862][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.966883][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.966905][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.966940][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.338490][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1398'. [ 417.340475][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 417.342705][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 418.256154][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 418.256180][ T25] usbtmc 4-1:16.0: can't read capabilities [ 418.928030][ T5827] usb 4-1: USB disconnect, device number 21 [ 419.114366][T10483] FAULT_INJECTION: forcing a failure. [ 419.114366][T10483] name failslab, interval 1, probability 0, space 0, times 0 [ 419.114399][T10483] CPU: 1 UID: 0 PID: 10483 Comm: syz.1.1403 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.114428][T10483] Tainted: [L]=SOFTLOCKUP [ 419.114434][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 419.114444][T10483] Call Trace: [ 419.114453][T10483] [ 419.114461][T10483] dump_stack_lvl+0x100/0x190 [ 419.114497][T10483] should_fail_ex.cold+0x5/0xa [ 419.114526][T10483] should_failslab+0xc2/0x120 [ 419.114550][T10483] __kmalloc_noprof+0xfc/0x840 [ 419.114580][T10483] ? init_skcipher_req.constprop.0+0x9c/0x180 [ 419.114611][T10483] init_skcipher_req.constprop.0+0x9c/0x180 [ 419.114633][T10483] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 419.114662][T10483] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 419.114689][T10483] ? kasan_quarantine_put+0x104/0x240 [ 419.114708][T10483] ? lockdep_hardirqs_on+0x7d/0x110 [ 419.114734][T10483] ? __kasan_check_byte+0x13/0x50 [ 419.114761][T10483] ? get_derived_key+0x11b/0x140 [ 419.114788][T10483] encrypted_read+0x389/0x850 [ 419.114816][T10483] ? lock_acquire+0x1d1/0x380 [ 419.114841][T10483] ? __keyctl_read_key+0x22/0xe0 [ 419.114864][T10483] ? __pfx_encrypted_read+0x10/0x10 [ 419.114888][T10483] ? __pfx___might_resched+0x10/0x10 [ 419.114918][T10483] ? down_read+0x136/0x4c0 [ 419.114942][T10483] ? trace_kmalloc+0xeb/0x110 [ 419.114963][T10483] ? __pfx_down_read+0x10/0x10 [ 419.114986][T10483] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 419.115006][T10483] ? __pfx_encrypted_read+0x10/0x10 [ 419.115031][T10483] __keyctl_read_key+0x9d/0xe0 [ 419.115055][T10483] keyctl_read_key+0x1cb/0x360 [ 419.115083][T10483] __do_sys_keyctl+0x36d/0x5a0 [ 419.115110][T10483] do_syscall_64+0x123/0x7b0 [ 419.115136][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.115157][T10483] RIP: 0033:0x7f936bb9fb19 [ 419.115174][T10483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.115191][T10483] RSP: 002b:00007f936c97e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 419.115210][T10483] RAX: ffffffffffffffda RBX: 00007f936be25fa0 RCX: 00007f936bb9fb19 [ 419.115220][T10483] RDX: 0000200000000240 RSI: 000000001e2b9162 RDI: 000000000000000b [ 419.115231][T10483] RBP: 00007f936bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 419.115242][T10483] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 419.115252][T10483] R13: 00007f936be26038 R14: 00007f936be25fa0 R15: 00007ffdd03fa628 [ 419.115278][T10483] [ 419.122335][T10483] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 419.505760][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 420.018993][T10494] syzkaller0: entered promiscuous mode [ 420.019016][T10494] syzkaller0: entered allmulticast mode [ 420.040787][T10494] tipc: Started in network mode [ 420.040827][T10494] tipc: Node identity 2e585b643cb8, cluster identity 4711 [ 420.049217][T10494] tipc: Enabled bearer , priority 0 [ 420.066554][T10493] tipc: Resetting bearer [ 420.104508][T10493] tipc: Disabling bearer [ 420.137862][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'. [ 420.790541][ T31] audit: type=1400 audit(1794231834.872:672): avc: denied { create } for pid=10506 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 420.795374][ T31] audit: type=1400 audit(1794231834.872:673): avc: denied { module_request } for pid=10506 comm="syz.4.1410" kmod="net-pf-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 421.998158][T10520] FAULT_INJECTION: forcing a failure. [ 421.998158][T10520] name failslab, interval 1, probability 0, space 0, times 0 [ 421.998190][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.2.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.998216][T10520] Tainted: [L]=SOFTLOCKUP [ 421.998223][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 421.998234][T10520] Call Trace: [ 421.998241][T10520] [ 421.998249][T10520] dump_stack_lvl+0x100/0x190 [ 421.998284][T10520] should_fail_ex.cold+0x5/0xa [ 421.998316][T10520] should_failslab+0xc2/0x120 [ 421.998340][T10520] __kmalloc_noprof+0xfc/0x840 [ 421.998369][T10520] ? get_derived_key+0x3b/0x140 [ 421.998395][T10520] get_derived_key+0x3b/0x140 [ 421.998421][T10520] encrypted_read+0x283/0x850 [ 421.998446][T10520] ? lock_acquire+0x1d1/0x380 [ 421.998471][T10520] ? __keyctl_read_key+0x22/0xe0 [ 421.998494][T10520] ? __pfx_encrypted_read+0x10/0x10 [ 421.998518][T10520] ? __pfx___might_resched+0x10/0x10 [ 421.998548][T10520] ? down_read+0x136/0x4c0 [ 421.998571][T10520] ? trace_kmalloc+0xeb/0x110 [ 421.998591][T10520] ? __pfx_down_read+0x10/0x10 [ 421.998616][T10520] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 421.998636][T10520] ? __pfx_encrypted_read+0x10/0x10 [ 421.998660][T10520] __keyctl_read_key+0x9d/0xe0 [ 421.998692][T10520] keyctl_read_key+0x1cb/0x360 [ 421.998718][T10520] __do_sys_keyctl+0x36d/0x5a0 [ 421.998743][T10520] do_syscall_64+0x123/0x7b0 [ 421.998764][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.998783][T10520] RIP: 0033:0x7f53a1f9fb19 [ 421.998797][T10520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.998813][T10520] RSP: 002b:00007f53a2e70028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 421.998832][T10520] RAX: ffffffffffffffda RBX: 00007f53a2225fa0 RCX: 00007f53a1f9fb19 [ 421.998843][T10520] RDX: 0000200000000240 RSI: 0000000020271dbc RDI: 000000000000000b [ 421.998853][T10520] RBP: 00007f53a2037b70 R08: 0000000000000000 R09: 0000000000000000 [ 421.998863][T10520] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 421.998873][T10520] R13: 00007f53a2226038 R14: 00007f53a2225fa0 R15: 00007ffc10cb9fd8 [ 421.998900][T10520] [ 422.061165][ T31] audit: type=1400 audit(1794231836.142:674): avc: denied { write } for pid=10521 comm="syz.4.1413" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 422.930308][ T31] audit: type=1400 audit(1794231836.792:675): avc: denied { write } for pid=10523 comm="syz.2.1416" name="c.1" dev="configfs" ino=17767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 422.930359][ T31] audit: type=1400 audit(1794231836.792:676): avc: denied { write } for pid=10523 comm="syz.2.1416" name="c.1" dev="configfs" ino=17767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 423.520123][T10545] dummy0 speed is unknown, defaulting to 1000 [ 423.521684][T10545] dummy0 speed is unknown, defaulting to 1000 [ 423.534947][T10545] dummy0 speed is unknown, defaulting to 1000 [ 423.542759][T10545] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 423.542806][T10545] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 423.542871][T10545] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 423.871244][T10545] dummy0 speed is unknown, defaulting to 1000 [ 423.889373][T10545] dummy0 speed is unknown, defaulting to 1000 [ 423.938576][T10545] dummy0 speed is unknown, defaulting to 1000 [ 423.952864][T10545] dummy0 speed is unknown, defaulting to 1000 [ 423.960984][T10545] dummy0 speed is unknown, defaulting to 1000 [ 424.176549][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 425.891977][T10566] FAULT_INJECTION: forcing a failure. [ 425.891977][T10566] name failslab, interval 1, probability 0, space 0, times 0 [ 425.892008][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.2.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.892037][T10566] Tainted: [L]=SOFTLOCKUP [ 425.892044][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 425.892055][T10566] Call Trace: [ 425.892062][T10566] [ 425.892070][T10566] dump_stack_lvl+0x100/0x190 [ 425.892106][T10566] should_fail_ex.cold+0x5/0xa [ 425.892133][T10566] should_failslab+0xc2/0x120 [ 425.892154][T10566] __kmalloc_noprof+0xfc/0x840 [ 425.892184][T10566] ? get_derived_key+0x3b/0x140 [ 425.892212][T10566] get_derived_key+0x3b/0x140 [ 425.892239][T10566] encrypted_read+0x283/0x850 [ 425.892265][T10566] ? lock_acquire+0x1d1/0x380 [ 425.892288][T10566] ? __keyctl_read_key+0x22/0xe0 [ 425.892307][T10566] ? __pfx_encrypted_read+0x10/0x10 [ 425.892328][T10566] ? __pfx___might_resched+0x10/0x10 [ 425.892355][T10566] ? down_read+0x136/0x4c0 [ 425.892377][T10566] ? trace_kmalloc+0xeb/0x110 [ 425.892395][T10566] ? __pfx_down_read+0x10/0x10 [ 425.892416][T10566] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 425.892435][T10566] ? __pfx_encrypted_read+0x10/0x10 [ 425.892458][T10566] __keyctl_read_key+0x9d/0xe0 [ 425.892480][T10566] keyctl_read_key+0x1cb/0x360 [ 425.892506][T10566] __do_sys_keyctl+0x36d/0x5a0 [ 425.892533][T10566] do_syscall_64+0x123/0x7b0 [ 425.892556][T10566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.892575][T10566] RIP: 0033:0x7f53a1f9fb19 [ 425.892591][T10566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.892607][T10566] RSP: 002b:00007f53a2e70028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 425.892625][T10566] RAX: ffffffffffffffda RBX: 00007f53a2225fa0 RCX: 00007f53a1f9fb19 [ 425.892644][T10566] RDX: 0000200000000240 RSI: 0000000009f21203 RDI: 000000000000000b [ 425.892654][T10566] RBP: 00007f53a2037b70 R08: 0000000000000000 R09: 0000000000000000 [ 425.892664][T10566] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 425.892675][T10566] R13: 00007f53a2226038 R14: 00007f53a2225fa0 R15: 00007ffc10cb9fd8 [ 425.892702][T10566] [ 427.349574][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 427.422867][ T31] audit: type=1400 audit(1794231841.502:677): avc: denied { append } for pid=10597 comm="syz.1.1436" name="uprobe_events" dev="tracefs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 427.598872][T10598] event trace: Could not enable event p [ 427.698418][T10611] 9pnet_fd: p9_fd_create_tcp (10611): problem connecting socket to 127.0.0.1 [ 428.885532][T10631] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 428.911248][T10631] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 428.911645][T10631] overlayfs: failed to look up (tracing) for ino (-66) [ 430.140156][T10651] Bluetooth: MGMT ver 1.23 [ 433.089018][ T5736] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 433.240255][ T5736] usb 5-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 433.242688][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 433.242725][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 433.242753][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 433.242830][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 433.329169][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.329204][ T5736] usb 5-1: Product: syz [ 433.329240][ T5736] usb 5-1: Manufacturer: syz [ 433.329272][ T5736] usb 5-1: SerialNumber: syz [ 433.426532][ T5736] usb 5-1: config 0 descriptor?? [ 433.700700][ T5736] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 433.895326][ T31] audit: type=1400 audit(1794231847.972:678): avc: denied { read } for pid=10692 comm="syz.1.1469" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 433.897153][ T31] audit: type=1400 audit(1794231847.972:679): avc: denied { open } for pid=10692 comm="syz.1.1469" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.089436][T10683] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 434.105678][ T25] usb 5-1: USB disconnect, device number 21 [ 434.654032][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.654113][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.566115][T10710] syzkaller0: entered promiscuous mode [ 435.566136][T10710] syzkaller0: entered allmulticast mode [ 440.617417][ T31] audit: type=1400 audit(1794231854.692:680): avc: denied { name_connect } for pid=10782 comm="syz.4.1494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 442.033217][T10808] fuse: Bad value for 'user_id' [ 442.033237][T10808] fuse: Bad value for 'user_id' [ 444.010734][T10828] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1505'. [ 444.860200][T10853] fuse: Bad value for 'fd' [ 446.888787][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 446.959672][ T31] audit: type=1326 audit(1794231861.032:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 446.959724][ T31] audit: type=1326 audit(1794231861.032:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 446.959764][ T31] audit: type=1326 audit(1794231861.032:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 446.959804][ T31] audit: type=1326 audit(1794231861.032:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 446.959842][ T31] audit: type=1326 audit(1794231861.032:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 446.959881][ T31] audit: type=1326 audit(1794231861.032:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ffb56034e code=0x7ffc0000 [ 447.024064][ T31] audit: type=1326 audit(1794231861.102:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 447.024112][ T31] audit: type=1326 audit(1794231861.102:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 447.024145][ T31] audit: type=1326 audit(1794231861.102:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 447.024176][ T31] audit: type=1326 audit(1794231861.102:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.3.1524" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ffb59fb19 code=0x7ffc0000 [ 447.131337][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 447.259810][ T25] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 447.291531][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.291608][ T25] usb 3-1: config 0 has no interfaces? [ 447.291728][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.369077][ T25] usb 3-1: config 0 descriptor?? [ 447.907821][T10898] fuse: Bad value for 'fd' [ 448.927507][T10920] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.290011][T10932] i2c i2c-0: delete_device: Extra parameters [ 449.647579][T10920] dummy0 speed is unknown, defaulting to 1000 [ 449.733493][ T5745] usb 3-1: USB disconnect, device number 23 [ 450.004649][T10942] fuse: Bad value for 'fd' [ 451.563957][T10956] syz.0.1543 (10956): drop_caches: 2 [ 453.522990][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1548'. [ 454.038959][ T5831] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 454.190829][ T5831] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 454.193766][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.193842][ T5831] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.194000][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.062270][T10987] kvm: pic: non byte write [ 456.148833][ T5745] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 456.329708][ T5745] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 456.330580][ T5745] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 456.330608][ T5745] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 456.330641][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.339178][T10985] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 456.354615][ T5745] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 457.062406][ T5745] usb 1-1: USB disconnect, device number 16 [ 458.472862][ T5736] usb 2-1: USB disconnect, device number 35 [ 460.522818][T11022] syzkaller0: entered promiscuous mode [ 460.522841][T11022] syzkaller0: entered allmulticast mode [ 460.649488][T11025] syzkaller0: entered promiscuous mode [ 460.649512][T11025] syzkaller0: entered allmulticast mode [ 461.036669][T11039] fuse: Bad value for 'fd' [ 461.528760][ T5827] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 461.604398][T11056] syzkaller0: entered promiscuous mode [ 461.604431][T11056] syzkaller0: entered allmulticast mode [ 461.683978][ T5827] usb 3-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.685800][ T5827] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.685838][ T5827] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.685889][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.735112][T11048] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 461.779158][ T5827] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.060394][T11068] syz.0.1576 (11068): drop_caches: 2 [ 464.105614][T11080] fuse: Bad value for 'fd' [ 465.340231][ T5831] usb 3-1: USB disconnect, device number 24 [ 465.871433][T11097] syz.1.1586 (11097): drop_caches: 2 [ 465.887548][T11097] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 465.903037][ T7984] IPVS: starting estimator thread 0... [ 466.029105][T11107] IPVS: using max 77 ests per chain, 184800 per kthread [ 466.245691][T11111] syz.4.1591 (11111): drop_caches: 2 [ 469.832481][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 469.832529][ T31] audit: type=1400 audit(1794231883.902:702): avc: denied { append } for pid=11135 comm="syz.0.1598" name="sda" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.030406][T11141] bridge0: port 3(syz_tun) entered blocking state [ 470.059851][T11141] bridge0: port 3(syz_tun) entered disabled state [ 470.153265][T11141] syz_tun: entered allmulticast mode [ 470.555589][T11141] syz_tun: entered promiscuous mode [ 470.588684][T11141] bridge0: port 3(syz_tun) entered blocking state [ 470.588848][T11141] bridge0: port 3(syz_tun) entered forwarding state [ 470.816462][T11144] bridge0: port 4(ip6gretap0) entered blocking state [ 470.816582][T11144] bridge0: port 4(ip6gretap0) entered disabled state [ 470.816705][T11144] ip6gretap0: entered allmulticast mode [ 470.818023][T11144] ip6gretap0: entered promiscuous mode [ 470.818560][T11144] bridge0: port 4(ip6gretap0) entered blocking state [ 470.818638][T11144] bridge0: port 4(ip6gretap0) entered forwarding state [ 471.308742][ T5831] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 471.522921][ T31] audit: type=1800 audit(1794231885.492:703): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1604" name=08 dev="sda1" ino=2049 res=0 errno=-22 [ 472.069523][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 472.144174][ T5831] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 472.157593][ T5831] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 472.157623][ T5831] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.157634][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.157647][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 472.157658][ T5831] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.157679][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.698502][ T5831] usb 1-1: usb_control_msg returned -32 [ 472.698529][ T5831] usbtmc 1-1:16.0: can't read capabilities [ 473.760491][T11151] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 473.762300][ T5736] usb 1-1: USB disconnect, device number 17 [ 474.269050][ T5736] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 474.399454][T11181] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 474.419549][ T5736] usb 4-1: Using ep0 maxpacket: 8 [ 474.419967][ T5736] usb 4-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 474.434913][ T5736] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.434943][ T5736] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.434966][ T5736] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.434989][ T5736] usb 4-1: config 0 interface 0 has no altsetting 0 [ 474.435019][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.490010][ T5736] usb 4-1: config 0 descriptor?? [ 474.801285][ T1162] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 474.974623][ T5736] input: HID 046d:c623 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C623.000A/input/input29 [ 475.161821][T11181] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 475.235446][ T5736] logitech 0003:046D:C623.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 475.255592][ T5736] usb 4-1: USB disconnect, device number 22 [ 475.477010][T11198] fido_id[11198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 475.879816][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 476.225125][ T31] audit: type=1800 audit(1794231890.212:704): pid=11215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1623" name=08 dev="sda1" ino=2049 res=0 errno=-22 [ 476.646656][ T25] usb 1-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 476.648056][ T25] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.677538][ T25] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.701057][ T5633] Bluetooth: hci4: unexpected subevent 0x1a length: 12 > 6 [ 476.713545][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.713574][ T25] usb 1-1: Product: syz [ 476.713588][ T25] usb 1-1: Manufacturer: syz [ 476.713602][ T25] usb 1-1: SerialNumber: syz [ 476.786558][ T25] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 476.814380][ T25] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 476.890095][ T25] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 477.828848][T11229] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 477.916497][T11227] syz.1.1624 (11227): drop_caches: 2 [ 478.338994][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 478.499635][ T25] usb 5-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 478.500618][ T25] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 478.500633][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.500644][ T25] usb 5-1: config 0 has no interface number 0 [ 478.500670][ T25] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 478.500695][ T25] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 478.500709][ T25] usb 5-1: config 0 interface 106 has no altsetting 0 [ 478.500725][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.502173][ T25] usb 5-1: config 0 descriptor?? [ 478.607429][ T25] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 478.871771][ T31] audit: type=1400 audit(1794231892.952:705): avc: denied { append } for pid=11230 comm="syz.4.1628" name="pfkey" dev="proc" ino=4026533318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 479.716669][ T4031] usb 5-1: Failed to submit usb control message: -110 [ 479.716702][ T4031] usb 5-1: unable to send the bmi data to the device: -110 [ 479.716717][ T4031] usb 5-1: unable to get target info from device [ 479.716729][ T4031] usb 5-1: could not get target info (-110) [ 479.716743][ T4031] usb 5-1: could not probe fw (-110) [ 480.560079][T11199] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 480.563310][T11199] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 480.567187][ T10] usb 1-1: USB disconnect, device number 18 [ 480.604387][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 480.622345][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 480.624389][ T10] ti_usb_3410_5052 1-1:2.0: device disconnected [ 480.678938][ T5831] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 480.780283][ T31] audit: type=1400 audit(1794231894.862:706): avc: denied { bind } for pid=11263 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 480.800553][ T31] audit: type=1400 audit(1794231894.892:707): avc: denied { listen } for pid=11263 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 480.840007][ T5831] usb 4-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 480.865031][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.865057][ T5831] usb 4-1: Product: syz [ 480.865070][ T5831] usb 4-1: Manufacturer: syz [ 480.865083][ T5831] usb 4-1: SerialNumber: syz [ 480.882404][ T5831] usb 4-1: config 0 descriptor?? [ 481.103822][ T5831] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 023 [ 481.256557][ T5736] usb 5-1: USB disconnect, device number 22 [ 482.030629][ T5736] usb 4-1: USB disconnect, device number 23 [ 486.828750][ T5831] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 487.000165][ T5831] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 487.002981][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.003004][ T5831] usb 3-1: Product: syz [ 487.003012][ T5831] usb 3-1: Manufacturer: syz [ 487.003019][ T5831] usb 3-1: SerialNumber: syz [ 487.005520][ T5831] usb 3-1: config 0 descriptor?? [ 487.256572][ T5831] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.717180][ T5831] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 488.730014][ T5831] usb 3-1: USB disconnect, device number 25 [ 489.295343][T11281] Set syz1 is full, maxelem 65536 reached [ 491.539970][ T31] audit: type=1400 audit(1794231905.622:708): avc: denied { read write } for pid=11372 comm="syz.0.1674" name="mouse0" dev="devtmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 491.540233][ T31] audit: type=1400 audit(1794231905.622:709): avc: denied { open } for pid=11372 comm="syz.0.1674" path="/dev/input/mouse0" dev="devtmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 492.068743][ T5831] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 492.219465][ T5831] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 492.220346][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 492.220367][ T5831] usb 1-1: config 0 has no interface number 0 [ 492.220400][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 492.220423][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 492.220457][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.277418][ T5831] usb 1-1: config 0 descriptor?? [ 492.278044][T11378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.296309][ T5831] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 492.939513][ T5736] usb 1-1: USB disconnect, device number 19 [ 493.590954][ T5827] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 493.759295][T11394] netlink: 'syz.2.1680': attribute type 4 has an invalid length. [ 493.765627][T11394] netlink: 'syz.2.1680': attribute type 4 has an invalid length. [ 494.208736][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 494.209464][ T5827] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 494.290479][ T5827] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.290541][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.570757][ T5827] usb 5-1: config 0 descriptor?? [ 495.188283][T11407] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5620] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11407] [ 496.490661][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.490714][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.920356][ T5736] usb 5-1: USB disconnect, device number 23 [ 498.224813][ T31] audit: type=1804 audit(1794231912.302:710): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1692" name="bus" dev="ramfs" ino=31889 res=1 errno=0 [ 498.269133][ T31] audit: type=1804 audit(1794231912.342:711): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1692" name="bus" dev="ramfs" ino=31889 res=1 errno=0 [ 499.176336][T11440] netlink: 'syz.2.1694': attribute type 4 has an invalid length. [ 499.196122][T11440] netlink: 'syz.2.1694': attribute type 4 has an invalid length. [ 499.787682][T11438] nvme_fabrics: unknown parameter or missing value 'reconnect_delay=' in ctrl creation request [ 500.338749][ T5745] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 500.491828][ T5745] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 500.515123][ T5745] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.515317][ T5745] usb 3-1: config 0 has no interface number 0 [ 500.515874][ T5745] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 500.515983][ T5745] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 500.516619][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.615240][ T5745] usb 3-1: config 0 descriptor?? [ 500.626299][T11443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 500.663563][ T5745] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 502.153016][ T5831] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 502.153265][T11470] fuse: Unknown parameter 'user_i00000000000000000000' [ 502.310894][ T5831] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 502.314341][ T5831] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.314362][ T5831] usb 2-1: config 0 has no interface number 0 [ 502.314381][ T5831] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 502.314404][ T5831] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 502.314438][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.327290][ T5831] usb 2-1: config 0 descriptor?? [ 502.327893][T11460] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 502.346134][ T5831] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 502.508814][ T5827] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 502.772059][ T5827] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 502.774938][ T5827] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.774964][ T5827] usb 4-1: config 0 has no interface number 0 [ 502.774998][ T5827] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 502.775021][ T5827] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 502.775054][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.797912][ T5827] usb 4-1: config 0 descriptor?? [ 502.799600][T11474] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 502.811200][ T5827] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2 [ 502.903282][ T5746] usb 2-1: USB disconnect, device number 36 [ 503.133510][ T5745] usb 3-1: USB disconnect, device number 26 [ 503.323776][ T5827] usb 4-1: USB disconnect, device number 24 [ 503.786031][ T31] audit: type=1400 audit(1794231916.870:712): avc: denied { ioctl } for pid=11495 comm="syz.1.1707" path="socket:[32116]" dev="sockfs" ino=32116 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.979661][ T5746] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 506.130237][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 506.133521][ T5746] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 506.162014][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.164230][ T5746] usb 4-1: config 0 descriptor?? [ 506.437090][ T5746] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 506.597679][ T5746] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 506.620034][ T5746] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 506.669334][ T31] audit: type=1400 audit(1794231919.700:713): avc: denied { firmware_load } for pid=5746 comm="kworker/1:6" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 506.747864][T11548] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1718'. [ 514.060562][ T31] audit: type=1400 audit(1794231927.150:714): avc: denied { create } for pid=11593 comm="syz.2.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 516.338989][ T5745] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 516.489969][ T5745] usb 1-1: Using ep0 maxpacket: 32 [ 516.507274][ T5745] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 516.534183][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.684808][ T5745] usb 1-1: config 0 descriptor?? [ 517.063508][ T5745] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 517.388233][ T62] IPVS: starting estimator thread 0... [ 517.528800][T11651] IPVS: using max 39 ests per chain, 93600 per kthread [ 522.757263][T11697] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5619] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11697] [ 523.486542][T11701] jffs2: notice: (11701) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 523.537804][T11702] xt_LOG: level 115 >= 8 [ 524.086770][T11701] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 526.755998][ T5633] Bluetooth: hci4: unexpected event for opcode 0x94bc [ 527.137933][T11722] syz.3.1764 (11722): drop_caches: 2 [ 527.229323][T11724] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 529.302168][ T31] audit: type=1326 audit(1794231942.390:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.1.1771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 529.305634][ T31] audit: type=1326 audit(1794231942.390:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.1.1771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 529.308401][ T31] audit: type=1326 audit(1794231942.390:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.1.1771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 529.308453][ T31] audit: type=1326 audit(1794231942.390:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.1.1771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 529.335447][ T31] audit: type=1326 audit(1794231942.390:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.1.1771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 529.479818][ T31] audit: type=1326 audit(1794231942.570:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.1.1771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 529.480147][ T31] audit: type=1326 audit(1794231942.570:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.1.1771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 529.594729][ T31] audit: type=1326 audit(1794231942.630:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.1.1771" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 530.500136][T11753] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6975] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11753] [ 532.526497][ T31] audit: type=1326 audit(1794231945.610:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.4.1777" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f692e59fb19 code=0x0 [ 536.606987][T11821] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1792'. [ 536.652432][ T31] audit: type=1326 audit(1794231949.740:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11822 comm="syz.2.1793" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53a1f9fb19 code=0x0 [ 536.977620][T11829] FAULT_INJECTION: forcing a failure. [ 536.977620][T11829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.977660][T11829] CPU: 0 UID: 0 PID: 11829 Comm: syz.1.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.977686][T11829] Tainted: [L]=SOFTLOCKUP [ 536.977692][T11829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 536.977702][T11829] Call Trace: [ 536.977709][T11829] [ 536.977716][T11829] dump_stack_lvl+0x100/0x190 [ 536.977752][T11829] should_fail_ex.cold+0x5/0xa [ 536.977781][T11829] copy_folio_from_iter_atomic+0x5cc/0x2020 [ 536.977822][T11829] ? fault_in_readable+0xde/0x190 [ 536.977848][T11829] ? fault_in_readable+0xde/0x190 [ 536.977871][T11829] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 536.977898][T11829] ? fault_in_readable+0x14c/0x190 [ 536.977924][T11829] ? __pfx_fault_in_readable+0x10/0x10 [ 536.977950][T11829] ? I_BDEV+0xd/0x20 [ 536.977976][T11829] ? inode_to_bdi+0x9e/0x160 [ 536.978008][T11829] iomap_file_buffered_write+0x542/0xae0 [ 536.978034][T11829] ? set_normalized_timespec64+0x69/0xc0 [ 536.978066][T11829] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 536.978088][T11829] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 536.978134][T11829] ? __pfx_down_read+0x10/0x10 [ 536.978158][T11829] ? __mark_inode_dirty+0x55c/0x16e0 [ 536.978180][T11829] ? preempt_count_add+0x78/0x150 [ 536.978204][T11829] ? mnt_put_write_access_file+0x4e/0x100 [ 536.978233][T11829] blkdev_buffered_write+0x116/0x180 [ 536.978256][T11829] blkdev_write_iter+0x705/0xf80 [ 536.978284][T11829] vfs_write+0x6af/0x1040 [ 536.978304][T11829] ? __pfx_blkdev_write_iter+0x10/0x10 [ 536.978328][T11829] ? __pfx_vfs_write+0x10/0x10 [ 536.978346][T11829] ? find_held_lock+0x2b/0x80 [ 536.978384][T11829] ksys_pwrite64+0x113/0x230 [ 536.978406][T11829] ? __pfx_ksys_pwrite64+0x10/0x10 [ 536.978436][T11829] do_syscall_64+0x123/0x7b0 [ 536.978462][T11829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.978482][T11829] RIP: 0033:0x7f936bb9fb19 [ 536.978500][T11829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.978518][T11829] RSP: 002b:00007f936c97e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 536.978538][T11829] RAX: ffffffffffffffda RBX: 00007f936be25fa0 RCX: 00007f936bb9fb19 [ 536.978551][T11829] RDX: 00000000fffffdd8 RSI: 0000200000000a80 RDI: 0000000000000003 [ 536.978563][T11829] RBP: 00007f936bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 536.978575][T11829] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 536.978586][T11829] R13: 00007f936be26038 R14: 00007f936be25fa0 R15: 00007ffdd03fa628 [ 536.978613][T11829] [ 538.392461][T11847] Invalid source name [ 538.392499][T11847] UBIFS error (pid: 11847): cannot open "./file0", error -22 [ 538.995092][T11856] FAULT_INJECTION: forcing a failure. [ 538.995092][T11856] name failslab, interval 1, probability 0, space 0, times 0 [ 538.995114][T11856] CPU: 0 UID: 0 PID: 11856 Comm: syz.1.1806 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.995129][T11856] Tainted: [L]=SOFTLOCKUP [ 538.995133][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 538.995140][T11856] Call Trace: [ 538.995144][T11856] [ 538.995149][T11856] dump_stack_lvl+0x100/0x190 [ 538.995176][T11856] should_fail_ex.cold+0x5/0xa [ 538.995195][T11856] should_failslab+0xc2/0x120 [ 538.995209][T11856] __kmalloc_noprof+0xfc/0x840 [ 538.995226][T11856] ? get_derived_key+0x3b/0x140 [ 538.995244][T11856] get_derived_key+0x3b/0x140 [ 538.995259][T11856] encrypted_read+0x3e5/0x850 [ 538.995272][T11856] ? lock_acquire+0x1d1/0x380 [ 538.995288][T11856] ? __keyctl_read_key+0x22/0xe0 [ 538.995302][T11856] ? __pfx_encrypted_read+0x10/0x10 [ 538.995317][T11856] ? __pfx___might_resched+0x10/0x10 [ 538.995335][T11856] ? down_read+0x136/0x4c0 [ 538.995349][T11856] ? trace_kmalloc+0xeb/0x110 [ 538.995362][T11856] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 538.995373][T11856] ? __pfx_encrypted_read+0x10/0x10 [ 538.995386][T11856] __keyctl_read_key+0x9d/0xe0 [ 538.995400][T11856] keyctl_read_key+0x1cb/0x360 [ 538.995416][T11856] __do_sys_keyctl+0x36d/0x5a0 [ 538.995431][T11856] do_syscall_64+0x123/0x7b0 [ 538.995446][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.995457][T11856] RIP: 0033:0x7f936bb9fb19 [ 538.995467][T11856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.995477][T11856] RSP: 002b:00007f936c97e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 538.995489][T11856] RAX: ffffffffffffffda RBX: 00007f936be25fa0 RCX: 00007f936bb9fb19 [ 538.995495][T11856] RDX: 0000200000000240 RSI: 000000001e941bd9 RDI: 000000000000000b [ 538.995502][T11856] RBP: 00007f936bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 538.995508][T11856] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 538.995514][T11856] R13: 00007f936be26038 R14: 00007f936be25fa0 R15: 00007ffdd03fa628 [ 538.995528][T11856] [ 539.148779][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 539.289447][ T10] usb 3-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.290535][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.290566][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.290598][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.297620][T11852] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 539.303076][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.549813][T11865] syz.1.1807 (11865): drop_caches: 2 [ 539.576938][T11865] overlayfs: failed to resolve './bus': -2 [ 541.723503][ T31] audit: type=1326 audit(1794231954.810:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11873 comm="syz.1.1809" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f936bb9fb19 code=0x0 [ 542.956275][ T5831] usb 3-1: USB disconnect, device number 27 [ 543.551841][T11892] Invalid source name [ 543.551877][T11892] UBIFS error (pid: 11892): cannot open "./file0", error -22 [ 547.363987][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 547.388863][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 547.391521][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 547.401082][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 547.414794][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 548.749215][ T1228] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 548.901801][ T1228] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.902857][ T1228] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.902886][ T1228] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 548.902919][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.952364][T11947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.988787][ T1228] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.292668][T11931] rxe_eth0 speed is unknown, defaulting to 1000 [ 549.520766][T11931] dummy0 speed is unknown, defaulting to 1000 [ 549.528779][ T5636] Bluetooth: hci5: command tx timeout [ 550.769496][ T5827] usb 2-1: USB disconnect, device number 37 [ 550.852098][T11931] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.852541][T11931] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.852664][T11931] bridge_slave_0: entered allmulticast mode [ 550.858893][T11931] bridge_slave_0: entered promiscuous mode [ 550.867090][T11931] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.867161][T11931] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.867266][T11931] bridge_slave_1: entered allmulticast mode [ 550.872336][T11931] bridge_slave_1: entered promiscuous mode [ 550.885911][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 550.955821][T11931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.962694][T11931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.016302][T11931] team0: Port device team_slave_0 added [ 551.020866][T11931] team0: Port device team_slave_1 added [ 551.105182][T11931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.105197][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.105216][T11931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.112211][T11931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.112226][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.112244][T11931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.246249][T11931] hsr_slave_0: entered promiscuous mode [ 551.251244][T11931] hsr_slave_1: entered promiscuous mode [ 551.251691][T11931] debugfs: 'hsr0' already exists in 'hsr' [ 551.251702][T11931] Cannot create hsr debugfs directory [ 552.212878][ T5636] Bluetooth: hci5: command tx timeout [ 553.370340][T11931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 553.378107][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.379326][T11931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 553.461374][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.463519][T11931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 553.489418][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.490129][T11931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 553.502406][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.718831][ T5636] Bluetooth: hci5: command tx timeout [ 554.935044][T12025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12025 comm=syz.2.1842 [ 554.938391][T11931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.093381][T11931] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.102114][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.102199][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.108105][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.108185][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.148832][ T5736] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 555.304201][ T5736] usb 2-1: New USB device found: idVendor=17ef, idProduct=6009, bcdDevice=0.00 [ 555.310985][ T5736] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.311014][ T5736] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.311032][ T5736] usb 2-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.311054][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 555.311078][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.332947][ T5736] usb 2-1: config 0 descriptor?? [ 555.870600][ T5736] lenovo 0003:17EF:6009.000B: ignoring exceeding usage max [ 555.917860][ T5736] lenovo 0003:17EF:6009.000B: hidraw0: USB HID v0.11 Joystick [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 555.999846][T12041] FAULT_INJECTION: forcing a failure. [ 555.999846][T12041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.999881][T12041] CPU: 1 UID: 0 PID: 12041 Comm: syz.4.1844 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.999911][T12041] Tainted: [L]=SOFTLOCKUP [ 555.999920][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 555.999931][T12041] Call Trace: [ 555.999938][T12041] [ 555.999946][T12041] dump_stack_lvl+0x100/0x190 [ 555.999983][T12041] should_fail_ex.cold+0x5/0xa [ 556.000015][T12041] copy_folio_from_iter_atomic+0x5cc/0x2020 [ 556.000049][T12041] ? fault_in_readable+0xde/0x190 [ 556.000074][T12041] ? fault_in_readable+0xde/0x190 [ 556.000097][T12041] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 556.000121][T12041] ? fault_in_readable+0x14c/0x190 [ 556.000153][T12041] ? __pfx_fault_in_readable+0x10/0x10 [ 556.000177][T12041] ? I_BDEV+0xd/0x20 [ 556.000201][T12041] ? inode_to_bdi+0x9e/0x160 [ 556.000231][T12041] iomap_file_buffered_write+0x542/0xae0 [ 556.000257][T12041] ? set_normalized_timespec64+0x69/0xc0 [ 556.000288][T12041] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 556.000309][T12041] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 556.000355][T12041] ? __pfx_down_read+0x10/0x10 [ 556.000377][T12041] ? __mark_inode_dirty+0x55c/0x16e0 [ 556.000399][T12041] ? preempt_count_add+0x78/0x150 [ 556.000422][T12041] ? mnt_put_write_access_file+0x4e/0x100 [ 556.000451][T12041] blkdev_buffered_write+0x116/0x180 [ 556.000475][T12041] blkdev_write_iter+0x705/0xf80 [ 556.000502][T12041] vfs_write+0x6af/0x1040 [ 556.000522][T12041] ? __pfx_blkdev_write_iter+0x10/0x10 [ 556.000546][T12041] ? __pfx_vfs_write+0x10/0x10 [ 556.000562][T12041] ? find_held_lock+0x2b/0x80 [ 556.000598][T12041] ksys_pwrite64+0x113/0x230 [ 556.000620][T12041] ? __pfx_ksys_pwrite64+0x10/0x10 [ 556.000645][T12041] do_syscall_64+0x123/0x7b0 [ 556.000669][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.000688][T12041] RIP: 0033:0x7f692e59fb19 [ 556.000704][T12041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.000724][T12041] RSP: 002b:00007f692f535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 556.000742][T12041] RAX: ffffffffffffffda RBX: 00007f692e825fa0 RCX: 00007f692e59fb19 [ 556.000754][T12041] RDX: 00000000fffffdd8 RSI: 0000200000000a80 RDI: 0000000000000003 [ 556.000765][T12041] RBP: 00007f692e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 556.000776][T12041] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 556.000786][T12041] R13: 00007f692e826038 R14: 00007f692e825fa0 R15: 00007ffec9d561b8 [ 556.000812][T12041] [ 556.171153][ T5736] usb 2-1: USB disconnect, device number 38 [ 556.423851][T11931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.558782][ T5827] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 556.650113][T11931] veth0_vlan: entered promiscuous mode [ 556.654226][T11931] veth1_vlan: entered promiscuous mode [ 556.704311][T11931] veth0_macvtap: entered promiscuous mode [ 556.720097][ T5827] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.720774][T11931] veth1_macvtap: entered promiscuous mode [ 556.721159][ T5827] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.721188][ T5827] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.721221][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.723946][T12045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 556.727406][ T5827] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 556.777592][T11931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.808137][ T5636] Bluetooth: hci5: command tx timeout [ 556.817602][T11931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.859381][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.859744][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.859775][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.859802][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.523502][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.523591][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.595323][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.595342][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.264418][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.264434][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.369454][ T31] audit: type=1400 audit(1794231973.460:726): avc: denied { mounton } for pid=11931 comm="syz-executor" path="/root/syzkaller.i0DKW2/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 560.789122][T12075] syz.1.1851 (12075): drop_caches: 2 [ 560.911582][ T10] usb 5-1: USB disconnect, device number 24 [ 561.129666][T12084] FAULT_INJECTION: forcing a failure. [ 561.129666][T12084] name failslab, interval 1, probability 0, space 0, times 0 [ 561.129700][T12084] CPU: 0 UID: 0 PID: 12084 Comm: syz.1.1855 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.129726][T12084] Tainted: [L]=SOFTLOCKUP [ 561.129732][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 561.129744][T12084] Call Trace: [ 561.129751][T12084] [ 561.129760][T12084] dump_stack_lvl+0x100/0x190 [ 561.129795][T12084] should_fail_ex.cold+0x5/0xa [ 561.129826][T12084] should_failslab+0xc2/0x120 [ 561.129850][T12084] __kmalloc_noprof+0xfc/0x840 [ 561.129882][T12084] ? tnode_new+0x2f7/0x350 [ 561.129914][T12084] tnode_new+0x2f7/0x350 [ 561.129943][T12084] resize+0xa60/0x22f0 [ 561.129969][T12084] ? __kmalloc_noprof+0x350/0x840 [ 561.130008][T12084] fib_insert_alias+0x9b3/0xe30 [ 561.130043][T12084] fib_trie_unmerge+0x2af/0xc00 [ 561.130066][T12084] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 561.130087][T12084] ? lock_acquire+0x1d1/0x380 [ 561.130114][T12084] fib_unmerge+0xee/0x510 [ 561.130131][T12084] ? fib_nl2rule_locked+0x3ef/0x740 [ 561.130152][T12084] fib4_rule_configure+0xaba/0x1160 [ 561.130179][T12084] ? fib_nl2rule_locked+0x3fe/0x740 [ 561.130201][T12084] fib_newrule+0x3c3/0x1e50 [ 561.130225][T12084] ? static_obj+0x1/0x90 [ 561.130244][T12084] ? avc_has_perm_noaudit+0x11e/0x470 [ 561.130267][T12084] ? avc_has_perm_noaudit+0x11e/0x470 [ 561.130293][T12084] ? __pfx_fib_newrule+0x10/0x10 [ 561.130312][T12084] ? avc_has_perm_noaudit+0xf0/0x470 [ 561.130356][T12084] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 561.130383][T12084] ? find_held_lock+0x2b/0x80 [ 561.130402][T12084] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 561.130427][T12084] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 561.130455][T12084] ? __pfx_fib_nl_newrule+0x10/0x10 [ 561.130475][T12084] rtnetlink_rcv_msg+0x95e/0xe90 [ 561.130501][T12084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.130534][T12084] netlink_rcv_skb+0x159/0x420 [ 561.130564][T12084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.130593][T12084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.130629][T12084] ? netlink_deliver_tap+0x1ae/0xb50 [ 561.130658][T12084] netlink_unicast+0x668/0x950 [ 561.130687][T12084] ? __pfx_netlink_unicast+0x10/0x10 [ 561.130720][T12084] netlink_sendmsg+0x9ac/0x10c0 [ 561.130749][T12084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.130780][T12084] ? selinux_socket_sendmsg+0x198/0x2f0 [ 561.130810][T12084] ? ____sys_sendmsg+0xa99/0xc30 [ 561.130836][T12084] ____sys_sendmsg+0xa99/0xc30 [ 561.130861][T12084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.130888][T12084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.130922][T12084] ? plist_check_list+0x1b8/0x280 [ 561.130941][T12084] ? plist_del+0x308/0x510 [ 561.130961][T12084] ___sys_sendmsg+0x190/0x1e0 [ 561.130991][T12084] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.131022][T12084] ? futex_wake+0x220/0x5e0 [ 561.131057][T12084] ? find_held_lock+0x2b/0x80 [ 561.131091][T12084] __sys_sendmsg+0x160/0x210 [ 561.131115][T12084] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.131152][T12084] do_syscall_64+0x123/0x7b0 [ 561.131178][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.131198][T12084] RIP: 0033:0x7f936bb9fb19 [ 561.131215][T12084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.131234][T12084] RSP: 002b:00007f936c97e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.131253][T12084] RAX: ffffffffffffffda RBX: 00007f936be25fa0 RCX: 00007f936bb9fb19 [ 561.131265][T12084] RDX: 0000000000044004 RSI: 0000200000000040 RDI: 0000000000000004 [ 561.131276][T12084] RBP: 00007f936bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 561.131287][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.131298][T12084] R13: 00007f936be26038 R14: 00007f936be25fa0 R15: 00007ffdd03fa628 [ 561.131324][T12084] [ 561.439369][ T31] audit: type=1326 audit(1794231974.520:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.5.1822" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56f3f9fb19 code=0x0 [ 563.829285][ T1228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 564.003068][ T1228] usb 6-1: New USB device found: idVendor=110a, idProduct=1410, bcdDevice=0.00 [ 564.013647][ T1228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.013704][ T1228] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 564.013793][ T1228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.114699][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 566.085378][T12145] jffs2: notice: (12145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 566.129654][T12147] xt_LOG: level 115 >= 8 [ 566.409936][T12145] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 567.910071][ T5745] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 567.910117][ T5745] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 568.217165][ T5746] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 568.217227][ T5746] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 568.247845][ T5745] usb 1-1: USB disconnect, device number 20 [ 568.266579][ T10] usb 6-1: USB disconnect, device number 2 [ 568.278057][ T5746] usb 4-1: USB disconnect, device number 25 [ 569.671164][ T5746] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 570.403140][T12172] i2c i2c-0: delete_device: Extra parameters [ 571.097825][T12179] FAULT_INJECTION: forcing a failure. [ 571.097825][T12179] name failslab, interval 1, probability 0, space 0, times 0 [ 571.097856][T12179] CPU: 0 UID: 0 PID: 12179 Comm: syz.0.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.097882][T12179] Tainted: [L]=SOFTLOCKUP [ 571.097889][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 571.097899][T12179] Call Trace: [ 571.097906][T12179] [ 571.097913][T12179] dump_stack_lvl+0x100/0x190 [ 571.097947][T12179] should_fail_ex.cold+0x5/0xa [ 571.097975][T12179] should_failslab+0xc2/0x120 [ 571.097996][T12179] __kmalloc_node_noprof+0xff/0x870 [ 571.098025][T12179] ? crypto_create_tfm_node+0x8d/0x3b0 [ 571.098055][T12179] crypto_create_tfm_node+0x8d/0x3b0 [ 571.098089][T12179] crypto_alloc_tfm_node+0x102/0x260 [ 571.098116][T12179] init_skcipher_req.constprop.0+0x1d/0x180 [ 571.098139][T12179] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 571.098164][T12179] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 571.098189][T12179] ? kasan_quarantine_put+0x104/0x240 [ 571.098206][T12179] ? lockdep_hardirqs_on+0x7d/0x110 [ 571.098232][T12179] ? __kasan_check_byte+0x13/0x50 [ 571.098254][T12179] ? get_derived_key+0x11b/0x140 [ 571.098279][T12179] encrypted_read+0x389/0x850 [ 571.098302][T12179] ? lock_acquire+0x1d1/0x380 [ 571.098323][T12179] ? __keyctl_read_key+0x22/0xe0 [ 571.098343][T12179] ? __pfx_encrypted_read+0x10/0x10 [ 571.098364][T12179] ? __pfx___might_resched+0x10/0x10 [ 571.098393][T12179] ? down_read+0x136/0x4c0 [ 571.098414][T12179] ? trace_kmalloc+0xeb/0x110 [ 571.098433][T12179] ? __pfx_down_read+0x10/0x10 [ 571.098454][T12179] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 571.098473][T12179] ? __pfx_encrypted_read+0x10/0x10 [ 571.098494][T12179] __keyctl_read_key+0x9d/0xe0 [ 571.098517][T12179] keyctl_read_key+0x1cb/0x360 [ 571.098542][T12179] __do_sys_keyctl+0x36d/0x5a0 [ 571.098568][T12179] do_syscall_64+0x123/0x7b0 [ 571.098591][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.098612][T12179] RIP: 0033:0x7f86a859fb19 [ 571.098626][T12179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.098644][T12179] RSP: 002b:00007f86a94bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 571.098661][T12179] RAX: ffffffffffffffda RBX: 00007f86a8825fa0 RCX: 00007f86a859fb19 [ 571.098672][T12179] RDX: 0000200000000240 RSI: 0000000006f8873e RDI: 000000000000000b [ 571.098681][T12179] RBP: 00007f86a8637b70 R08: 0000000000000000 R09: 0000000000000000 [ 571.098689][T12179] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 571.098699][T12179] R13: 00007f86a8826038 R14: 00007f86a8825fa0 R15: 00007ffd7e87e328 [ 571.098724][T12179] [ 571.408886][T12179] trusted_key: encrypted_key: failed to load cbc(aes) transform (-12) [ 571.435892][T11759] bridge0: port 3(syz_tun) entered disabled state [ 571.508417][T11759] syz_tun (unregistering): left allmulticast mode [ 571.508441][T11759] syz_tun (unregistering): left promiscuous mode [ 571.509903][T11759] bridge0: port 3(syz_tun) entered disabled state [ 571.727048][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 573.241202][ T4031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.241534][ T4031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.635258][T12213] netlink: 'syz.4.1871': attribute type 4 has an invalid length. [ 573.711717][T12215] netlink: 'syz.4.1871': attribute type 4 has an invalid length. [ 574.613614][T12222] i2c i2c-0: delete_device: Extra parameters [ 574.956041][ T4031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.982834][ T4031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.241926][ T4031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.241967][ T4031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.718232][T12234] syz.1.1890 (12234): drop_caches: 2 [ 576.662822][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 577.281595][ T4031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.281631][ T4031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.881461][ T4031] ip6gretap0: left allmulticast mode [ 579.881487][ T4031] ip6gretap0: left promiscuous mode [ 579.881646][ T4031] bridge0: port 4(ip6gretap0) entered disabled state [ 579.925343][ T4031] bridge_slave_1: left allmulticast mode [ 579.925367][ T4031] bridge_slave_1: left promiscuous mode [ 579.952661][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.973831][ T4031] bridge_slave_0: left allmulticast mode [ 579.974336][ T4031] bridge_slave_0: left promiscuous mode [ 579.974501][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.418130][T12293] syz.1.1902 (12293): drop_caches: 2 [ 581.328796][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1908'. [ 581.509717][ T5745] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 581.599025][ T5831] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 581.610462][ T31] audit: type=1400 audit(1794231994.690:728): avc: denied { write } for pid=12274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.663928][ T5745] usb 2-1: New USB device found: idVendor=17ef, idProduct=6009, bcdDevice=0.00 [ 581.664822][ T5745] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 581.664850][ T5745] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.664870][ T5745] usb 2-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.664895][ T5745] usb 2-1: config 0 interface 0 has no altsetting 0 [ 581.664922][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.736037][ T5745] usb 2-1: config 0 descriptor?? [ 581.759834][ T5831] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 581.760715][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 581.760749][ T5831] usb 1-1: config 0 has no interface number 0 [ 581.760781][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 581.760803][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 581.760841][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.762933][ T5831] usb 1-1: config 0 descriptor?? [ 581.763685][T12289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 581.801916][ T5831] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 581.856167][ T4031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.875404][ T4031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.876697][ T4031] bond0 (unregistering): Released all slaves [ 581.931443][ T31] audit: type=1400 audit(1794231995.020:729): avc: denied { write } for pid=12313 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.032768][ T4031] tipc: Left network mode [ 582.622274][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 583.075138][ T5745] lenovo 0003:17EF:6009.000C: ignoring exceeding usage max [ 583.101580][ T5745] lenovo 0003:17EF:6009.000C: hidraw0: USB HID v0.11 Joystick [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 583.124818][ T5745] usb 2-1: USB disconnect, device number 39 [ 583.307418][ T5636] Bluetooth: hci4: unexpected event for opcode 0x94bc [ 583.317538][ T5746] usb 1-1: USB disconnect, device number 21 [ 583.425380][T12322] fido_id[12322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 583.495690][T12335] trusted_key: encrypted_key: key user:syz not found [ 584.054322][ T4031] hsr_slave_0: left promiscuous mode [ 584.055181][ T4031] hsr_slave_1: left promiscuous mode [ 584.056639][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.056657][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.081719][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.081740][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.120902][ T4031] veth1_macvtap: left promiscuous mode [ 584.120980][ T4031] veth0_macvtap: left promiscuous mode [ 584.121138][ T4031] veth1_vlan: left promiscuous mode [ 584.121193][ T4031] veth0_vlan: left promiscuous mode [ 584.201182][ T31] audit: type=1400 audit(1794231997.290:730): avc: denied { write } for pid=12330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.374907][ T31] audit: type=1400 audit(1794231997.450:731): avc: denied { write } for pid=12361 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.233482][ T4031] team0 (unregistering): Port device team_slave_1 removed [ 585.272526][ T4031] team0 (unregistering): Port device team_slave_0 removed [ 586.258931][ T5831] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 586.409883][ T5831] usb 6-1: New USB device found: idVendor=17ef, idProduct=6009, bcdDevice=0.00 [ 586.415396][ T5831] usb 6-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 586.415427][ T5831] usb 6-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.415446][ T5831] usb 6-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.415468][ T5831] usb 6-1: config 0 interface 0 has no altsetting 0 [ 586.415494][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.417653][ T5831] usb 6-1: config 0 descriptor?? [ 586.437423][T12390] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1932'. [ 586.504665][T12389] FAULT_INJECTION: forcing a failure. [ 586.504665][T12389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.504697][T12389] CPU: 0 UID: 0 PID: 12389 Comm: syz.4.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.504724][T12389] Tainted: [L]=SOFTLOCKUP [ 586.504732][T12389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 586.504743][T12389] Call Trace: [ 586.504749][T12389] [ 586.504759][T12389] dump_stack_lvl+0x100/0x190 [ 586.504794][T12389] should_fail_ex.cold+0x5/0xa [ 586.504825][T12389] copy_folio_from_iter_atomic+0x5cc/0x2020 [ 586.504861][T12389] ? fault_in_readable+0xde/0x190 [ 586.504887][T12389] ? fault_in_readable+0xde/0x190 [ 586.504911][T12389] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 586.504934][T12389] ? fault_in_readable+0x14c/0x190 [ 586.504958][T12389] ? __pfx_fault_in_readable+0x10/0x10 [ 586.504984][T12389] ? I_BDEV+0xd/0x20 [ 586.505009][T12389] ? inode_to_bdi+0x9e/0x160 [ 586.505038][T12389] iomap_file_buffered_write+0x542/0xae0 [ 586.505063][T12389] ? set_normalized_timespec64+0x69/0xc0 [ 586.505094][T12389] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 586.505114][T12389] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 586.505159][T12389] ? __pfx_down_read+0x10/0x10 [ 586.505182][T12389] ? __mark_inode_dirty+0x55c/0x16e0 [ 586.505202][T12389] ? preempt_count_add+0x78/0x150 [ 586.505226][T12389] ? mnt_put_write_access_file+0x4e/0x100 [ 586.505261][T12389] blkdev_buffered_write+0x116/0x180 [ 586.505282][T12389] blkdev_write_iter+0x705/0xf80 [ 586.505308][T12389] vfs_write+0x6af/0x1040 [ 586.505327][T12389] ? __pfx_blkdev_write_iter+0x10/0x10 [ 586.505347][T12389] ? __pfx_vfs_write+0x10/0x10 [ 586.505363][T12389] ? find_held_lock+0x2b/0x80 [ 586.505397][T12389] ksys_pwrite64+0x113/0x230 [ 586.505415][T12389] ? __pfx_ksys_pwrite64+0x10/0x10 [ 586.505440][T12389] do_syscall_64+0x123/0x7b0 [ 586.505461][T12389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.505478][T12389] RIP: 0033:0x7f692e59fb19 [ 586.505493][T12389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.505508][T12389] RSP: 002b:00007f692f535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 586.505525][T12389] RAX: ffffffffffffffda RBX: 00007f692e825fa0 RCX: 00007f692e59fb19 [ 586.505537][T12389] RDX: 00000000fffffdd8 RSI: 0000200000000a80 RDI: 0000000000000003 [ 586.505547][T12389] RBP: 00007f692e637b70 R08: 0000000000000000 R09: 0000000000000000 [ 586.505558][T12389] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 586.505569][T12389] R13: 00007f692e826038 R14: 00007f692e825fa0 R15: 00007ffec9d561b8 [ 586.505595][T12389] [ 586.555427][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 586.862280][ T5831] lenovo 0003:17EF:6009.000D: ignoring exceeding usage max [ 586.934597][ T5831] lenovo 0003:17EF:6009.000D: hidraw0: USB HID v0.11 Joystick [HID 17ef:6009] on usb-dummy_hcd.5-1/input0 [ 587.117644][ T5745] usb 6-1: USB disconnect, device number 3 [ 587.204208][T12403] fido_id[12403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 587.380376][ T4031] IPVS: stop unused estimator thread 0... [ 587.506065][ T31] audit: type=1400 audit(1794232000.580:732): avc: denied { write } for pid=12398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.825837][ T31] audit: type=1400 audit(1794232001.910:733): avc: denied { write } for pid=12420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.666827][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 590.234343][T12435] syz.2.1930 (12435): drop_caches: 2 [ 593.333748][T12452] FAULT_INJECTION: forcing a failure. [ 593.333748][T12452] name fail_futex, interval 1, probability 0, space 0, times 0 [ 593.333788][T12452] CPU: 0 UID: 0 PID: 12452 Comm: syz.1.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.333815][T12452] Tainted: [L]=SOFTLOCKUP [ 593.333822][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 593.333834][T12452] Call Trace: [ 593.333842][T12452] [ 593.333850][T12452] dump_stack_lvl+0x100/0x190 [ 593.333887][T12452] should_fail_ex.cold+0x5/0xa [ 593.333916][T12452] get_futex_key+0x1c9/0x13e0 [ 593.333940][T12452] ? __pfx_get_futex_key+0x10/0x10 [ 593.333959][T12452] ? futex_wake+0x4ea/0x5e0 [ 593.333990][T12452] futex_wake+0xf4/0x5e0 [ 593.334012][T12452] ? futex_wait+0x11e/0x370 [ 593.334041][T12452] ? __pfx_futex_wake+0x10/0x10 [ 593.334071][T12452] ? __pfx_lookup_user_key+0x10/0x10 [ 593.334103][T12452] do_futex+0x2b2/0x440 [ 593.334127][T12452] ? __pfx_do_futex+0x10/0x10 [ 593.334149][T12452] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 593.334187][T12452] __x64_sys_futex+0x34f/0x4d0 [ 593.334213][T12452] ? __pfx___x64_sys_futex+0x10/0x10 [ 593.334246][T12452] do_syscall_64+0x123/0x7b0 [ 593.334269][T12452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.334289][T12452] RIP: 0033:0x7f936bb9fb19 [ 593.334305][T12452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.334323][T12452] RSP: 002b:00007f936c97e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 593.334341][T12452] RAX: ffffffffffffffda RBX: 00007f936be25fa8 RCX: 00007f936bb9fb19 [ 593.334354][T12452] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f936be25fac [ 593.334365][T12452] RBP: 00007f936be25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 593.334376][T12452] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 593.334386][T12452] R13: 00007f936be26038 R14: 00007ffdd03fa540 R15: 00007ffdd03fa628 [ 593.334411][T12452] [ 593.938447][ T31] audit: type=1400 audit(1794232007.020:734): avc: denied { write } for pid=12441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.350042][ T31] audit: type=1400 audit(1794232007.439:735): avc: denied { write } for pid=12475 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.542906][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 595.521161][T12498] netlink: 'syz.1.1955': attribute type 4 has an invalid length. [ 595.577095][T12499] netlink: 'syz.1.1955': attribute type 4 has an invalid length. [ 596.469632][T12501] syzkaller0: entered promiscuous mode [ 596.469647][T12501] syzkaller0: entered allmulticast mode [ 599.459761][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 600.271740][T12548] ip_tables: iptables: counters copy to user failed while replacing table [ 602.073798][T12571] syzkaller0: entered promiscuous mode [ 602.073828][T12571] syzkaller0: entered allmulticast mode [ 602.692412][T12576] Invalid source name [ 602.692445][T12576] UBIFS error (pid: 12576): cannot open "./file0", error -22 [ 603.565491][T12592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12592 comm=syz.1.1978 [ 604.388675][ T5831] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 604.609355][ T5831] usb 3-1: New USB device found: idVendor=1038, idProduct=1410, bcdDevice=0.08 [ 604.716373][ T5831] usb 3-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.716408][ T5831] usb 3-1: config 0 interface 0 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.716432][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 604.716462][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.722656][ T5831] usb 3-1: config 0 descriptor?? [ 605.548698][ T5745] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 605.592876][ T5831] usbhid 3-1:0.0: can't add hid device: -71 [ 605.592977][ T5831] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 605.613165][ T5831] usb 3-1: USB disconnect, device number 28 [ 605.699330][ T5745] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.700876][ T5745] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.700909][ T5745] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 605.700943][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.707813][T12602] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 605.771288][ T5745] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.503528][T12640] Invalid source name [ 608.503561][T12640] UBIFS error (pid: 12640): cannot open "./file0", error -22 [ 609.034639][ T31] audit: type=1400 audit(1794232022.119:736): avc: denied { write } for pid=12607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.248812][ T31] audit: type=1400 audit(1794232022.309:737): avc: denied { write } for pid=12647 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.997962][ T25] usb 2-1: USB disconnect, device number 40 [ 610.066043][T12653] syzkaller0: entered promiscuous mode [ 610.066064][T12653] syzkaller0: entered allmulticast mode [ 610.272531][ T5636] Bluetooth: hci3: unexpected event for opcode 0x94bc [ 610.879848][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 611.496135][T12677] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1993'. [ 612.297429][ T31] audit: type=1400 audit(1794232025.379:738): avc: denied { write } for pid=12654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.753246][T12690] FAULT_INJECTION: forcing a failure. [ 612.753246][T12690] name failslab, interval 1, probability 0, space 0, times 0 [ 612.753282][T12690] CPU: 0 UID: 0 PID: 12690 Comm: syz.2.1997 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.753310][T12690] Tainted: [L]=SOFTLOCKUP [ 612.753318][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 612.753330][T12690] Call Trace: [ 612.753336][T12690] [ 612.753345][T12690] dump_stack_lvl+0x100/0x190 [ 612.753381][T12690] should_fail_ex.cold+0x5/0xa [ 612.753410][T12690] should_failslab+0xc2/0x120 [ 612.753431][T12690] __kmalloc_noprof+0xfc/0x840 [ 612.753461][T12690] ? get_derived_key+0x3b/0x140 [ 612.753488][T12690] get_derived_key+0x3b/0x140 [ 612.753514][T12690] encrypted_read+0x3e5/0x850 [ 612.753543][T12690] ? lock_acquire+0x1d1/0x380 [ 612.753569][T12690] ? __keyctl_read_key+0x22/0xe0 [ 612.753593][T12690] ? __pfx_encrypted_read+0x10/0x10 [ 612.753617][T12690] ? __pfx___might_resched+0x10/0x10 [ 612.753645][T12690] ? down_read+0x136/0x4c0 [ 612.753668][T12690] ? trace_kmalloc+0xeb/0x110 [ 612.753691][T12690] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 612.753712][T12690] ? __pfx_encrypted_read+0x10/0x10 [ 612.753737][T12690] __keyctl_read_key+0x9d/0xe0 [ 612.753764][T12690] keyctl_read_key+0x1cb/0x360 [ 612.753793][T12690] __do_sys_keyctl+0x36d/0x5a0 [ 612.753818][T12690] do_syscall_64+0x123/0x7b0 [ 612.753842][T12690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.753862][T12690] RIP: 0033:0x7f53a1f9fb19 [ 612.753879][T12690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.753897][T12690] RSP: 002b:00007f53a2e70028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 612.753916][T12690] RAX: ffffffffffffffda RBX: 00007f53a2225fa0 RCX: 00007f53a1f9fb19 [ 612.753928][T12690] RDX: 0000200000000240 RSI: 000000002f8dc0cf RDI: 000000000000000b [ 612.753939][T12690] RBP: 00007f53a2037b70 R08: 0000000000000000 R09: 0000000000000000 [ 612.753950][T12690] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 612.753961][T12690] R13: 00007f53a2226038 R14: 00007f53a2225fa0 R15: 00007ffc10cb9fd8 [ 612.753996][T12690] [ 613.000141][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1998'. [ 613.203422][ T31] audit: type=1400 audit(1794232026.289:739): avc: denied { write } for pid=12691 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.204557][T12698] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2000'. [ 613.286719][T12703] syzkaller0: entered promiscuous mode [ 613.286741][T12703] syzkaller0: entered allmulticast mode [ 614.387182][T12711] syzkaller0: entered promiscuous mode [ 614.387205][T12711] syzkaller0: entered allmulticast mode [ 614.693453][ T31] audit: type=1326 audit(1794232027.779:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.694726][ T31] audit: type=1326 audit(1794232027.779:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.695815][ T31] audit: type=1326 audit(1794232027.779:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.696728][ T31] audit: type=1326 audit(1794232027.779:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.765528][ T5827] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 614.774532][ T31] audit: type=1326 audit(1794232027.819:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.774734][ T31] audit: type=1326 audit(1794232027.819:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.774775][ T31] audit: type=1326 audit(1794232027.819:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.774815][ T31] audit: type=1326 audit(1794232027.819:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.774855][ T31] audit: type=1326 audit(1794232027.819:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e59fb19 code=0x7ffc0000 [ 614.774898][ T31] audit: type=1326 audit(1794232027.819:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12721 comm="syz.4.2006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f692e56034e code=0x7ffc0000 [ 614.940383][ T5827] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 615.927118][ T5827] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 615.927152][ T5827] usb 2-1: config 0 has no interface number 0 [ 615.927267][ T5827] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 615.927297][ T5827] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 615.927383][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.054409][ T5827] usb 2-1: config 0 descriptor?? [ 616.058082][T12720] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 616.470895][ T5827] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 618.227360][ T5745] usb 2-1: USB disconnect, device number 41 [ 618.962001][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.962077][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.728458][T12762] ip_tables: iptables: counters copy to user failed while replacing table [ 620.298421][T12767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12767 comm=syz.0.2013 [ 620.494426][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2015'. [ 620.517859][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 620.517876][ T31] audit: type=1400 audit(1794232033.599:752): avc: denied { write } for pid=12717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.633963][ T31] audit: type=1400 audit(1794232033.719:753): avc: denied { write } for pid=12777 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.735688][T12779] syzkaller0: entered promiscuous mode [ 620.735710][T12779] syzkaller0: entered allmulticast mode [ 621.128099][T12791] syz.1.2017 (12791): drop_caches: 2 [ 621.195149][T12792] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 621.289948][T12790] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2018'. [ 621.290014][T12790] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 621.338192][T12790] 0ªî{X¹¦: entered allmulticast mode [ 621.338537][T12790] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 621.573275][T12796] tipc: Started in network mode [ 621.573348][T12796] tipc: Node identity 4, cluster identity 4711 [ 621.573384][T12796] tipc: Node number set to 4 [ 622.602507][ T10] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 623.052342][ T10] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 623.067291][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 623.067311][ T10] usb 3-1: config 0 has no interface number 0 [ 623.067332][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 623.067345][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 623.067371][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.125459][ T10] usb 3-1: config 0 descriptor?? [ 623.127891][T12800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.148307][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 623.361541][T12813] ./dev: Can't lookup blockdev [ 623.396488][T12816] FAULT_INJECTION: forcing a failure. [ 623.396488][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 623.396574][T12816] CPU: 1 UID: 0 PID: 12816 Comm: syz.5.2025 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.396601][T12816] Tainted: [L]=SOFTLOCKUP [ 623.396607][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 623.396619][T12816] Call Trace: [ 623.396626][T12816] [ 623.396633][T12816] dump_stack_lvl+0x100/0x190 [ 623.396669][T12816] should_fail_ex.cold+0x5/0xa [ 623.396702][T12816] should_failslab+0xc2/0x120 [ 623.396725][T12816] __kmalloc_noprof+0xfc/0x840 [ 623.396754][T12816] ? get_derived_key+0x3b/0x140 [ 623.396782][T12816] get_derived_key+0x3b/0x140 [ 623.396808][T12816] encrypted_read+0x3e5/0x850 [ 623.396831][T12816] ? lock_acquire+0x1d1/0x380 [ 623.396856][T12816] ? __keyctl_read_key+0x22/0xe0 [ 623.396878][T12816] ? __pfx_encrypted_read+0x10/0x10 [ 623.396902][T12816] ? __pfx___might_resched+0x10/0x10 [ 623.396939][T12816] ? down_read+0x136/0x4c0 [ 623.396965][T12816] ? trace_kmalloc+0xeb/0x110 [ 623.396990][T12816] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 623.397011][T12816] ? __pfx_encrypted_read+0x10/0x10 [ 623.397039][T12816] __keyctl_read_key+0x9d/0xe0 [ 623.397064][T12816] keyctl_read_key+0x1cb/0x360 [ 623.397093][T12816] __do_sys_keyctl+0x36d/0x5a0 [ 623.397116][T12816] do_syscall_64+0x123/0x7b0 [ 623.397141][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.397160][T12816] RIP: 0033:0x7f56f3f9fb19 [ 623.397176][T12816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.397194][T12816] RSP: 002b:00007f56f4ec5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 623.397213][T12816] RAX: ffffffffffffffda RBX: 00007f56f4225fa0 RCX: 00007f56f3f9fb19 [ 623.397226][T12816] RDX: 0000200000000240 RSI: 0000000023c91e6a RDI: 000000000000000b [ 623.397237][T12816] RBP: 00007f56f4037b70 R08: 0000000000000000 R09: 0000000000000000 [ 623.397248][T12816] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 623.397258][T12816] R13: 00007f56f4226038 R14: 00007f56f4225fa0 R15: 00007ffc843544b8 [ 623.397286][T12816] [ 624.154830][ T31] audit: type=1400 audit(1794232037.239:754): avc: denied { write } for pid=12805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.321979][ T31] audit: type=1400 audit(1794232037.409:755): avc: denied { write } for pid=12827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.409726][T12829] syzkaller0: entered promiscuous mode [ 624.409801][T12829] syzkaller0: entered allmulticast mode [ 624.826399][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 625.014977][T12840] netlink: 'syz.4.2030': attribute type 4 has an invalid length. [ 625.081728][T12841] netlink: 'syz.4.2030': attribute type 4 has an invalid length. [ 625.857284][ T10] usb 3-1: USB disconnect, device number 29 [ 626.069418][ T5636] Bluetooth: hci0: unexpected event for opcode 0x94bc [ 628.091391][T12871] syz.5.2034 (12871): drop_caches: 2 [ 628.156675][T12872] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 628.204378][T12874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12874 comm=syz.0.2039 [ 628.368733][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 628.368997][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 628.455641][T12876] syzkaller0: entered promiscuous mode [ 628.455656][T12876] syzkaller0: entered allmulticast mode [ 628.510800][ T10] usb 5-1: device descriptor read/64, error -32 [ 628.535174][ T13] IPVS: starting estimator thread 0... [ 628.638798][T12882] IPVS: using max 45 ests per chain, 108000 per kthread [ 628.721170][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 628.750365][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 628.899406][ T10] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 628.901925][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.901959][ T10] usb 5-1: Product: syz [ 628.901967][ T10] usb 5-1: Manufacturer: syz [ 628.901975][ T10] usb 5-1: SerialNumber: syz [ 628.905925][ T10] usb 5-1: config 0 descriptor?? [ 629.128982][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 629.283333][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 630.192785][T12897] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5622] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12897] [ 630.532998][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 631.641787][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 632.230250][T12910] i2c i2c-0: delete_device: Extra parameters [ 632.238018][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'. [ 632.743557][ T5746] usb 5-1: USB disconnect, device number 26 [ 632.952563][T12921] trusted_key: encrypted_key: key user:syz not found [ 632.952589][T12921] FAULT_INJECTION: forcing a failure. [ 632.952589][T12921] name fail_futex, interval 1, probability 0, space 0, times 0 [ 632.952607][T12921] CPU: 0 UID: 0 PID: 12921 Comm: syz.2.2053 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.952625][T12921] Tainted: [L]=SOFTLOCKUP [ 632.952629][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 632.952636][T12921] Call Trace: [ 632.952640][T12921] [ 632.952646][T12921] dump_stack_lvl+0x100/0x190 [ 632.952669][T12921] should_fail_ex.cold+0x5/0xa [ 632.952688][T12921] get_futex_key+0x1c9/0x13e0 [ 632.952702][T12921] ? __pfx_get_futex_key+0x10/0x10 [ 632.952715][T12921] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 632.952730][T12921] futex_wait_setup+0x91/0x540 [ 632.952748][T12921] __futex_wait+0x19f/0x360 [ 632.952763][T12921] ? __pfx___futex_wait+0x10/0x10 [ 632.952777][T12921] ? __pfx_try_to_wake_up+0x10/0x10 [ 632.952792][T12921] ? futex_hash+0x311/0x400 [ 632.952806][T12921] ? __pfx_futex_wake_mark+0x10/0x10 [ 632.952825][T12921] ? find_held_lock+0x2b/0x80 [ 632.952837][T12921] ? futex_wake+0x4ea/0x5e0 [ 632.952855][T12921] futex_wait+0xe6/0x370 [ 632.952870][T12921] ? __pfx_futex_wait+0x10/0x10 [ 632.952892][T12921] do_futex+0x265/0x440 [ 632.952906][T12921] ? __pfx_do_futex+0x10/0x10 [ 632.952922][T12921] __x64_sys_futex+0x34f/0x4d0 [ 632.952937][T12921] ? __pfx___x64_sys_futex+0x10/0x10 [ 632.952955][T12921] do_syscall_64+0x123/0x7b0 [ 632.952970][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.952982][T12921] RIP: 0033:0x7f53a1f9fb19 [ 632.952992][T12921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.953003][T12921] RSP: 002b:00007f53a2e700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 632.953013][T12921] RAX: ffffffffffffffda RBX: 00007f53a2225fa8 RCX: 00007f53a1f9fb19 [ 632.953020][T12921] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f53a2225fa8 [ 632.953026][T12921] RBP: 00007f53a2225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 632.953032][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.953038][T12921] R13: 00007f53a2226038 R14: 00007ffc10cb9ef0 R15: 00007ffc10cb9fd8 [ 632.953051][T12921] [ 633.775997][T12926] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 633.833255][T12924] syz.1.2051 (12924): drop_caches: 2 [ 637.388747][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 637.392690][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 637.719467][ T10] usb 1-1: device descriptor read/64, error -32 [ 637.960337][ T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 638.119429][ T10] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 638.139516][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.139542][ T10] usb 1-1: Product: syz [ 638.139555][ T10] usb 1-1: Manufacturer: syz [ 638.139568][ T10] usb 1-1: SerialNumber: syz [ 638.170604][ T10] usb 1-1: config 0 descriptor?? [ 638.301630][ T5827] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 638.318888][T12968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12968 comm=syz.2.2059 [ 638.388135][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 638.495206][ T5827] usb 6-1: New USB device found: idVendor=17ef, idProduct=6009, bcdDevice=0.00 [ 638.507629][ T5827] usb 6-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 638.507740][ T5827] usb 6-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.507783][ T5827] usb 6-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 638.507812][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 638.507953][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.604101][ T5827] usb 6-1: config 0 descriptor?? [ 639.259502][ T5827] lenovo 0003:17EF:6009.000E: ignoring exceeding usage max [ 639.341371][ T5827] lenovo 0003:17EF:6009.000E: hidraw0: USB HID v0.11 Joystick [HID 17ef:6009] on usb-dummy_hcd.5-1/input0 [ 639.974043][ T5827] usb 6-1: USB disconnect, device number 4 [ 639.987448][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 640.606598][T12978] fido_id[12978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 641.329392][ T5827] usb 1-1: USB disconnect, device number 23 [ 641.382887][T12994] syzkaller0: entered promiscuous mode [ 641.382910][T12994] syzkaller0: entered allmulticast mode [ 642.163236][T13000] FAULT_INJECTION: forcing a failure. [ 642.163236][T13000] name failslab, interval 1, probability 0, space 0, times 0 [ 642.163258][T13000] CPU: 0 UID: 0 PID: 13000 Comm: syz.5.2073 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.163282][T13000] Tainted: [L]=SOFTLOCKUP [ 642.163298][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 642.163308][T13000] Call Trace: [ 642.163315][T13000] [ 642.163324][T13000] dump_stack_lvl+0x100/0x190 [ 642.163353][T13000] should_fail_ex.cold+0x5/0xa [ 642.163371][T13000] should_failslab+0xc2/0x120 [ 642.163387][T13000] kmem_cache_alloc_noprof+0x92/0x6a0 [ 642.163403][T13000] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 642.163420][T13000] ? inet_bind2_bucket_create+0x36/0x5f0 [ 642.163440][T13000] inet_bind2_bucket_create+0x36/0x5f0 [ 642.163458][T13000] inet_csk_get_port+0x15af/0x28e0 [ 642.163475][T13000] ? trace_inet_sock_set_state+0x78/0x220 [ 642.163489][T13000] ? __pfx_inet_csk_get_port+0x10/0x10 [ 642.163501][T13000] inet_csk_listen_start+0x205/0x450 [ 642.163514][T13000] __inet_listen_sk+0x172/0x2f0 [ 642.163528][T13000] inet_listen+0x93/0xd0 [ 642.163542][T13000] __sys_listen_socket+0x108/0x150 [ 642.163553][T13000] __sys_listen+0xa7/0x130 [ 642.163564][T13000] __x64_sys_listen+0x53/0x80 [ 642.163574][T13000] do_syscall_64+0x123/0x7b0 [ 642.163589][T13000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.163600][T13000] RIP: 0033:0x7f56f3f9fb19 [ 642.163610][T13000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.163619][T13000] RSP: 002b:00007f56f4ec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 642.163631][T13000] RAX: ffffffffffffffda RBX: 00007f56f4225fa0 RCX: 00007f56f3f9fb19 [ 642.163637][T13000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 642.163643][T13000] RBP: 00007f56f4037b70 R08: 0000000000000000 R09: 0000000000000000 [ 642.163649][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.163655][T13000] R13: 00007f56f4226038 R14: 00007f56f4225fa0 R15: 00007ffc843544b8 [ 642.163669][T13000] [ 644.877103][T13022] syz.0.2077 (13022): drop_caches: 2 [ 644.898960][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 644.950978][T13022] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 645.058658][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 645.060333][ T10] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 645.061191][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.065118][ T10] usb 6-1: config 0 descriptor?? [ 645.301224][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 645.305019][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 645.306884][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 645.306927][ T10] usb 6-1: media controller created [ 645.363536][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.708531][T13034] syz.2.2084 (13034): drop_caches: 2 [ 646.153120][ T10] az6027: usb out operation failed. (-71) [ 646.153139][ T10] stb0899_attach: Driver disabled by Kconfig [ 646.153147][ T10] az6027: no front-end attached [ 646.153147][ T10] [ 646.153591][ T10] az6027: usb out operation failed. (-71) [ 646.153607][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 646.157474][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 646.175068][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 646.175087][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 646.179176][ T10] usb 6-1: USB disconnect, device number 5 [ 646.424050][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 649.509545][T13052] syzkaller0: entered promiscuous mode [ 649.509567][T13052] syzkaller0: entered allmulticast mode [ 649.849410][T13057] syz.0.2091 (13057): drop_caches: 2 [ 650.983870][T13066] tmpfs: Bad value for 'huge' [ 651.006445][T13068] trusted_key: encrypted_key: insufficient parameters specified [ 651.104432][T13070] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 655.318688][ T11] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 655.958639][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 655.961835][ T11] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 655.988205][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.317158][ T11] usb 1-1: config 0 descriptor?? [ 656.672081][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 656.907103][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 656.934459][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 656.935180][ T11] usb 1-1: media controller created [ 657.178891][ T5827] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 657.264676][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.379969][ T5827] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 657.382897][ T5827] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 657.382923][ T5827] usb 2-1: config 0 has no interface number 0 [ 657.382956][ T5827] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 657.382979][ T5827] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 657.383014][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.386384][ T5827] usb 2-1: config 0 descriptor?? [ 657.388514][T13142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 657.461667][ T5827] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 658.033378][T13151] syz.5.2116 (13151): drop_caches: 2 [ 658.088474][ T11] az6027: usb out operation failed. (-71) [ 658.088524][ T11] stb0899_attach: Driver disabled by Kconfig [ 658.088549][ T11] az6027: no front-end attached [ 658.088549][ T11] [ 658.126934][ T11] az6027: usb out operation failed. (-71) [ 658.126954][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 658.153522][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 658.198727][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 658.198766][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 658.233591][ T11] usb 1-1: USB disconnect, device number 24 [ 659.247615][T13163] syz.4.2119 (13163): drop_caches: 2 [ 659.415245][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 659.821425][ T11] usb 2-1: USB disconnect, device number 42 [ 665.708696][ T11] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 666.386316][ T11] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 666.411062][ T11] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.411079][ T11] usb 1-1: config 0 has no interface number 0 [ 666.411099][ T11] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 666.411112][ T11] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 666.411132][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.412293][ T11] usb 1-1: config 0 descriptor?? [ 666.432865][T13223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 666.446097][ T11] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 668.651143][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 668.653481][ T5831] usb 1-1: USB disconnect, device number 25 [ 672.241585][ T5633] Bluetooth: hci5: command 0x0406 tx timeout [ 673.748664][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 673.751862][T13278] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2152'. [ 673.899516][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 673.900298][ T10] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 673.901265][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.905828][ T10] usb 2-1: config 0 descriptor?? [ 674.040643][T13285] nvme_fabrics: unknown parameter or missing value 'reconnect_delay=' in ctrl creation request [ 674.584481][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 674.588445][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 674.591866][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 674.591907][ T10] usb 2-1: media controller created [ 675.025131][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.584980][ T10] az6027: usb out operation failed. (-71) [ 675.585015][ T10] stb0899_attach: Driver disabled by Kconfig [ 675.585072][ T10] az6027: no front-end attached [ 675.585072][ T10] [ 675.587040][ T10] az6027: usb out operation failed. (-71) [ 675.588543][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 675.827062][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 675.844817][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 675.844831][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 675.865693][ T10] usb 2-1: USB disconnect, device number 43 [ 675.957399][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 676.631000][T13300] 0ªî{X¹¦: left allmulticast mode [ 676.667376][T13300] sit0: left promiscuous mode [ 676.673798][ T31] audit: type=1400 audit(1794232088.756:756): avc: denied { accept } for pid=13299 comm="syz.0.2158" lport=58305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 676.798061][ T31] audit: type=1326 audit(1794232088.876:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.5.2157" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56f3f9fb19 code=0x0 [ 677.271164][ T31] audit: type=1326 audit(1794232089.356:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 677.271223][ T31] audit: type=1326 audit(1794232089.356:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 677.374998][ T31] audit: type=1326 audit(1794232089.406:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 677.375055][ T31] audit: type=1326 audit(1794232089.406:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 677.375094][ T31] audit: type=1326 audit(1794232089.406:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 677.375133][ T31] audit: type=1326 audit(1794232089.406:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 677.375173][ T31] audit: type=1326 audit(1794232089.406:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 677.375211][ T31] audit: type=1326 audit(1794232089.406:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.1.2160" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 680.146957][T13321] syz.0.2161 (13321): drop_caches: 2 [ 680.410740][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.410816][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.470741][T13355] syz.4.2170 (13355): drop_caches: 2 [ 684.105589][ T31] audit: type=1326 audit(1794232096.186:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.106190][ T31] audit: type=1326 audit(1794232096.186:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.108469][ T31] audit: type=1326 audit(1794232096.186:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.109184][ T31] audit: type=1326 audit(1794232096.196:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.109885][ T31] audit: type=1326 audit(1794232096.196:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.111744][ T31] audit: type=1326 audit(1794232096.196:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.170465][ T31] audit: type=1326 audit(1794232096.226:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.172013][ T31] audit: type=1326 audit(1794232096.256:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.174105][ T31] audit: type=1326 audit(1794232096.256:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 684.174831][ T31] audit: type=1326 audit(1794232096.256:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936bb9fb19 code=0x7ffc0000 [ 686.101805][T13371] jffs2: notice: (13371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 686.321376][T13371] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 687.156388][ T5827] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 687.299536][ T5827] usb 3-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 687.302363][ T5827] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 687.302403][ T5827] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 687.302438][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.307827][T13380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 687.357069][ T5827] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 688.339126][ T5827] usb 3-1: USB disconnect, device number 30 [ 691.284900][T13426] jffs2: notice: (13426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 692.869053][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 692.869077][ T31] audit: type=1800 audit(1794232104.916:785): pid=13447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2187" name=08 dev="sda1" ino=2049 res=0 errno=-22 [ 693.010688][T13449] syz.0.2194 (13449): drop_caches: 2 [ 693.041243][T13449] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 693.104973][T13453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13453 comm=syz.2.2195 [ 696.120912][T13484] [ 696.123280][T13484] ====================================================== [ 696.130300][T13484] WARNING: possible circular locking dependency detected [ 696.137325][T13484] syzkaller #0 Tainted: G L [ 696.143304][T13484] ------------------------------------------------------ [ 696.150314][T13484] syz.2.2204/13484 is trying to acquire lock: [ 696.156366][T13484] ffffffff90be60e0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 696.165404][T13484] [ 696.165404][T13484] but task is already holding lock: [ 696.172747][T13484] ffff888031514358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111b/0x3700 [ 696.182121][T13484] [ 696.182121][T13484] which lock already depends on the new lock. [ 696.182121][T13484] [ 696.192506][T13484] [ 696.192506][T13484] the existing dependency chain (in reverse order) is: [ 696.201495][T13484] [ 696.201495][T13484] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 696.209729][T13484] lock_acquire+0x1d1/0x380 [ 696.214741][T13484] __mutex_lock+0x19f/0x1c10 [ 696.219835][T13484] md_alloc+0x3d0/0x10c0 [ 696.224580][T13484] md_probe+0x73/0xf0 [ 696.229061][T13484] blk_probe_dev+0x149/0x1e0 [ 696.234155][T13484] blk_request_module+0x16/0xc0 [ 696.239511][T13484] blkdev_get_no_open+0x9b/0xf0 [ 696.244865][T13484] blkdev_open+0x141/0x4f0 [ 696.249781][T13484] do_dentry_open+0x674/0x1470 [ 696.255075][T13484] vfs_open_consume+0xcc/0x460 [ 696.260344][T13484] path_openat+0x1547/0x23f0 [ 696.265440][T13484] do_file_open+0x20e/0x430 [ 696.270445][T13484] do_sys_openat2+0x163/0x1d0 [ 696.275627][T13484] __x64_sys_openat+0x12d/0x210 [ 696.280985][T13484] do_syscall_64+0x123/0x7b0 [ 696.286077][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.292472][T13484] [ 696.292472][T13484] -> #1 (disks_mutex){+.+.}-{4:4}: [ 696.299745][T13484] lock_acquire+0x1d1/0x380 [ 696.304754][T13484] __mutex_lock+0x19f/0x1c10 [ 696.309853][T13484] md_alloc+0x3e/0x10c0 [ 696.314507][T13484] md_probe+0x73/0xf0 [ 696.319009][T13484] blk_probe_dev+0x149/0x1e0 [ 696.324104][T13484] blk_request_module+0x16/0xc0 [ 696.329460][T13484] blkdev_get_no_open+0x9b/0xf0 [ 696.334816][T13484] blkdev_open+0x141/0x4f0 [ 696.339734][T13484] do_dentry_open+0x674/0x1470 [ 696.344999][T13484] vfs_open_consume+0xcc/0x460 [ 696.350266][T13484] path_openat+0x1547/0x23f0 [ 696.355360][T13484] do_file_open+0x20e/0x430 [ 696.360364][T13484] do_sys_openat2+0x163/0x1d0 [ 696.365549][T13484] __x64_sys_openat+0x12d/0x210 [ 696.370902][T13484] do_syscall_64+0x123/0x7b0 [ 696.375993][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.382384][T13484] [ 696.382384][T13484] -> #0 (major_names_lock){+.+.}-{4:4}: [ 696.390090][T13484] check_prev_add+0xeb/0xe60 [ 696.395202][T13484] __lock_acquire+0x1528/0x1f40 [ 696.400556][T13484] lock_acquire+0x1d1/0x380 [ 696.405564][T13484] __mutex_lock+0x19f/0x1c10 [ 696.410658][T13484] blk_probe_dev+0x28/0x1e0 [ 696.415663][T13484] blk_request_module+0x16/0xc0 [ 696.421017][T13484] blkdev_get_no_open+0x9b/0xf0 [ 696.426367][T13484] bdev_file_open_by_dev+0x70/0x210 [ 696.432064][T13484] md_import_device+0x120/0x360 [ 696.437418][T13484] md_add_new_disk+0x4b6/0x1820 [ 696.442772][T13484] md_ioctl+0x2c1d/0x3700 [ 696.447602][T13484] blkdev_ioctl+0x5ad/0x6f0 [ 696.452606][T13484] __x64_sys_ioctl+0x18e/0x210 [ 696.457869][T13484] do_syscall_64+0x123/0x7b0 [ 696.462960][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.469356][T13484] [ 696.469356][T13484] other info that might help us debug this: [ 696.469356][T13484] [ 696.479578][T13484] Chain exists of: [ 696.479578][T13484] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 696.479578][T13484] [ 696.492934][T13484] Possible unsafe locking scenario: [ 696.492934][T13484] [ 696.500359][T13484] CPU0 CPU1 [ 696.505702][T13484] ---- ---- [ 696.511042][T13484] lock(&mddev->reconfig_mutex); [ 696.516048][T13484] lock(disks_mutex); [ 696.522612][T13484] lock(&mddev->reconfig_mutex); [ 696.530134][T13484] lock(major_names_lock); [ 696.534617][T13484] [ 696.534617][T13484] *** DEADLOCK *** [ 696.534617][T13484] [ 696.542734][T13484] locks held by syz.2.2204/13484: 1, on CPU#0: [ 696.548864][T13484] #0: ffff888031514358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111b/0x3700 [ 696.558675][T13484] [ 696.558675][T13484] stack backtrace: [ 696.564568][T13484] CPU: 0 UID: 0 PID: 13484 Comm: syz.2.2204 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.575484][T13484] Tainted: [L]=SOFTLOCKUP [ 696.579785][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 696.589820][T13484] Call Trace: [ 696.593085][T13484] [ 696.596012][T13484] dump_stack_lvl+0x100/0x190 [ 696.600680][T13484] print_circular_bug.cold+0x178/0x1be [ 696.606130][T13484] check_noncircular+0x146/0x160 [ 696.611054][T13484] ? __pfx_get_page_from_freelist+0x10/0x10 [ 696.616934][T13484] check_prev_add+0xeb/0xe60 [ 696.621510][T13484] __lock_acquire+0x1528/0x1f40 [ 696.626348][T13484] lock_acquire+0x1d1/0x380 [ 696.630834][T13484] ? blk_probe_dev+0x28/0x1e0 [ 696.635499][T13484] ? __pfx___might_resched+0x10/0x10 [ 696.640769][T13484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.646815][T13484] __mutex_lock+0x19f/0x1c10 [ 696.651395][T13484] ? blk_probe_dev+0x28/0x1e0 [ 696.656060][T13484] ? blk_probe_dev+0x28/0x1e0 [ 696.660718][T13484] ? lock_acquire+0x1d1/0x380 [ 696.665380][T13484] ? find_inode_fast+0xa5/0xa30 [ 696.670212][T13484] ? find_held_lock+0x2b/0x80 [ 696.674869][T13484] ? __pfx___mutex_lock+0x10/0x10 [ 696.679876][T13484] ? find_inode_fast+0x1fa/0xa30 [ 696.684796][T13484] ? ilookup+0x184/0x210 [ 696.689018][T13484] ? blk_probe_dev+0x28/0x1e0 [ 696.693677][T13484] blk_probe_dev+0x28/0x1e0 [ 696.698162][T13484] blk_request_module+0x16/0xc0 [ 696.703000][T13484] blkdev_get_no_open+0x9b/0xf0 [ 696.707831][T13484] bdev_file_open_by_dev+0x70/0x210 [ 696.713015][T13484] md_import_device+0x120/0x360 [ 696.717869][T13484] md_add_new_disk+0x4b6/0x1820 [ 696.722702][T13484] ? rep_movs_alternative+0x30/0xa0 [ 696.727889][T13484] md_ioctl+0x2c1d/0x3700 [ 696.732202][T13484] ? __pfx_md_ioctl+0x10/0x10 [ 696.736863][T13484] ? do_vfs_ioctl+0x226/0x13e0 [ 696.741608][T13484] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 696.748440][T13484] ? __fget_files+0x34/0x3d0 [ 696.753020][T13484] ? __pfx_md_ioctl+0x10/0x10 [ 696.757677][T13484] blkdev_ioctl+0x5ad/0x6f0 [ 696.762164][T13484] ? __pfx_blkdev_ioctl+0x10/0x10 [ 696.767172][T13484] ? selinux_file_ioctl+0x1e0/0x290 [ 696.772350][T13484] ? selinux_file_ioctl+0x1e7/0x290 [ 696.777529][T13484] ? __pfx_blkdev_ioctl+0x10/0x10 [ 696.782535][T13484] __x64_sys_ioctl+0x18e/0x210 [ 696.787280][T13484] do_syscall_64+0x123/0x7b0 [ 696.791859][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.797734][T13484] RIP: 0033:0x7f53a1f9fb19 [ 696.802128][T13484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.821716][T13484] RSP: 002b:00007f53a2e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.830109][T13484] RAX: ffffffffffffffda RBX: 00007f53a2225fa0 RCX: 00007f53a1f9fb19 [ 696.838062][T13484] RDX: 0000000000000000 RSI: 0000000040140921 RDI: 0000000000000006 [ 696.846014][T13484] RBP: 00007f53a2037b70 R08: 0000000000000000 R09: 0000000000000000 [ 696.853965][T13484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.861915][T13484] R13: 00007f53a2226038 R14: 00007f53a2225fa0 R15: 00007ffc10cb9fd8 [ 696.869873][T13484] [ 697.018731][T13490] syz.1.2206 (13490): drop_caches: 2 [ 697.031029][T13490] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 697.092302][T13484] md: could not open device unknown-block(0,0). [ 697.092343][T13484] md: md_import_device returned -6