last executing test programs: 4m44.839592796s ago: executing program 3 (id=462): sched_setscheduler(0x0, 0x1, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x7000000000000000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x3, 0xac5) r1 = openat$comedi(0xffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000b80)={'c6xdigio\x00', [0x3c4, 0x8, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000c40)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) 4m43.057704387s ago: executing program 3 (id=466): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x29a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m41.771891539s ago: executing program 3 (id=472): syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f090038200000000000000001000001000000010035000001000001000000040000000005dc0000657468300000000000000000000000007d49f1118c174fc5056a8ed75e5e2c7a96beb0273c569d7260ec37fd66096a9477c5c30f7b9872738376331036d33c5629627f27c4c858838600db3066108b6db6c035378ab2dbb804b3412aeda29b68b2c4019a2719ee786889ba427b5f585a17a250aa3e4b344d2716f4bdb89dd4e789484916e0dd27"], 0x0) (fail_nth: 2) 4m41.144953281s ago: executing program 3 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x181) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0xfd, 0x4, 0x7fff7ffc}]}) mount$bind(&(0x7f00000008c0)='.\x00', &(0x7f0000000900)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000940)='./file0/../file0\x00') mount$bind(&(0x7f0000000980)='.\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00') r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a48000000090a0103000000000096c81e0f84ac1b0000000200000008000a40000000010900020073797a31000000000900010073797a300000cbcab54f960a50492d3801e1b7000008000540000000080c000980080002800400018014000000110001000000000000"], 0x70}}, 0x0) io_setup(0x4, &(0x7f0000000500)) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r11, r12, 0x25, 0x4, @val=@tcx}, 0x1c) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="010000000000000300000800000078000180080003000200000008000300000000000800070000000000080003000000000008000300030000001400020070696d3672656730000000000000000008000100cd0d51245dac77453e17d99840b820426224cfcc0d0bb99136ee916df872ab0f6cf563e6177cb5c7c19c4811cabb616c2473", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x40}, 0x8044) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4m40.055368025s ago: executing program 3 (id=477): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000600), 0x0, 0x2) io_setup(0xb, &(0x7f0000000640)=0x0) io_submit(r3, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)={0x414, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x404, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x8, 0xda, 0x0, 0x0, @fd}, @generic="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", @nested={0x2d1, 0xe8, 0x0, 0x1, [@generic="e982c127c1252feb3c8ac96423881f786e543afb0a22af31fc619b0b9fd19c9c31609bfebb0a17446479a82b4d3e60d08dd12ba6a542128bc65746dc0a76b45bc820b4f95ed713e6b5bfa04d76d261fb42d8c12c67a9ec03f66f2d9bdd4bea3340261536f6622e52a7a5d627ecc6111d27ecc5fe5c00bbfe297d743d37034a9ca7bd8b1eb7667385756138fb4418427a2d85eb1811c97cf28987912de9c2c6d90d1d3d0098d955d884c28892f1", @nested={0x21d, 0x9, 0x0, 0x1, [@generic="c65c4b7d9160ae32ddb7273ebd4b0f5bfbd32fa18a35e53cb87905ea7ea9c3d29038a105401b7dad79d11536a62e24bf716a388b0bdbdc1b6896c05d827274634f6ba6326b94773163c3b989278731fdd553fe642a3f8e37a01363ffc3dd832c9f9340a280cab814792200a82360912e7322e7daacbd1ece29a9c26927a7cb142b926290966db81fdd08e03974fd5e5c605aaf8cc1824269cff896597cd641d305b4e3acd2e18f2be9647362a683a6f6d3cf40b757bb46ca42ce1a81cb19cebcbc023a0cf51f8c7037662986f4d27b491616d1a2657078bbdda28909a1e718336a1b3da6560e8a74ff4d13763f11efac182acb50838adb58f0", @nested={0x4, 0xf6}, @nested={0x4, 0xaf}, @nested={0x4, 0x13d}, @nested={0x85, 0xcc, 0x0, 0x1, [@generic="f85898f26117c85ed1e064fa824dec5c21df8826fd3500de64bc0a635564078ddf65ce090345949cf0e3612462840b4b2242a70cd88ef67d990d94b260dd0c5937855eca06668c92f5", @typed={0x8, 0x12b, 0x0, 0x0, @uid}, @typed={0x8, 0x10d, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x6f, 0x0, 0x0, @uid}, @typed={0xc, 0x15e, 0x0, 0x0, @u64=0xb8}, @nested={0x8, 0x157, 0x0, 0x1, [@typed={0x4, 0xd7, 0x0, 0x0, @binary}]}]}, @typed={0xc, 0xf1, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@remote}, @generic="a35bf147a613eabdd5214aee9ca63f8b0a7468b1634e0e85a721e3b4706bc42bf7babc896812cc9d69d86ccc4a50e365e46f9512d8800791df6e1253f3eda765418925980f7e4865e84f796cc6ac5e9cde0b6b998098d290f3214856c038996fd700601c889cd7d4b7911008525163352bb5bd62", @nested={0x4, 0x91}]}]}]}]}, 0x414}], 0x1}, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(r1, &(0x7f0000000740)='./file1\x00', 0x1c2) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='selinuxfs\x00', 0x827086, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='27', 0x2) syz_open_dev$I2C(0x0, 0x0, 0x20000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x298) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000300)=0x80000000, 0x4) listen(r7, 0x39b3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f0000000040), &(0x7f0000004880)=@udp=r7}, 0x20) 4m37.392851034s ago: executing program 3 (id=483): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000005c0)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x9, 0x0, "2f2c2c1a47e12c34b0a47073d4dbd39710a9b11ae9224dc5e94fab6c3c6403aa9e6e74264500fad903cd90ca648165b579bb6d44d2ddc326291116000d85260c0b2bd8c795294543b9d33da25bc70b1e"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000d96600000300000000001c00090008000000", @ANYRES8=r0], 0x4c}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e00070000e5f38008001c00"/32, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x40080d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d01, &(0x7f0000000480)="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") connect$can_bcm(r2, &(0x7f0000000000), 0x9) sendto$inet6(r2, &(0x7f0000000040)="e02a7bb6e7da72697b2cdbbcff42a02b238bb691348acb814839e600969dac7c83d004000000e536bc54e8ba122e63c7063ab3697ca58e7d", 0x38, 0x4040804, &(0x7f0000000080)={0x1d, 0x4e22, 0xd000000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x36}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m36.551668168s ago: executing program 32 (id=483): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000005c0)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x9, 0x0, "2f2c2c1a47e12c34b0a47073d4dbd39710a9b11ae9224dc5e94fab6c3c6403aa9e6e74264500fad903cd90ca648165b579bb6d44d2ddc326291116000d85260c0b2bd8c795294543b9d33da25bc70b1e"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000d96600000300000000001c00090008000000", @ANYRES8=r0], 0x4c}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e00070000e5f38008001c00"/32, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x40080d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d01, &(0x7f0000000480)="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") connect$can_bcm(r2, &(0x7f0000000000), 0x9) sendto$inet6(r2, &(0x7f0000000040)="e02a7bb6e7da72697b2cdbbcff42a02b238bb691348acb814839e600969dac7c83d004000000e536bc54e8ba122e63c7063ab3697ca58e7d", 0x38, 0x4040804, &(0x7f0000000080)={0x1d, 0x4e22, 0xd000000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x36}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22.789070747s ago: executing program 5 (id=1018): mkdirat(0xffffffffffffff9c, 0x0, 0x777) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005e00650000002f907800000000e000000124808100000200107f1a1000080000013468000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558000000006add73d7c0c0e9aad6ae33c56a8db5155b784a4381f4ca15e62b359ba77ac614e564d99bdad4da24cc2c3aa3a8d12bc773d7df80318e1d634938d807060b3ed55c8adb81e6e35cc4aa7fc8ae8c0a5459a1b62150d7570b7b24c35d74499b17780a"], 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x300, 0x0, {0xfffffffd, 0x0, 0xffffffff, 0xfffffff9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sec\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1400000010000100000000ecffffff000500000a2c0000000e0a3f0200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000010f1ff00000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) msgget$private(0x0, 0x240) mount(0x0, &(0x7f0000000500)='./sec\x00', &(0x7f0000000600)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sec\x00', 0x583002, 0x120) fcntl$setlease(r5, 0x400, 0x2) socket$nl_route(0x10, 0x3, 0x0) 22.760536212s ago: executing program 1 (id=1019): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) unshare(0x22020600) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r3, 0x0, 0x0, 0xe7c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x54}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000002c0)) r7 = dup2(r6, r6) write$vhost_msg_v2(r7, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000600)=""/196, 0xc4, 0x0, 0x3, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000700)=0x1) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 20.564761521s ago: executing program 0 (id=1021): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0xf500) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 19.395585989s ago: executing program 1 (id=1023): mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./bus\x00', 0x180) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x2603) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2000, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000580)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r6, &(0x7f0000003580)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0xd) fchdir(r7) r8 = open(&(0x7f000001c5c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x141d40, 0x125) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) read$FUSE(r8, &(0x7f000001c600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x40004, &(0x7f0000003480)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@subj_type={'subj_type', 0x3d, 'uuid=off'}}, {@flag='nolazytime'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '/dev/i2c-#\x00'}}, {@uid_gt={'uid>', r2}}, {@dont_appraise}, {@uid_gt={'uid>', r9}}, {@euid_gt={'euid>', r10}}]}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0x0, 0x10, 0x0, 0x0}], 0x1}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001300), 0x280e, &(0x7f0000000200)={[{@uuid_off}, {@default_permissions}, {@metacopy_off}, {@uuid_null}, {@volatile}]}) chdir(&(0x7f0000001380)='./bus\x00') 19.326834304s ago: executing program 5 (id=1024): openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='mtd0\x00', 0x0, &(0x7f0000000100)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x79) rmdir(&(0x7f0000000180)='./file0/file0\x00') 19.200381455s ago: executing program 4 (id=1026): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000400)={0x23, 0x1, 0x8}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) r1 = semget(0x0, 0x1, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/246) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019540)=0x410000002) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x1b0) pread64(0xffffffffffffffff, &(0x7f00000195c0)=""/102400, 0x19000, 0xffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000325c0)={0x7, 0x3, &(0x7f0000032700)=ANY=[@ANYBLOB="720ac4ff030000007110b100000000009500000000000000a4457da719e1ba9dd958c583ceae530be9a81b307b4bde25c71b2eef306ced5acbc14809e3e159be13b0f6d2ed472426"], &(0x7f00000326c0)='GPL\x00'}, 0x90) 19.154928429s ago: executing program 0 (id=1027): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, 0x0, 0x0}, 0x1) 18.605176347s ago: executing program 4 (id=1028): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019700)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019740)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000197c0)=@new_dev={0x2, 0xff2, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x39}}}, &(0x7f0000019800)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019940)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000019980)='./dev\x00', &(0x7f00000199c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019a00)='./mnt\x00', 0x1ff) mount(&(0x7f0000019a40)=@filename='./dev/sda1\x00', &(0x7f0000019a80)='./mnt\x00', &(0x7f0000019ac0)='ext4\x00', 0x8410, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000019b00)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r6, &(0x7f0000019b40)=ANY=[@ANYBLOB='\b\x00'], 0x484080) r7 = dup(r4) syz_ublk_setup_queues(r7, r5, &(0x7f0000019840)={0x0, 0x3e80, 0x800, 0x3, 0x32c}, 0x0, 0x1, &(0x7f00000198c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x7, 0x5c0, 0x0, 0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000af0600000008000300", @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) 18.535510288s ago: executing program 5 (id=1029): socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}]}}}}}, 0x0) sched_setaffinity(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYRES16=r4, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbccf1c260bdcd5c1a550eef5330ae0", @ANYRES8=r2, @ANYRESOCT=r4, @ANYRES64=0x0], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r3, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 15.343536399s ago: executing program 1 (id=1030): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000005600010600000000000000"], 0x18}], 0x1}, 0x800) 15.045067378s ago: executing program 4 (id=1031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000500), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000540)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000005c0)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000600)={r6}) 14.827649601s ago: executing program 0 (id=1033): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000600), 0x0, 0x2) io_setup(0xb, &(0x7f0000000640)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000700)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x15000002) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(r0, &(0x7f0000000740)='./file1\x00', 0x1c2) write(0xffffffffffffffff, &(0x7f00000002c0)='27', 0x2) syz_open_dev$I2C(0x0, 0x0, 0x20000) 10.578625338s ago: executing program 1 (id=1038): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000400)={0x23, 0x1, 0x8}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) r1 = semget(0x0, 0x1, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/246) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x20, '\x00', 0x0, @sock_ops}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019540)=0x410000002) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x1b0) pread64(0xffffffffffffffff, &(0x7f00000195c0)=""/102400, 0x19000, 0xffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000325c0)={0x7, 0x3, &(0x7f0000032700)=ANY=[@ANYBLOB="720ac4ff030000007110b100000000009500000000000000a4457da719e1ba9dd958c583ceae530be9a81b307b4bde25c71b2eef306ced5acbc14809e3e159be13b0f6d2ed472426"], &(0x7f00000326c0)='GPL\x00'}, 0x90) 9.673828867s ago: executing program 2 (id=1039): openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x800000, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x79) rmdir(&(0x7f0000000180)='./file0/file0\x00') 8.92174929s ago: executing program 1 (id=1040): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019700)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019740)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000197c0)=@new_dev={0x2, 0xff2, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x39}}}, &(0x7f0000019800)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019940)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000019980)='./dev\x00', &(0x7f00000199c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019a00)='./mnt\x00', 0x1ff) mount(&(0x7f0000019a40)=@filename='./dev/sda1\x00', &(0x7f0000019a80)='./mnt\x00', &(0x7f0000019ac0)='ext4\x00', 0x8410, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000019b00)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r6, &(0x7f0000019b40)=ANY=[@ANYBLOB='\b\x00'], 0x484080) r7 = dup(r4) syz_ublk_setup_queues(r7, r5, &(0x7f0000019840)={0x0, 0x3e80, 0x800, 0x3, 0x32c}, 0x0, 0x1, &(0x7f00000198c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x7, 0x5c0, 0x0, 0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000af0600000008000300", @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) 8.801286137s ago: executing program 2 (id=1041): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000019300)={0x3f}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001014d9ec26bd7020fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004c00000b"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000400)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffd, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) ioctl$UI_DEV_CREATE(r0, 0x5501) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x0, 0x10001, 0x4, 0x3, 0x2, 0x80, 0x6}, &(0x7f0000000240)={0x6, 0x8, 0xc9b, 0x1, 0x7c52, 0x6, 0xc, 0x5}, &(0x7f0000000280)={0x7fffffffffffffff, 0x23f3, 0x3c, 0x3, 0x400000, 0x9, 0x9, 0x8000000000000000}, &(0x7f0000000300)={r3, r4+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8}) 7.389227075s ago: executing program 1 (id=1042): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019700)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019740)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000197c0)=@new_dev={0x2, 0xff2, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x39}}}, &(0x7f0000019800)) mkdirat(0xffffffffffffff9c, &(0x7f0000019940)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000019980)='./dev\x00', &(0x7f00000199c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019a00)='./mnt\x00', 0x1ff) mount(&(0x7f0000019a40)=@filename='./dev/sda1\x00', &(0x7f0000019a80)='./mnt\x00', &(0x7f0000019ac0)='ext4\x00', 0x8410, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019b00)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r4, &(0x7f0000019b40)=ANY=[@ANYBLOB='\b\x00'], 0x484080) 7.196793735s ago: executing program 4 (id=1043): fsopen(&(0x7f0000000180)='pvfs2\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40000, 0x3, 0x29a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.172512114s ago: executing program 0 (id=1044): mount(0x0, &(0x7f0000000240)='./gadget\x00', &(0x7f0000000280)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') 7.039493688s ago: executing program 2 (id=1045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 6.60757847s ago: executing program 0 (id=1046): mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./bus\x00', 0x180) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x2603) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2000, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000580)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r6, &(0x7f0000003580)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f000001c580)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xd) fchdir(r8) r9 = open(&(0x7f000001c5c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x141d40, 0x125) read$FUSE(r9, &(0x7f000001c600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x40004, &(0x7f0000003480)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@subj_type={'subj_type', 0x3d, 'uuid=off'}}, {@flag='nolazytime'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '/dev/i2c-#\x00'}}, {@uid_gt={'uid>', r2}}, {@dont_appraise}, {@uid_gt}, {@euid_gt={'euid>', r10}}]}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0x0, 0x10, 0x0, 0x0}], 0x1}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001300), 0x280e, &(0x7f0000000200)={[{@uuid_off}, {@default_permissions}, {@metacopy_off}, {@uuid_null}, {@volatile}]}) chdir(&(0x7f0000001380)='./bus\x00') 6.602221327s ago: executing program 2 (id=1047): socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbccf1c260bdcd5c1a550eef5330ae0", @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x34}}, 0x0) 6.369841713s ago: executing program 5 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000005600010600000000000000"], 0x18}], 0x1}, 0x800) 5.421114991s ago: executing program 2 (id=1049): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000400)={0x23, 0x1, 0x8}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) r1 = semget(0x0, 0x1, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/246) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x20, '\x00', 0x0, @sock_ops}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019540)=0x410000002) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000032680)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000032780), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000327c0)={0x0, 0x0, &(0x7f0000032800)={&(0x7f0000032840)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) r7 = syz_open_procfs(0x0, &(0x7f0000019580)='smaps\x00') pread64(r7, &(0x7f00000195c0)=""/102400, 0x19000, 0xffffffff8) 4.678670225s ago: executing program 4 (id=1050): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0xfca804a0, 0xd, 0x0, &(0x7f0000000180)="0400c811fe37db1ba91d3305a7", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6(0xa, 0xf, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x141102) writev(r1, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000840)={0x2, 0x1bd, @loopback}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000880)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea9628763708efd4f4da8758b8f226d184dff8b1544d4e7ba807ad5ef2754bc0c7e2e864965f60c981e52284e9be62e0e967ad68e732254637f82eeb8ca469a6b2678fa8dd73c4829472a6c514c86fdc7fcf0104d065f5f10413797a79443", 0xac) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f00000009c0)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000000a00)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) 2.307027556s ago: executing program 5 (id=1051): openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x800000, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x79) rmdir(&(0x7f0000000180)='./file0/file0\x00') 2.05367362s ago: executing program 2 (id=1052): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x2b, @broadcast, 0x4e24, 0x2, 'rr\x00', 0x11, 0x7, 0x6b}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x9, 0x80000000, 0x6}}, 0x44) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xed8, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe70, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe58, 0x3, [@m_pedit={0xe54, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x400, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x8003, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0xfffffffe}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x7ffffffe, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x3, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0xfffc, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x6, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x3, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x4, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x7, 0x6, "2fcdfb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xed8}}, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x13}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.816842752s ago: executing program 0 (id=1053): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20042, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000500), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000540)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000005c0)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000600)={r5}) 1.124743794s ago: executing program 4 (id=1054): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019700)=0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019740)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000197c0)=@new_dev={0x2, 0xff2, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x39}}}, &(0x7f0000019800)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019940)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000019980)='./dev\x00', &(0x7f00000199c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019a00)='./mnt\x00', 0x1ff) mount(&(0x7f0000019a40)=@filename='./dev/sda1\x00', &(0x7f0000019a80)='./mnt\x00', &(0x7f0000019ac0)='ext4\x00', 0x8410, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000019b00)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r6, &(0x7f0000019b40)=ANY=[@ANYBLOB='\b\x00'], 0x484080) r7 = dup(r4) syz_ublk_setup_queues(r7, r5, &(0x7f0000019840)={0x0, 0x3e80, 0x800, 0x3, 0x32c}, 0x0, 0x1, &(0x7f00000198c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x7, 0x5c0, 0x0, 0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000af0600000008000300", @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) 0s ago: executing program 5 (id=1055): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000600), 0x0, 0x2) io_setup(0xb, &(0x7f0000000640)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000700)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x15000002) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(r0, &(0x7f0000000740)='./file1\x00', 0x1c2) write(0xffffffffffffffff, &(0x7f00000002c0)='27', 0x2) syz_open_dev$I2C(0x0, 0x0, 0x20000) kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 349.594520][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 349.797546][ T5331] usb 3-1: USB disconnect, device number 29 [ 349.812272][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 349.813212][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.813234][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.813245][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.813267][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.277044][ T8264] syz.1.597 (8264): drop_caches: 2 [ 350.393741][ T5743] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 350.555714][ T5743] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 350.557440][ T5743] usb 6-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 350.557481][ T5743] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.557496][ T5743] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 350.557511][ T5743] usb 6-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 350.557526][ T5743] usb 6-1: config 0 interface 0 has no altsetting 0 [ 350.557543][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.559357][ T5743] usb 6-1: config 0 descriptor?? [ 350.559807][ T8274] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 350.903366][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.933515][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.946951][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.947209][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.967036][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.967256][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.584163][ T5743] usbhid 6-1:0.0: can't add hid device: -71 [ 351.584221][ T5743] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 351.607718][ T5743] usb 6-1: USB disconnect, device number 3 [ 352.602142][ T8309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.047597][ T24] usb 5-1: USB disconnect, device number 24 [ 353.098251][ T5721] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 353.285132][ T5721] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 353.305492][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.305520][ T5721] usb 3-1: Product: syz [ 353.305535][ T5721] usb 3-1: Manufacturer: syz [ 353.305550][ T5721] usb 3-1: SerialNumber: syz [ 353.712714][ T5721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 353.712766][ T5721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 353.712786][ T5721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 353.762415][ T5721] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 353.788781][ T5721] usb 3-1: USB disconnect, device number 30 [ 353.814165][ T5331] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 354.000215][ T5331] usb 1-1: Using ep0 maxpacket: 8 [ 354.002124][ T5331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 354.002154][ T5331] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 354.002954][ T5331] usb 1-1: config 4 interface 0 has no altsetting 0 [ 354.044623][ T5331] usb 1-1: string descriptor 0 read error: -22 [ 354.044669][ T5331] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 354.820302][ T8327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.820485][ T5331] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 354.827335][ T5331] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 354.827602][ T5331] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 354.827637][ T5331] usb 1-1: media controller created [ 354.948899][ T5331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.088450][ T5331] zl10353_read_register: readreg error (reg=127, ret==0) [ 357.523654][ T5331] usb 1-1: USB disconnect, device number 26 [ 359.813396][ T8367] nvme nvme0: rdma_resolve_addr failed (-99). [ 361.032125][ T8389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.863107][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 362.023680][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 362.024245][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 362.026686][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.026727][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.028109][ T10] usb 6-1: config 0 descriptor?? [ 362.079176][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 362.437678][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 362.437694][ T30] audit: type=1400 audit(1792426977.775:1614): avc: denied { read write } for pid=8390 comm="syz.5.627" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 362.474638][ T30] audit: type=1400 audit(1792426977.775:1615): avc: denied { open } for pid=8390 comm="syz.5.627" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 362.509767][ T4950] bcm5974 6-1:0.0: could not read from device [ 362.578566][ T4950] bcm5974 6-1:0.0: could not read from device [ 362.593739][ T10] usb 6-1: USB disconnect, device number 4 [ 365.135274][ T30] audit: type=1400 audit(1792426980.301:1616): avc: denied { cmd } for pid=8417 comm="syz.1.635" path="socket:[26097]" dev="sockfs" ino=26097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 367.102793][ T8432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.274857][ T30] audit: type=1400 audit(1792426985.100:1617): avc: denied { create } for pid=8451 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 370.430422][ T30] audit: type=1400 audit(1792426985.203:1618): avc: denied { read } for pid=8451 comm="syz.5.645" name="stats" dev="binder" ino=1048712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 370.430597][ T30] audit: type=1400 audit(1792426985.203:1619): avc: denied { open } for pid=8451 comm="syz.5.645" path="/dev/binderfs/binder_logs/stats" dev="binder" ino=1048712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 370.430746][ T30] audit: type=1400 audit(1792426985.222:1620): avc: denied { bind } for pid=8451 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 370.430808][ T30] audit: type=1400 audit(1792426985.231:1621): avc: denied { write } for pid=8451 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 370.477140][ T8456] input: syz1 as /devices/virtual/input/input9 [ 370.798676][ T30] audit: type=1400 audit(1792426985.596:1622): avc: denied { ioctl } for pid=8457 comm="syz.0.647" path="socket:[25401]" dev="sockfs" ino=25401 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 370.850405][ T30] audit: type=1400 audit(1792426985.643:1623): avc: denied { connect } for pid=8457 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 371.241618][ T8455] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 371.665112][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 371.825975][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 371.827293][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 371.827323][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.834610][ T10] usb 2-1: config 0 descriptor?? [ 372.320015][ T10] usbhid 2-1:0.0: can't add hid device: -32 [ 372.320075][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 372.513244][ T8469] syzkaller0: entered promiscuous mode [ 372.513258][ T8469] syzkaller0: entered allmulticast mode [ 373.156536][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.156740][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.212175][ T8474] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 373.449513][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.654'. [ 373.449530][ T8484] nbd: must specify at least one socket [ 373.531117][ T8485] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=8485 comm=syz.4.654 [ 373.597676][ T30] audit: type=1400 audit(1792426988.216:1624): avc: denied { accept } for pid=8486 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.784839][ T984] usb 2-1: USB disconnect, device number 27 [ 375.633159][ T8497] nvme nvme0: rdma_resolve_addr failed (-99). [ 375.687868][ T8016] udevd[8016]: setting mode of /dev/nvme0 to 020600 failed: No such file or directory [ 375.688613][ T8016] udevd[8016]: setting owner of /dev/nvme0 to uid=0, gid=0 failed: No such file or directory [ 376.099991][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.116208][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.838344][ T30] audit: type=1400 audit(1792426991.247:1625): avc: denied { append } for pid=8511 comm="syz.1.664" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 378.891369][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 378.927701][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 379.051390][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 379.054240][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 379.054268][ T24] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 379.055699][ T24] usb 6-1: config 4 interface 0 has no altsetting 0 [ 379.104526][ T24] usb 6-1: string descriptor 0 read error: -22 [ 379.104570][ T24] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 379.126899][ T5721] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 379.156449][ T24] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 379.176548][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 379.190369][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 379.190405][ T24] usb 6-1: media controller created [ 379.223670][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.298064][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 379.348372][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 379.348418][ T5721] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 379.368422][ T5721] usb 1-1: config 4 interface 0 has no altsetting 0 [ 379.391870][ T5721] usb 1-1: string descriptor 0 read error: -22 [ 379.391948][ T5721] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 379.462337][ T5721] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 379.497749][ T5721] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 379.497980][ T5721] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 379.498018][ T5721] usb 1-1: media controller created [ 379.785355][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.998672][ T8540] FAULT_INJECTION: forcing a failure. [ 379.998672][ T8540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.998701][ T8540] CPU: 1 UID: 0 PID: 8540 Comm: syz.2.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.998726][ T8540] Tainted: [L]=SOFTLOCKUP [ 379.998731][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 379.998737][ T8540] Call Trace: [ 379.998741][ T8540] [ 379.998748][ T8540] dump_stack_lvl+0x100/0x190 [ 379.998769][ T8540] should_fail_ex.cold+0x5/0xa [ 379.998786][ T8540] _copy_from_user+0x2e/0xd0 [ 379.998813][ T8540] get_user_ifreq+0xe7/0x250 [ 379.998835][ T8540] inet_ioctl+0x292/0x3f0 [ 379.998859][ T8540] ? __pfx_inet_ioctl+0x10/0x10 [ 379.998881][ T8540] ? kasan_quarantine_put+0x104/0x240 [ 379.998902][ T8540] ? tomoyo_path_number_perm+0x188/0x580 [ 379.998920][ T8540] packet_ioctl+0xb9/0x260 [ 379.998941][ T8540] sock_do_ioctl+0x118/0x280 [ 379.998965][ T8540] ? __pfx_sock_do_ioctl+0x10/0x10 [ 379.998986][ T8540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.999013][ T8540] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 379.999028][ T8540] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 379.999046][ T8540] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 379.999065][ T8540] sock_ioctl+0x599/0x6b0 [ 379.999081][ T8540] ? __pfx_sock_ioctl+0x10/0x10 [ 379.999110][ T8540] ? selinux_file_ioctl+0x13b/0x290 [ 379.999142][ T8540] ? selinux_file_ioctl+0xb6/0x290 [ 379.999167][ T8540] ? __pfx_sock_ioctl+0x10/0x10 [ 379.999184][ T8540] __x64_sys_ioctl+0x18e/0x210 [ 379.999198][ T8540] do_syscall_64+0x123/0x790 [ 379.999216][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.999227][ T8540] RIP: 0033:0x7f5bcc59e559 [ 379.999241][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.999262][ T8540] RSP: 002b:00007f5bcd500028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.999281][ T8540] RAX: ffffffffffffffda RBX: 00007f5bcc825fa0 RCX: 00007f5bcc59e559 [ 379.999291][ T8540] RDX: 0000200000000240 RSI: 0000000000008917 RDI: 0000000000000003 [ 379.999302][ T8540] RBP: 00007f5bcd500090 R08: 0000000000000000 R09: 0000000000000000 [ 379.999312][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.999320][ T8540] R13: 00007f5bcc826038 R14: 00007f5bcc825fa0 R15: 00007ffe5b176b58 [ 379.999335][ T8540] [ 380.352456][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 380.420549][ T5721] zl10353_read_register: readreg error (reg=127, ret==0) [ 380.468242][ T24] usb 6-1: USB disconnect, device number 5 [ 380.644288][ T5721] usb 1-1: USB disconnect, device number 27 [ 381.489018][ T30] audit: type=1400 audit(1792426995.606:1626): avc: denied { name_bind } for pid=8554 comm="syz.5.679" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 381.540037][ T8553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.649608][ T30] audit: type=1400 audit(1792426995.756:1627): avc: denied { getopt } for pid=8552 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.089308][ T30] audit: type=1400 audit(1792426996.149:1628): avc: denied { ioctl } for pid=8554 comm="syz.5.679" path="socket:[26643]" dev="sockfs" ino=26643 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 382.559259][ T8565] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 384.310908][ T5721] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 384.951849][ T5721] usb 1-1: Using ep0 maxpacket: 32 [ 384.955338][ T5721] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 384.957952][ T5721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.964879][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.964904][ T5721] usb 1-1: Product: syz [ 384.964917][ T5721] usb 1-1: Manufacturer: syz [ 384.964925][ T5721] usb 1-1: SerialNumber: syz [ 384.966469][ T5721] usb 1-1: config 0 descriptor?? [ 384.969993][ T5721] usb 1-1: expecting 3 got 0 endpoints! Bailing out. [ 388.736001][ T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 388.864668][ T8622] FAULT_INJECTION: forcing a failure. [ 388.864668][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 388.864691][ T8622] CPU: 0 UID: 0 PID: 8622 Comm: syz.1.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.864706][ T8622] Tainted: [L]=SOFTLOCKUP [ 388.864710][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 388.864717][ T8622] Call Trace: [ 388.864721][ T8622] [ 388.864726][ T8622] dump_stack_lvl+0x100/0x190 [ 388.864746][ T8622] should_fail_ex.cold+0x5/0xa [ 388.864762][ T8622] should_failslab+0xc2/0x120 [ 388.864779][ T8622] __kmalloc_noprof+0xfc/0x840 [ 388.864793][ T8622] ? dmabuffs_dname+0x1d4/0x250 [ 388.864808][ T8622] ? tomoyo_encode2+0xfb/0x3c0 [ 388.864827][ T8622] tomoyo_encode2+0xfb/0x3c0 [ 388.864846][ T8622] tomoyo_encode+0x29/0x50 [ 388.864862][ T8622] tomoyo_realpath_from_path+0x18c/0x690 [ 388.864876][ T8622] tomoyo_path_number_perm+0x23c/0x580 [ 388.864891][ T8622] ? tomoyo_path_number_perm+0x22e/0x580 [ 388.864907][ T8622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 388.864928][ T8622] ? __lock_acquire+0x5c0/0x1f40 [ 388.864948][ T8622] ? __fget_files+0x34/0x3d0 [ 388.864963][ T8622] ? find_held_lock+0x2b/0x80 [ 388.864979][ T8622] ? hook_file_ioctl_common+0x140/0x440 [ 388.864994][ T8622] ? __fget_files+0x21f/0x3d0 [ 388.865012][ T8622] security_file_ioctl+0xd3/0x230 [ 388.865028][ T8622] __x64_sys_ioctl+0xb7/0x210 [ 388.865044][ T8622] do_syscall_64+0x123/0x790 [ 388.865062][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.865078][ T8622] RIP: 0033:0x7f9d0939e559 [ 388.865088][ T8622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.865099][ T8622] RSP: 002b:00007f9d0a1f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.865110][ T8622] RAX: ffffffffffffffda RBX: 00007f9d09625fa0 RCX: 00007f9d0939e559 [ 388.865117][ T8622] RDX: 0000200000002200 RSI: 0000000040086203 RDI: 0000000000000004 [ 388.865123][ T8622] RBP: 00007f9d0a1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 388.865129][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.865136][ T8622] R13: 00007f9d09626038 R14: 00007f9d09625fa0 R15: 00007ffc1b80d1b8 [ 388.865150][ T8622] [ 388.865160][ T8622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.898398][ T10] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 388.899340][ T10] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.899381][ T10] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.899400][ T10] usb 3-1: config 2 interface 0 has no altsetting 0 [ 388.899424][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.272116][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 392.745845][ T10] usbhid 3-1:2.0: can't add hid device: -71 [ 392.745899][ T10] usbhid 3-1:2.0: probe with driver usbhid failed with error -71 [ 392.772011][ T10] usb 3-1: USB disconnect, device number 31 [ 393.051439][ T10] usb 1-1: USB disconnect, device number 28 [ 393.461599][ T30] audit: type=1400 audit(1792427006.804:1629): avc: denied { write } for pid=8650 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 393.552288][ T8658] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 393.552310][ T8658] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 393.552323][ T8658] netlink: 196 bytes leftover after parsing attributes in process `syz.1.712'. [ 393.552336][ T8658] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 393.772615][ T30] audit: type=1400 audit(1792427007.076:1630): avc: denied { setopt } for pid=8649 comm="syz.5.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 393.772792][ T30] audit: type=1400 audit(1792427007.095:1631): avc: denied { watch watch_reads } for pid=8649 comm="syz.5.710" path="/38" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 394.777858][ T8664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.124536][ T30] audit: type=1400 audit(1792427008.357:1632): avc: denied { write } for pid=8667 comm="syz.0.714" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 395.409074][ T5743] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 395.427347][ T5585] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 395.580483][ T5743] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 395.597371][ T5743] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.597406][ T5743] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.597420][ T5743] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.597432][ T5743] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.597453][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.601006][ T5585] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 395.602147][ T5585] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.602180][ T5585] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.602198][ T5585] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.602230][ T5585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.010266][ T30] audit: type=1800 audit(1792427009.153:1633): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.720" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 396.610618][ T5743] gud 6-1:1.0: No supported pixel formats found [ 396.610638][ T5743] gud 6-1:1.0: probe with driver gud failed with error -22 [ 396.870768][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 396.904462][ T30] audit: type=1400 audit(1792427010.023:1634): avc: denied { listen } for pid=8692 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 398.527465][ T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 398.718467][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 398.719304][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.719333][ T9] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 398.738145][ T10] usb 6-1: USB disconnect, device number 6 [ 398.777290][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.777308][ T9] usb 3-1: Product: syz [ 398.777317][ T9] usb 3-1: Manufacturer: syz [ 398.777325][ T9] usb 3-1: SerialNumber: syz [ 398.842736][ T5721] usb 5-1: USB disconnect, device number 25 [ 399.167858][ T8706] syzkaller0: entered promiscuous mode [ 399.167879][ T8706] syzkaller0: entered allmulticast mode [ 399.193792][ T8706] tipc: Started in network mode [ 399.193810][ T8706] tipc: Node identity fa078ce6de49, cluster identity 4711 [ 399.194961][ T8706] tipc: Enabled bearer , priority 0 [ 399.979768][ T8705] tipc: Resetting bearer [ 400.134054][ T8705] tipc: Disabling bearer [ 400.307061][ C0] usb 3-1: received EP1 urb->status = -71 [ 401.125026][ T9] usb 3-1: unable to init card! (ret=-19) [ 401.127140][ T9] usb 3-1: USB disconnect, device number 32 [ 402.155306][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 402.326891][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 402.329424][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.353708][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.353735][ T9] usb 3-1: Product: syz [ 402.353750][ T9] usb 3-1: Manufacturer: syz [ 402.353765][ T9] usb 3-1: SerialNumber: syz [ 402.415401][ T9] ipheth 3-1:1.0: Unable to find alternate settings interface [ 402.808661][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.808852][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.837574][ T5585] apple-mfi-fastcharge 3-1: USB disconnect, device number 33 [ 404.097118][ T30] audit: type=1400 audit(1792427016.693:1635): avc: denied { mount } for pid=8743 comm="syz.0.740" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 404.119556][ T5796] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 404.236462][ T30] audit: type=1400 audit(1792427016.880:1636): avc: denied { mounton } for pid=8743 comm="syz.0.740" path="/proc" dev="bpf" ino=28777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 404.342843][ T5796] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 404.343734][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.343773][ T5796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 404.343792][ T5796] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 404.343814][ T5796] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.343845][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.526046][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 404.695439][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 404.696579][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.696611][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 404.696624][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 404.696637][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.696657][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.727068][ T5331] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 404.932201][ T5331] usb 6-1: Using ep0 maxpacket: 8 [ 404.934716][ T5331] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 404.972977][ T5331] usb 6-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 404.972996][ T5331] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 404.973023][ T5331] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 405.029166][ T5331] usb 6-1: string descriptor 0 read error: -22 [ 405.029244][ T5331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.091511][ T5331] usb 6-1: invalid MIDI EP [ 405.091524][ T5331] usb 6-1: snd-bcd2000: error during probing [ 405.091792][ T5331] snd-bcd2000 6-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 405.438162][ T5331] usb 6-1: invalid MIDI EP [ 405.438176][ T5331] usb 6-1: snd-bcd2000: error during probing [ 405.438412][ T5331] snd-bcd2000 6-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 405.959268][ T8722] syz.5.735 (8722): drop_caches: 2 [ 406.080582][ T5721] usb 6-1: USB disconnect, device number 7 [ 407.098674][ T5743] usb 2-1: USB disconnect, device number 28 [ 407.576433][ T5721] usb 3-1: USB disconnect, device number 34 [ 409.230067][ T8782] nvme nvme0: rdma_resolve_addr failed (-99). [ 410.204253][ T984] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 410.393471][ T984] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 410.397516][ T984] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.397538][ T984] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024 [ 410.397552][ T984] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.397570][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.398798][ T984] usb 6-1: config 0 descriptor?? [ 410.462466][ T8797] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 410.989084][ T984] hid_parser_main: 11 callbacks suppressed [ 410.989100][ T984] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 410.989115][ T984] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 410.989128][ T984] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 410.989144][ T984] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 410.989163][ T984] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 410.989177][ T984] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 410.989189][ T984] logitech-djreceiver 0003:046D:C532.000D: unknown main item tag 0x0 [ 412.049234][ T984] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 412.229410][ T984] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 412.241245][ T984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.241271][ T984] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 412.241283][ T984] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 412.241296][ T984] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.241317][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.065070][ T5331] usb 6-1: USB disconnect, device number 8 [ 413.577811][ T5331] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 413.626282][ T8820] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 413.644354][ T8820] exFAT-fs (nbd4): unable to read boot sector [ 413.644401][ T8820] exFAT-fs (nbd4): failed to read boot sector [ 413.644433][ T8820] exFAT-fs (nbd4): failed to recognize exfat type [ 413.673997][ T30] audit: type=1400 audit(1792427025.693:1637): avc: denied { read write } for pid=8813 comm="syz.4.762" name="sg0" dev="devtmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.674043][ T30] audit: type=1400 audit(1792427025.693:1638): avc: denied { open } for pid=8813 comm="syz.4.762" path="/dev/sg0" dev="devtmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.674075][ T30] audit: type=1400 audit(1792427025.702:1639): avc: denied { ioctl } for pid=8813 comm="syz.4.762" path="/dev/sg0" dev="devtmpfs" ino=1046 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.762758][ T5331] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 413.783749][ T5331] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.783865][ T5331] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.783897][ T5331] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 413.783929][ T5331] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.784072][ T5331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.790337][ T8822] vlan1: entered promiscuous mode [ 413.791189][ T8822] vlan1: entered allmulticast mode [ 413.800723][ T8822] veth0_vlan: entered allmulticast mode [ 415.502448][ T5331] usb 3-1: USB disconnect, device number 35 [ 416.220320][ T5743] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 416.471668][ T5743] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 417.019696][ T5796] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 417.061710][ T5743] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.072809][ T5743] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 417.100784][ T5743] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 417.100826][ T5743] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.113713][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.297089][ T5796] usb 5-1: Using ep0 maxpacket: 32 [ 417.491502][ T5796] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 417.541606][ T5796] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 417.541627][ T5796] usb 5-1: config 0 has no interface number 0 [ 417.541648][ T5796] usb 5-1: config 0 interface 184 has no altsetting 0 [ 417.547961][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.547987][ T5796] usb 5-1: Product: syz [ 417.548000][ T5796] usb 5-1: Manufacturer: syz [ 417.548009][ T5796] usb 5-1: SerialNumber: syz [ 417.549460][ T5796] usb 5-1: config 0 descriptor?? [ 417.610260][ T5721] usb 6-1: USB disconnect, device number 9 [ 418.265424][ T8837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.724528][ T5796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 418.724554][ T5796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 419.003357][ T5796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 419.003377][ T5796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 419.003388][ T5796] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 419.003508][ T5796] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 419.061855][ T5796] usb 5-1: USB disconnect, device number 26 [ 419.457004][ T5743] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 419.791391][ T8848] input: syz1 as /devices/virtual/input/input10 [ 419.976065][ T5743] Console: switching to colour frame buffer device 128x48 [ 420.010183][ T5743] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 420.026886][ T5743] usb 3-1: USB disconnect, device number 36 [ 420.075297][ T30] audit: type=1400 audit(1792427031.689:1640): avc: denied { map } for pid=8849 comm="syz.4.771" path="socket:[28953]" dev="sockfs" ino=28953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.075330][ T30] audit: type=1400 audit(1792427031.689:1641): avc: denied { read } for pid=8849 comm="syz.4.771" path="socket:[28953]" dev="sockfs" ino=28953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.176690][ T5743] Console: switching to colour VGA+ 80x25 [ 423.469955][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 423.969015][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 423.974984][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.975005][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024 [ 423.975020][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.975037][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.031842][ T10] usb 2-1: config 0 descriptor?? [ 424.034453][ T8871] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 424.371892][ T8882] ip_tables: iptables: counters copy to user failed while replacing table [ 424.455694][ T8882] warning: `syz.4.782' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 424.501043][ T10] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0 [ 424.501064][ T10] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0 [ 424.501077][ T10] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0 [ 424.501090][ T10] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0 [ 424.501102][ T10] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0 [ 424.501115][ T10] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0 [ 424.501129][ T10] logitech-djreceiver 0003:046D:C532.000E: unknown main item tag 0x0 [ 424.706703][ T5331] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 424.865935][ T5331] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 424.868301][ T5331] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.868320][ T5331] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.875212][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 424.875238][ T5331] usb 5-1: Product: syz [ 424.875252][ T5331] usb 5-1: Manufacturer: syz [ 424.939015][ T5331] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 425.567194][ T8891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.373381][ T30] audit: type=1400 audit(1792427037.592:1642): avc: denied { map } for pid=8894 comm="syz.2.784" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 426.413740][ T30] audit: type=1400 audit(1792427037.621:1643): avc: denied { allowed } for pid=8894 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 426.681991][ T10] usb 2-1: USB disconnect, device number 29 [ 427.127377][ T5331] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 427.293205][ T8910] vlan1: entered promiscuous mode [ 427.293299][ T8910] vlan1: entered allmulticast mode [ 427.293307][ T8910] veth0_vlan: entered allmulticast mode [ 427.323092][ T5331] usb 5-1: USB disconnect, device number 27 [ 427.373148][ T5331] mos7840 5-1:1.0: device disconnected [ 427.378254][ T8915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.111640][ T8924] jffs2: notice: (8924) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 428.164583][ T30] audit: type=1400 audit(1792427039.267:1644): avc: denied { write } for pid=8923 comm="syz.2.797" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.168865][ T30] audit: type=1400 audit(1792427039.276:1645): avc: denied { write } for pid=8923 comm="syz.2.797" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.226730][ T30] audit: type=1400 audit(1792427039.323:1646): avc: denied { append } for pid=8928 comm="syz.0.799" name="event2" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 428.695250][ T30] audit: type=1400 audit(1792427039.763:1647): avc: denied { connect } for pid=8928 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.695501][ T30] audit: type=1400 audit(1792427039.763:1648): avc: denied { write } for pid=8928 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 430.174360][ T8960] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 430.176158][ T8960] exFAT-fs (nbd5): unable to read boot sector [ 430.176198][ T8960] exFAT-fs (nbd5): failed to read boot sector [ 430.176230][ T8960] exFAT-fs (nbd5): failed to recognize exfat type [ 432.883156][ T8960] vlan1: entered promiscuous mode [ 432.883964][ T8960] vlan1: entered allmulticast mode [ 432.884003][ T8960] veth0_vlan: entered allmulticast mode [ 433.024611][ T8964] Bluetooth: hci4: command 0x0406 tx timeout [ 433.067964][ T5331] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 433.225477][ T5331] usb 2-1: Using ep0 maxpacket: 32 [ 433.227232][ T5331] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 433.233909][ T5331] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 433.233940][ T5331] usb 2-1: config 0 has no interface number 0 [ 433.234050][ T5331] usb 2-1: config 0 interface 184 has no altsetting 0 [ 433.282598][ T5331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.282629][ T5331] usb 2-1: Product: syz [ 433.282666][ T5331] usb 2-1: Manufacturer: syz [ 433.282702][ T5331] usb 2-1: SerialNumber: syz [ 433.438968][ T5331] usb 2-1: config 0 descriptor?? [ 434.273405][ T5331] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 434.273427][ T5331] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 434.507874][ T5331] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 434.507906][ T5331] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 434.507926][ T5331] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 434.508118][ T5331] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 434.566120][ T5331] usb 2-1: USB disconnect, device number 30 [ 439.042681][ T5331] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 439.242644][ T5331] usb 2-1: Using ep0 maxpacket: 32 [ 439.266424][ T5331] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 439.336808][ T5331] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 439.336908][ T5331] usb 2-1: config 0 has no interface number 0 [ 439.337051][ T5331] usb 2-1: config 0 interface 184 has no altsetting 0 [ 439.442743][ T5331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.442804][ T5331] usb 2-1: Product: syz [ 439.442846][ T5331] usb 2-1: Manufacturer: syz [ 439.442882][ T5331] usb 2-1: SerialNumber: syz [ 439.589880][ T5331] usb 2-1: config 0 descriptor?? [ 440.062578][ T30] audit: type=1400 audit(1792427050.390:1649): avc: denied { create } for pid=9021 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 441.444160][ T5331] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 441.454942][ T5331] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 441.477728][ T5331] usb 2-1: USB disconnect, device number 31 [ 441.566370][ T30] audit: type=1400 audit(1792427051.794:1650): avc: denied { mounton } for pid=9023 comm="syz.4.829" path="/166/mnt/trace_pipe" dev="tracefs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 441.568543][ T9028] nvme nvme0: rdma_resolve_addr failed (-99). [ 441.571810][ T9024] kAFS: unable to lookup cell 'syz1' [ 441.747541][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.747592][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.877333][ T9035] FAULT_INJECTION: forcing a failure. [ 441.877333][ T9035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.877365][ T9035] CPU: 0 UID: 0 PID: 9035 Comm: syz.1.831 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.877391][ T9035] Tainted: [L]=SOFTLOCKUP [ 441.877397][ T9035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 441.877411][ T9035] Call Trace: [ 441.877417][ T9035] [ 441.877425][ T9035] dump_stack_lvl+0x100/0x190 [ 441.877456][ T9035] should_fail_ex.cold+0x5/0xa [ 441.877483][ T9035] _copy_from_user+0x2e/0xd0 [ 441.877511][ T9035] dma_buf_ioctl+0x447/0x8a0 [ 441.877546][ T9035] ? __fget_files+0x34/0x3d0 [ 441.877572][ T9035] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 441.877608][ T9035] ? selinux_file_ioctl+0x13b/0x290 [ 441.877633][ T9035] ? selinux_file_ioctl+0xb6/0x290 [ 441.877658][ T9035] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 441.877684][ T9035] __x64_sys_ioctl+0x18e/0x210 [ 441.877706][ T9035] do_syscall_64+0x123/0x790 [ 441.877734][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.877752][ T9035] RIP: 0033:0x7f9d0939e559 [ 441.877767][ T9035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.877785][ T9035] RSP: 002b:00007f9d0a1f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.877804][ T9035] RAX: ffffffffffffffda RBX: 00007f9d09625fa0 RCX: 00007f9d0939e559 [ 441.877816][ T9035] RDX: 0000200000002200 RSI: 0000000040086203 RDI: 0000000000000004 [ 441.877826][ T9035] RBP: 00007f9d0a1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 441.877837][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.877848][ T9035] R13: 00007f9d09626038 R14: 00007f9d09625fa0 R15: 00007ffc1b80d1b8 [ 441.877873][ T9035] [ 442.353071][ T5796] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 442.623654][ T5796] usb 5-1: Using ep0 maxpacket: 32 [ 442.807960][ T5796] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 442.845017][ T5796] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 442.857213][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.857240][ T5796] usb 5-1: Product: syz [ 442.857254][ T5796] usb 5-1: Manufacturer: syz [ 442.857269][ T5796] usb 5-1: SerialNumber: syz [ 442.859287][ T5796] usb 5-1: config 0 descriptor?? [ 442.868410][ T5796] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 442.868789][ T5796] dvb-usb: bulk message failed: -22 (2/0) [ 442.885532][ T5796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.886056][ T5796] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 442.886098][ T5796] usb 5-1: media controller created [ 442.996395][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.041641][ T5796] usb 5-1: selecting invalid altsetting 7 [ 443.041655][ T5796] cxusb: set interface failed [ 443.041663][ T5796] dvb-usb: bulk message failed: -22 (1/0) [ 444.235839][ T9039] dvb-usb: bulk message failed: -22 (3/0) [ 444.275064][ T5796] DVB: Unable to find symbol lgdt330x_attach() [ 444.275086][ T5796] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 444.291649][ T5721] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 444.431136][ T5796] rc_core: IR keymap rc-dvico-portable not found [ 444.431149][ T5796] Registered IR keymap rc-empty [ 444.431989][ T5796] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 444.438802][ T5796] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input12 [ 444.440823][ T5796] dvb-usb: schedule remote query interval to 100 msecs. [ 444.440840][ T5796] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 444.450423][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 444.474989][ T5721] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 444.510240][ T5796] usb 5-1: USB disconnect, device number 28 [ 444.527321][ T5721] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 444.527345][ T5721] usb 2-1: config 0 has no interface number 0 [ 444.527367][ T5721] usb 2-1: config 0 interface 184 has no altsetting 0 [ 444.556731][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.556755][ T5721] usb 2-1: Product: syz [ 444.556768][ T5721] usb 2-1: Manufacturer: syz [ 444.556782][ T5721] usb 2-1: SerialNumber: syz [ 444.601632][ T5721] usb 2-1: config 0 descriptor?? [ 444.727188][ T5796] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 445.450281][ T5721] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 445.450302][ T5721] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.485031][ T5796] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 445.613323][ T5331] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 445.645963][ T5796] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 445.646832][ T5796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.646869][ T5796] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.646890][ T5796] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.646908][ T5796] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.646930][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.722762][ T5721] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 445.722789][ T5721] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 445.722808][ T5721] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 445.722983][ T5721] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 445.784407][ T5331] usb 6-1: Using ep0 maxpacket: 8 [ 445.803172][ T5331] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.803213][ T5331] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 445.803314][ T5721] usb 2-1: USB disconnect, device number 32 [ 445.804420][ T5331] usb 6-1: config 4 interface 0 has no altsetting 0 [ 445.837983][ T5331] usb 6-1: string descriptor 0 read error: -22 [ 445.838308][ T5331] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 445.838994][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 445.893290][ T5331] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 445.938621][ T5331] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 445.938825][ T5331] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 445.938846][ T5331] usb 6-1: media controller created [ 445.992170][ T5331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.008833][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 446.009498][ T24] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 446.041487][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.041512][ T24] usb 5-1: Product: syz [ 446.041527][ T24] usb 5-1: Manufacturer: syz [ 446.041559][ T24] usb 5-1: SerialNumber: syz [ 446.099443][ T5331] zl10353_read_register: readreg error (reg=127, ret==0) [ 446.153163][ T5331] usb 6-1: USB disconnect, device number 10 [ 446.323414][ T24] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 446.351637][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 446.351935][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 446.351970][ T24] usb 5-1: media controller created [ 446.372444][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.297775][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 448.510425][ T24] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 448.554881][ T24] usb 5-1: USB disconnect, device number 29 [ 448.966868][ T5796] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 449.328282][ T5796] Console: switching to colour frame buffer device 128x48 [ 449.349642][ T5796] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 449.369412][ T5796] usb 3-1: USB disconnect, device number 37 [ 449.388904][ T5796] Console: switching to colour VGA+ 80x25 [ 450.831486][ T5721] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 451.260809][ T9093] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 451.287832][ T9090] ªªªªªª: renamed from vlan0 (while UP) [ 452.922633][ T5721] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 453.144599][ T5721] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 453.144635][ T5721] usb 2-1: config 127 has no interface number 0 [ 453.144734][ T5721] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 453.816023][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.848668][ T5721] usb 2-1: can't set config #127, error -71 [ 453.870786][ T5721] usb 2-1: USB disconnect, device number 33 [ 453.923641][ T30] audit: type=1400 audit(1792427063.366:1651): avc: denied { map } for pid=9097 comm="syz.5.851" path="socket:[30217]" dev="sockfs" ino=30217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 453.929709][ T9100] No source specified [ 455.376147][ T9112] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 455.376288][ T9112] exFAT-fs (nbd1): unable to read boot sector [ 455.376294][ T9112] exFAT-fs (nbd1): failed to read boot sector [ 455.376299][ T9112] exFAT-fs (nbd1): failed to recognize exfat type [ 458.878667][ T5721] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 459.055100][ T5721] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 459.056031][ T5721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.056075][ T5721] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 459.056097][ T5721] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.056132][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.623577][ T30] audit: type=1400 audit(1792427070.560:1652): avc: denied { map } for pid=9127 comm="syz.1.861" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.623608][ T30] audit: type=1400 audit(1792427070.560:1653): avc: denied { execute } for pid=9127 comm="syz.1.861" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.194713][ T5690] usb 6-1: USB disconnect, device number 11 [ 462.697803][ T9148] No source specified [ 463.141516][ T9154] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 463.142634][ T9154] exFAT-fs (nbd5): unable to read boot sector [ 463.142674][ T9154] exFAT-fs (nbd5): failed to read boot sector [ 463.142718][ T9154] exFAT-fs (nbd5): failed to recognize exfat type [ 463.678233][ T5331] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 463.989472][ T5331] usb 3-1: device descriptor read/64, error -71 [ 464.255517][ T5331] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 464.395300][ T5331] usb 3-1: device descriptor read/64, error -71 [ 464.646649][ T5331] usb usb3-port1: attempt power cycle [ 465.110554][ T5331] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 465.133048][ T5331] usb 3-1: device descriptor read/8, error -71 [ 465.150533][ T9164] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 465.151490][ T9164] exFAT-fs (nbd0): unable to read boot sector [ 465.151536][ T9164] exFAT-fs (nbd0): failed to read boot sector [ 465.151572][ T9164] exFAT-fs (nbd0): failed to recognize exfat type [ 465.305369][ T9164] vlan1: entered promiscuous mode [ 465.306213][ T9164] vlan1: entered allmulticast mode [ 465.306253][ T9164] veth0_vlan: entered allmulticast mode [ 465.440124][ T5331] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 465.490785][ T5331] usb 3-1: device descriptor read/8, error -71 [ 465.602817][ T5331] usb usb3-port1: unable to enumerate USB device [ 465.883738][ T9158] nvme nvme0: rdma_resolve_addr failed (-99). [ 466.360462][ T30] audit: type=1400 audit(1792427074.994:1654): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 467.115921][ T9178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.591222][ T9169] nvme nvme0: rdma_resolve_addr failed (-99). [ 467.985969][ T5690] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 468.146597][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 468.147559][ T5690] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 468.148816][ T5690] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.148841][ T5690] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.148856][ T5690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 468.148872][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.151462][ T5690] usb 2-1: config 0 descriptor?? [ 469.804058][ T5690] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 469.804079][ T5690] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 469.804092][ T5690] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 469.804105][ T5690] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 469.804118][ T5690] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 469.879011][ T5690] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 469.942193][ T5690] nzxt-smart2 0003:1E71:2009.000F: init_device failed: -38 [ 469.993982][ T5690] nzxt-smart2 0003:1E71:2009.000F: probe with driver nzxt-smart2 failed with error -38 [ 470.288506][ T5714] usb 2-1: USB disconnect, device number 34 [ 471.074526][ T9197] fido_id[9197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 472.634447][ T5714] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 472.839049][ T5714] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 472.874117][ T5714] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.874151][ T5714] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024 [ 472.874176][ T5714] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.874205][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.875917][ T5714] usb 6-1: config 0 descriptor?? [ 472.880083][ T9209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 473.623509][ T5714] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 473.623529][ T5714] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 473.623541][ T5714] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 473.623554][ T5714] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 473.623566][ T5714] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 474.004339][ T5714] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 474.197155][ T5714] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 474.198746][ T5714] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.198775][ T5714] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024 [ 474.198801][ T5714] usb 2-1: config 0 interface 0 has no altsetting 0 [ 474.198830][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.201164][ T5714] usb 2-1: config 0 descriptor?? [ 474.202643][ T9218] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 475.677565][ T24] usb 6-1: USB disconnect, device number 12 [ 476.773863][ T9233] nvme nvme0: rdma_resolve_addr failed (-99). [ 477.180027][ T5721] usb 2-1: USB disconnect, device number 35 [ 477.672483][ T9241] nvme nvme0: rdma_resolve_addr failed (-99). [ 478.656426][ T30] audit: type=1400 audit(1792427086.483:1655): avc: denied { getopt } for pid=9249 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 480.006765][ T9268] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 480.006870][ T9268] exFAT-fs (nbd0): unable to read boot sector [ 480.006879][ T9268] exFAT-fs (nbd0): failed to read boot sector [ 480.006887][ T9268] exFAT-fs (nbd0): failed to recognize exfat type [ 482.406108][ T5721] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 482.566796][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 482.570546][ T5721] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 482.641800][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.641834][ T5721] usb 3-1: Product: syz [ 482.641871][ T5721] usb 3-1: Manufacturer: syz [ 482.641908][ T5721] usb 3-1: SerialNumber: syz [ 483.440944][ T5721] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 483.592367][ T5721] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 483.609962][ T5721] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 483.610205][ T5721] usb 3-1: media controller created [ 484.640116][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.724705][ T5721] zl10353_read_register: readreg error (reg=127, ret==-71) [ 484.801421][ T5721] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 484.824859][ T5721] usb 3-1: USB disconnect, device number 42 [ 485.559383][ T9297] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 485.559480][ T9297] exFAT-fs (nbd1): unable to read boot sector [ 485.559487][ T9297] exFAT-fs (nbd1): failed to read boot sector [ 485.559492][ T9297] exFAT-fs (nbd1): failed to recognize exfat type [ 486.337056][ T9302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.763828][ T9315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.766014][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 488.961855][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 489.022950][ T9325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.421306][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.421361][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 489.421382][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 489.421404][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.421439][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.944537][ T9328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.914'. [ 489.999871][ T9328] input: syz1 as /devices/virtual/input/input13 [ 490.166524][ T30] audit: type=1400 audit(1792427097.250:1656): avc: denied { ioctl } for pid=9326 comm="syz.4.914" path="socket:[31060]" dev="sockfs" ino=31060 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 490.807016][ T24] gud 1-1:1.0: USB-1: Failed to add properties (ret=-71) [ 490.807058][ T24] gud 1-1:1.0: Failed to get connectors (error=-71) [ 490.807091][ T24] gud 1-1:1.0: probe with driver gud failed with error -71 [ 491.265208][ T24] usb 1-1: USB disconnect, device number 29 [ 494.102039][ T5721] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 494.249310][ T9350] nvme nvme0: rdma_resolve_addr failed (-99). [ 494.264087][ T5721] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 494.360891][ T5721] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.360960][ T5721] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 50687, setting to 1024 [ 494.361010][ T5721] usb 6-1: config 0 interface 0 has no altsetting 0 [ 494.361143][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.509471][ T5721] usb 6-1: config 0 descriptor?? [ 494.543828][ T9354] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 495.199964][ T5721] hid_parser_main: 9 callbacks suppressed [ 495.199981][ T5721] logitech-djreceiver 0003:046D:C532.0012: unknown main item tag 0x0 [ 495.200006][ T5721] logitech-djreceiver 0003:046D:C532.0012: unknown main item tag 0x0 [ 495.200020][ T5721] logitech-djreceiver 0003:046D:C532.0012: unknown main item tag 0x0 [ 495.200033][ T5721] logitech-djreceiver 0003:046D:C532.0012: unknown main item tag 0x0 [ 495.200051][ T5721] logitech-djreceiver 0003:046D:C532.0012: unknown main item tag 0x0 [ 495.200064][ T5721] logitech-djreceiver 0003:046D:C532.0012: unknown main item tag 0x0 [ 495.200076][ T5721] logitech-djreceiver 0003:046D:C532.0012: unknown main item tag 0x0 [ 497.036711][ T5721] usb 6-1: USB disconnect, device number 13 [ 497.445549][ T5690] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 497.620736][ T9378] nvme nvme0: rdma_resolve_addr failed (-99). [ 497.641008][ T5721] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 497.644594][ T5690] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 497.684912][ T5690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.684955][ T5690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 497.684974][ T5690] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 497.684992][ T5690] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.685014][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.793581][ T5721] usb 3-1: device descriptor read/64, error -71 [ 498.081407][ T5721] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 498.270145][ T5721] usb 3-1: device descriptor read/64, error -71 [ 499.768519][ T5721] usb usb3-port1: attempt power cycle [ 500.695727][ T5721] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 500.755638][ T5721] usb 3-1: device descriptor read/8, error -71 [ 500.917592][ T5690] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71) [ 500.917634][ T5690] gud 2-1:1.0: Failed to get connectors (error=-71) [ 500.917656][ T5690] gud 2-1:1.0: probe with driver gud failed with error -71 [ 500.999188][ T5690] usb 2-1: USB disconnect, device number 36 [ 501.005839][ T5721] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 501.026939][ T5721] usb 3-1: device descriptor read/8, error -71 [ 501.144383][ T5721] usb usb3-port1: unable to enumerate USB device [ 501.521582][ T9403] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 501.522269][ T9403] exFAT-fs (nbd0): unable to read boot sector [ 501.522306][ T9403] exFAT-fs (nbd0): failed to read boot sector [ 501.522341][ T9403] exFAT-fs (nbd0): failed to recognize exfat type [ 501.647001][ T5813] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 501.806734][ T5813] usb 6-1: Using ep0 maxpacket: 32 [ 501.808660][ T5813] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 501.811272][ T5813] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 501.811302][ T5813] usb 6-1: config 0 has no interface number 0 [ 501.811413][ T5813] usb 6-1: config 0 interface 184 has no altsetting 0 [ 501.816552][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.816600][ T5813] usb 6-1: Product: syz [ 501.816615][ T5813] usb 6-1: Manufacturer: syz [ 501.816652][ T5813] usb 6-1: SerialNumber: syz [ 501.986791][ T5813] usb 6-1: config 0 descriptor?? [ 502.463853][ T9360] syz.2.906 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 502.463893][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.2.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.463908][ T9360] Tainted: [L]=SOFTLOCKUP [ 502.463912][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 502.463919][ T9360] Call Trace: [ 502.463923][ T9360] [ 502.463928][ T9360] dump_stack_lvl+0x100/0x190 [ 502.463949][ T9360] dump_header+0xfb/0x606 [ 502.463963][ T9360] oom_kill_process.cold+0xd/0x380 [ 502.463979][ T9360] out_of_memory+0x340/0x14f0 [ 502.464001][ T9360] ? __pfx_out_of_memory+0x10/0x10 [ 502.464024][ T9360] mem_cgroup_out_of_memory+0xc6/0x130 [ 502.464039][ T9360] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 502.464053][ T9360] ? find_held_lock+0x2b/0x80 [ 502.464072][ T9360] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.464088][ T9360] ? _raw_spin_unlock+0x28/0x50 [ 502.464104][ T9360] try_charge_memcg+0x783/0xf60 [ 502.464119][ T9360] ? __pfx_try_charge_memcg+0x10/0x10 [ 502.464130][ T9360] ? find_held_lock+0x2b/0x80 [ 502.464146][ T9360] ? rcu_read_unlock+0x17/0x60 [ 502.464157][ T9360] ? rcu_read_unlock+0x17/0x60 [ 502.464168][ T9360] ? find_held_lock+0x2b/0x80 [ 502.464184][ T9360] ? rcu_read_unlock+0x17/0x60 [ 502.464199][ T9360] charge_memcg+0x1ae/0x210 [ 502.464217][ T9360] __mem_cgroup_charge+0x2b/0x1c0 [ 502.464239][ T9360] filemap_add_folio+0xe7/0x640 [ 502.464267][ T9360] ? __pfx_filemap_add_folio+0x10/0x10 [ 502.464299][ T9360] __filemap_get_folio_mpol+0x584/0x1280 [ 502.464333][ T9360] filemap_fault+0x879/0x3130 [ 502.464356][ T9360] ? __pfx_filemap_fault+0x10/0x10 [ 502.464381][ T9360] ? find_held_lock+0x2b/0x80 [ 502.464409][ T9360] ? __pfx_filemap_map_pages+0x10/0x10 [ 502.464432][ T9360] __do_fault+0x10b/0x440 [ 502.464453][ T9360] do_fault+0xb3f/0x1830 [ 502.464474][ T9360] ? __pfx_do_fault+0x10/0x10 [ 502.464489][ T9360] ? rcu_read_unlock+0x2d/0xb0 [ 502.464500][ T9360] ? rcu_read_unlock+0x2d/0xb0 [ 502.464511][ T9360] ? __pte_offset_map+0x179/0x310 [ 502.464528][ T9360] __handle_mm_fault+0x150b/0x2f60 [ 502.464542][ T9360] ? __pfx___handle_mm_fault+0x10/0x10 [ 502.464553][ T9360] ? pte_offset_map_lock+0x174/0x320 [ 502.464568][ T9360] ? find_held_lock+0x2b/0x80 [ 502.464584][ T9360] ? find_held_lock+0x2b/0x80 [ 502.464600][ T9360] ? follow_page_pte+0x536/0x1050 [ 502.464624][ T9360] handle_mm_fault+0x363/0xa20 [ 502.464638][ T9360] __get_user_pages+0x8ae/0x2c30 [ 502.464658][ T9360] ? lock_acquire+0x1d1/0x380 [ 502.464670][ T9360] ? __pfx___get_user_pages+0x10/0x10 [ 502.464686][ T9360] ? __pfx___might_resched+0x10/0x10 [ 502.464702][ T9360] get_dump_page+0x27e/0x3d0 [ 502.464717][ T9360] ? __pfx_get_dump_page+0x10/0x10 [ 502.464732][ T9360] ? dump_user_range+0x65e/0xad0 [ 502.464750][ T9360] dump_user_range+0x18d/0xad0 [ 502.464767][ T9360] ? __pfx_dump_user_range+0x10/0x10 [ 502.464787][ T9360] ? __pfx_writenote+0x10/0x10 [ 502.464802][ T9360] ? elf_core_dump+0x1f25/0x3d20 [ 502.464819][ T9360] elf_core_dump+0x2d68/0x3d20 [ 502.464843][ T9360] ? __pfx_elf_core_dump+0x10/0x10 [ 502.464857][ T9360] ? kasan_save_stack+0x3f/0x50 [ 502.464871][ T9360] ? kasan_save_stack+0x30/0x50 [ 502.464885][ T9360] ? kasan_save_track+0x14/0x30 [ 502.464898][ T9360] ? __kasan_kmalloc+0xaa/0xb0 [ 502.464912][ T9360] ? vfs_coredump+0x21f6/0x54a0 [ 502.464925][ T9360] ? get_signal+0x1f2a/0x21e0 [ 502.464937][ T9360] ? arch_do_signal_or_restart+0x91/0x7e0 [ 502.464957][ T9360] ? 0xffffffffff600000 [ 502.464988][ T9360] ? lock_acquire+0x1d1/0x380 [ 502.465000][ T9360] ? get_signal+0x1f2a/0x21e0 [ 502.465017][ T9360] ? vfs_coredump+0x281a/0x54a0 [ 502.465031][ T9360] vfs_coredump+0x281a/0x54a0 [ 502.465050][ T9360] ? __pfx_vfs_coredump+0x10/0x10 [ 502.465065][ T9360] ? __lock_acquire+0x5c0/0x1f40 [ 502.465081][ T9360] ? __lock_acquire+0x5c0/0x1f40 [ 502.465095][ T9360] ? lock_acquire+0x1d1/0x380 [ 502.465107][ T9360] ? unwind_next_frame+0xbd/0x2090 [ 502.465126][ T9360] ? lock_acquire+0x1d1/0x380 [ 502.465143][ T9360] ? bpf_ksym_find+0x128/0x1c0 [ 502.465154][ T9360] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.465172][ T9360] ? arch_stack_walk+0xa6/0xf0 [ 502.465191][ T9360] ? __sigqueue_free+0xbe/0x2a0 [ 502.465206][ T9360] ? stack_trace_save+0x8e/0xc0 [ 502.465221][ T9360] ? __pfx_stack_trace_save+0x10/0x10 [ 502.465233][ T9360] ? stack_depot_save_flags+0x27/0x9f0 [ 502.465246][ T9360] ? __lock_acquire+0x5c0/0x1f40 [ 502.465285][ T9360] ? proc_coredump_connector+0x2d3/0x4f0 [ 502.465301][ T9360] ? __pfx_proc_coredump_connector+0x10/0x10 [ 502.465319][ T9360] ? rcu_is_watching+0x13/0xc0 [ 502.465338][ T9360] get_signal+0x1f2a/0x21e0 [ 502.465356][ T9360] ? __pfx_get_signal+0x10/0x10 [ 502.465376][ T9360] arch_do_signal_or_restart+0x91/0x7e0 [ 502.465403][ T9360] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 502.465445][ T9360] irqentry_exit+0x4ff/0xa90 [ 502.465479][ T9360] asm_exc_page_fault+0x26/0x30 [ 502.465495][ T9360] RIP: 0033:0x7f5bcc59e561 [ 502.465510][ T9360] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 502.465521][ T9360] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 502.465531][ T9360] RAX: 0000000000000000 RBX: 00007f5bcc826090 RCX: 00007f5bcc59e559 [ 502.465538][ T9360] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 502.465545][ T9360] RBP: 00007f5bcc635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 502.465551][ T9360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.465558][ T9360] R13: 00007f5bcc826128 R14: 00007f5bcc826090 R15: 00007ffe5b176b58 [ 502.465573][ T9360] [ 503.022465][ T9360] memory: usage 307200kB, limit 307200kB, failcnt 18656 [ 503.022477][ T9360] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 503.022484][ T9360] kmem: usage 2628kB, limit 9007199254740988kB, failcnt 0 [ 503.022490][ T9360] Memory cgroup stats for /syz2: [ 503.022613][ T9360] cache 311300096 [ 503.022619][ T9360] rss 581632 [ 503.022623][ T9360] rss_huge 0 [ 503.022627][ T9360] shmem 311300096 [ 503.022631][ T9360] mapped_file 132435968 [ 503.022635][ T9360] dirty 0 [ 503.022638][ T9360] writeback 0 [ 503.022642][ T9360] workingset_refault_anon 42 [ 503.022646][ T9360] workingset_refault_file 3063 [ 503.022650][ T9360] swap 131072 [ 503.022654][ T9360] swapcached 729088 [ 503.022658][ T9360] pgpgin 759836 [ 503.022662][ T9360] pgpgout 683693 [ 503.022665][ T9360] pgfault 346455 [ 503.022669][ T9360] pgmajfault 55 [ 503.022673][ T9360] inactive_anon 172126208 [ 503.022677][ T9360] active_anon 139755520 [ 503.022681][ T9360] inactive_file 0 [ 503.022684][ T9360] active_file 0 [ 503.022688][ T9360] unevictable 0 [ 503.022692][ T9360] hierarchical_memory_limit 314572800 [ 503.022696][ T9360] hierarchical_memsw_limit 9223372036854771712 [ 503.022701][ T9360] total_cache 311300096 [ 503.022705][ T9360] total_rss 581632 [ 503.022709][ T9360] total_rss_huge 0 [ 503.022719][ T9360] total_shmem 311300096 [ 503.022736][ T9360] total_mapped_file 132435968 [ 503.022741][ T9360] total_dirty 0 [ 503.022745][ T9360] total_writeback 0 [ 503.022748][ T9360] total_workingset_refault_anon 42 [ 503.022753][ T9360] total_workingset_refault_file 3063 [ 503.022757][ T9360] total_swap 131072 [ 503.022761][ T9360] total_swapcached 729088 [ 503.022765][ T9360] total_pgpgin 759836 [ 503.022769][ T9360] total_pgpgout 683693 [ 503.022773][ T9360] total_pgfault 346455 [ 503.022776][ T9360] total_pgmajfault 55 [ 503.022780][ T9360] total_inactive_anon 172126208 [ 503.022785][ T9360] total_active_anon 139755520 [ 503.022789][ T9360] total_inactive_file 0 [ 503.022793][ T9360] total_active_file 0 [ 503.022796][ T9360] total_unevictable 0 [ 503.022801][ T9360] anon_cost 0 [ 503.022804][ T9360] file_cost 0 [ 503.022808][ T9360] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.860,pid=9122,uid=0 [ 503.022982][ T9360] Memory cgroup out of memory: Killed process 9122 (syz.2.860) total-vm:202624kB, anon-rss:1424kB, file-rss:20548kB, shmem-rss:129332kB, UID:0 pgtables:372kB oom_score_adj:1000 [ 503.120587][ T5813] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 503.120660][ T5813] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 503.563229][ T5813] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 503.563260][ T5813] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 503.563280][ T5813] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 503.563470][ T5813] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 503.633606][ T5813] usb 6-1: USB disconnect, device number 14 [ 503.748672][ T9408] No source specified [ 503.750195][ T9360] syz.2.906 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 503.750216][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.2.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.750231][ T9360] Tainted: [L]=SOFTLOCKUP [ 503.750235][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 503.750242][ T9360] Call Trace: [ 503.750246][ T9360] [ 503.750251][ T9360] dump_stack_lvl+0x100/0x190 [ 503.750271][ T9360] dump_header+0xfb/0x606 [ 503.750285][ T9360] oom_kill_process.cold+0xd/0x380 [ 503.750307][ T9360] out_of_memory+0x340/0x14f0 [ 503.750339][ T9360] ? __pfx_out_of_memory+0x10/0x10 [ 503.750367][ T9360] mem_cgroup_out_of_memory+0xc6/0x130 [ 503.750383][ T9360] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 503.750397][ T9360] ? find_held_lock+0x2b/0x80 [ 503.750417][ T9360] ? do_raw_spin_unlock+0x145/0x1e0 [ 503.750433][ T9360] ? _raw_spin_unlock+0x28/0x50 [ 503.750449][ T9360] try_charge_memcg+0x783/0xf60 [ 503.750464][ T9360] ? __pfx_try_charge_memcg+0x10/0x10 [ 503.750479][ T9360] ? find_held_lock+0x2b/0x80 [ 503.750495][ T9360] ? rcu_read_unlock+0x17/0x60 [ 503.750506][ T9360] ? rcu_read_unlock+0x17/0x60 [ 503.750517][ T9360] ? find_held_lock+0x2b/0x80 [ 503.750534][ T9360] ? rcu_read_unlock+0x17/0x60 [ 503.750549][ T9360] charge_memcg+0x1ae/0x210 [ 503.750561][ T9360] __mem_cgroup_charge+0x2b/0x1c0 [ 503.750574][ T9360] filemap_add_folio+0xe7/0x640 [ 503.750592][ T9360] ? __pfx_filemap_add_folio+0x10/0x10 [ 503.750614][ T9360] __filemap_get_folio_mpol+0x584/0x1280 [ 503.750635][ T9360] filemap_fault+0x879/0x3130 [ 503.750650][ T9360] ? __pfx_filemap_fault+0x10/0x10 [ 503.750665][ T9360] ? find_held_lock+0x2b/0x80 [ 503.750683][ T9360] ? __pfx_filemap_map_pages+0x10/0x10 [ 503.750698][ T9360] __do_fault+0x10b/0x440 [ 503.750713][ T9360] do_fault+0xb3f/0x1830 [ 503.750730][ T9360] ? __pfx_do_fault+0x10/0x10 [ 503.750744][ T9360] ? rcu_read_unlock+0x2d/0xb0 [ 503.750755][ T9360] ? rcu_read_unlock+0x2d/0xb0 [ 503.750766][ T9360] ? __pte_offset_map+0x179/0x310 [ 503.750783][ T9360] __handle_mm_fault+0x150b/0x2f60 [ 503.750797][ T9360] ? __pfx___handle_mm_fault+0x10/0x10 [ 503.750808][ T9360] ? pte_offset_map_lock+0x174/0x320 [ 503.750823][ T9360] ? find_held_lock+0x2b/0x80 [ 503.750839][ T9360] ? find_held_lock+0x2b/0x80 [ 503.750854][ T9360] ? follow_page_pte+0x536/0x1050 [ 503.750878][ T9360] handle_mm_fault+0x363/0xa20 [ 503.750893][ T9360] __get_user_pages+0x8ae/0x2c30 [ 503.750912][ T9360] ? lock_acquire+0x1d1/0x380 [ 503.750925][ T9360] ? __pfx___get_user_pages+0x10/0x10 [ 503.750940][ T9360] ? __pfx___might_resched+0x10/0x10 [ 503.750962][ T9360] get_dump_page+0x27e/0x3d0 [ 503.750986][ T9360] ? __pfx_get_dump_page+0x10/0x10 [ 503.751008][ T9360] ? dump_user_range+0x65e/0xad0 [ 503.751038][ T9360] dump_user_range+0x18d/0xad0 [ 503.751066][ T9360] ? __pfx_dump_user_range+0x10/0x10 [ 503.751098][ T9360] ? __pfx_writenote+0x10/0x10 [ 503.751122][ T9360] ? elf_core_dump+0x1f25/0x3d20 [ 503.751150][ T9360] elf_core_dump+0x2d68/0x3d20 [ 503.751190][ T9360] ? __pfx_elf_core_dump+0x10/0x10 [ 503.751213][ T9360] ? kasan_save_stack+0x3f/0x50 [ 503.751236][ T9360] ? kasan_save_stack+0x30/0x50 [ 503.751255][ T9360] ? kasan_save_track+0x14/0x30 [ 503.751273][ T9360] ? __kasan_kmalloc+0xaa/0xb0 [ 503.751293][ T9360] ? vfs_coredump+0x21f6/0x54a0 [ 503.751311][ T9360] ? get_signal+0x1f2a/0x21e0 [ 503.751328][ T9360] ? arch_do_signal_or_restart+0x91/0x7e0 [ 503.751362][ T9360] ? 0xffffffffff600000 [ 503.751410][ T9360] ? lock_acquire+0x1d1/0x380 [ 503.751432][ T9360] ? get_signal+0x1f2a/0x21e0 [ 503.751459][ T9360] ? vfs_coredump+0x281a/0x54a0 [ 503.751486][ T9360] vfs_coredump+0x281a/0x54a0 [ 503.751517][ T9360] ? __pfx_vfs_coredump+0x10/0x10 [ 503.751538][ T9360] ? __lock_acquire+0x5c0/0x1f40 [ 503.751563][ T9360] ? __lock_acquire+0x5c0/0x1f40 [ 503.751585][ T9360] ? lock_acquire+0x1d1/0x380 [ 503.751603][ T9360] ? unwind_next_frame+0xbd/0x2090 [ 503.751634][ T9360] ? lock_acquire+0x1d1/0x380 [ 503.751660][ T9360] ? bpf_ksym_find+0x128/0x1c0 [ 503.751678][ T9360] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 503.751707][ T9360] ? arch_stack_walk+0xa6/0xf0 [ 503.751740][ T9360] ? __sigqueue_free+0xbe/0x2a0 [ 503.751764][ T9360] ? stack_trace_save+0x8e/0xc0 [ 503.751782][ T9360] ? __pfx_stack_trace_save+0x10/0x10 [ 503.751801][ T9360] ? stack_depot_save_flags+0x27/0x9f0 [ 503.751821][ T9360] ? __lock_acquire+0x5c0/0x1f40 [ 503.751888][ T9360] ? proc_coredump_connector+0x2d3/0x4f0 [ 503.751915][ T9360] ? __pfx_proc_coredump_connector+0x10/0x10 [ 503.751944][ T9360] ? rcu_is_watching+0x13/0xc0 [ 503.751975][ T9360] get_signal+0x1f2a/0x21e0 [ 503.752008][ T9360] ? __pfx_get_signal+0x10/0x10 [ 503.752038][ T9360] arch_do_signal_or_restart+0x91/0x7e0 [ 503.752067][ T9360] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 503.752111][ T9360] irqentry_exit+0x4ff/0xa90 [ 503.752139][ T9360] asm_exc_page_fault+0x26/0x30 [ 503.752155][ T9360] RIP: 0033:0x7f5bcc59e561 [ 503.752171][ T9360] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 503.752188][ T9360] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 503.752204][ T9360] RAX: 0000000000000000 RBX: 00007f5bcc826090 RCX: 00007f5bcc59e559 [ 503.752215][ T9360] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 503.752226][ T9360] RBP: 00007f5bcc635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 503.752236][ T9360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 503.752246][ T9360] R13: 00007f5bcc826128 R14: 00007f5bcc826090 R15: 00007ffe5b176b58 [ 503.752274][ T9360] [ 504.014905][ T9360] memory: usage 307200kB, limit 307200kB, failcnt 18732 [ 504.014918][ T9360] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 504.014925][ T9360] kmem: usage 2628kB, limit 9007199254740988kB, failcnt 0 [ 504.014931][ T9360] Memory cgroup stats for /syz2: [ 504.015003][ T9360] cache 311300096 [ 504.015008][ T9360] rss 581632 [ 504.015012][ T9360] rss_huge 0 [ 504.015016][ T9360] shmem 311300096 [ 504.015020][ T9360] mapped_file 116396032 [ 504.015024][ T9360] dirty 0 [ 504.015027][ T9360] writeback 0 [ 504.015031][ T9360] workingset_refault_anon 42 [ 504.015035][ T9360] workingset_refault_file 3063 [ 504.015039][ T9360] swap 131072 [ 504.015043][ T9360] swapcached 729088 [ 504.015047][ T9360] pgpgin 759836 [ 504.015051][ T9360] pgpgout 683693 [ 504.015054][ T9360] pgfault 346462 [ 504.015058][ T9360] pgmajfault 55 [ 504.015062][ T9360] inactive_anon 172126208 [ 504.015066][ T9360] active_anon 139755520 [ 504.015070][ T9360] inactive_file 0 [ 504.015075][ T9360] active_file 0 [ 504.015079][ T9360] unevictable 0 [ 504.015083][ T9360] hierarchical_memory_limit 314572800 [ 504.015088][ T9360] hierarchical_memsw_limit 9223372036854771712 [ 504.015093][ T9360] total_cache 311300096 [ 504.015097][ T9360] total_rss 581632 [ 504.015101][ T9360] total_rss_huge 0 [ 504.015105][ T9360] total_shmem 311300096 [ 504.015109][ T9360] total_mapped_file 116396032 [ 504.015113][ T9360] total_dirty 0 [ 504.015117][ T9360] total_writeback 0 [ 504.015120][ T9360] total_workingset_refault_anon 42 [ 504.015125][ T9360] total_workingset_refault_file 3063 [ 504.015129][ T9360] total_swap 131072 [ 504.015133][ T9360] total_swapcached 729088 [ 504.015137][ T9360] total_pgpgin 759836 [ 504.015141][ T9360] total_pgpgout 683693 [ 504.015144][ T9360] total_pgfault 346462 [ 504.015148][ T9360] total_pgmajfault 55 [ 504.015152][ T9360] total_inactive_anon 172126208 [ 504.015156][ T9360] total_active_anon 139755520 [ 504.015160][ T9360] total_inactive_file 0 [ 504.015164][ T9360] total_active_file 0 [ 504.015168][ T9360] total_unevictable 0 [ 504.015172][ T9360] anon_cost 0 [ 504.015176][ T9360] file_cost 0 [ 504.015180][ T9360] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.906,pid=9360,uid=0 [ 504.015307][ T9360] Memory cgroup out of memory: Killed process 9360 (syz.2.906) total-vm:104448kB, anon-rss:1440kB, file-rss:45192kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 505.476469][ T33] oom_reaper: reaped process 9122 (syz.2.860), now anon-rss:0kB, file-rss:20480kB, shmem-rss:45332kB [ 507.257601][ T9424] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 507.257711][ T9424] exFAT-fs (nbd1): unable to read boot sector [ 507.257717][ T9424] exFAT-fs (nbd1): failed to read boot sector [ 507.257722][ T9424] exFAT-fs (nbd1): failed to recognize exfat type [ 507.431739][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.431789][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.886226][ T5690] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 509.043979][ T5690] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 509.044827][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.044848][ T5690] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.044861][ T5690] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.044874][ T5690] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.044894][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.129017][ T9441] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 509.129963][ T9441] exFAT-fs (nbd2): unable to read boot sector [ 509.130005][ T9441] exFAT-fs (nbd2): failed to read boot sector [ 509.130039][ T9441] exFAT-fs (nbd2): failed to recognize exfat type [ 509.278824][ T9441] vlan1: entered promiscuous mode [ 509.279840][ T9441] vlan1: entered allmulticast mode [ 509.279887][ T9441] veth0_vlan: entered allmulticast mode [ 510.871724][ T5690] usb 6-1: USB disconnect, device number 15 [ 511.134544][ T9455] FAULT_INJECTION: forcing a failure. [ 511.134544][ T9455] name failslab, interval 1, probability 0, space 0, times 0 [ 511.134567][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.5.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.134582][ T9455] Tainted: [L]=SOFTLOCKUP [ 511.134586][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 511.134592][ T9455] Call Trace: [ 511.134596][ T9455] [ 511.134601][ T9455] dump_stack_lvl+0x100/0x190 [ 511.134621][ T9455] should_fail_ex.cold+0x5/0xa [ 511.134637][ T9455] should_failslab+0xc2/0x120 [ 511.134654][ T9455] __kvmalloc_node_noprof+0x113/0x9b0 [ 511.134669][ T9455] ? lockdep_init_map_type+0x5c/0x250 [ 511.134685][ T9455] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 511.134704][ T9455] v4l2_ctrl_handler_init_class+0x201/0x350 [ 511.134719][ T9455] v4l2_ctrls_find_req_obj+0x17f/0x2b0 [ 511.134731][ T9455] try_set_ext_ctrls_request+0x16d/0x6c0 [ 511.134746][ T9455] try_set_ext_ctrls+0x11b/0x140 [ 511.134764][ T9455] v4l_s_ext_ctrls+0x268/0x2f0 [ 511.134777][ T9455] __video_do_ioctl+0xb2a/0xdf0 [ 511.134792][ T9455] ? __might_fault+0xc5/0x140 [ 511.134803][ T9455] ? __pfx___video_do_ioctl+0x10/0x10 [ 511.134821][ T9455] video_usercopy+0x47a/0x1730 [ 511.134835][ T9455] ? __pfx___video_do_ioctl+0x10/0x10 [ 511.134850][ T9455] ? __pfx_video_usercopy+0x10/0x10 [ 511.134873][ T9455] v4l2_ioctl+0x1bd/0x250 [ 511.134886][ T9455] ? __pfx_v4l2_ioctl+0x10/0x10 [ 511.134901][ T9455] __x64_sys_ioctl+0x18e/0x210 [ 511.134916][ T9455] do_syscall_64+0x123/0x790 [ 511.134934][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.134945][ T9455] RIP: 0033:0x7efc1439e559 [ 511.134955][ T9455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.134965][ T9455] RSP: 002b:00007efc15250028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.134976][ T9455] RAX: ffffffffffffffda RBX: 00007efc14625fa0 RCX: 00007efc1439e559 [ 511.134985][ T9455] RDX: 0000200000000440 RSI: 00000000c0205648 RDI: 0000000000000005 [ 511.134992][ T9455] RBP: 00007efc15250090 R08: 0000000000000000 R09: 0000000000000000 [ 511.134998][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.135005][ T9455] R13: 00007efc14626038 R14: 00007efc14625fa0 R15: 00007ffd4fbd6f58 [ 511.135020][ T9455] [ 511.395227][ T5721] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 511.590984][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 511.617950][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 511.617977][ T5721] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 511.618838][ T5721] usb 5-1: config 4 interface 0 has no altsetting 0 [ 511.621642][ T5721] usb 5-1: string descriptor 0 read error: -22 [ 511.621716][ T5721] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 511.677597][ T5721] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 511.706328][ T5721] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 511.706524][ T5721] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 511.706549][ T5721] usb 5-1: media controller created [ 511.759696][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.977282][ T5721] zl10353_read_register: readreg error (reg=127, ret==0) [ 513.137057][ T5721] usb 5-1: USB disconnect, device number 30 [ 514.099610][ T5690] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 514.675872][ T5690] usb 1-1: Using ep0 maxpacket: 16 [ 514.755365][ T5690] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 515.141572][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.141600][ T5690] usb 1-1: Product: syz [ 515.141614][ T5690] usb 1-1: Manufacturer: syz [ 515.141628][ T5690] usb 1-1: SerialNumber: syz [ 515.820976][ T5690] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 515.895804][ T5690] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.895964][ T5690] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 515.895989][ T5690] usb 1-1: media controller created [ 515.977740][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.342042][ T5796] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 517.379162][ T5690] zl10353_read_register: readreg error (reg=127, ret==-71) [ 517.492049][ T5690] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 517.531139][ T5690] usb 1-1: USB disconnect, device number 30 [ 517.532595][ T5796] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 517.533499][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.533537][ T5796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.533558][ T5796] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.533579][ T5796] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.533614][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.991632][ T30] audit: type=1400 audit(1792427123.295:1657): avc: denied { read } for pid=9487 comm="syz.5.962" path="socket:[32080]" dev="sockfs" ino=32080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 519.429118][ T5690] usb 2-1: USB disconnect, device number 37 [ 522.620466][ T30] audit: type=1326 audit(1792427127.636:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.1.972" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0939e559 code=0x7fc00000 [ 523.227494][ T30] audit: type=1326 audit(1792427128.197:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.1.972" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d0939e559 code=0x7fc00000 [ 523.437181][ T30] audit: type=1326 audit(1792427128.394:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.1.972" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0939e559 code=0x7fc00000 [ 527.088687][ T9563] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 527.089624][ T9563] exFAT-fs (nbd1): unable to read boot sector [ 527.089664][ T9563] exFAT-fs (nbd1): failed to read boot sector [ 527.089700][ T9563] exFAT-fs (nbd1): failed to recognize exfat type [ 527.283778][ T9564] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 527.284849][ T9564] exFAT-fs (nbd4): unable to read boot sector [ 527.284883][ T9564] exFAT-fs (nbd4): failed to read boot sector [ 527.284958][ T9564] exFAT-fs (nbd4): failed to recognize exfat type [ 533.687993][ T9577] binder: 9574:9577 ioctl 4018620d 0 returned -22 [ 534.628369][ T9594] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 534.628549][ T9594] exFAT-fs (nbd4): unable to read boot sector [ 534.628559][ T9594] exFAT-fs (nbd4): failed to read boot sector [ 534.628568][ T9594] exFAT-fs (nbd4): failed to recognize exfat type [ 535.574611][ T9600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.010241][ T30] audit: type=1400 audit(1792427145.607:1661): avc: denied { mount } for pid=9630 comm="syz.0.1002" name="/" dev="rpc_pipefs" ino=32300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 542.312863][ T30] audit: type=1400 audit(1792427146.056:1662): avc: denied { read } for pid=9636 comm="syz.5.1004" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 542.313685][ T30] audit: type=1400 audit(1792427146.056:1663): avc: denied { open } for pid=9636 comm="syz.5.1004" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 542.420982][ T9644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.512222][ T30] audit: type=1400 audit(1792427146.206:1664): avc: denied { ioctl } for pid=9636 comm="syz.5.1004" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 543.217061][ T5721] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 543.314708][ T30] audit: type=1400 audit(1792427146.992:1665): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 543.404959][ T5721] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 543.406336][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.434983][ T5721] usb 5-1: config 0 descriptor?? [ 546.585741][ T9673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.114512][ T5721] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 550.114992][ T5721] [drm:udl_init] *ERROR* Selecting channel failed [ 550.189986][ T5721] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 550.190003][ T5721] [drm] Initialized udl on minor 1 [ 550.311144][ T5721] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 550.338615][ T5721] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 550.354850][ T5721] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 550.378934][ T5721] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 550.379514][ T5721] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 550.578232][ T9681] syz.2.1012 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 550.578256][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.2.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.578271][ T9681] Tainted: [L]=SOFTLOCKUP [ 550.578275][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 550.578282][ T9681] Call Trace: [ 550.578286][ T9681] [ 550.578291][ T9681] dump_stack_lvl+0x100/0x190 [ 550.578311][ T9681] dump_header+0xfb/0x606 [ 550.578325][ T9681] oom_kill_process.cold+0xd/0x380 [ 550.578338][ T9681] out_of_memory+0x340/0x14f0 [ 550.578359][ T9681] ? __pfx_out_of_memory+0x10/0x10 [ 550.578380][ T9681] mem_cgroup_out_of_memory+0xc6/0x130 [ 550.578395][ T9681] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 550.578408][ T9681] ? find_held_lock+0x2b/0x80 [ 550.578428][ T9681] ? do_raw_spin_unlock+0x145/0x1e0 [ 550.578444][ T9681] ? _raw_spin_unlock+0x28/0x50 [ 550.578461][ T9681] try_charge_memcg+0x783/0xf60 [ 550.578476][ T9681] ? __pfx_try_charge_memcg+0x10/0x10 [ 550.578486][ T9681] ? find_held_lock+0x2b/0x80 [ 550.578502][ T9681] ? rcu_read_unlock+0x17/0x60 [ 550.578513][ T9681] ? rcu_read_unlock+0x17/0x60 [ 550.578524][ T9681] ? find_held_lock+0x2b/0x80 [ 550.578541][ T9681] ? rcu_read_unlock+0x17/0x60 [ 550.578555][ T9681] charge_memcg+0x1ae/0x210 [ 550.578567][ T9681] __mem_cgroup_charge+0x2b/0x1c0 [ 550.578581][ T9681] shmem_alloc_and_add_folio+0x451/0xd40 [ 550.578597][ T9681] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 550.578610][ T9681] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 550.578625][ T9681] shmem_get_folio_gfp+0x75b/0x1980 [ 550.578643][ T9681] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 550.578655][ T9681] ? vm_normal_page+0x1d1/0x380 [ 550.578669][ T9681] ? __pfx_vm_normal_page+0x10/0x10 [ 550.578687][ T9681] shmem_write_begin+0x1a4/0x420 [ 550.578700][ T9681] ? __pfx_shmem_write_begin+0x10/0x10 [ 550.578712][ T9681] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 550.578728][ T9681] generic_perform_write+0x292/0xa40 [ 550.578744][ T9681] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 550.578762][ T9681] ? __pfx_generic_perform_write+0x10/0x10 [ 550.578779][ T9681] ? file_update_time_flags+0x38c/0x520 [ 550.578794][ T9681] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 550.578807][ T9681] shmem_file_write_iter+0x10e/0x140 [ 550.578822][ T9681] __kernel_write_iter+0x2ac/0x930 [ 550.578837][ T9681] ? __pfx___kernel_write_iter+0x10/0x10 [ 550.578851][ T9681] ? __up_read+0x333/0x980 [ 550.578867][ T9681] ? dump_user_range+0x65e/0xad0 [ 550.578884][ T9681] dump_user_range+0x3f9/0xad0 [ 550.578902][ T9681] ? __pfx_dump_user_range+0x10/0x10 [ 550.578921][ T9681] ? __pfx_writenote+0x10/0x10 [ 550.578936][ T9681] ? elf_core_dump+0x1f25/0x3d20 [ 550.578953][ T9681] elf_core_dump+0x2d68/0x3d20 [ 550.578985][ T9681] ? __pfx_elf_core_dump+0x10/0x10 [ 550.579003][ T9681] ? kasan_save_stack+0x3f/0x50 [ 550.579017][ T9681] ? kasan_save_stack+0x30/0x50 [ 550.579031][ T9681] ? kasan_save_track+0x14/0x30 [ 550.579052][ T9681] ? __kasan_kmalloc+0xaa/0xb0 [ 550.579073][ T9681] ? vfs_coredump+0x21f6/0x54a0 [ 550.579086][ T9681] ? get_signal+0x1f2a/0x21e0 [ 550.579097][ T9681] ? arch_do_signal_or_restart+0x91/0x7e0 [ 550.579117][ T9681] ? 0xffffffffff600000 [ 550.579150][ T9681] ? lock_acquire+0x1d1/0x380 [ 550.579162][ T9681] ? get_signal+0x1f2a/0x21e0 [ 550.579180][ T9681] ? vfs_coredump+0x281a/0x54a0 [ 550.579193][ T9681] vfs_coredump+0x281a/0x54a0 [ 550.579212][ T9681] ? __pfx_vfs_coredump+0x10/0x10 [ 550.579227][ T9681] ? __lock_acquire+0x5c0/0x1f40 [ 550.579243][ T9681] ? __lock_acquire+0x5c0/0x1f40 [ 550.579257][ T9681] ? lock_acquire+0x1d1/0x380 [ 550.579269][ T9681] ? unwind_next_frame+0xbd/0x2090 [ 550.579288][ T9681] ? lock_acquire+0x1d1/0x380 [ 550.579305][ T9681] ? bpf_ksym_find+0x128/0x1c0 [ 550.579316][ T9681] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.579334][ T9681] ? arch_stack_walk+0xa6/0xf0 [ 550.579353][ T9681] ? __sigqueue_free+0xbe/0x2a0 [ 550.579368][ T9681] ? stack_trace_save+0x8e/0xc0 [ 550.579379][ T9681] ? __pfx_stack_trace_save+0x10/0x10 [ 550.579391][ T9681] ? stack_depot_save_flags+0x27/0x9f0 [ 550.579403][ T9681] ? __lock_acquire+0x5c0/0x1f40 [ 550.579442][ T9681] ? proc_coredump_connector+0x2d3/0x4f0 [ 550.579457][ T9681] ? __pfx_proc_coredump_connector+0x10/0x10 [ 550.579475][ T9681] ? rcu_is_watching+0x13/0xc0 [ 550.579494][ T9681] get_signal+0x1f2a/0x21e0 [ 550.579512][ T9681] ? __pfx_get_signal+0x10/0x10 [ 550.579529][ T9681] arch_do_signal_or_restart+0x91/0x7e0 [ 550.579547][ T9681] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 550.579573][ T9681] irqentry_exit+0x4ff/0xa90 [ 550.579591][ T9681] asm_exc_page_fault+0x26/0x30 [ 550.579602][ T9681] RIP: 0033:0x7f5bcc59e561 [ 550.579611][ T9681] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 550.579622][ T9681] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 550.579632][ T9681] RAX: 0000000000000000 RBX: 00007f5bcc826090 RCX: 00007f5bcc59e559 [ 550.579640][ T9681] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 550.579647][ T9681] RBP: 00007f5bcc635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 550.579653][ T9681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 550.579660][ T9681] R13: 00007f5bcc826128 R14: 00007f5bcc826090 R15: 00007ffe5b176b58 [ 550.579675][ T9681] [ 550.579680][ T9681] memory: usage 307200kB, limit 307200kB, failcnt 26832 [ 550.579686][ T9681] memory+swap: usage 329772kB, limit 9007199254740988kB, failcnt 0 [ 550.579693][ T9681] kmem: usage 2640kB, limit 9007199254740988kB, failcnt 0 [ 550.579699][ T9681] Memory cgroup stats for /syz2: [ 550.579804][ T9681] cache 311439360 [ 550.579809][ T9681] rss 409600 [ 550.579813][ T9681] rss_huge 0 [ 550.579817][ T9681] shmem 311439360 [ 550.579820][ T9681] mapped_file 136536064 [ 550.579824][ T9681] dirty 0 [ 550.579828][ T9681] writeback 0 [ 550.579832][ T9681] workingset_refault_anon 42 [ 550.579836][ T9681] workingset_refault_file 5330 [ 550.579840][ T9681] swap 23113728 [ 550.579844][ T9681] swapcached 23842816 [ 550.579848][ T9681] pgpgin 876289 [ 550.579852][ T9681] pgpgout 800154 [ 550.579855][ T9681] pgfault 395439 [ 550.579859][ T9681] pgmajfault 60 [ 550.579863][ T9681] inactive_anon 31453184 [ 550.579867][ T9681] active_anon 280395776 [ 550.579871][ T9681] inactive_file 0 [ 550.579875][ T9681] active_file 0 [ 550.579879][ T9681] unevictable 0 [ 550.579883][ T9681] hierarchical_memory_limit 314572800 [ 550.579887][ T9681] hierarchical_memsw_limit 9223372036854771712 [ 550.579892][ T9681] total_cache 311439360 [ 550.579896][ T9681] total_rss 409600 [ 550.579900][ T9681] total_rss_huge 0 [ 550.579904][ T9681] total_shmem 311439360 [ 550.579908][ T9681] total_mapped_file 136536064 [ 550.579912][ T9681] total_dirty 0 [ 550.579916][ T9681] total_writeback 0 [ 550.579920][ T9681] total_workingset_refault_anon 42 [ 550.579924][ T9681] total_workingset_refault_file 5330 [ 550.579929][ T9681] total_swap 23113728 [ 550.579933][ T9681] total_swapcached 23842816 [ 550.579937][ T9681] total_pgpgin 876289 [ 550.579941][ T9681] total_pgpgout 800154 [ 550.579945][ T9681] total_pgfault 395439 [ 550.579949][ T9681] total_pgmajfault 60 [ 550.579952][ T9681] total_inactive_anon 31453184 [ 550.579957][ T9681] total_active_anon 280395776 [ 550.579961][ T9681] total_inactive_file 0 [ 550.579965][ T9681] total_active_file 0 [ 550.579969][ T9681] total_unevictable 0 [ 550.579973][ T9681] anon_cost 0 [ 550.579977][ T9681] file_cost 0 [ 550.579980][ T9681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.949,pid=9453,uid=0 [ 550.580146][ T9681] Memory cgroup out of memory: Killed process 9453 (syz.2.949) total-vm:202624kB, anon-rss:1300kB, file-rss:20548kB, shmem-rss:72080kB, UID:0 pgtables:260kB oom_score_adj:1000 [ 551.593939][ T9689] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 551.594119][ T9689] exFAT-fs (nbd5): unable to read boot sector [ 551.594129][ T9689] exFAT-fs (nbd5): failed to read boot sector [ 551.594136][ T9689] exFAT-fs (nbd5): failed to recognize exfat type [ 551.603325][ T9681] syz.2.1012 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 551.603349][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.2.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.603364][ T9681] Tainted: [L]=SOFTLOCKUP [ 551.603368][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 551.603375][ T9681] Call Trace: [ 551.603379][ T9681] [ 551.603384][ T9681] dump_stack_lvl+0x100/0x190 [ 551.603404][ T9681] dump_header+0xfb/0x606 [ 551.603418][ T9681] oom_kill_process.cold+0xd/0x380 [ 551.603432][ T9681] out_of_memory+0x340/0x14f0 [ 551.603452][ T9681] ? __pfx_out_of_memory+0x10/0x10 [ 551.603472][ T9681] mem_cgroup_out_of_memory+0xc6/0x130 [ 551.603487][ T9681] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 551.603501][ T9681] ? find_held_lock+0x2b/0x80 [ 551.603525][ T9681] ? do_raw_spin_unlock+0x145/0x1e0 [ 551.603540][ T9681] ? _raw_spin_unlock+0x28/0x50 [ 551.603556][ T9681] try_charge_memcg+0x783/0xf60 [ 551.603572][ T9681] ? __pfx_try_charge_memcg+0x10/0x10 [ 551.603582][ T9681] ? find_held_lock+0x2b/0x80 [ 551.603598][ T9681] ? rcu_read_unlock+0x17/0x60 [ 551.603609][ T9681] ? rcu_read_unlock+0x17/0x60 [ 551.603620][ T9681] ? find_held_lock+0x2b/0x80 [ 551.603637][ T9681] ? rcu_read_unlock+0x17/0x60 [ 551.603651][ T9681] charge_memcg+0x1ae/0x210 [ 551.603663][ T9681] __mem_cgroup_charge+0x2b/0x1c0 [ 551.603677][ T9681] shmem_alloc_and_add_folio+0x451/0xd40 [ 551.603693][ T9681] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 551.603706][ T9681] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 551.603721][ T9681] shmem_get_folio_gfp+0x75b/0x1980 [ 551.603736][ T9681] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 551.603748][ T9681] ? vm_normal_page+0x1d1/0x380 [ 551.603766][ T9681] ? __pfx_vm_normal_page+0x10/0x10 [ 551.603782][ T9681] shmem_write_begin+0x1a4/0x420 [ 551.603796][ T9681] ? __pfx_shmem_write_begin+0x10/0x10 [ 551.603808][ T9681] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 551.603824][ T9681] generic_perform_write+0x292/0xa40 [ 551.603845][ T9681] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 551.603862][ T9681] ? __pfx_generic_perform_write+0x10/0x10 [ 551.603880][ T9681] ? file_update_time_flags+0x38c/0x520 [ 551.603895][ T9681] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 551.603908][ T9681] shmem_file_write_iter+0x10e/0x140 [ 551.603922][ T9681] __kernel_write_iter+0x2ac/0x930 [ 551.603938][ T9681] ? __pfx___kernel_write_iter+0x10/0x10 [ 551.603951][ T9681] ? __up_read+0x333/0x980 [ 551.603967][ T9681] ? dump_user_range+0x65e/0xad0 [ 551.603985][ T9681] dump_user_range+0x3f9/0xad0 [ 551.604002][ T9681] ? __pfx_dump_user_range+0x10/0x10 [ 551.604023][ T9681] ? __pfx_writenote+0x10/0x10 [ 551.604038][ T9681] ? elf_core_dump+0x1f25/0x3d20 [ 551.604056][ T9681] elf_core_dump+0x2d68/0x3d20 [ 551.604086][ T9681] ? __pfx_elf_core_dump+0x10/0x10 [ 551.604109][ T9681] ? kasan_save_stack+0x3f/0x50 [ 551.604130][ T9681] ? kasan_save_stack+0x30/0x50 [ 551.604151][ T9681] ? kasan_save_track+0x14/0x30 [ 551.604172][ T9681] ? __kasan_kmalloc+0xaa/0xb0 [ 551.604192][ T9681] ? vfs_coredump+0x21f6/0x54a0 [ 551.604212][ T9681] ? get_signal+0x1f2a/0x21e0 [ 551.604224][ T9681] ? arch_do_signal_or_restart+0x91/0x7e0 [ 551.604244][ T9681] ? 0xffffffffff600000 [ 551.604272][ T9681] ? lock_acquire+0x1d1/0x380 [ 551.604284][ T9681] ? get_signal+0x1f2a/0x21e0 [ 551.604301][ T9681] ? vfs_coredump+0x281a/0x54a0 [ 551.604314][ T9681] vfs_coredump+0x281a/0x54a0 [ 551.604334][ T9681] ? __pfx_vfs_coredump+0x10/0x10 [ 551.604348][ T9681] ? __lock_acquire+0x5c0/0x1f40 [ 551.604365][ T9681] ? __lock_acquire+0x5c0/0x1f40 [ 551.604379][ T9681] ? lock_acquire+0x1d1/0x380 [ 551.604391][ T9681] ? unwind_next_frame+0xbd/0x2090 [ 551.604409][ T9681] ? lock_acquire+0x1d1/0x380 [ 551.604426][ T9681] ? bpf_ksym_find+0x128/0x1c0 [ 551.604437][ T9681] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 551.604454][ T9681] ? arch_stack_walk+0xa6/0xf0 [ 551.604473][ T9681] ? __sigqueue_free+0xbe/0x2a0 [ 551.604489][ T9681] ? stack_trace_save+0x8e/0xc0 [ 551.604501][ T9681] ? __pfx_stack_trace_save+0x10/0x10 [ 551.604523][ T9681] ? stack_depot_save_flags+0x27/0x9f0 [ 551.604541][ T9681] ? __lock_acquire+0x5c0/0x1f40 [ 551.604603][ T9681] ? proc_coredump_connector+0x2d3/0x4f0 [ 551.604619][ T9681] ? __pfx_proc_coredump_connector+0x10/0x10 [ 551.604637][ T9681] ? rcu_is_watching+0x13/0xc0 [ 551.604656][ T9681] get_signal+0x1f2a/0x21e0 [ 551.604675][ T9681] ? __pfx_get_signal+0x10/0x10 [ 551.604691][ T9681] arch_do_signal_or_restart+0x91/0x7e0 [ 551.604709][ T9681] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 551.604735][ T9681] irqentry_exit+0x4ff/0xa90 [ 551.604753][ T9681] asm_exc_page_fault+0x26/0x30 [ 551.604764][ T9681] RIP: 0033:0x7f5bcc59e561 [ 551.604774][ T9681] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 551.604785][ T9681] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 551.604794][ T9681] RAX: 0000000000000000 RBX: 00007f5bcc826090 RCX: 00007f5bcc59e559 [ 551.604801][ T9681] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 551.604808][ T9681] RBP: 00007f5bcc635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 551.604814][ T9681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 551.604821][ T9681] R13: 00007f5bcc826128 R14: 00007f5bcc826090 R15: 00007ffe5b176b58 [ 551.604836][ T9681] [ 551.604841][ T9681] memory: usage 307200kB, limit 307200kB, failcnt 29503 [ 551.604848][ T9681] memory+swap: usage 329772kB, limit 9007199254740988kB, failcnt 0 [ 551.604854][ T9681] kmem: usage 2640kB, limit 9007199254740988kB, failcnt 0 [ 551.604861][ T9681] Memory cgroup stats for /syz2: [ 551.604922][ T9681] cache 311439360 [ 551.604927][ T9681] rss 409600 [ 551.604931][ T9681] rss_huge 0 [ 551.604935][ T9681] shmem 311439360 [ 551.604938][ T9681] mapped_file 136536064 [ 551.604942][ T9681] dirty 0 [ 551.604946][ T9681] writeback 0 [ 551.604950][ T9681] workingset_refault_anon 42 [ 551.604954][ T9681] workingset_refault_file 5330 [ 551.604958][ T9681] swap 23113728 [ 551.604962][ T9681] swapcached 23842816 [ 551.604966][ T9681] pgpgin 876289 [ 551.604969][ T9681] pgpgout 800154 [ 551.604973][ T9681] pgfault 395439 [ 551.604977][ T9681] pgmajfault 60 [ 551.604980][ T9681] inactive_anon 31453184 [ 551.604984][ T9681] active_anon 280395776 [ 551.604988][ T9681] inactive_file 0 [ 551.604992][ T9681] active_file 0 [ 551.604996][ T9681] unevictable 0 [ 551.605000][ T9681] hierarchical_memory_limit 314572800 [ 551.605004][ T9681] hierarchical_memsw_limit 9223372036854771712 [ 551.605009][ T9681] total_cache 311439360 [ 551.605014][ T9681] total_rss 409600 [ 551.605018][ T9681] total_rss_huge 0 [ 551.605022][ T9681] total_shmem 311439360 [ 551.605026][ T9681] total_mapped_file 136536064 [ 551.605030][ T9681] total_dirty 0 [ 551.605034][ T9681] total_writeback 0 [ 551.605038][ T9681] total_workingset_refault_anon 42 [ 551.605042][ T9681] total_workingset_refault_file 5330 [ 551.605046][ T9681] total_swap 23113728 [ 551.605050][ T9681] total_swapcached 23842816 [ 551.605054][ T9681] total_pgpgin 876289 [ 551.605058][ T9681] total_pgpgout 800154 [ 551.605062][ T9681] total_pgfault 395439 [ 551.605066][ T9681] total_pgmajfault 60 [ 551.605070][ T9681] total_inactive_anon 31453184 [ 551.605074][ T9681] total_active_anon 280395776 [ 551.605078][ T9681] total_inactive_file 0 [ 551.605082][ T9681] total_active_file 0 [ 551.605086][ T9681] total_unevictable 0 [ 551.605090][ T9681] anon_cost 0 [ 551.605093][ T9681] file_cost 0 [ 551.605097][ T9681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1012,pid=9681,uid=0 [ 551.605234][ T9681] Memory cgroup out of memory: Killed process 9681 (syz.2.1012) total-vm:114688kB, anon-rss:1440kB, file-rss:53828kB, shmem-rss:23768kB, UID:0 pgtables:260kB oom_score_adj:1000 [ 553.555621][ T33] oom_reaper: reaped process 9453 (syz.2.949), now anon-rss:0kB, file-rss:20480kB, shmem-rss:58604kB [ 554.397860][ T5721] usb 5-1: USB disconnect, device number 31 [ 554.497331][ T30] audit: type=1400 audit(1792427157.451:1666): avc: denied { create } for pid=9694 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 555.388050][ T30] audit: type=1400 audit(1792427157.965:1667): avc: denied { mount } for pid=9700 comm="syz.5.1018" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 555.388085][ T30] audit: type=1400 audit(1792427157.965:1668): avc: denied { lock } for pid=9700 comm="syz.5.1018" path="socket:[33525]" dev="sockfs" ino=33525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 556.307591][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.707116][ T9047] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.707160][ T9047] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.707188][ T9047] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.707216][ T9047] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.371208][ T30] audit: type=1400 audit(1792427160.145:1669): avc: denied { unmount } for pid=7681 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 557.904973][ T5690] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 558.043495][ T5585] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 558.128584][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 558.130733][ T5690] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 558.133339][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.133356][ T5690] usb 2-1: Product: syz [ 558.133364][ T5690] usb 2-1: Manufacturer: syz [ 558.133373][ T5690] usb 2-1: SerialNumber: syz [ 558.197423][ T9724] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 558.260746][ T5585] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 558.266697][ T5585] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.266725][ T5585] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.266738][ T5585] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 558.266750][ T5585] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.266772][ T5585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.735891][ T5690] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 559.737389][ T5690] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 559.737554][ T5690] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 559.737575][ T5690] usb 2-1: media controller created [ 559.800170][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 561.346550][ T5690] zl10353_read_register: readreg error (reg=127, ret==-110) [ 561.831781][ T5690] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 561.882612][ T5690] usb 2-1: USB disconnect, device number 38 [ 561.901154][ T5585] usb 1-1: USB disconnect, device number 31 [ 565.599140][ T30] audit: type=1400 audit(1792427167.835:1670): avc: denied { write } for pid=9748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.106986][ T30] audit: type=1400 audit(1792427169.248:1671): avc: denied { write } for pid=9781 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.374577][ T9798] input: syz1 as /devices/virtual/input/input14 [ 571.779848][ T5714] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 571.963168][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 571.963652][ T5714] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 571.987362][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.987382][ T5714] usb 1-1: Product: syz [ 571.987396][ T5714] usb 1-1: Manufacturer: syz [ 571.987409][ T5714] usb 1-1: SerialNumber: syz [ 572.183608][ T30] audit: type=1400 audit(1792427173.991:1672): avc: denied { setopt } for pid=9818 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 572.349197][ T5714] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 572.405020][ T5714] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 572.406007][ T5714] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 572.406151][ T5714] usb 1-1: media controller created [ 572.513374][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.314303][ T9829] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 574.077690][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.077739][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.123071][ T5714] zl10353_read_register: readreg error (reg=127, ret==-71) [ 575.384962][ T5714] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 575.416191][ T5714] usb 1-1: USB disconnect, device number 32 [ 576.854692][ T9843] syz.4.1054 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 576.854716][ T9843] CPU: 0 UID: 0 PID: 9843 Comm: syz.4.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.854731][ T9843] Tainted: [L]=SOFTLOCKUP [ 576.854735][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 576.854741][ T9843] Call Trace: [ 576.854750][ T9843] [ 576.854755][ T9843] dump_stack_lvl+0x100/0x190 [ 576.854776][ T9843] dump_header+0xfb/0x606 [ 576.854790][ T9843] oom_kill_process.cold+0xd/0x380 [ 576.854804][ T9843] out_of_memory+0x340/0x14f0 [ 576.854823][ T9843] ? __pfx_out_of_memory+0x10/0x10 [ 576.854850][ T9843] mem_cgroup_out_of_memory+0xc6/0x130 [ 576.854874][ T9843] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 576.854891][ T9843] ? find_held_lock+0x2b/0x80 [ 576.854918][ T9843] ? do_raw_spin_unlock+0x145/0x1e0 [ 576.854942][ T9843] ? _raw_spin_unlock+0x28/0x50 [ 576.854967][ T9843] try_charge_memcg+0x783/0xf60 [ 576.854986][ T9843] ? __pfx_try_charge_memcg+0x10/0x10 [ 576.854998][ T9843] ? find_held_lock+0x2b/0x80 [ 576.855013][ T9843] ? rcu_read_unlock+0x17/0x60 [ 576.855024][ T9843] ? rcu_read_unlock+0x17/0x60 [ 576.855041][ T9843] obj_cgroup_charge_pages+0x2b/0x1f0 [ 576.855054][ T9843] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 576.855066][ T9843] ? do_raw_spin_unlock+0x145/0x1e0 [ 576.855083][ T9843] memcg_charge_kernel_stack+0xb4/0x1e0 [ 576.855098][ T9843] copy_process+0x83d/0x8430 [ 576.855111][ T9843] ? __page_table_check_ptes_set+0x1d5/0x530 [ 576.855136][ T9843] ? __pfx_copy_process+0x10/0x10 [ 576.855152][ T9843] ? _copy_from_user+0x59/0xd0 [ 576.855171][ T9843] kernel_clone+0x176/0x9d0 [ 576.855184][ T9843] ? rcu_read_unlock+0x2d/0xb0 [ 576.855195][ T9843] ? __pfx_kernel_clone+0x10/0x10 [ 576.855213][ T9843] ? __lock_acquire+0x5c0/0x1f40 [ 576.855228][ T9843] __do_sys_clone3+0x214/0x290 [ 576.855243][ T9843] ? __pfx___do_sys_clone3+0x10/0x10 [ 576.855257][ T9843] ? __might_fault+0xc5/0x140 [ 576.855275][ T9843] ? _copy_to_user+0xaf/0xd0 [ 576.855302][ T9843] do_syscall_64+0x123/0x790 [ 576.855319][ T9843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.855331][ T9843] RIP: 0033:0x7f1ec859f349 [ 576.855341][ T9843] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 576.855351][ T9843] RSP: 002b:00007ffe657727f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 576.855362][ T9843] RAX: ffffffffffffffda RBX: 00007f1ec855a8e0 RCX: 00007f1ec859f349 [ 576.855369][ T9843] RDX: 00007f1ec855a8e0 RSI: 0000000000000058 RDI: 00007ffe65772850 [ 576.855376][ T9843] RBP: 00007f1ec94a76c0 R08: 00007f1ec94a76c0 R09: 00007ffe65772937 [ 576.855383][ T9843] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 576.855389][ T9843] R13: 000000000000006e R14: 00007ffe65772850 R15: 00007ffe65772938 [ 576.855404][ T9843] [ 576.855408][ T9843] memory: usage 307200kB, limit 307200kB, failcnt 93168 [ 576.855415][ T9843] memory+swap: usage 394120kB, limit 9007199254740988kB, failcnt 0 [ 576.855422][ T9843] kmem: usage 2812kB, limit 9007199254740988kB, failcnt 0 [ 576.855428][ T9843] Memory cgroup stats for /syz4: [ 576.855516][ T9843] cache 311328768 [ 576.855521][ T9843] rss 356352 [ 576.855524][ T9843] rss_huge 0 [ 576.855528][ T9843] shmem 311320576 [ 576.855532][ T9843] mapped_file 183140352 [ 576.855536][ T9843] dirty 0 [ 576.855540][ T9843] writeback 0 [ 576.855543][ T9843] workingset_refault_anon 16 [ 576.855547][ T9843] workingset_refault_file 5143 [ 576.855552][ T9843] swap 89006080 [ 576.855555][ T9843] swapcached 334815232 [ 576.855559][ T9843] pgpgin 1189235 [ 576.855563][ T9843] pgpgout 1113138 [ 576.855567][ T9843] pgfault 487725 [ 576.855570][ T9843] pgmajfault 43 [ 576.855574][ T9843] inactive_anon 146489344 [ 576.855578][ T9843] active_anon 165195776 [ 576.855582][ T9843] inactive_file 0 [ 576.855586][ T9843] active_file 0 [ 576.855590][ T9843] unevictable 0 [ 576.855593][ T9843] hierarchical_memory_limit 314572800 [ 576.855598][ T9843] hierarchical_memsw_limit 9223372036854771712 [ 576.855603][ T9843] total_cache 311328768 [ 576.855607][ T9843] total_rss 356352 [ 576.855610][ T9843] total_rss_huge 0 [ 576.855614][ T9843] total_shmem 311320576 [ 576.855618][ T9843] total_mapped_file 183140352 [ 576.855622][ T9843] total_dirty 0 [ 576.855626][ T9843] total_writeback 0 [ 576.855630][ T9843] total_workingset_refault_anon 16 [ 576.855634][ T9843] total_workingset_refault_file 5143 [ 576.855639][ T9843] total_swap 89006080 [ 576.855643][ T9843] total_swapcached 334815232 [ 576.855647][ T9843] total_pgpgin 1189235 [ 576.855651][ T9843] total_pgpgout 1113138 [ 576.855655][ T9843] total_pgfault 487725 [ 576.855659][ T9843] total_pgmajfault 43 [ 576.855662][ T9843] total_inactive_anon 146489344 [ 576.855667][ T9843] total_active_anon 165195776 [ 576.855671][ T9843] total_inactive_file 0 [ 576.855675][ T9843] total_active_file 0 [ 576.855679][ T9843] total_unevictable 0 [ 576.855682][ T9843] anon_cost 0 [ 576.855686][ T9843] file_cost 0 [ 576.855690][ T9843] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.922,pid=9367,uid=0 [ 576.855815][ T9843] Memory cgroup out of memory: Killed process 9367 (syz.4.922) total-vm:200576kB, anon-rss:1264kB, file-rss:20548kB, shmem-rss:84364kB, UID:0 pgtables:368kB oom_score_adj:1000 [ 689.008451][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 689.531204][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9492/1:b..l [ 689.539108][ C1] rcu: (detected by 1, t=10548 jiffies, g=48429, q=427 ncpus=2) [ 689.546816][ C1] task:syz.5.962 state:R running task stack:22504 pid:9492 tgid:9492 ppid:7681 task_flags:0x40064c flags:0x00080001 [ 689.560293][ C1] Call Trace: [ 689.563567][ C1] [ 689.566497][ C1] __schedule+0x1259/0x6920 [ 689.571021][ C1] ? __pfx___schedule+0x10/0x10 [ 689.575871][ C1] ? debug_check_no_obj_freed+0x31f/0x630 [ 689.581587][ C1] ? rcu_is_watching+0x13/0xc0 [ 689.586372][ C1] preempt_schedule_irq+0x4e/0x90 [ 689.591485][ C1] irqentry_exit+0x247/0xa90 [ 689.596083][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.602060][ C1] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 689.607696][ C1] Code: ff ff ff ff 65 0f c1 15 91 75 b9 09 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc c3 cc cc cc cc 31 c0 [ 689.627300][ C1] RSP: 0018:ffffc90005517250 EFLAGS: 00000296 [ 689.633361][ C1] RAX: 0000000000000000 RBX: ffff888035798988 RCX: 0000000000000001 [ 689.641326][ C1] RDX: 0000000000000046 RSI: ffffffff8e3bd91c RDI: ffffffff8c625680 [ 689.649375][ C1] RBP: ffff88802f07a580 R08: 0000000000000005 R09: 0000000000000000 [ 689.657339][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 689.665304][ C1] R13: 0000000000000246 R14: ffff88802f07b158 R15: 0000000000000001 [ 689.673286][ C1] find_lock_entries+0x841/0x1190 [ 689.678318][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 689.683869][ C1] ? __pfx___might_resched+0x10/0x10 [ 689.689153][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 689.695481][ C1] shmem_undo_range+0x212/0x1570 [ 689.700424][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 689.705796][ C1] ? trace_sched_exit_tp+0x120/0x160 [ 689.711128][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 689.716329][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 689.721106][ C1] shmem_evict_inode+0x3b1/0xca0 [ 689.726071][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 689.731551][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 689.737637][ C1] ? lock_acquire+0x1d1/0x380 [ 689.742314][ C1] ? find_held_lock+0x2b/0x80 [ 689.746993][ C1] ? evict+0x37e/0xad0 [ 689.751060][ C1] ? evict+0x37e/0xad0 [ 689.755127][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 689.760587][ C1] evict+0x3c2/0xad0 [ 689.764476][ C1] ? fsnotify_grab_connector+0x4b/0x290 [ 689.770022][ C1] ? __pfx_evict+0x10/0x10 [ 689.774433][ C1] ? lock_acquire+0x1d1/0x380 [ 689.779127][ C1] ? iput.part.0+0x981/0x1050 [ 689.783806][ C1] iput.part.0+0x989/0x1050 [ 689.788311][ C1] iput+0x35/0x40 [ 689.791941][ C1] dentry_unlink_inode+0x284/0x470 [ 689.797051][ C1] dentry_kill+0x25d/0xc20 [ 689.801468][ C1] dput.part.0+0xd7/0x240 [ 689.805883][ C1] dput+0x1f/0x30 [ 689.809514][ C1] __fput+0x51a/0xb60 [ 689.813638][ C1] ? _raw_spin_unlock+0x28/0x50 [ 689.818494][ C1] task_work_run+0x150/0x240 [ 689.823087][ C1] ? __pfx_task_work_run+0x10/0x10 [ 689.828214][ C1] do_exit+0x8da/0x2a60 [ 689.832377][ C1] ? __pfx_do_exit+0x10/0x10 [ 689.837139][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 689.843128][ C1] do_group_exit+0xd5/0x2a0 [ 689.847633][ C1] get_signal+0x1ec7/0x21e0 [ 689.852144][ C1] ? __pfx_get_signal+0x10/0x10 [ 689.856988][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 689.862279][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 689.867833][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 689.874003][ C1] irqentry_exit+0x4ff/0xa90 [ 689.878602][ C1] asm_exc_page_fault+0x26/0x30 [ 689.883449][ C1] RIP: 0033:0x0 [ 689.886901][ C1] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 689.892973][ C1] RAX: 0000000000000000 RBX: 00007efc14625fa0 RCX: 00007efc1439e559 [ 689.900949][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000020000 [ 689.908921][ C1] RBP: 00007efc14435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 689.916900][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 689.924866][ C1] R13: 00007efc14626038 R14: 00007efc14625fa0 R15: 00007ffd4fbd6f58 [ 689.932848][ C1] [ 689.935873][ C1] rcu: rcu_preempt kthread starved for 10588 jiffies! g48429 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 689.946882][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 689.956837][ C1] rcu: RCU grace-period kthread stack dump: [ 689.962715][ C1] task:rcu_preempt state:R running task stack:28824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 689.976162][ C1] Call Trace: [ 689.979427][ C1] [ 689.982351][ C1] __schedule+0x1259/0x6920 [ 689.986838][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 689.991769][ C1] ? __pfx___schedule+0x10/0x10 [ 689.996594][ C1] ? find_held_lock+0x2b/0x80 [ 690.001249][ C1] ? schedule+0x225/0x2c0 [ 690.005558][ C1] schedule+0xdd/0x2c0 [ 690.009603][ C1] schedule_timeout+0x127/0x280 [ 690.014432][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 690.019806][ C1] ? __pfx_process_timeout+0x10/0x10 [ 690.025098][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 690.030906][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 690.036368][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 690.041133][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 690.046417][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 690.051359][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 690.056552][ C1] ? rcu_is_watching+0x13/0xc0 [ 690.061317][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 690.067123][ C1] rcu_gp_kthread+0x17a/0x220 [ 690.071796][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.076993][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 690.082805][ C1] ? __kthread_parkme+0x18f/0x230 [ 690.087830][ C1] ? kthread+0x13a/0x450 [ 690.092081][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.097273][ C1] kthread+0x373/0x450 [ 690.101340][ C1] ? __pfx_kthread+0x10/0x10 [ 690.105950][ C1] ret_from_fork+0x730/0xd60 [ 690.110567][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 690.115706][ C1] ? __switch_to+0x800/0x10f0 [ 690.120392][ C1] ? __pfx_kthread+0x10/0x10 [ 690.124987][ C1] ret_from_fork_asm+0x1a/0x30 [ 690.129758][ C1] [ 690.132767][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 690.139084][ C1] Sending NMI from CPU 1 to CPUs 0: [ 690.144278][ C0] NMI backtrace for cpu 0 [ 690.144292][ C0] CPU: 0 UID: 0 PID: 9843 Comm: syz.4.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.144311][ C0] Tainted: [L]=SOFTLOCKUP [ 690.144317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 690.144325][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 690.144344][ C0] Code: 00 be 03 00 00 00 5b e9 42 32 20 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 2c 48 81 13 <48> 8b 34 24 65 48 8b 15 10 48 81 13 48 63 c8 a9 00 01 00 ff 74 1e [ 690.144357][ C0] RSP: 0018:ffffc90003e871b0 EFLAGS: 00000282 [ 690.144370][ C0] RAX: 8000000000000000 RBX: ffffc90003e873a8 RCX: 0000000000000002 [ 690.144379][ C0] RDX: 0000000000000000 RSI: 000000000000004a RDI: ffff8880547af1b8 [ 690.144388][ C0] RBP: 1ffff920007d0e3a R08: 0000000000000000 R09: fffffbfff248adab [ 690.144397][ C0] R10: ffffffff92456d5f R11: 0000000000000000 R12: ffff88814048ac08 [ 690.144407][ C0] R13: 0000000000000000 R14: ffffc90003e873ac R15: ffff88801ea8e040 [ 690.144416][ C0] FS: 0000555586049500(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 690.144430][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.144439][ C0] CR2: 00007f1ec94a7d58 CR3: 0000000034409000 CR4: 00000000003526f0 [ 690.144449][ C0] Call Trace: [ 690.144455][ C0] [ 690.144460][ C0] zswap_shrinker_count+0x2b3/0x570 [ 690.144477][ C0] ? do_shrink_slab+0xb6c/0x1200 [ 690.144493][ C0] ? __pfx_zswap_shrinker_count+0x10/0x10 [ 690.144507][ C0] ? find_held_lock+0x2b/0x80 [ 690.144527][ C0] ? do_shrink_slab+0xcde/0x1200 [ 690.144543][ C0] do_shrink_slab+0x83/0x1200 [ 690.144558][ C0] ? find_held_lock+0x2b/0x80 [ 690.144576][ C0] ? shrink_slab+0xa57/0x12e0 [ 690.144590][ C0] ? shrink_slab+0xa57/0x12e0 [ 690.144606][ C0] shrink_slab+0xa82/0x12e0 [ 690.144621][ C0] ? shrink_slab+0x677/0x12e0 [ 690.144637][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 690.144654][ C0] ? __pfx___might_resched+0x10/0x10 [ 690.144668][ C0] ? page_counter_calculate_protection+0x344/0x730 [ 690.144687][ C0] shrink_node+0x812/0x4320 [ 690.144706][ C0] ? __pfx_shrink_node+0x10/0x10 [ 690.144718][ C0] ? vmpressure_v1_account_tree+0x75/0x120 [ 690.144740][ C0] ? queue_work_on+0x11b/0x1e0 [ 690.144752][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 690.144772][ C0] ? queue_work_on+0x141/0x1e0 [ 690.144786][ C0] ? do_try_to_free_pages+0x33e/0x16d0 [ 690.144800][ C0] do_try_to_free_pages+0x33e/0x16d0 [ 690.144818][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 690.144835][ C0] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 690.144849][ C0] ? psi_group_change+0x457/0xa20 [ 690.144864][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 690.144883][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 690.144895][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 690.144913][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 690.144927][ C0] try_charge_memcg+0x50b/0xf60 [ 690.144944][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 690.144957][ C0] ? find_held_lock+0x2b/0x80 [ 690.144976][ C0] ? rcu_read_unlock+0x17/0x60 [ 690.144990][ C0] ? rcu_read_unlock+0x17/0x60 [ 690.145007][ C0] obj_cgroup_charge_pages+0x2b/0x1f0 [ 690.145022][ C0] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 690.145036][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 690.145055][ C0] memcg_charge_kernel_stack+0xb4/0x1e0 [ 690.145071][ C0] copy_process+0x83d/0x8430 [ 690.145087][ C0] ? __page_table_check_ptes_set+0x1d5/0x530 [ 690.145112][ C0] ? __pfx_copy_process+0x10/0x10 [ 690.145130][ C0] ? _copy_from_user+0x59/0xd0 [ 690.145150][ C0] kernel_clone+0x176/0x9d0 [ 690.145165][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 690.145184][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 690.145202][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 690.145219][ C0] __do_sys_clone3+0x214/0x290 [ 690.145235][ C0] ? __pfx___do_sys_clone3+0x10/0x10 [ 690.145249][ C0] ? __might_fault+0xc5/0x140 [ 690.145267][ C0] ? _copy_to_user+0xaf/0xd0 [ 690.145297][ C0] do_syscall_64+0x123/0x790 [ 690.145317][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.145331][ C0] RIP: 0033:0x7f1ec859f349 [ 690.145343][ C0] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 690.145355][ C0] RSP: 002b:00007ffe657727f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 690.145368][ C0] RAX: ffffffffffffffda RBX: 00007f1ec855a8e0 RCX: 00007f1ec859f349 [ 690.145376][ C0] RDX: 00007f1ec855a8e0 RSI: 0000000000000058 RDI: 00007ffe65772850 [ 690.145385][ C0] RBP: 00007f1ec94a76c0 R08: 00007f1ec94a76c0 R09: 00007ffe65772937 [ 690.145394][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 690.145403][ C0] R13: 000000000000006e R14: 00007ffe65772850 R15: 00007ffe65772938 [ 690.145417][ C0]